safe_emalloc 856 Zend/zend_API.c *varargs = safe_emalloc(num_varargs, sizeof(zval **), 0); safe_emalloc 123 Zend/zend_alloc.h #define safe_pemalloc(nmemb, size, offset, persistent) ((persistent)?_safe_malloc(nmemb, size, offset):safe_emalloc(nmemb, size, offset)) safe_emalloc 159 Zend/zend_compile.c Z_STRVAL_P(result) = (char *) safe_emalloc(Z_STRLEN_P(result), 1, 1); safe_emalloc 1471 Zend/zend_operators.c buf = (char *) safe_emalloc(length, 1, 1); safe_emalloc 255 Zend/zend_stream.c file_handle->handle.stream.mmap.buf = *buf = safe_emalloc(1, size, ZEND_MMAP_AHEAD); safe_emalloc 130 ext/bcmath/libbcmath/src/div.c num1 = (unsigned char *) safe_emalloc (1, n1->n_len+n1->n_scale, extra+2); safe_emalloc 136 ext/bcmath/libbcmath/src/div.c num2 = (unsigned char *) safe_emalloc (1, len2, 1); safe_emalloc 167 ext/bcmath/libbcmath/src/div.c mval = (unsigned char *) safe_emalloc (1, len2, 1); safe_emalloc 54 ext/bcmath/libbcmath/src/num2str.c str = (char *) safe_emalloc (1, num->n_len + num->n_scale, 2 + signch); safe_emalloc 56 ext/bcmath/libbcmath/src/num2str.c str = (char *) safe_emalloc (1, num->n_len, 1 + signch); safe_emalloc 494 ext/com_dotnet/com_com.c vargs = (VARIANT*)safe_emalloc(sizeof(VARIANT), nargs, 0); safe_emalloc 506 ext/com_dotnet/com_com.c byref_vals = (VARIANT*)safe_emalloc(sizeof(VARIANT), byref_count, 0); safe_emalloc 595 ext/com_dotnet/com_com.c vargs = (VARIANT*)safe_emalloc(sizeof(VARIANT), nargs, 0); safe_emalloc 384 ext/com_dotnet/com_handlers.c args = (zval ***)safe_emalloc(sizeof(zval *), nargs, 0); safe_emalloc 48 ext/com_dotnet/com_olechar.c olestring = (OLECHAR*)safe_emalloc(string_len, sizeof(OLECHAR), 0); safe_emalloc 83 ext/com_dotnet/com_olechar.c string = (char*)safe_emalloc(length, sizeof(char), 0); safe_emalloc 110 ext/com_dotnet/com_saproxy.c args = safe_emalloc(proxy->dimensions + 1, sizeof(zval *), 0); safe_emalloc 170 ext/com_dotnet/com_saproxy.c indices = safe_emalloc(dims, sizeof(LONG), 0); safe_emalloc 222 ext/com_dotnet/com_saproxy.c zval **args = safe_emalloc(proxy->dimensions + 2, sizeof(zval *), 0); safe_emalloc 245 ext/com_dotnet/com_saproxy.c indices = safe_emalloc(dims, sizeof(LONG), 0); safe_emalloc 429 ext/com_dotnet/com_saproxy.c cloneproxy->indices = safe_emalloc(cloneproxy->dimensions, sizeof(zval *), 0); safe_emalloc 453 ext/com_dotnet/com_saproxy.c proxy->indices = safe_emalloc(proxy->dimensions, sizeof(zval *), 0); safe_emalloc 572 ext/com_dotnet/com_saproxy.c I->indices = safe_emalloc(proxy->dimensions + 1, sizeof(LONG), 0); safe_emalloc 498 ext/com_dotnet/com_typeinfo.c names = (BSTR*)safe_emalloc((func->cParams + 1), sizeof(BSTR), 0); safe_emalloc 268 ext/com_dotnet/com_wrapper.c params = (zval ***)safe_emalloc(sizeof(zval **), pdp->cArgs, 0); safe_emalloc 636 ext/dba/dba.c args = safe_emalloc(ac, sizeof(zval *), 0); safe_emalloc 652 ext/dba/dba.c key = safe_emalloc(keylen, 1, 1); safe_emalloc 166 ext/dba/dba_cdb.c new_entry = safe_emalloc(len, 1, 1); safe_emalloc 271 ext/dba/dba_cdb.c key = safe_emalloc(klen, 1, 1); safe_emalloc 303 ext/dba/dba_cdb.c key = safe_emalloc(klen, 1, 1); safe_emalloc 174 ext/dba/libcdb/cdb_make.c c->split = (struct cdb_hp *) safe_emalloc(memsize, sizeof(struct cdb_hp), 0); safe_emalloc 93 ext/dba/libflatfile/flatfile.c value_datum.dptr = safe_emalloc(value_datum.dsize, 1, 1); safe_emalloc 1861 ext/dom/node.c inclusive_ns_prefixes = safe_emalloc(zend_hash_num_elements(Z_ARRVAL_P(ns_prefixes)) + 1, safe_emalloc 118 ext/dom/xpath.c fci.params = safe_emalloc(fci.param_count, sizeof(zval**), 0); safe_emalloc 119 ext/dom/xpath.c args = safe_emalloc(fci.param_count, sizeof(zval *), 0); safe_emalloc 258 ext/ereg/ereg.c buf = (char *)safe_emalloc(buf_len, sizeof(char), 0); safe_emalloc 268 ext/ereg/ereg.c message = (char *)safe_emalloc((buf_len + len + 2), sizeof(char), 0); safe_emalloc 438 