const char* MetadataRetrieverClient::extractMetadata(int keyCode)
{
    ALOGV("extractMetadata");
 Mutex::Autolock lock(mLock);
 if (mRetriever == NULL) {
        ALOGE("retriever is not initialized");
 return NULL;
 }
 return mRetriever->extractMetadata(keyCode);
}

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.