#18 Unsafe Handling of Received Data

[Daniel Bickett]

When arguments received from the clients need to be
converted to integers, the server does this blindly
without ensuring that it is possible, or catching the
exception. A malformed client or a malicious user could
send a message with incorrect arguments that would
cause a server side exception.