The software decodes the same input twice, which can limit the effectiveness of any protection mechanism that occurs in between the decoding operations.