#vulnerable code 
                                TBSCertList.CRLEntry[] parseCRL(String crl) throws Exception {

        Base64.Decoder b64dec = Base64.getDecoder();
        final byte[] decode = b64dec.decode(crl.getBytes(UTF_8));

        ByteArrayInputStream inStream = new ByteArrayInputStream(decode);
        ASN1InputStream asnInputStream = new ASN1InputStream(inStream);

        return CertificateList.getInstance(asnInputStream.readObject()).getRevokedCertificates();
    } 
                            #location 9 
                            #vulnerability type RESOURCE_LEAK
#fixed code
                                TBSCertList.CRLEntry[] getRevokes(Date r) throws Exception {

        String crl = client.generateCRL(admin, r, null, null, null);

        return parseCRL(crl);
    }