#vulnerable code 
                                public static void readObject(@Nonnull final byte[] src, @Nonnull final Externalizable dst)
            throws IOException, ClassNotFoundException {
        readObject(new FastByteArrayInputStream(src), dst);
    } 
                            #location 3 
                            #vulnerability type RESOURCE_LEAK
#fixed code
                                public static void readObject(@Nonnull final byte[] src, @Nonnull final Externalizable dst)
            throws IOException, ClassNotFoundException {
        readObject(src, src.length, dst);
    }