合并受阻
感谢提交 Pull Requests！如果您提交的PR已经开发完毕，请评论 "start build" 触发门禁，更多交互操作，请访问OpenHarmony社区支持命令清单。如果需要调整订阅PR、Issue的变更状态，请访问订阅链接。
Thanks for submitting the pull request. If your Pull Request has already been developed, you can leave a "start build" comment to trigger the gated system. For more commands, please visit OpenHarmony Command List. If you need to change the subscription of a Pull Request or Issue, please visit the link.
static-check
静态检查:
| # | check type | result | report |
|---|---|---|---|
| 1 | codeCheck | noPass | >>> |
感谢提交 Pull Requests！如果您提交的PR已经开发完毕，请评论 "start build" 触发门禁，更多交互操作，请访问OpenHarmony社区支持命令清单。如果需要调整订阅PR、Issue的变更状态，请访问订阅链接。
Thanks for submitting the pull request. If your Pull Request has already been developed, you can leave a "start build" comment to trigger the gated system. For more commands, please visit OpenHarmony Command List. If you need to change the subscription of a Pull Request or Issue, please visit the link.
static-check
静态检查:
| # | check type | result | report |
|---|---|---|---|
| 1 | codeCheck | noPass | >>> |
⚠️ 🤖 AI 代码检视报告 ⚠️
总体评估: NEEDS_ATTENTION
问题统计:
- 总问题数: 10
- 严重问题: 0
- 高危问题: 1
摘要:
PR 整体引入了凭据加对端账号、子账号切换定时器协调与旧版本 ACL 清理能力，但存在 ACL 删除时 userId 取值与本地角色不匹配的功能性 Bug、未使用变量、重复锁区窗口以及多处资源/生命周期相关问题，需要重点关注。
📊 详细报告
查看完整的审查详情，包括具体的问题描述、建议和代码位置：
🔗 查看详细报告
此评论由 OpenHarmony Insight 代码审查系统自动生成
static-check
感谢提交 Pull Requests！如果您提交的PR已经开发完毕，请评论 "start build" 触发门禁，更多交互操作，请访问OpenHarmony社区支持命令清单。如果需要调整订阅PR、Issue的变更状态，请访问订阅链接。
Thanks for submitting the pull request. If your Pull Request has already been developed, you can leave a "start build" comment to trigger the gated system. For more commands, please visit OpenHarmony Command List. If you need to change the subscription of a Pull Request or Issue, please visit the link.
静态检查:
| # | check type | result | report |
|---|---|---|---|
| 1 | codeCheck | noPass | >>> |
感谢提交 Pull Requests！如果您提交的PR已经开发完毕，请评论 "start build" 触发门禁，更多交互操作，请访问OpenHarmony社区支持命令清单。如果需要调整订阅PR、Issue的变更状态，请访问订阅链接。
Thanks for submitting the pull request. If your Pull Request has already been developed, you can leave a "start build" comment to trigger the gated system. For more commands, please visit OpenHarmony Command List. If you need to change the subscription of a Pull Request or Issue, please visit the link.
【安全检视意见|自动扫描】【中危】资源泄露/敏感信息残留
ProcessAclForDeletion 中 aclParam.userId 固定取 Accesser 侧 userId，而 skId/credId 已按本端侧（localUdid==accesserUdid ? accesser : accessee）选取。当本端为 Accessee 侧时，DeleteSkCredAndAcl 会用对端 userId 调 DeleteSessionKey/DeleteCredential 查询本端密钥库，导致本端会话密钥与凭据在 ACL 删除后残留（对照既有 CacheAcerAclId/CacheAceeAclId 约定：userId 应取本端侧）。
建议：按本端侧选取 userId，即 localUdid == accesserUdid 时取 item.GetAccesser().GetAccesserUserId()，否则取 item.GetAccessee().GetAccesseeUserId()（当前行标注 //todo，建议在合入前修复）。
由 openharmony-security-codescan 自动扫描生成，仅供参考；若为误报请回复说明，感谢。
您好， @liuzhongming60 该PR需要您响应，已过去25天未响应，请根据检视意见进行修改，如5天内未响应检视意见，此PR会被自动关闭。关闭后的PR，如有需要，您可以自行打开该PR。
Issue编号:
描述:
安全及低级编码自检：
TDD结果:
XTS结果:
L0新增用例自检结果