[Android] Veracode static scan issue - Improper Resource Shutdown or Release
- Dominant language
- Java
- Stars
- 757
- Forks
- 166
- PR merge metrics
- No merged PRs in 30d
Description
https://cwe.mitre.org/data/definitions/404.html
File Path: com/gantix/JailMonkey/Rooted/GreaterThan23.java
Attack Vector: java.io.BufferedReader.!operator_javanewinit
Number of Modules Affected: 1
Description: The program fails to release or incorrectly releases the variable checkRootMethod2, which was previously allocated by a call to java.io.BufferedReader.!operator_javanewinit().
Remediation: Ensure that all code paths properly release this resource.
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by reading com/gantix/JailMonkey/Rooted/GreaterThan23.java and locate the BufferedReader allocation associated with checkRootMethod2. Trace each exit path and verify the resource is released as required, then run the relevant Android checks or Veracode scan to confirm the finding is resolved.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- android, java
- Domain
- mobile, security
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 68/100