status_t Parcel::setDataCapacity(size_t size)
{
 if (size > INT32_MAX) {
 return BAD_VALUE;
 }

 if (size > mDataCapacity) return continueWrite(size);
 return NO_ERROR;
}

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.