safe_emalloc 2460 Zend/zend_API.c fci->params = params = (zval***)safe_emalloc(sizeof(zval**), fci->param_count, 0); safe_emalloc 109 Zend/zend_alloc.h #define safe_pemalloc(nmemb, size, offset, persistent) ((persistent)?_safe_malloc(nmemb, size, offset):safe_emalloc(nmemb, size, offset)) safe_emalloc 89 Zend/zend_compile.c result->value.str.val = (char *) safe_emalloc(result->value.str.len, 1, 1); safe_emalloc 50 Zend/zend_vm_execute.h EX(Ts) = (temp_variable *) safe_emalloc(sizeof(temp_variable), op_array->T, 0); safe_emalloc 130 ext/bcmath/libbcmath/src/div.c num1 = (unsigned char *) safe_emalloc (1, n1->n_len+n1->n_scale, extra+2); safe_emalloc 136 ext/bcmath/libbcmath/src/div.c num2 = (unsigned char *) safe_emalloc (1, len2, 1); safe_emalloc 167 ext/bcmath/libbcmath/src/div.c mval = (unsigned char *) safe_emalloc (1, len2, 1); safe_emalloc 54 ext/bcmath/libbcmath/src/num2str.c str = (char *) safe_emalloc (1, num->n_len + num->n_scale, 2 + signch); safe_emalloc 56 ext/bcmath/libbcmath/src/num2str.c str = (char *) safe_emalloc (1, num->n_len, 1 + signch); safe_emalloc 494 ext/com_dotnet/com_com.c vargs = (VARIANT*)safe_emalloc(sizeof(VARIANT), nargs, 0); safe_emalloc 506 ext/com_dotnet/com_com.c byref_vals = (VARIANT*)safe_emalloc(sizeof(VARIANT), byref_count, 0); safe_emalloc 595 ext/com_dotnet/com_com.c vargs = (VARIANT*)safe_emalloc(sizeof(VARIANT), nargs, 0); safe_emalloc 384 ext/com_dotnet/com_handlers.c args = (zval ***)safe_emalloc(sizeof(zval *), nargs, 0); safe_emalloc 48 ext/com_dotnet/com_olechar.c olestring = (OLECHAR*)safe_emalloc(string_len, sizeof(OLECHAR), 0); safe_emalloc 78 ext/com_dotnet/com_olechar.c string = (char*)safe_emalloc(length, sizeof(char), 0); safe_emalloc 111 ext/com_dotnet/com_saproxy.c args = safe_emalloc(proxy->dimensions + 1, sizeof(zval *), 0); safe_emalloc 171 ext/com_dotnet/com_saproxy.c indices = safe_emalloc(dims, sizeof(LONG), 0); safe_emalloc 224 ext/com_dotnet/com_saproxy.c zval **args = safe_emalloc(proxy->dimensions + 2, sizeof(zval *), 0); safe_emalloc 247 ext/com_dotnet/com_saproxy.c indices = safe_emalloc(dims, sizeof(LONG), 0); safe_emalloc 431 ext/com_dotnet/com_saproxy.c cloneproxy->indices = safe_emalloc(cloneproxy->dimensions, sizeof(zval *), 0); safe_emalloc 455 ext/com_dotnet/com_saproxy.c proxy->indices = safe_emalloc(proxy->dimensions, sizeof(zval *), 0); safe_emalloc 575 ext/com_dotnet/com_saproxy.c I->indices = safe_emalloc(proxy->dimensions + 1, sizeof(LONG), 0); safe_emalloc 494 ext/com_dotnet/com_typeinfo.c names = (BSTR*)safe_emalloc((func->cParams + 1), sizeof(BSTR), 0); safe_emalloc 274 ext/com_dotnet/com_wrapper.c params = (zval ***)safe_emalloc(sizeof(zval **), pdp->cArgs, 0); safe_emalloc 646 ext/dba/dba.c args = safe_emalloc(ac, sizeof(zval *), 0); safe_emalloc 662 ext/dba/dba.c key = safe_emalloc(keylen, 1, 1); safe_emalloc 166 ext/dba/dba_cdb.c new_entry = safe_emalloc(len, 1, 1); safe_emalloc 271 ext/dba/dba_cdb.c key = safe_emalloc(klen, 1, 1); safe_emalloc 303 ext/dba/dba_cdb.c key = safe_emalloc(klen, 1, 1); safe_emalloc 174 ext/dba/libcdb/cdb_make.c c->split = (struct cdb_hp *) safe_emalloc(memsize, sizeof(struct cdb_hp), 0); safe_emalloc 94 ext/dba/libflatfile/flatfile.c value_datum.dptr = safe_emalloc(value_datum.dsize, 1, 1); safe_emalloc 1910 ext/dom/node.c inclusive_ns_prefixes = safe_emalloc(zend_hash_num_elements(Z_ARRVAL_P(ns_prefixes)) + 1, safe_emalloc 84 ext/exif/exif.c #ifndef safe_emalloc safe_emalloc 1463 ext/exif/exif.c sections = safe_emalloc(ml, 1, 1); safe_emalloc 1615 ext/exif/exif.c data = safe_emalloc(size, 1, 0); safe_emalloc 1744 ext/exif/exif.c info_value->list = safe_emalloc(length, sizeof(image_info_value), 0); safe_emalloc 1898 ext/exif/exif.c info_data->value.s = safe_emalloc(length, 1, 1); safe_emalloc 2392 ext/exif/exif.c value_ptr = safe_emalloc(max(byte_count, 4), 1, 0); safe_emalloc 2603 ext/exif/exif.c (*result) = safe_emalloc(byte_count, 1, 1); safe_emalloc 2884 ext/exif/exif.c value_ptr = safe_emalloc(byte_count, 1, 0); safe_emalloc 3684 ext/exif/exif.c ImageInfo->Thumbnail.data = safe_emalloc(ImageInfo->Thumbnail.size, 1, 0); safe_emalloc 3717 ext/exif/exif.c ImageInfo->Thumbnail.data = safe_emalloc(ImageInfo->Thumbnail.size, 1, 0); safe_emalloc 2941 ext/fbsql/php_fbsql.c