    public byte[] allocateJobCaches(byte[] cacheAllocationRequestBytes) {
		CacheAllocationRequest allocationRequest = (CacheAllocationRequest) SerializationUtils
				.deserialize(cacheAllocationRequestBytes);
		return SerializationUtils.serialize((Serializable) jobManager.allocateJobCaches(
				getJobToken(), allocationRequest.getCurrentTime(), allocationRequest.getInstances()));
    }
The application deserializes untrusted data without sufficiently verifying that the resulting data will be valid.