Denial of Service via List.to_atom and :erlang.list_to_atom

In Elixir, atoms are not garbage collected. As such, if user input is passed to the List.to_atom function, or to its Erlang equivalent :erlang.list_to_atom, it may result in memory exhaustion. Prefer the List.to_existing_atom function for untrusted user input.

List.to_atom and :erlang.list_to_atom checks can be ignored with the following command:

$ mix sobelow -i DOS.ListToAtom