char* r = safe_emalloc(l, 2, 4); safe_emalloc 2963 ext/fbsql/php_fbsql.c char* r = safe_emalloc(l, 2, 4); safe_emalloc 1108 ext/fdf/fdf.c buf = safe_emalloc(1, stat.st_size, 1); safe_emalloc 36 ext/filter/callback_filter.c args = safe_emalloc(sizeof(zval **), 1, 0); safe_emalloc 90 ext/filter/sanitizing_filters.c p = str = (unsigned char *) safe_emalloc(3, Z_STRLEN_P(value), 1); safe_emalloc 121 ext/filter/sanitizing_filters.c buf = safe_emalloc(1, Z_STRLEN_P(value) + 1, 1); safe_emalloc 161 ext/filter/sanitizing_filters.c buf = safe_emalloc(1, Z_STRLEN_P(value) + 1, 1); safe_emalloc 1659 ext/ftp/ftp.c ret = safe_emalloc((lines + 1), sizeof(char**), size * sizeof(char*)); safe_emalloc 1695 ext/gd/gd.c stylearr = safe_emalloc(sizeof(int), zend_hash_num_elements(HASH_OF(*styles)), 0); safe_emalloc 3740 ext/gd/gd.c points = (gdPointPtr) safe_emalloc(npoints, sizeof(gdPoint), 0); safe_emalloc 2007 ext/gd/libgd/gd.c stack = (struct seg *)safe_emalloc(sizeof(struct seg), ((int)(im->sy*im->sx)/4), 1); safe_emalloc 2076 ext/gd/libgd/gd.c stack = (struct seg *)safe_emalloc(sizeof(struct seg), ((int)(im->sy*im->sx)/4), 1); safe_emalloc 696 ext/gd/libgd/gd_gd2.c chunkData = safe_emalloc(cs * bytesPerPixel, cs, 0); safe_emalloc 711 ext/gd/libgd/gd_gd2.c chunkIdx = safe_emalloc(idxSize, sizeof(t_chunk_info), 0); safe_emalloc 355 ext/gd/libgd/gd_gif_in.c tmp = safe_emalloc(3 * rv, sizeof(char), 1); safe_emalloc 179 ext/gd/libgd/gd_jpeg.c row = (JSAMPROW) safe_emalloc(cinfo.image_width * cinfo.input_components, sizeof(JSAMPLE), 0); safe_emalloc 396 ext/gd/libgd/gd_jpeg.c row = safe_emalloc(cinfo.output_width * channels, sizeof(JSAMPLE), 0); safe_emalloc 316 ext/gd/libgd/gd_png.c image_data = (png_bytep) safe_emalloc(rowbytes, height, 0); safe_emalloc 318 ext/gd/libgd/gd_png.c row_pointers = (png_bytepp) safe_emalloc(height, sizeof(png_bytep), 0); safe_emalloc 672 ext/gd/libgd/gd_png.c row_pointers = safe_emalloc(sizeof(png_bytep), height, 0); safe_emalloc 675 ext/gd/libgd/gd_png.c *prow_pointers = (png_bytep) safe_emalloc(width, channels, 0); safe_emalloc 708 ext/gd/libgd/gd_png.c row_pointers = safe_emalloc(height, sizeof(png_bytep), 0); safe_emalloc 797 ext/gd/libgd/gd_topal.c boxlist = (boxptr) safe_emalloc(desired_colors, sizeof (box), 1); safe_emalloc 1603 ext/gd/libgd/gd_topal.c (int *) safe_emalloc ((MAXJSAMPLE * 2 + 1), sizeof (int), 0); safe_emalloc 1871 ext/gd/libgd/gd_topal.c cquantize->histogram = (hist3d) safe_emalloc (HIST_C0_ELEMS, sizeof (hist2d), 0); safe_emalloc 1875 ext/gd/libgd/gd_topal.c (hist2d) safe_emalloc (HIST_C1_ELEMS * HIST_C2_ELEMS, sizeof (histcell), 0); safe_emalloc 1926 ext/gd/libgd/gd_topal.c cquantize->fserrors = (FSERRPTR) safe_emalloc (3, sizeof (FSERROR), 0); safe_emalloc 2094 ext/gd/libgd/gd_topal.c buf = (unsigned long *)safe_emalloc(sizeof(unsigned long), 5 * im2->colorsTotal, 0); safe_emalloc 41 ext/gd/libgd/gdxpm.c colors = (int *) safe_emalloc(number, sizeof(int), 0); safe_emalloc 128 ext/gd/libgd/wbmp.c if ((wbmp->bitmap = (int *) safe_emalloc(sizeof(int), width * height, 0)) == NULL) safe_emalloc 195 ext/gd/libgd/wbmp.c if ((wbmp->bitmap = (int *) safe_emalloc((size_t)wbmp->width * wbmp->height, sizeof(int), 0)) == NULL) safe_emalloc 115 ext/hash/hash.c char *hex_digest = safe_emalloc(ops->digest_size, 2, 1); safe_emalloc 224 ext/hash/hash.c char *hex_digest = safe_emalloc(ops->digest_size, 2, 1); safe_emalloc 460 ext/hash/hash.c char *hex_digest = safe_emalloc(digest_len,2,1); safe_emalloc 1071 ext/iconv/iconv.c buf = safe_emalloc(1, max_line_len, 5); safe_emalloc 1431 ext/imap/php_imap.c delim = safe_emalloc(2, sizeof(char), 0); safe_emalloc 1755 ext/imap/php_imap.c delim = safe_emalloc(2, sizeof(char), 0); safe_emalloc 3409 ext/imap/php_imap.c bufferTo = (char *)safe_emalloc(bt_len, 1, 1); safe_emalloc 3438 ext/imap/php_imap.c bufferCc = (char *)safe_emalloc(bt_len, 1, 1); safe_emalloc 3464 ext/imap/php_imap.c bufferBcc = (char *)safe_emalloc(bt_len, 1, 1); safe_emalloc 3753 ext/imap/php_imap.c charset = (char *) safe_emalloc((end + 1), 2, 0); safe_emalloc 107 ext/interbase/ibase_blobs.c bl_data = safe_emalloc(1, max_len, 1); safe_emalloc 314 ext/interbase/ibase_events.c event = (ibase_event *) safe_emalloc(sizeof(ibase_event), 1, 0); safe_emalloc 320 