Language: Java
Label: vulnerable
CWE: CWE-502 \u2014 Deserialization of Untrusted Data
The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

Code:
	public void readData(LPDataInput input) throws IOException {
		byte newMask = input.readByte();

		if (newMask != mask) {
			mask = newMask;
			dirty = true;
		}

		newMask = input.readByte();
		if (newMask != isBCPipeMask) {
			isBCPipeMask = newMask;
			dirty = true;
		}

		newMask = input.readByte();
		if (newMask != isTDPipeMask) {
			isTDPipeMask = newMask;
			dirty = true;
		}
	}