#vulnerable code 
                                public static <T> T readObject(@Nonnull final byte[] obj) throws IOException,
            ClassNotFoundException {
        return readObject(new FastByteArrayInputStream(obj));
    } 
                            #location 3 
                            #vulnerability type RESOURCE_LEAK
#fixed code
                                public static <T> T readObject(@Nonnull final byte[] obj) throws IOException,
            ClassNotFoundException {
        return readObject(obj, obj.length);
    }