ext/interbase/ibase_events.c event->events = (char **) safe_emalloc(sizeof(char *),ZEND_NUM_ARGS()-i,0); safe_emalloc 202 ext/interbase/ibase_query.c ar = safe_emalloc(sizeof(ibase_array), *array_cnt, 0); safe_emalloc 802 ext/interbase/ibase_query.c var->sqldata = safe_emalloc(sizeof(char), var->sqllen, 0); safe_emalloc 805 ext/interbase/ibase_query.c var->sqldata = safe_emalloc(sizeof(char), var->sqllen + sizeof(short), 0); safe_emalloc 950 ext/interbase/ibase_query.c bind_buf = safe_emalloc(sizeof(BIND_BUF), ib_query->in_sqlda->sqld, 0); safe_emalloc 1152 ext/interbase/ibase_query.c bind_args = (zval ***) safe_emalloc(sizeof(zval **), ZEND_NUM_ARGS(), 0); safe_emalloc 874 ext/interbase/interbase.c ib_link = (ibase_db_link **) safe_emalloc(sizeof(ibase_db_link *),1+argn,0); safe_emalloc 880 ext/interbase/interbase.c zval ***args = (zval ***) safe_emalloc(sizeof(zval **),argn,0); safe_emalloc 888 ext/interbase/interbase.c teb = (ISC_TEB *) safe_emalloc(sizeof(ISC_TEB),argn,0); safe_emalloc 889 ext/interbase/interbase.c tpb = (char *) safe_emalloc(TPB_MAX_SIZE,argn,0); safe_emalloc 975 ext/interbase/interbase.c ib_trans = (ibase_trans *) safe_emalloc(link_cnt-1, sizeof(ibase_db_link *), sizeof(ibase_trans)); safe_emalloc 245 ext/json/json.c utf16 = (unsigned short *) safe_emalloc(len, sizeof(unsigned short), 0); safe_emalloc 426 ext/json/json.c utf16 = (unsigned short *) safe_emalloc((parameter_len+1), sizeof(unsigned short), 1); safe_emalloc 722 ext/ldap/ldap.c ldap_attrs = safe_emalloc((num_attribs+1), sizeof(char *), 0); safe_emalloc 806 ext/ldap/ldap.c lds = safe_emalloc(nlinks, sizeof(ldap_linkdata), 0); safe_emalloc 807 ext/ldap/ldap.c rcs = safe_emalloc(nlinks, sizeof(*rcs), 0); safe_emalloc 1409 ext/ldap/ldap.c ldap_mods = safe_emalloc((num_attribs+1), sizeof(LDAPMod *), 0); safe_emalloc 1410 ext/ldap/ldap.c num_berval = safe_emalloc(num_attribs, sizeof(int), 0); safe_emalloc 1446 ext/ldap/ldap.c ldap_mods[i]->mod_bvalues = safe_emalloc((num_values + 1), sizeof(struct berval *), 0); safe_emalloc 1855 ext/ldap/ldap.c ctrls = safe_emalloc((1 + ncontrols), sizeof(*ctrls), 0); safe_emalloc 955 ext/mbstring/mbstring.c entry = (enum mbfl_no_encoding *)safe_emalloc(n, sizeof(int), 0); safe_emalloc 3060 ext/mbstring/mbstring.c stack = (zval ***)safe_emalloc(stack_max, sizeof(zval **), 0); safe_emalloc 3143 ext/mbstring/mbstring.c stack = (zval ***)safe_emalloc(stack_max, sizeof(zval **), 0); safe_emalloc 3266 ext/mbstring/mbstring.c convmap = (int *)safe_emalloc(i, sizeof(int), 0); safe_emalloc 232 ext/mhash/mhash.c ret = safe_emalloc(1, bytes, 1); safe_emalloc 1130 ext/mssql/php_mssql.c result->data = (zval **) safe_emalloc(sizeof(zval *), MSSQL_ROWS_BLOCK*(++result->blocks_initialized), 0); safe_emalloc 1137 ext/mssql/php_mssql.c result->data[i] = (zval *) safe_emalloc(sizeof(zval), result->num_fields, 0); safe_emalloc 1262 ext/mssql/php_mssql.c result->fields = (mssql_field *) safe_emalloc(sizeof(mssql_field), result->num_fields, 0); safe_emalloc 1891 ext/mssql/php_mssql.c result->fields = (mssql_field *) safe_emalloc(sizeof(mssql_field), result->num_fields, 0); safe_emalloc 2205 ext/mssql/php_mssql.c result->data = (zval **) safe_emalloc(sizeof(zval *), MSSQL_ROWS_BLOCK, 0); safe_emalloc 2211 ext/mssql/php_mssql.c result->fields = (mssql_field *) safe_emalloc(sizeof(mssql_field), num_fields, 0); safe_emalloc 1671 ext/mysql/php_mysql.c Z_STRVAL_P(return_value) = (char *) safe_emalloc(Z_STRLEN_PP(str), 2, 1); safe_emalloc 1704 ext/mysql/php_mysql.c new_str = safe_emalloc(str_len, 2, 1); safe_emalloc 2017 ext/mysql/php_mysql.c fci.params = safe_emalloc(sizeof(zval*), ht->nNumOfElements, 0); safe_emalloc 959 ext/mysqli/mysqli.c fci.params = safe_emalloc(sizeof(zval*), ht->nNumOfElements, 0); safe_emalloc 1017 ext/mysqli/mysqli.c a = (zval ***)safe_emalloc(c, sizeof(zval **), 0);\ safe_emalloc 127 ext/mysqli/mysqli_api.c args = (zval ***)safe_emalloc(argc, sizeof(zval **), 0); safe_emalloc 181 ext/mysqli/mysqli_api.c stmt->param.vars = (zval **)safe_emalloc(num_vars, sizeof(zval), 0); safe_emalloc 232 ext/mysqli/mysqli_api.c args = (zval ***)safe_emalloc(argc, sizeof(zval **), 0); safe_emalloc 391 ext/mysqli/mysqli_api.c stmt->result.vars = (zval **)safe_emalloc((var_cnt), sizeof(zval), 0); safe_emalloc 