Language: Java
Label: vulnerable
CWE: CWE-502 \u2014 Deserialization of Untrusted Data
The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

Code:
	public void readData(LPDataInput input) throws IOException {
		super.readData(input);
		stat_session_sent = input.readInt();
		stat_session_recieved = input.readInt();
		stat_session_relayed = input.readInt();
		stat_lifetime_sent = input.readLong();
		stat_lifetime_recieved = input.readLong();
		stat_lifetime_relayed = input.readLong();
		server_routing_table_size = input.readInt();
	}