function dhEstimate(neg) {
  const bits = Math.max(
    0,
    (neg.cs.cipher.sslName === 'des-ede3-cbc' ? 14 : neg.cs.cipher.keyLen),
    neg.cs.cipher.blockLen,
    neg.cs.cipher.ivLen,
    neg.cs.mac.actualLen,
    (neg.sc.cipher.sslName === 'des-ede3-cbc' ? 14 : neg.sc.cipher.keyLen),
    neg.sc.cipher.blockLen,
    neg.sc.cipher.ivLen,
    neg.sc.mac.actualLen
  ) * 8;
  if (bits <= 112)
    return 2048;
  if (bits <= 128)
    return 3072;
  if (bits <= 192)
    return 7680;
  return 8192;
}
The software constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.