Searched refs:nelements (Results 1 – 3 of 3) sorted by relevance
768 size_t i, o, o4, nelements, j; in cdf_read_property_info() local832 nelements = CDF_GETUINT32(q, 1); in cdf_read_property_info()833 if (nelements == 0) { in cdf_read_property_info()839 nelements = 1; in cdf_read_property_info()896 if (nelements > 1) { in cdf_read_property_info()899 || nelements > CDF_PROP_LIMIT) in cdf_read_property_info()901 *maxcount += nelements; in cdf_read_property_info()910 nelements)); in cdf_read_property_info()911 for (j = 0; j < nelements && i < sh.sh_properties; in cdf_read_property_info()
988 nelements = CDF_GETUINT32(q, 1);989 + if (nelements == 0) {990 + DPRINTF(("CDF_VECTOR with nelements == 0\n"));995 nelements = 1;998 DPRINTF(("nelements = %" SIZE_T_FORMAT "u\n",999 nelements));1000 - for (j = 0; j < nelements; j++, i++) {1001 + for (j = 0; j < nelements && i < sh.sh_properties;
1153 . Fixed bug #67327 (fileinfo: CDF infinite loop in nelements DoS) (CVE-2014-0238).
Completed in 36 milliseconds