Use of Object without Invoking Destructor Method

Opis

The product contains a method that accesses an object but does not later invoke the element's associated finalize/destructor method.

Skutki

• Other

  Reduce Performance

  This issue can make the product perform more slowly by retaining memory and/or other resources longer than necessary. If the relevant code is reachable by an attacker, then this performance problem might introduce a vulnerability.

Słabość nadrzędna

• CWE-772 Missing Release of Resource after Effective Lifetime
• CWE-1076 Insufficient Adherence to Expected Conventions

Kiedy powstaje

• Implementation

Dotyczy

Object-Oriented

Źródła

1. Automated Source Code Performance Efficiency Measure (ASCPEM) — Object Management Group (OMG), ASCPEM-PRF-15, 2016