1522 ext/mysqli/mysqli_api.c newstr = safe_emalloc(2, escapestr_len, 1); safe_emalloc 56 ext/mysqli/mysqli_embedded.c arguments = safe_emalloc(sizeof(char *), argc + 1, 0); safe_emalloc 77 ext/mysqli/mysqli_embedded.c groups = safe_emalloc(sizeof(char *), zend_hash_num_elements(HASH_OF(*grps)) + 1, 0); safe_emalloc 95 ext/mysqli/mysqli_embedded.c groups = safe_emalloc(sizeof(char *), 1, 0); safe_emalloc 1386 ext/oci8/oci8_interface.c columns = safe_emalloc(statement->ncolumns, sizeof(php_oci_out_column *), 0); safe_emalloc 1420 ext/oci8/oci8_interface.c columns = safe_emalloc(statement->ncolumns, sizeof(php_oci_out_column *), 0); safe_emalloc 1421 ext/oci8/oci8_interface.c outarrs = safe_emalloc(statement->ncolumns, sizeof(zval*), 0); safe_emalloc 655 ext/oci8/oci8_statement.c buf = outcol->data = (text *) safe_emalloc(1, outcol->storage_size4, 0); safe_emalloc 1427 ext/oci8/oci8_statement.c bind->array.elements = (text *)safe_emalloc(max_table_length * (maxlength + 1), sizeof(text), 0); safe_emalloc 1432 ext/oci8/oci8_statement.c bind->array.element_lengths = safe_emalloc(max_table_length, sizeof(ub2), 0); safe_emalloc 1434 ext/oci8/oci8_statement.c bind->array.indicators = safe_emalloc(max_table_length, sizeof(sb2), 0); safe_emalloc 1485 ext/oci8/oci8_statement.c bind->array.elements = (ub4 *)safe_emalloc(max_table_length, sizeof(ub4), 0); safe_emalloc 1489 ext/oci8/oci8_statement.c bind->array.element_lengths = safe_emalloc(max_table_length, sizeof(ub2), 0); safe_emalloc 1523 ext/oci8/oci8_statement.c bind->array.elements = (double *)safe_emalloc(max_table_length, sizeof(double), 0); safe_emalloc 1527 ext/oci8/oci8_statement.c bind->array.element_lengths = safe_emalloc(max_table_length, sizeof(ub2), 0); safe_emalloc 1561 ext/oci8/oci8_statement.c bind->array.elements = (OCIDate *)safe_emalloc(max_table_length, sizeof(OCIDate), 0); safe_emalloc 1565 ext/oci8/oci8_statement.c bind->array.element_lengths = safe_emalloc(max_table_length, sizeof(ub2), 0); safe_emalloc 349 ext/odbc/birdstep.c res->values = (VResVal *)safe_emalloc(sizeof(VResVal), cols, 0); safe_emalloc 647 ext/odbc/php_odbc.c result->values = (odbc_result_value *) safe_emalloc(sizeof(odbc_result_value), result->numcols, 0); safe_emalloc 981 ext/odbc/php_odbc.c params = (params_t *)safe_emalloc(sizeof(params_t), result->numparams, 0); safe_emalloc 3599 ext/openssl/openssl.c pkeys = safe_emalloc(nkeys, sizeof(*pkeys), 0); safe_emalloc 3600 ext/openssl/openssl.c eksl = safe_emalloc(nkeys, sizeof(*eksl), 0); safe_emalloc 3601 ext/openssl/openssl.c eks = safe_emalloc(nkeys, sizeof(*eks), 0); safe_emalloc 3603 ext/openssl/openssl.c key_resources = safe_emalloc(nkeys, sizeof(long), 0); safe_emalloc 456 ext/pcntl/pcntl.c argv = safe_emalloc((argc + 2), sizeof(char *), 0); safe_emalloc 477 ext/pcntl/pcntl.c envp = safe_emalloc((envc + 1), sizeof(char *), 0); safe_emalloc 542 ext/pcre/php_pcre.c offsets = (int *)safe_emalloc(size_offsets, sizeof(int), 0); safe_emalloc 549 ext/pcre/php_pcre.c subpat_names = (char **)safe_emalloc(num_subpats, sizeof(char *), 0); safe_emalloc 592 ext/pcre/php_pcre.c match_sets = (zval **)safe_emalloc(num_subpats, sizeof(zval *), 0); safe_emalloc 996 ext/pcre/php_pcre.c offsets = (int *)safe_emalloc(size_offsets, sizeof(int), 0); safe_emalloc 999 ext/pcre/php_pcre.c result = safe_emalloc(alloc_len, sizeof(char), 0); safe_emalloc 1125 ext/pcre/php_pcre.c new_buf = safe_emalloc(alloc_len, sizeof(char), 0); safe_emalloc 1434 ext/pcre/php_pcre.c offsets = (int *)safe_emalloc(size_offsets, sizeof(int), 0); safe_emalloc 1593 ext/pcre/php_pcre.c out_str = safe_emalloc(4, in_str_len, 1); safe_emalloc 1698 ext/pcre/php_pcre.c offsets = (int *)safe_emalloc(size_offsets, sizeof(int), 0); safe_emalloc 465 ext/pdo/pdo_dbh.c fci.params = safe_emalloc(sizeof(zval*), ht->nNumOfElements, 0); safe_emalloc 734 ext/pdo/pdo_stmt.c fci->params = safe_emalloc(sizeof(zval**), ht->nNumOfElements, 0); safe_emalloc 842 ext/pdo/pdo_stmt.c fci->params = safe_emalloc(sizeof(zval**), num_args, 0); safe_emalloc 862 ext/pdo/pdo_stmt.c stmt->fetch.func.values = safe_emalloc(sizeof(zval*), stmt->column_count, 0); safe_emalloc 1919 ext/pdo/pdo_stmt.c args = safe_emalloc(ZEND_NUM_ARGS(), sizeof(zval*), 0); safe_emalloc 147 ext/pdo_dblib/dblib_driver.c *quoted = q = safe_emalloc(2, unquotedlen, 3); safe_emalloc 134 ext/pdo_dblib/dblib_stmt.c S->rows = safe_emalloc(arows, size, 0); safe_emalloc 273 ext/pdo_mysql/mysql_driver.c *quoted = safe_emalloc(2, unquotedlen, 3); safe_emalloc 331 ext/pdo_pgsql/pgsql_driver.c *quoted = safe_emalloc(2, unquotedlen, 3); safe_emalloc 366 ext/pdo_pgsql/pgsql_driver.c name_escaped = safe_emalloc(l, 2, 1); safe_emalloc 214 ext/pdo_sqlite/sqlite_driver.c *quoted = safe_emalloc(2, unquotedlen, 3); safe_emalloc 318 ext/pdo_sqlite/sqlite_driver.c zargs = (zval ***)safe_emalloc(fake_argc, sizeof(zval **), 0); safe_emalloc 1270 ext/pgsql/pgsql.c params = (char **)safe_emalloc(sizeof(char *), num_params, 0); safe_emalloc 1494 ext/pgsql/pgsql.c params = (char **)safe_emalloc(sizeof(char *), num_params, 0); safe_emalloc 2119 ext/pgsql/pgsql.c fci.params = safe_emalloc(sizeof(zval*), ht->nNumOfElements, 0); safe_emalloc 2808 ext/pgsql/pgsql.c buf = (char *) safe_emalloc(sizeof(char), (buf_len+1), 0); safe_emalloc 3590 ext/pgsql/pgsql.c to = (char *) safe_emalloc(from_len, 2, 1); safe_emalloc 4091 ext/pgsql/pgsql.c params = (char **)safe_emalloc(sizeof(char *), num_params, 0); safe_emalloc 4235 ext/pgsql/pgsql.c params = (char **)safe_emalloc(sizeof(char *), num_params, 0); safe_emalloc 4887 ext/pgsql/pgsql.c tmp = (char *)safe_emalloc(Z_STRLEN_PP(val), 2, 1); safe_emalloc 1574 ext/reflection/php_reflection.c params = safe_emalloc(sizeof(zval **), argc, 0); safe_emalloc 1640 ext/reflection/php_reflection.c params = safe_emalloc(sizeof(zval **), argc, 0); safe_emalloc 2329 ext/reflection/php_reflection.c params = safe_emalloc(sizeof(zval **), argc, 0); safe_emalloc 2434 ext/reflection/php_reflection.c params = safe_emalloc(sizeof(zval **), argc, 0); safe_emalloc 3428 ext/reflection/php_reflection.c params = safe_emalloc(sizeof(zval **), argc, 0); safe_emalloc 3504 ext/reflection/php_reflection.c params = safe_emalloc(sizeof(zval **), argc, 0); safe_emalloc 1695 ext/session/session.c args = (zval ***)safe_emalloc(argc, sizeof(zval **), 0); safe_emalloc 974 ext/soap/php_encoding.c str = (unsigned char *) safe_emalloc(Z_STRLEN_P(data) * 2, sizeof(char), 1); safe_emalloc 1109 ext/soap/php_encoding.c str = (char *) safe_emalloc(EG(precision), 1, MAX_LENGTH_OF_DOUBLE + 1); safe_emalloc 2050 ext/soap/php_encoding.c pos = safe_emalloc(sizeof(int), dimension, 0); safe_emalloc 2107 ext/soap/php_encoding.c pos = safe_emalloc(sizeof(int), dimension, 0); safe_emalloc 2255 ext/soap/php_encoding.c dims = safe_emalloc(sizeof(int), dimension, 0); safe_emalloc 2353 ext/soap/php_encoding.c dims = safe_emalloc(sizeof(int), dimension, 0); safe_emalloc 2359 ext/soap/php_encoding.c dims = safe_emalloc(sizeof(int), dimension, 0); safe_emalloc 2549 ext/soap/php_encoding.c pos = safe_emalloc(sizeof(int), dimension, 0); safe_emalloc 1261 ext/soap/php_sdl.c elements = safe_emalloc((i+1), sizeof(sdlTypePtr), 0); safe_emalloc 1490 ext/soap/php_sdl.c types = safe_emalloc((i+1), sizeof(sdlTypePtr), 0); safe_emalloc 1503 ext/soap/php_sdl.c encoders = safe_emalloc((i+1), sizeof(encodePtr), 0); safe_emalloc 1561 ext/soap/php_sdl.c bindings = safe_emalloc(num_bindings, sizeof(sdlBindingPtr), 0); safe_emalloc 1587 ext/soap/php_sdl.c functions = safe_emalloc(num_func, sizeof(sdlFunctionPtr), 0); safe_emalloc 1196 ext/soap/soap.c argv = safe_emalloc(argc, sizeof(zval **), 0); safe_emalloc 1222 ext/soap/soap.c service->soap_class.argv = safe_emalloc(sizeof(zval), service->soap_class.argc, 0); safe_emalloc 2897 ext/soap/soap.c real_args = safe_emalloc(sizeof(zval *), arg_count, 0); safe_emalloc 3190 ext/soap/soap.c zval **arguments = (zval **) safe_emalloc(sizeof(zval *), arg_count, 0); safe_emalloc 3305 ext/soap/soap.c tmp_parameters = safe_emalloc(num_of_params, sizeof(zval *), 0); safe_emalloc 3347 ext/soap/soap.c tmp_parameters = safe_emalloc(num_of_params, sizeof(zval *), 0); safe_emalloc 457 ext/spl/php_spl.c lc_name = safe_emalloc(func_name_len, 1, sizeof(long) + 1); safe_emalloc 1510 ext/spl/spl_directory.c buf = safe_emalloc((intern->u.file.max_line_len + 1), sizeof(char), 0); safe_emalloc 1552 ext/spl/spl_directory.c zval ***params = (zval***)safe_emalloc(num_args, sizeof(zval**), 0); safe_emalloc 852 ext/spl/spl_iterators.c func_params = safe_emalloc(sizeof(zval **), arg_count, 0); safe_emalloc 389 ext/sqlite/pdo_sqlite2.c ret = safe_emalloc(1 + unquotedlen / 254, 257, 5); safe_emalloc 149 ext/sqlite/sess_sqlite.c binary = safe_emalloc(1 + vallen / 254, 257, 3); safe_emalloc 60 ext/sqlite/sqlite.c #ifndef safe_emalloc safe_emalloc 465 ext/sqlite/sqlite.c zargs = (zval ***)safe_emalloc((argc - 1), sizeof(zval **), 0); safe_emalloc 542 ext/sqlite/sqlite.c zargs = (zval ***)safe_emalloc(argc, sizeof(zval **), 0); safe_emalloc 624 ext/sqlite/sqlite.c zargs = (zval ***)safe_emalloc(zargc, sizeof(zval **), 0); safe_emalloc 1441 ext/sqlite/sqlite.c rres->col_names = safe_emalloc(rres->ncolumns, sizeof(char *), 0); safe_emalloc 1453 ext/sqlite/sqlite.c rres->table = safe_emalloc(rres->ncolumns, sizeof(char *), 0); safe_emalloc 2089 ext/sqlite/sqlite.c fci.params = safe_emalloc(sizeof(zval*), ht->nNumOfElements, 0); safe_emalloc 2811 ext/sqlite/sqlite.c ret = safe_emalloc(1 + stringlen / 254, 257, 3); safe_emalloc 3043 ext/sqlite/sqlite.c ret = safe_emalloc(1 + datalen / 254, 257, 3); safe_emalloc 991 ext/standard/array.c zval ***args = (zval ***) safe_emalloc(sizeof(zval **), ZEND_NUM_ARGS(), 0); safe_emalloc 1041 ext/standard/array.c zval ***args = (zval ***) safe_emalloc(sizeof(zval **), ZEND_NUM_ARGS(), 0); safe_emalloc 1544 ext/standard/array.c args = (zval ***)safe_emalloc(ZEND_NUM_ARGS(), sizeof(zval **), 0); safe_emalloc 1804 ext/standard/array.c elems = (Bucket **)safe_emalloc(n_elems, sizeof(Bucket *), 0); safe_emalloc 1965 ext/standard/array.c args = (zval ***)safe_emalloc(argc, sizeof(zval **), 0); safe_emalloc 2098 ext/standard/array.c args = (zval ***)safe_emalloc(argc, sizeof(zval **), 0); safe_emalloc 2150 ext/standard/array.c args = (zval ***)safe_emalloc(argc, sizeof(zval **), 0); safe_emalloc 2179 ext/standard/array.c repl = (zval ***)safe_emalloc(repl_num, sizeof(zval **), 0); safe_emalloc 2372 ext/standard/array.c args = (zval ***)safe_emalloc(argc, sizeof(zval **), 0); safe_emalloc 2688 ext/standard/array.c pads = (zval ***)safe_emalloc(num_pads, sizeof(zval **), 0); safe_emalloc 2969 ext/standard/array.c args = (zval ***)safe_emalloc(argc, sizeof(zval **), 0); safe_emalloc 3066 ext/standard/array.c args = (zval ***)safe_emalloc(argc, sizeof(zval **), 0); safe_emalloc 3203 ext/standard/array.c lists = (Bucket ***)safe_emalloc(arr_argc, sizeof(Bucket **), 0); safe_emalloc 3204 ext/standard/array.c ptrs = (Bucket ***)safe_emalloc(arr_argc, sizeof(Bucket **), 0); safe_emalloc 3447 ext/standard/array.c args = (zval ***)safe_emalloc(argc, sizeof(zval **), 0); safe_emalloc 3544 ext/standard/array.c args = (zval ***)safe_emalloc(argc, sizeof(zval **), 0); safe_emalloc 3681 ext/standard/array.c lists = (Bucket ***)safe_emalloc(arr_argc, sizeof(Bucket **), 0); safe_emalloc 3682 ext/standard/array.c ptrs = (Bucket ***)safe_emalloc(arr_argc, sizeof(Bucket **), 0); safe_emalloc 3971 ext/standard/array.c args = (zval ***)safe_emalloc(argc, sizeof(zval **), 0); safe_emalloc 4073 ext/standard/array.c indirect = (Bucket ***)safe_emalloc(array_size, sizeof(Bucket **), 0); safe_emalloc 4075 ext/standard/array.c indirect[i] = (Bucket **)safe_emalloc((num_arrays+1), sizeof(Bucket *), 0); safe_emalloc 4500 ext/standard/array.c pargs = (zval ***)safe_emalloc(ZEND_NUM_ARGS(), sizeof(zval **), 0); safe_emalloc 4518 ext/standard/array.c args = (zval **)safe_emalloc(ZEND_NUM_ARGS(), sizeof(zval *), 0); safe_emalloc 4519 ext/standard/array.c array_len = (int *)safe_emalloc(ZEND_NUM_ARGS(), sizeof(int), 0); safe_emalloc 4520 ext/standard/array.c array_pos = (HashPosition *)safe_emalloc(ZEND_NUM_ARGS(), sizeof(HashPosition), 0); safe_emalloc 4552 ext/standard/array.c params = (zval ***)safe_emalloc(ZEND_NUM_ARGS(), sizeof(zval **), 0); safe_emalloc 70 ext/standard/base64.c result = (unsigned char *)safe_emalloc(((length + 2) / 3) * 4, sizeof(char), 1); safe_emalloc 4583 ext/standard/basic_functions.c argv = (char **) safe_emalloc(sizeof(char *), (argc + 1), 0); safe_emalloc 5087 ext/standard/basic_functions.c params = safe_emalloc(sizeof(zval **), argc, 0); safe_emalloc 5169 ext/standard/basic_functions.c func_params = safe_emalloc(sizeof(zval **), count, 0); safe_emalloc 5207 ext/standard/basic_functions.c params = (zval ***) safe_emalloc(sizeof(zval **), arg_count, 0); safe_emalloc 5257 ext/standard/basic_functions.c method_args = (zval ***) safe_emalloc(sizeof(zval **), num_elems, 0); safe_emalloc 5427 ext/standard/basic_functions.c shutdown_function_entry.arguments = (zval **) safe_emalloc(sizeof(zval *), shutdown_function_entry.arg_count, 0); safe_emalloc 6029 ext/standard/basic_functions.c tick_fe.arguments = (zval **) safe_emalloc(sizeof(zval *), tick_fe.arg_count, 0); safe_emalloc 273 ext/standard/exec.c cmd = safe_emalloc(2, l, 1); safe_emalloc 351 ext/standard/exec.c cmd = safe_emalloc(4, l, 3); /* worst case */ safe_emalloc 1182 ext/standard/file.c buf = safe_emalloc(sizeof(char), (len + 1), 0); safe_emalloc 1218 ext/standard/file.c args = (zval ***)safe_emalloc(argCount, sizeof(zval **), 0); safe_emalloc 832 ext/standard/filestat.c gids=(gid_t *)safe_emalloc(groups, sizeof(gid_t), 0); safe_emalloc 389 ext/standard/formatted_print.c args = (zval ***)safe_emalloc(argc, sizeof(zval *), 0); safe_emalloc 408 ext/standard/formatted_print.c newargs = (zval ***)safe_emalloc(argc, sizeof(zval *), 0); safe_emalloc 209 ext/standard/iptc.c poi = spoolbuf = safe_emalloc(1, iptcdata_len + sizeof(psheader) + sb.st_size + 1024, 1); safe_emalloc 43 ext/standard/levenshtein.c p1 = safe_emalloc((l2+1), sizeof(int), 0); safe_emalloc 44 ext/standard/levenshtein.c p2 = safe_emalloc((l2+1), sizeof(int), 0); safe_emalloc 189 ext/standard/metaphone.c *phoned_word = safe_emalloc(sizeof(char), word_len, 1); safe_emalloc 192 ext/standard/metaphone.c *phoned_word = safe_emalloc(sizeof(char), max_phonemes, 1); safe_emalloc 126 ext/standard/pack.c argv = safe_emalloc(argc, sizeof(zval **), 0); safe_emalloc 138 ext/standard/pack.c formatcodes = safe_emalloc(formatlen, sizeof(*formatcodes), 0); safe_emalloc 139 ext/standard/pack.c formatargs = safe_emalloc(formatlen, sizeof(*formatargs), 0); safe_emalloc 152 ext/standard/reg.c buf = (char *)safe_emalloc(buf_len, sizeof(char), 0); safe_emalloc 164 ext/standard/reg.c message = (char *)safe_emalloc((buf_len + len + 2), sizeof(char), 0); safe_emalloc 332 ext/standard/reg.c buf = safe_emalloc(buf_len, sizeof(char), 0); safe_emalloc 407 ext/standard/reg.c nbuf = safe_emalloc(buf_len, sizeof(char), 0); safe_emalloc 422 ext/standard/reg.c nbuf = safe_emalloc(buf_len, sizeof(char), 0); safe_emalloc 643 ext/standard/reg.c tmp = safe_emalloc(Z_STRLEN_PP(string), 4, 1); safe_emalloc 170 ext/standard/scanf.c cset->chars = (char *) safe_emalloc(sizeof(char), (end - format - 1), 0); safe_emalloc 172 ext/standard/scanf.c cset->ranges = (struct Range *) safe_emalloc(sizeof(struct Range), nranges, 0); safe_emalloc 327 ext/standard/scanf.c nassign = (int*)safe_emalloc(sizeof(int), numVars, 0); safe_emalloc 502 ext/standard/scanf.c nassign = (void *)safe_emalloc(nspace, sizeof(int), 0); safe_emalloc 364 ext/standard/streamsfuncs.c read_buf = safe_emalloc(1, to_read, 1); safe_emalloc 123 ext/standard/string.c result = (char *) safe_emalloc(oldlen * 2, sizeof(char), 1); safe_emalloc 859 ext/standard/string.c newtext = safe_emalloc(chk, breakcharlen, textlen + 1); safe_emalloc 864 ext/standard/string.c newtext = safe_emalloc(textlen, (breakcharlen + 1), 1); safe_emalloc 975 ext/standard/string.c char **positions = safe_emalloc(allocated, sizeof(char *), 0); safe_emalloc 2152 ext/standard/string.c dest = safe_emalloc((int)out_len, sizeof(char), 0); safe_emalloc 2558 ext/standard/string.c str = safe_emalloc(2, Z_STRLEN_PP(arg), 1); safe_emalloc 3191 ext/standard/string.c char *new_str = safe_emalloc(4, (length?length:(length=strlen(str))), 1); safe_emalloc 3264 ext/standard/string.c new_str = (char *) safe_emalloc(2, (length ? length : (length = strlen(str))), 1); safe_emalloc 3351 ext/standard/string.c Z_STRVAL_P(result) = target = safe_emalloc(char_count, to_len, len + 1); safe_emalloc 3481 ext/standard/string.c new_str = safe_emalloc(count, str_len - needle_len, length + 1); safe_emalloc 4103 ext/standard/string.c zval ***args = (zval ***) safe_emalloc(sizeof(zval **), ZEND_NUM_ARGS(), 0); safe_emalloc 4593 ext/standard/string.c result = (char *)safe_emalloc(Z_STRLEN_PP(input_str), Z_LVAL_PP(mult), 1); safe_emalloc 4993 ext/standard/string.c args = (zval ***) safe_emalloc(argc, sizeof(zval **), 0); safe_emalloc 455 