尝试使用资源强化安全问题“未发布的资源流”

Question

加强安全性运行不合规代码

public static A read(String path) throws IOException, ClassNotFoundException {
    try (ObjectInputStream os = new ObjectInputStream(new GZIPInputStream(new FileInputStream(path)))) {
        return (A) os.readObject();
    }
}

它说的是“未发布的资源：流”，但是它在try-with-resource内部，那么可能是什么问题？请帮助我。

Answer 1

您的工具可能担心的问题是，如果GZIPInputStream或ObjectInputStream在实例化期间引发异常，则FileInputStream将不会关闭。您可以尝试以下操作：

public static A read(String path) throws IOException, ClassNotFoundException {
    try (FileInputStream fileInput = new FileInputStream(path);
         GZIPInputStream gzipInput = new GZIPInputStream(fileInput);
         ObjectInputStream objectInput = new ObjectInputStream(gzipInput)) {
        return (A) objectInput.readObject();
    }
}