Language: Java
Label: vulnerable
CWE: CWE-502 \u2014 Deserialization of Untrusted Data
The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

Code:
	public void writeData(LPDataOutput output) throws IOException {
		output.writeInt(posX);
		output.writeInt(posY);
		output.writeInt(posZ);
		output.writeByte(dir.ordinal());
		output.writeBoolean(finalPipe);
		output.writeBoolean(startPipe);
		output.writeInt(length);
		for (PipeRoutingConnectionType type : PipeRoutingConnectionType.values()) {
			output.writeBoolean(connectionType.contains(type));
		}
	}