#vulnerable code 
                                public static Object deserializeStream(final String witness)
        throws Exception {
        final FileInputStream fileIs = new FileInputStream(witness);
        final ObjectInputStream objIs = new ObjectInputStream(fileIs);

        return objIs.readObject();
    } 
                            #location 6 
                            #vulnerability type RESOURCE_LEAK
#fixed code
                                public static Object deserializeStream(final String witness) throws Exception {
        final FileInputStream fileIs = new FileInputStream(witness);
        final ObjectInputStream objIs = new ObjectInputStream(fileIs);
        try {
            return objIs.readObject();
        } finally {
            objIs.close();
        }
    }