...
The open FileInputStream f[0] must not allow f[0] to be allowed to escape out of changePassword() (see SEC00-J. Do not allow privileged blocks to leak sensitive information across a trust boundary).
...
...
The open FileInputStream f[0] must not allow f[0] to be allowed to escape out of changePassword() (see SEC00-J. Do not allow privileged blocks to leak sensitive information across a trust boundary).
...