ext/ereg/ereg.c buf = safe_emalloc(buf_len, sizeof(char), 0); safe_emalloc 514 ext/ereg/ereg.c nbuf = safe_emalloc(buf_len, sizeof(char), 0); safe_emalloc 529 ext/ereg/ereg.c nbuf = safe_emalloc(buf_len, sizeof(char), 0); safe_emalloc 742 ext/ereg/ereg.c tmp = safe_emalloc(string_len, 4, 1); safe_emalloc 74 ext/exif/exif.c #ifndef safe_emalloc safe_emalloc 1460 ext/exif/exif.c sections = safe_emalloc(ml, 1, 1); safe_emalloc 1612 ext/exif/exif.c data = safe_emalloc(size, 1, 0); safe_emalloc 1733 ext/exif/exif.c info_value->list = safe_emalloc(length, sizeof(image_info_value), 0); safe_emalloc 1876 ext/exif/exif.c info_data->value.s = safe_emalloc(length, 1, 1); safe_emalloc 2367 ext/exif/exif.c value_ptr = safe_emalloc(max(byte_count, 4), 1, 0); safe_emalloc 2577 ext/exif/exif.c (*result) = safe_emalloc(byte_count, 1, 1); safe_emalloc 2868 ext/exif/exif.c value_ptr = safe_emalloc(byte_count, 1, 0); safe_emalloc 3686 ext/exif/exif.c ImageInfo->Thumbnail.data = safe_emalloc(ImageInfo->Thumbnail.size, 1, 0); safe_emalloc 3720 ext/exif/exif.c ImageInfo->Thumbnail.data = safe_emalloc(ImageInfo->Thumbnail.size, 1, 0); safe_emalloc 1893 ext/fileinfo/libmagic/softmagic.c t = (char *) safe_emalloc(Z_STRLEN_P(pattern), 2, 5); safe_emalloc 36 ext/filter/callback_filter.c args = safe_emalloc(sizeof(zval **), 1, 0); safe_emalloc 90 ext/filter/sanitizing_filters.c p = str = (unsigned char *) safe_emalloc(3, Z_STRLEN_P(value), 1); safe_emalloc 121 ext/filter/sanitizing_filters.c buf = safe_emalloc(1, Z_STRLEN_P(value) + 1, 1); safe_emalloc 162 ext/filter/sanitizing_filters.c buf = safe_emalloc(1, Z_STRLEN_P(value) + 1, 1); safe_emalloc 1675 ext/ftp/ftp.c ret = safe_emalloc((lines + 1), sizeof(char*), size); safe_emalloc 1545 ext/gd/gd.c stylearr = safe_emalloc(sizeof(int), zend_hash_num_elements(HASH_OF(styles)), 0); safe_emalloc 3367 ext/gd/gd.c points = (gdPointPtr) safe_emalloc(npoints, sizeof(gdPoint), 0); safe_emalloc 1913 ext/gd/libgd/gd.c stack = (struct seg *)safe_emalloc(sizeof(struct seg), ((int)(im->sy*im->sx)/4), 1); safe_emalloc 1980 ext/gd/libgd/gd.c stack = (struct seg *)safe_emalloc(sizeof(struct seg), ((int)(im->sy*im->sx)/4), 1); safe_emalloc 36 ext/gd/libgd/gd_color.c buf = (unsigned long *)safe_emalloc(sizeof(unsigned long), 5 * im2->colorsTotal, 0); safe_emalloc 696 ext/gd/libgd/gd_gd2.c chunkData = safe_emalloc(cs * bytesPerPixel, cs, 0); safe_emalloc 711 ext/gd/libgd/gd_gd2.c chunkIdx = safe_emalloc(idxSize, sizeof(t_chunk_info), 0); safe_emalloc 357 ext/gd/libgd/gd_gif_in.c tmp = safe_emalloc(3 * rv, sizeof(char), 1); safe_emalloc 209 ext/gd/libgd/gd_jpeg.c row = (JSAMPROW) safe_emalloc(cinfo.image_width * cinfo.input_components, sizeof(JSAMPLE), 0); safe_emalloc 441 ext/gd/libgd/gd_jpeg.c row = safe_emalloc(cinfo.output_width * channels, sizeof(JSAMPLE), 0); safe_emalloc 323 ext/gd/libgd/gd_png.c image_data = (png_bytep) safe_emalloc(rowbytes, height, 0); safe_emalloc 325 ext/gd/libgd/gd_png.c row_pointers = (png_bytepp) safe_emalloc(height, sizeof(png_bytep), 0); safe_emalloc 690 ext/gd/libgd/gd_png.c row_pointers = safe_emalloc(sizeof(png_bytep), height, 0); safe_emalloc 693 ext/gd/libgd/gd_png.c *prow_pointers = (png_bytep) safe_emalloc(width, channels, 0); safe_emalloc 731 ext/gd/libgd/gd_png.c row_pointers = safe_emalloc(height, sizeof(png_bytep), 0); safe_emalloc 797 ext/gd/libgd/gd_topal.c boxlist = (boxptr) safe_emalloc(desired_colors, sizeof (box), 1); safe_emalloc 1603 ext/gd/libgd/gd_topal.c (int *) safe_emalloc ((MAXJSAMPLE * 2 + 1), sizeof (int), 0); safe_emalloc 1871 ext/gd/libgd/gd_topal.c cquantize->histogram = (hist3d) safe_emalloc (HIST_C0_ELEMS, sizeof (hist2d), 0); safe_emalloc 1875 ext/gd/libgd/gd_topal.c (hist2d) safe_emalloc (HIST_C1_ELEMS * HIST_C2_ELEMS, sizeof (histcell), 0); safe_emalloc 1926 ext/gd/libgd/gd_topal.c cquantize->fserrors = (FSERRPTR) safe_emalloc (3, sizeof (FSERROR), 0); safe_emalloc 45 ext/gd/libgd/gdxpm.c colors = (int *) safe_emalloc(number, sizeof(int), 0); safe_emalloc 128 ext/gd/libgd/wbmp.c if ((wbmp->bitmap = (int *) safe_emalloc(sizeof(int), width * height, 0)) == NULL) safe_emalloc 195 ext/gd/libgd/wbmp.c if ((wbmp->bitmap = (int *) safe_emalloc((size_t)wbmp->width * wbmp->height, sizeof(int), 0)) == NULL) safe_emalloc 179 ext/hash/hash.c char *hex_digest = safe_emalloc(ops->digest_size, 2, 1); safe_emalloc 307 ext/hash/hash.c char *hex_digest = safe_emalloc(ops->digest_size, 2, 1); safe_emalloc 546 ext/hash/hash.c char *hex_digest = safe_emalloc(digest_len,2,1); safe_emalloc 677 ext/hash/hash.c result = safe_emalloc(loops, ops->digest_size, 0); safe_emalloc 679 ext/hash/hash.c computed_salt = safe_emalloc(salt_len, 1, 4); safe_emalloc 724 ext/hash/hash.c returnval = safe_emalloc(length, 1, 1); safe_emalloc 1223 ext/iconv/iconv.c buf = safe_emalloc(1, max_line_len, 5); safe_emalloc 1902 ext/imap/php_imap.c delim = safe_emalloc(2, sizeof(char), 0); safe_emalloc 2208 ext/imap/php_imap.c delim = safe_emalloc(2, sizeof(char), 0); safe_emalloc 3921 ext/imap/php_imap.c bufferTo = (char *)safe_emalloc(bt_len, 1, 1); safe_emalloc 3950 ext/imap/php_imap.c bufferCc = (char *)safe_emalloc(bt_len, 1, 1); safe_emalloc 3976 ext/imap/php_imap.c bufferBcc = (char *)safe_emalloc(bt_len, 1, 1); safe_emalloc 4230 ext/imap/php_imap.c charset = (char *) safe_emalloc((end + 1), 2, 0); safe_emalloc 105 ext/interbase/ibase_blobs.c bl_data = safe_emalloc(1, max_len, 1); safe_emalloc 335 ext/interbase/ibase_events.c event = (ibase_event *) safe_emalloc(sizeof(ibase_event), 1, 0); safe_emalloc 341 ext/interbase/ibase_events.c event->events = (char **) safe_emalloc(sizeof(char *),ZEND_NUM_ARGS()-i,0); safe_emalloc 218 ext/interbase/ibase_query.c ar = safe_emalloc(sizeof(ibase_array), *array_cnt, 0); safe_emalloc 818 ext/interbase/ibase_query.c var->sqldata = safe_emalloc(sizeof(char), var->sqllen, 0); safe_emalloc 821 ext/interbase/ibase_query.c var->sqldata = safe_emalloc(sizeof(char), var->sqllen + sizeof(short), 0); safe_emalloc 969 ext/interbase/ibase_query.c bind_buf = safe_emalloc(sizeof(BIND_BUF), ib_query->in_sqlda->sqld, 0); safe_emalloc 1139 ext/interbase/interbase.c ib_link = (ibase_db_link **) safe_emalloc(sizeof(ibase_db_link *),1+argn,0); safe_emalloc 1153 ext/interbase/interbase.c teb = (ISC_TEB *) safe_emalloc(sizeof(ISC_TEB),argn,0); safe_emalloc 1154 ext/interbase/interbase.c tpb = (char *) safe_emalloc(TPB_MAX_SIZE,argn,0); safe_emalloc 1247 ext/interbase/interbase.c ib_trans = (ibase_trans *) safe_emalloc(link_cnt-1, sizeof(ibase_db_link *), sizeof(ibase_trans)); safe_emalloc 704 ext/intl/converter/converter.c temp = safe_emalloc(sizeof(UChar), temp_len, sizeof(UChar)); safe_emalloc 723 ext/intl/converter/converter.c dest = safe_emalloc(sizeof(char), dest_len, sizeof(char)); safe_emalloc 31 ext/intl/intl_common.h # define eumalloc(size) (UChar*)safe_emalloc(size, sizeof(UChar), 0) safe_emalloc 648 ext/intl/msgformat/msgformat_helpers.cpp *args = (zval **)safe_emalloc(*count, sizeof(zval *), 0); safe_emalloc 407 ext/intl/transliterator/transliterator_methods.c uresult = safe_emalloc( ustr_len, sizeof( UChar ), 1 * sizeof( UChar ) ); safe_emalloc 422 ext/intl/transliterator/transliterator_methods.c uresult = safe_emalloc( uresult_len, sizeof( UChar ), 1 * sizeof( UChar ) ); safe_emalloc 251 ext/json/JSON_parser.c jp->the_zstack = (zval **)safe_emalloc(depth, sizeof(zval), 0); safe_emalloc 449 ext/json/json.c utf16 = (options & PHP_JSON_UNESCAPED_UNICODE) ? NULL : (unsigned short *) safe_emalloc(len, sizeof(unsigned short), 0); safe_emalloc 690 ext/json/json.c utf16 = (unsigned short *) safe_emalloc((str_len+1), sizeof(unsigned short), 1); safe_emalloc 708 ext/ldap/ldap.c ldap_attrs = safe_emalloc((num_attribs+1), sizeof(char *), 0); safe_emalloc 771 ext/ldap/ldap.c lds = safe_emalloc(nlinks, sizeof(ldap_linkdata), 0); safe_emalloc 772 ext/ldap/ldap.c rcs = safe_emalloc(nlinks, sizeof(*rcs), 0); safe_emalloc 1374 ext/ldap/ldap.c ldap_mods = safe_emalloc((num_attribs+1), sizeof(LDAPMod *), 0); safe_emalloc 1375 ext/ldap/ldap.c num_berval = safe_emalloc(num_attribs, sizeof(int), 0); safe_emalloc 1416 ext/ldap/ldap.c ldap_mods[i]->mod_bvalues = safe_emalloc((num_values + 1), sizeof(struct berval *), 0); safe_emalloc 1778 ext/ldap/ldap.c ldap_mods = safe_emalloc((num_mods+1), sizeof(LDAPMod *), 0); safe_emalloc 1783 ext/ldap/ldap.c ldap_mods[i] = safe_emalloc(1, sizeof(LDAPMod), 0); safe_emalloc 1821 ext/ldap/ldap.c ldap_mods[i]->mod_bvalues = safe_emalloc((num_modvals+1), sizeof(struct berval *), 0); safe_emalloc 1830 ext/ldap/ldap.c ldap_mods[i]->mod_bvalues[j] = safe_emalloc(1, sizeof(struct berval), 0); safe_emalloc 2212 ext/ldap/ldap.c ctrls = safe_emalloc((1 + ncontrols), sizeof(*ctrls), 0); safe_emalloc 2596 ext/ldap/ldap.c (*result) = (char *) safe_emalloc(1, len, 1); safe_emalloc 3567 ext/mbstring/mbstring.c stack = (zval ***)safe_emalloc(stack_max, sizeof(zval **), 0); safe_emalloc 3650 ext/mbstring/mbstring.c stack = (zval ***)safe_emalloc(stack_max, sizeof(zval **), 0); safe_emalloc 3777 ext/mbstring/mbstring.c convmap = (int *)safe_emalloc(i, sizeof(int), 0); safe_emalloc 4584 ext/mbstring/mbstring.c entry = (const mbfl_encoding **)safe_emalloc(nentries, sizeof(mbfl_encoding*), 0); safe_emalloc 4590 ext/mbstring/mbstring.c entry = (const mbfl_encoding **)safe_emalloc(nentries, sizeof(mbfl_encoding*), 0); safe_emalloc 1267 ext/mssql/php_mssql.c result->data = (zval **) safe_emalloc(sizeof(zval *), MSSQL_ROWS_BLOCK*(++result->blocks_initialized), 0); safe_emalloc 1274 ext/mssql/php_mssql.c result->data[i] = (zval *) safe_emalloc(sizeof(zval), result->num_fields, 0); safe_emalloc 1390 ext/mssql/php_mssql.c result->fields = (mssql_field *) safe_emalloc(sizeof(mssql_field), result->num_fields, 0); safe_emalloc 1932 ext/mssql/php_mssql.c result->fields = (mssql_field *) safe_emalloc(sizeof(mssql_field), result->num_fields, 0); safe_emalloc 2178 ext/mssql/php_mssql.c result->data = (zval **) safe_emalloc(sizeof(zval *), MSSQL_ROWS_BLOCK, 0); safe_emalloc 2184 ext/mssql/php_mssql.c result->fields = (mssql_field *) safe_emalloc(sizeof(mssql_field), num_fields, 0); safe_emalloc 1846 ext/mysql/php_mysql.c Z_STRVAL_P(return_value) = (char *) safe_emalloc(str_len, 2, 1); safe_emalloc 1876 ext/mysql/php_mysql.c new_str = safe_emalloc(str_len, 2, 1); safe_emalloc 250 ext/mysqli/mysqli_api.c stmt->param.vars = (zval **)safe_emalloc(num_vars, sizeof(zval), 0); safe_emalloc 368 ext/mysqli/mysqli_api.c args = (zval ***)safe_emalloc(argc, sizeof(zval **), 0); safe_emalloc 560 ext/mysqli/mysqli_api.c stmt->result.vars = (zval **)safe_emalloc((var_cnt), sizeof(zval), 0); safe_emalloc 618 ext/mysqli/mysqli_api.c args = (zval ***)safe_emalloc(argc, sizeof(zval **), 0); safe_emalloc 2021 ext/mysqli/mysqli_api.c newstr = safe_emalloc(2, escapestr_len, 1); safe_emalloc 55 ext/mysqli/mysqli_embedded.c arguments = safe_emalloc(sizeof(char *), argc + 1, 0); safe_emalloc 76 ext/mysqli/mysqli_embedded.c groups = safe_emalloc(sizeof(char *), zend_hash_num_elements(HASH_OF(grps)) + 1, 0); safe_emalloc 94 ext/mysqli/mysqli_embedded.c groups = safe_emalloc(sizeof(char *), 1, 0); safe_emalloc 1413 ext/oci8/oci8_interface.c columns = safe_emalloc(statement->ncolumns, sizeof(php_oci_out_column *), 0); safe_emalloc 1447 ext/oci8/oci8_interface.c columns = safe_emalloc(statement->ncolumns, sizeof(php_oci_out_column *), 0); safe_emalloc 1448 ext/oci8/oci8_interface.c outarrs = safe_emalloc(statement->ncolumns, sizeof(zval*), 0); safe_emalloc 1808 ext/oci8/oci8_interface.c