Language: Java
Label: safe
CWE: CWE-502 \u2014 Deserialization of Untrusted Data
The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

Code:
	public GuiCraftingPipe(EntityPlayer player, IInventory dummyInventory, BaseLogicCrafting logic, boolean isAdvancedSat, boolean isSplitedCrafting) {
		super(null);
		_player = player;
		this.isAdvancedSat = isAdvancedSat;
		this.isSplitedCrafting = isSplitedCrafting;
		
		if(!isAdvancedSat && !isSplitedCrafting) {
			xSize = 177;
			ySize = 187;
		} else {
			xSize = 177;
			ySize = 187 + 30;
		}
		
		DummyContainer dummy = new DummyContainer(player.inventory, dummyInventory);
		dummy.addNormalSlotsForPlayerInventory(8, ySize - 82);

		//Input slots
        for(int l = 0; l < 9; l++) {
        	dummy.addDummySlot(l, 8 + l * 18, 18);
        }

		//Output slot
        if(!isAdvancedSat) {
        	dummy.addDummySlot(9, 85, 55);
        } else {
        	dummy.addDummySlot(9, 85, 105);
        }
		
        this.inventorySlots = dummy;
		_logic = logic;
		buttonarray = new GuiButton[6];
		normalButtonArray = new GuiButton[6];
		advancedSatButtonArray = new GuiButton[9][2];
		for(int i=0;i<9;i++) {
			advancedSatButtonArray[i] = new GuiButton[2];
		}
	}