lib/libexpat/lib/xmlparse.c

4259

if (n > INT_MAX - EXPAND_SPARE) {

lib/libexpat/lib/xmlparse.c

4267

if ((unsigned)(n + EXPAND_SPARE) > SIZE_MAX / sizeof(XML_Char)) {

lib/libexpat/lib/xmlparse.c

4272

uri = MALLOC(parser, (n + EXPAND_SPARE) * sizeof(XML_Char));

lib/libexpat/lib/xmlparse.c

4275

binding->uriAlloc = n + EXPAND_SPARE;

lib/libexpat/lib/xmlparse.c

4504

if (len > INT_MAX - EXPAND_SPARE) {

lib/libexpat/lib/xmlparse.c

4513

if ((unsigned)(len + EXPAND_SPARE) > SIZE_MAX / sizeof(XML_Char)) {

lib/libexpat/lib/xmlparse.c

4519

= REALLOC(parser, b->uri, sizeof(XML_Char) * (len + EXPAND_SPARE));

lib/libexpat/lib/xmlparse.c

4523

b->uriAlloc = len + EXPAND_SPARE;

lib/libexpat/lib/xmlparse.c

4532

if (len > INT_MAX - EXPAND_SPARE) {

lib/libexpat/lib/xmlparse.c

4540

if ((unsigned)(len + EXPAND_SPARE) > SIZE_MAX / sizeof(XML_Char)) {

lib/libexpat/lib/xmlparse.c

4545

b->uri = MALLOC(parser, sizeof(XML_Char) * (len + EXPAND_SPARE));

lib/libexpat/lib/xmlparse.c

4550

b->uriAlloc = len + EXPAND_SPARE;