Language: Java
Label: vulnerable
CWE: CWE-502 \u2014 Deserialization of Untrusted Data
The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

Code:
	public void writeData(LPDataOutput output) throws IOException {
		output.writeInt(getStringList().size());
		for (int i = 0; i < getStringList().size(); i++) {
			output.writeUTF(getStringList().get(i));
		}
	}