Language: Java
Label: vulnerable
CWE: CWE-502 \u2014 Deserialization of Untrusted Data
The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

Code:
	public void writeData(LPDataOutput output) throws IOException {
		output.writeLPPosition(pos);
		for (PipeRoutingConnectionType type : filters.keySet()) {
			output.writeShort(type.ordinal());
			for (List<IFilter> linkedFilter : filters.get(type)) {
				output.writeShort(linkedFilter.size());
				for (IFilter filter : linkedFilter) {
					output.writeLPPosition(filter.getLPPosition());
				}
			}
			output.writeShort(-1);
		}
		output.writeShort(-1);
	}