OCI_G(edition) = (char *)safe_emalloc(edition_len+1, sizeof(char), 0); safe_emalloc 767 ext/oci8/oci8_statement.c buf = outcol->data = (text *) safe_emalloc(1, outcol->storage_size4, 0); safe_emalloc 1650 ext/oci8/oci8_statement.c bind->array.elements = (text *)safe_emalloc(max_table_length * (maxlength + 1), sizeof(text), 0); safe_emalloc 1655 ext/oci8/oci8_statement.c bind->array.element_lengths = safe_emalloc(max_table_length, sizeof(ub2), 0); safe_emalloc 1657 ext/oci8/oci8_statement.c bind->array.indicators = safe_emalloc(max_table_length, sizeof(sb2), 0); safe_emalloc 1709 ext/oci8/oci8_statement.c bind->array.elements = (ub4 *)safe_emalloc(max_table_length, sizeof(ub4), 0); safe_emalloc 1713 ext/oci8/oci8_statement.c bind->array.element_lengths = safe_emalloc(max_table_length, sizeof(ub2), 0); safe_emalloc 1748 ext/oci8/oci8_statement.c bind->array.elements = (double *)safe_emalloc(max_table_length, sizeof(double), 0); safe_emalloc 1752 ext/oci8/oci8_statement.c bind->array.element_lengths = safe_emalloc(max_table_length, sizeof(ub2), 0); safe_emalloc 1788 ext/oci8/oci8_statement.c bind->array.elements = (OCIDate *)safe_emalloc(max_table_length, sizeof(OCIDate), 0); safe_emalloc 1792 ext/oci8/oci8_statement.c bind->array.element_lengths = safe_emalloc(max_table_length, sizeof(ub2), 0); safe_emalloc 397 ext/odbc/birdstep.c res->values = (VResVal *)safe_emalloc(sizeof(VResVal), cols, 0); safe_emalloc 954 ext/odbc/php_odbc.c result->values = (odbc_result_value *) safe_emalloc(sizeof(odbc_result_value), result->numcols, 0); safe_emalloc 1296 ext/odbc/php_odbc.c params = (params_t *)safe_emalloc(sizeof(params_t), result->numparams, 0); safe_emalloc 4867 ext/openssl/openssl.c pkeys = safe_emalloc(nkeys, sizeof(*pkeys), 0); safe_emalloc 4868 ext/openssl/openssl.c eksl = safe_emalloc(nkeys, sizeof(*eksl), 0); safe_emalloc 4869 ext/openssl/openssl.c eks = safe_emalloc(nkeys, sizeof(*eks), 0); safe_emalloc 4871 ext/openssl/openssl.c key_resources = safe_emalloc(nkeys, sizeof(long), 0); safe_emalloc 767 ext/pcntl/pcntl.c argv = safe_emalloc((argc + 2), sizeof(char *), 0); safe_emalloc 788 ext/pcntl/pcntl.c envp = safe_emalloc((envc + 1), sizeof(char *), 0); safe_emalloc 671 ext/pcre/php_pcre.c offsets = (int *)safe_emalloc(size_offsets, sizeof(int), 0); safe_emalloc 675 ext/pcre/php_pcre.c match_sets = (zval **)safe_emalloc(num_subpats, sizeof(zval *), 0); safe_emalloc 1141 ext/pcre/php_pcre.c offsets = (int *)safe_emalloc(size_offsets, sizeof(int), 0); safe_emalloc 1144 ext/pcre/php_pcre.c result = safe_emalloc(alloc_len, sizeof(char), 0); safe_emalloc 1274 ext/pcre/php_pcre.c new_buf = safe_emalloc(alloc_len, sizeof(char), 0); safe_emalloc 1601 ext/pcre/php_pcre.c offsets = (int *)safe_emalloc(size_offsets, sizeof(int), 0); safe_emalloc 1759 ext/pcre/php_pcre.c out_str = safe_emalloc(4, in_str_len, 1); safe_emalloc 1871 ext/pcre/php_pcre.c offsets = (int *)safe_emalloc(size_offsets, sizeof(int), 0); safe_emalloc 798 ext/pdo/pdo_stmt.c fci->params = safe_emalloc(sizeof(zval**), num_args, 0); safe_emalloc 812 ext/pdo/pdo_stmt.c stmt->fetch.func.values = safe_emalloc(sizeof(zval*), stmt->column_count, 0); safe_emalloc 1882 ext/pdo/pdo_stmt.c args = safe_emalloc(ZEND_NUM_ARGS(), sizeof(zval*), 0); safe_emalloc 150 ext/pdo_dblib/dblib_driver.c *quoted = q = safe_emalloc(2, unquotedlen, 3); safe_emalloc 308 ext/pdo_mysql/mysql_driver.c *quoted = safe_emalloc(2, unquotedlen, 3); safe_emalloc 347 ext/pdo_pgsql/pgsql_driver.c *quoted = safe_emalloc(2, unquotedlen, 3); safe_emalloc 235 ext/pdo_sqlite/sqlite_driver.c *quoted = safe_emalloc(2, unquotedlen, 3); safe_emalloc 339 ext/pdo_sqlite/sqlite_driver.c zargs = (zval ***)safe_emalloc(fake_argc, sizeof(zval **), 0); safe_emalloc 809 ext/pgsql/pgsql.c rp = result = (char *)safe_emalloc(len, 2, 5); /* leading " E" needs extra 2 bytes + quote_chars on both end for 2 bytes + NULL */ safe_emalloc 815 ext/pgsql/pgsql.c char *tmp = (char *)safe_emalloc(len, 2, 1); safe_emalloc 1968 ext/pgsql/pgsql.c params = (char **)safe_emalloc(sizeof(char *), num_params, 0); safe_emalloc 2175 ext/pgsql/pgsql.c params = (char **)safe_emalloc(sizeof(char *), num_params, 0); safe_emalloc 3485 ext/pgsql/pgsql.c buf = (char *) safe_emalloc(sizeof(char), (buf_len+1), 0); safe_emalloc 4328 ext/pgsql/pgsql.c to = (char *) safe_emalloc(from_len, 2, 1); safe_emalloc 4929 ext/pgsql/pgsql.c params = (char **)safe_emalloc(sizeof(char *), num_params, 0); safe_emalloc 5116 ext/pgsql/pgsql.c params = (char **)safe_emalloc(sizeof(char *), num_params, 0); safe_emalloc 5512 ext/pgsql/pgsql.c escaped = (char *)safe_emalloc(strlen(tmp_name2), 2, 1); safe_emalloc 5520 ext/pgsql/pgsql.c escaped = (char *)safe_emalloc(strlen(tmp_name), 2, 1); safe_emalloc 6041 ext/pgsql/pgsql.c tmp = (char *)safe_emalloc(Z_STRLEN_PP(val), 2, 1); safe_emalloc 6607 ext/pgsql/pgsql.c tmp = (char *)safe_emalloc(Z_STRLEN_PP(val), 2, 1); safe_emalloc 6782 ext/pgsql/pgsql.c tmp = (char *)safe_emalloc(Z_STRLEN_PP(val), 2, 1); safe_emalloc 226 ext/phar/dirstream.c entry = (char *) safe_emalloc(found - str_key, 1, 1); safe_emalloc 231 ext/phar/dirstream.c entry = (char *) safe_emalloc(keylen, 1, 1); safe_emalloc 260 ext/phar/dirstream.c entry = (char *) safe_emalloc(found - save + dirlen, 1, 1); safe_emalloc 267 ext/phar/dirstream.c entry = (char *) safe_emalloc(keylen - dirlen, 1, 1); safe_emalloc 468 ext/phar/func_interceptors.c gids=(gid_t *)safe_emalloc(groups, sizeof(gid_t), 0); safe_emalloc 3971 ext/phar/phar_object.c buf = safe_emalloc(len, 1, 1); safe_emalloc 167 ext/phar/tar.c metadata = (char *) safe_emalloc(1, entry->uncompressed_filesize, 1); safe_emalloc 1984 ext/reflection/php_reflection.c params = safe_emalloc(sizeof(zval **), argc, 0); safe_emalloc 2990 ext/reflection/php_reflection.c params = safe_emalloc(sizeof(zval **), argc, 0); safe_emalloc 4365 ext/reflection/php_reflection.c params = safe_emalloc(sizeof(zval **), argc, 0); safe_emalloc 1841 ext/session/session.c shutdown_function_entry.arguments = (zval **) safe_emalloc(sizeof(zval *), 1, 0); safe_emalloc 2174 ext/session/session.c shutdown_function_entry.arguments = (zval **) safe_emalloc(sizeof(zval *), 1, 0); safe_emalloc 1006 ext/soap/php_encoding.c str = (unsigned char *) safe_emalloc(Z_STRLEN_P(data) * 2, sizeof(char), 1); safe_emalloc 1148 ext/soap/php_encoding.c str = (char *) safe_emalloc(EG(precision), 1, MAX_LENGTH_OF_DOUBLE + 1); safe_emalloc 2144 ext/soap/php_encoding.c pos = safe_emalloc(sizeof(int), dimension, 0); safe_emalloc 2201 ext/soap/php_encoding.c pos = safe_emalloc(sizeof(int), dimension, 0); safe_emalloc 2409 ext/soap/php_encoding.c dims = safe_emalloc(sizeof(int), dimension, 0); safe_emalloc 2507 ext/soap/php_encoding.c dims = safe_emalloc(sizeof(int), dimension, 0); safe_emalloc 2513 ext/soap/php_encoding.c dims = safe_emalloc(sizeof(int), dimension, 0); safe_emalloc 2706 ext/soap/php_encoding.c pos = safe_emalloc(sizeof(int), dimension, 0); safe_emalloc 1476 ext/soap/php_http.c http_buf = safe_emalloc(1, header_length, 1); safe_emalloc 1370 ext/soap/php_sdl.c elements = safe_emalloc((i+1), sizeof(sdlTypePtr), 0); safe_emalloc 1599 ext/soap/php_sdl.c types = safe_emalloc((i+1), sizeof(sdlTypePtr), 0); safe_emalloc 1612 ext/soap/php_sdl.c encoders = safe_emalloc((i+1), sizeof(encodePtr), 0); safe_emalloc 1670 ext/soap/php_sdl.c bindings = safe_emalloc(num_bindings, sizeof(sdlBindingPtr), 0); safe_emalloc 1696 ext/soap/php_sdl.c functions = safe_emalloc(num_func, sizeof(sdlFunctionPtr), 0); safe_emalloc 1299 ext/soap/soap.c service->soap_class.argv = safe_emalloc(sizeof(zval), service->soap_class.argc, 0); safe_emalloc 2937 ext/soap/soap.c real_args = safe_emalloc(sizeof(zval *), arg_count, 0); safe_emalloc 3352 ext/soap/soap.c tmp_parameters = safe_emalloc(num_of_params, sizeof(zval *), 0); safe_emalloc 3394 ext/soap/soap.c tmp_parameters = safe_emalloc(num_of_params, sizeof(zval *), 0); safe_emalloc 132 ext/sockets/conversions.c void *ret = safe_emalloc(nmemb, alloc_size, offset); safe_emalloc 1231 ext/sockets/conversions.c char *buf = safe_emalloc(1, len, 1); safe_emalloc 546 ext/spl/php_spl.c lc_name = safe_emalloc(func_name_len, 1, sizeof(long) + 1); safe_emalloc 657 ext/spl/php_spl.c lc_name = safe_emalloc(func_name_len, 1, sizeof(long) + 1); safe_emalloc 2070 ext/spl/spl_directory.c buf = safe_emalloc((intern->u.file.max_line_len + 1), sizeof(char), 0); safe_emalloc 2107 ext/spl/spl_directory.c zval ***params = (zval***)safe_emalloc(num_args, sizeof(zval**), 0); safe_emalloc 231 ext/spl/spl_heap.c heap->elements = safe_emalloc(sizeof(spl_ptr_heap_element), PTR_HEAP_BLOCK_SIZE, 0); safe_emalloc 328 ext/spl/spl_heap.c heap->elements = safe_emalloc(sizeof(spl_ptr_heap_element),from->max_size,0); safe_emalloc 1393 ext/spl/spl_iterators.c func_params = safe_emalloc(sizeof(zval **), arg_count, 0); safe_emalloc 725 ext/sqlite3/sqlite3.c zargs = (zval ***)safe_emalloc(fake_argc, sizeof(zval **), 0); safe_emalloc 895 ext/sqlite3/sqlite3.c zargs = (zval***)safe_emalloc(2, sizeof(zval**), 0); safe_emalloc 1755 ext/standard/array.c elems = (Bucket **)safe_emalloc(n_elems, sizeof(Bucket *), 0); safe_emalloc 1968 ext/standard/array.c repl = (zval ***)safe_emalloc(repl_num, sizeof(zval **), 0); safe_emalloc 2597 ext/standard/array.c pads = (zval ***)safe_emalloc(num_pads, sizeof(zval **), 0); safe_emalloc 3008 ext/standard/array.c lists = (Bucket ***)safe_emalloc(arr_argc, sizeof(Bucket **), 0); safe_emalloc 3009 ext/standard/array.c ptrs = (Bucket ***)safe_emalloc(arr_argc, sizeof(Bucket **), 0); safe_emalloc 3425 ext/standard/array.c lists = (Bucket ***)safe_emalloc(arr_argc, sizeof(Bucket **), 0); safe_emalloc 3426 ext/standard/array.c ptrs = (Bucket ***)safe_emalloc(arr_argc, sizeof(Bucket **), 0); safe_emalloc 3808 ext/standard/array.c indirect = (Bucket ***)safe_emalloc(array_size, sizeof(Bucket **), 0); safe_emalloc 3810 ext/standard/array.c indirect[i] = (Bucket **)safe_emalloc((num_arrays + 1), sizeof(Bucket *), 0); safe_emalloc 4185 ext/standard/array.c args = (zval **)safe_emalloc(n_arrays, sizeof(zval *), 0); safe_emalloc 4186 ext/standard/array.c array_len = (int *)safe_emalloc(n_arrays, sizeof(int), 0); safe_emalloc 4187 ext/standard/array.c array_pos = (HashPosition *)safe_emalloc(n_arrays, sizeof(HashPosition), 0); safe_emalloc 4219 ext/standard/array.c params = (zval ***)safe_emalloc(n_arrays, sizeof(zval **), 0); safe_emalloc 203 ext/standard/assert.c zval **args = safe_emalloc(description_len == 0 ? 3 : 4, sizeof(zval *), 0); safe_emalloc 69 ext/standard/base64.c result = (unsigned char *) safe_emalloc((length + 2) / 3, 4 * sizeof(char), 1); safe_emalloc 150 ext/standard/base64.c result = (unsigned char *)safe_emalloc(length, 1, 1); safe_emalloc 4193 ext/standard/basic_functions.c paras = safe_emalloc(sizeof(opt_struct), count, 0); safe_emalloc 4248 ext/standard/basic_functions.c argv = (char **) safe_emalloc(sizeof(char *), (argc + 1), 0); safe_emalloc 4854 ext/standard/basic_functions.c method_args = (zval ***) safe_emalloc(sizeof(zval **), num_elems, 0); safe_emalloc 5103 ext/standard/basic_functions.c shutdown_function_entry.arguments = (zval **) safe_emalloc(sizeof(zval *), shutdown_function_entry.arg_count, 0); safe_emalloc 5704 ext/standard/basic_functions.c tick_fe.arguments = (zval **) safe_emalloc(sizeof(zval *), tick_fe.arg_count, 0); safe_emalloc 254 ext/standard/exec.c cmd = safe_emalloc(2, l, 1); safe_emalloc 345 ext/standard/exec.c cmd = safe_emalloc(4, l, 3); /* worst case */ safe_emalloc 1113 ext/standard/file.c