ext/standard/url.c start = to = (unsigned char *) safe_emalloc(3, len, 1); safe_emalloc 565 ext/standard/url.c str = (unsigned char *) safe_emalloc(3, len, 1); safe_emalloc 74 ext/standard/uuencode.c p = *dest = safe_emalloc(ceil(src_len * 1.38), 1, 46); safe_emalloc 132 ext/standard/uuencode.c p = *dest = safe_emalloc(ceil(src_len * 0.75), 1, 1); safe_emalloc 179 ext/standard/var.c args = (zval ***)safe_emalloc(argc, sizeof(zval **), 0); safe_emalloc 333 ext/standard/var.c args = (zval ***)safe_emalloc(argc, sizeof(zval **), 0); safe_emalloc 687 ext/standard/var.c s = (char *) safe_emalloc(PG(serialize_precision), 1, MAX_LENGTH_OF_DOUBLE + 1); safe_emalloc 145 ext/standard/var_unserializer.c char *str = safe_emalloc(*len, 1, 1); safe_emalloc 37 ext/standard/versioning.c char *buf = safe_emalloc(len, 2, 1), *q, lp, lq; safe_emalloc 828 ext/sybase/php_sybase_db.c column_types = (int *) safe_emalloc(sizeof(int), num_fields, 0); safe_emalloc 834 ext/sybase/php_sybase_db.c result->data = (zval ***) safe_emalloc(sizeof(zval **), SYBASE_ROWS_BLOCK, 0); safe_emalloc 845 ext/sybase/php_sybase_db.c result->data[i] = (zval **) safe_emalloc(sizeof(zval *), num_fields, 0); safe_emalloc 863 ext/sybase/php_sybase_db.c result->fields = (sybase_field *) safe_emalloc(sizeof(sybase_field), num_fields, 0); safe_emalloc 1153 ext/sybase_ct/php_sybase_ct.c result->data[i] = (zval *) safe_emalloc(sizeof(zval), result->num_fields, 0); safe_emalloc 1245 ext/sybase_ct/php_sybase_ct.c result->data = (zval **) safe_emalloc(sizeof(zval *), SYBASE_ROWS_BLOCK, 0); safe_emalloc 1253 ext/sybase_ct/php_sybase_ct.c result->tmp_buffer = (char **) safe_emalloc(sizeof(char *), num_fields, 0); safe_emalloc 1254 ext/sybase_ct/php_sybase_ct.c result->lengths = (CS_INT *) safe_emalloc(sizeof(CS_INT), num_fields, 0); safe_emalloc 1255 ext/sybase_ct/php_sybase_ct.c result->indicators = (CS_SMALLINT *) safe_emalloc(sizeof(CS_INT), num_fields, 0); safe_emalloc 1256 ext/sybase_ct/php_sybase_ct.c result->datafmt = (CS_DATAFMT *) safe_emalloc(sizeof(CS_DATAFMT), num_fields, 0); safe_emalloc 1257 ext/sybase_ct/php_sybase_ct.c result->numerics = (unsigned char *) safe_emalloc(sizeof(unsigned char), num_fields, 0); safe_emalloc 1258 ext/sybase_ct/php_sybase_ct.c result->types = (CS_INT *) safe_emalloc(sizeof(CS_INT), num_fields, 0); safe_emalloc 1322 ext/sybase_ct/php_sybase_ct.c result->fields = (sybase_field *) safe_emalloc(sizeof(sybase_field), num_fields, 0); safe_emalloc 303 ext/sysvmsg/sysvmsg.c messagebuffer = (struct php_msgbuf *) safe_emalloc(maxsize, 1, sizeof(struct php_msgbuf)); safe_emalloc 378 ext/sysvmsg/sysvmsg.c messagebuffer = safe_emalloc(msg_var.len, 1, sizeof(struct php_msgbuf)); safe_emalloc 404 ext/sysvmsg/sysvmsg.c messagebuffer = safe_emalloc(message_len, 1, sizeof(struct php_msgbuf)); safe_emalloc 148 ext/wddx/wddx.c stack->elements = (void **) safe_emalloc(sizeof(void **), STACK_BLOCK_SIZE, 0); safe_emalloc 1161 ext/wddx/wddx.c args = (zval ***)safe_emalloc(argc, sizeof(zval **), 0); safe_emalloc 1270 ext/wddx/wddx.c args = (zval ***)safe_emalloc(argc, sizeof(zval **), 0); safe_emalloc 114 ext/xml/compat.c attrs = safe_emalloc((nb_attributes * 2) + 1, sizeof(int *), 0); safe_emalloc 409 ext/xml/xml.c args = safe_emalloc(sizeof(zval **), argc, 0); safe_emalloc 530 ext/xml/xml.c newbuf = safe_emalloc(len, 4, 1); safe_emalloc 1408 ext/xml/xml.c parser->ltags = safe_emalloc(XML_MAXLEVEL, sizeof(char *), 0); safe_emalloc 117 ext/xsl/xsltprocessor.c value = (xmlChar*) safe_emalloc (str_len, sizeof(xmlChar), 0); safe_emalloc 120 ext/xsl/xsltprocessor.c value = (xmlChar*) safe_emalloc (str_len, sizeof(xmlChar), 0); safe_emalloc 140 ext/xsl/xsltprocessor.c params = (char **)safe_emalloc((2 * zend_hash_num_elements(parht) + 1), sizeof(char *), 0); safe_emalloc 226 ext/xsl/xsltprocessor.c fci.params = safe_emalloc(fci.param_count, sizeof(zval**), 0); safe_emalloc 227 ext/xsl/xsltprocessor.c args = safe_emalloc(fci.param_count, sizeof(zval *), 0); safe_emalloc 836 ext/zip/php_zip.c buffer = safe_emalloc(len, 1, 1); safe_emalloc 1913 ext/zip/php_zip.c buffer = safe_emalloc(len, 1, 2); safe_emalloc 224 main/network.c *sal = safe_emalloc((n + 1), sizeof(*sal), 0); safe_emalloc 251 main/network.c *sal = safe_emalloc(2, sizeof(*sal), 0);