void vpx_img_free(vpx_image_t *img) {
 if (img) {
 if (img->img_data && img->img_data_owner) vpx_free(img->img_data);

 if (img->self_allocd) free(img);
 }
}

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.