Implement IDisposable

ID

csharp.implement_idisposable

Severity

high

Remediation Complexity

trivial

Remediation Risk

low

Remediation Effort

low

Resource

Reliability

Language

CSharp

Tags

CWE:772, idisposable, reliability, resource-leak

Description

Reports classes that own an IDisposable field but do not themselves implement IDisposable. Without the IDisposable contract there is no documented place for callers to release the contained resource and the leak surfaces only under load.

Rationale

IDisposable is the .NET runtime’s deterministic-cleanup contract. When a class holds a disposable handle as a field, the owning class is implicitly responsible for releasing it; implementing IDisposable (and a matching Dispose(bool) template) is how that responsibility is communicated and enforced. Skipping the interface forces every caller to either guess or leak.

public class BadOwner                                  // FLAW
{
    private FileStream _stream;

    public BadOwner(string path)
    {
        _stream = new FileStream(path, FileMode.Open);
    }
}

public class GoodOwner : IDisposable                   // OK
{
    private FileStream _stream;

    public GoodOwner(string path)
    {
        _stream = new FileStream(path, FileMode.Open);
    }

    public void Dispose() => _stream.Dispose();
}

Remediation

Implement IDisposable (or IAsyncDisposable when the resource exposes async cleanup) and dispose every owned field from the Dispose method. Follow the standard Dispose(bool disposing) template if the class is meant for inheritance.

References