Smack library under third party static scan

Smack Smack Dev
1

Hi Flow,

here is an issue that one third party static scan found in our project in which we are using smack library:

Improper resource shutdown or release (CWE - CWE-404: Improper Resource Shutdown or Release (2.8) )

on line: Smack/XMPPTCPConnection.java at master · Flowdalic/Smack · GitHub

2

I don’t see a file and line number.

3

I added link to your github repository with highlighted line… it’s not working for you? it should be…

here is the link again Smack/XMPPTCPConnection.java at master · Flowdalic/Smack · GitHub

4

That’s a false positive.When the socket is closes on connection termination, the streams are closed too.