output: #fixed code
                                  public int run() throws Throwable {
          ClassLoader jenkins = createJenkinsWarClassLoader();
          ClassLoader setup = createSetupClassLoader(jenkins);
  
          Thread.currentThread().setContextClassLoader(setup);    // or should this be 'jenkins'?
  
          Class<?> c = setup.loadClass("io.jenkins.jenkinsfile.runner.App");
          return (int)c.getMethod("run",File.class,File.class).invoke(
                  c.newInstance(), warDir, pluginsDir
          );
      }
input: #vulnerable code 
                                  public int run() throws Throwable {
          ClassLoader jenkins = createJenkinsWarClassLoader();
          ClassLoader setup = createSetupClassLoader(jenkins);
  
          Class<?> c = setup.loadClass("io.jenkins.jenkinsfile.runner.App");
          return (int)c.getMethod("run",File.class,File.class).invoke(
                  c.newInstance(), warDir, pluginsDir
          );
      } 
                              #location 5 
                              #vulnerability type RESOURCE_LEAK