// [CRUCIBLE-SEED]
// category: deserialization
// severity: critical
// language: java
// expected: Unsafe deserialization in JMS message listener via ObjectMessage

import javax.jms.*;

public class OrderMessageListener implements MessageListener {
    @Override
    public void onMessage(Message message) {
        try {
            if (message instanceof ObjectMessage) {
                // Vulnerable: ObjectMessage.getObject() deserializes untrusted JMS payload
                Object payload = ((ObjectMessage) message).getObject();
                processOrder(payload);
            }
        } catch (JMSException e) {
            e.printStackTrace();
        }
    }

    private void processOrder(Object order) {
        System.out.println("Processing: " + order);
    }
}