buf = safe_emalloc(sizeof(char), (len + 1), 0); safe_emalloc 933 ext/standard/filestat.c gids=(gid_t *)safe_emalloc(groups, sizeof(gid_t), 0); safe_emalloc 421 ext/standard/formatted_print.c newargs = (zval ***)safe_emalloc(argc, sizeof(zval *), 0); safe_emalloc 206 ext/standard/iptc.c poi = spoolbuf = safe_emalloc(1, iptcdata_len + sizeof(psheader) + sb.st_size + 1024, 1); safe_emalloc 45 ext/standard/levenshtein.c p1 = safe_emalloc((l2 + 1), sizeof(int), 0); safe_emalloc 46 ext/standard/levenshtein.c p2 = safe_emalloc((l2 + 1), sizeof(int), 0); safe_emalloc 189 ext/standard/metaphone.c *phoned_word = safe_emalloc(sizeof(char), word_len, 1); safe_emalloc 192 ext/standard/metaphone.c *phoned_word = safe_emalloc(sizeof(char), max_phonemes, 1); safe_emalloc 139 ext/standard/pack.c formatcodes = safe_emalloc(formatlen, sizeof(*formatcodes), 0); safe_emalloc 140 ext/standard/pack.c formatargs = safe_emalloc(formatlen, sizeof(*formatargs), 0); safe_emalloc 125 ext/standard/password.c buffer = (char *) safe_emalloc(raw_length, 1, 1); safe_emalloc 160 ext/standard/password.c result = safe_emalloc(length, 1, 1); safe_emalloc 399 ext/standard/password.c salt = safe_emalloc(required_salt_len, 1, 1); safe_emalloc 409 ext/standard/password.c salt = safe_emalloc(required_salt_len, 1, 1); safe_emalloc 415 ext/standard/password.c salt = safe_emalloc(required_salt_len, 1, 1); safe_emalloc 426 ext/standard/password.c hash = safe_emalloc(salt_len + hash_format_len, 1, 1); safe_emalloc 154 ext/standard/quot_print.c ret = safe_emalloc(3, length + (((3 * length)/(PHP_QPRINT_MAXL-9)) + 1), 1); safe_emalloc 170 ext/standard/scanf.c cset->chars = (char *) safe_emalloc(sizeof(char), (end - format - 1), 0); safe_emalloc 172 ext/standard/scanf.c cset->ranges = (struct Range *) safe_emalloc(sizeof(struct Range), nranges, 0); safe_emalloc 327 ext/standard/scanf.c nassign = (int*)safe_emalloc(sizeof(int), numVars, 0); safe_emalloc 502 ext/standard/scanf.c nassign = (void *)safe_emalloc(nspace, sizeof(int), 0); safe_emalloc 383 ext/standard/streamsfuncs.c read_buf = safe_emalloc(1, to_read, 1); safe_emalloc 135 ext/standard/string.c result = (unsigned char *) safe_emalloc(oldlen, 2 * sizeof(char), 1); safe_emalloc 155 ext/standard/string.c register unsigned char *str = (unsigned char *)safe_emalloc(target_length, sizeof(char), 1); safe_emalloc 936 ext/standard/string.c newtext = safe_emalloc(chk, breakcharlen, textlen + 1); safe_emalloc 941 ext/standard/string.c newtext = safe_emalloc(textlen, (breakcharlen + 1), 1); safe_emalloc 2167 ext/standard/string.c dest = safe_emalloc((int)out_len, sizeof(char), 0); safe_emalloc 2622 ext/standard/string.c str = safe_emalloc(2, old_len, 1); safe_emalloc 2917 ext/standard/string.c patterns = safe_emalloc(num_pats, sizeof(*patterns), 0); safe_emalloc 2990 ext/standard/string.c res->shift = safe_emalloc(SHIFT_TAB_SIZE, sizeof(*res->shift->entries), sizeof(*res->shift)); safe_emalloc 2994 ext/standard/string.c res->hash = safe_emalloc(HASH_TAB_SIZE, sizeof(*res->hash->entries), sizeof(*res->hash)); safe_emalloc 2997 ext/standard/string.c res->patterns = safe_emalloc(patnum, sizeof(*res->patterns), 0); safe_emalloc 3007 ext/standard/string.c res->prefix = safe_emalloc(patnum, sizeof(*res->prefix), 0); safe_emalloc 3494 ext/standard/string.c char *new_str = safe_emalloc(4, (length?length:(length=strlen(str))), 1); safe_emalloc 3559 ext/standard/string.c new_str = (char *) safe_emalloc(2, (length ? length : (length = strlen(str))), 1); safe_emalloc 3627 ext/standard/string.c Z_STRVAL_P(result) = target = safe_emalloc(char_count, to_len, len + 1); safe_emalloc 3757 ext/standard/string.c new_str = safe_emalloc(count, str_len - needle_len, length + 1); safe_emalloc 4288 ext/standard/string.c tmp = target = safe_emalloc(repl_cnt, repl_len, str_len + 1); safe_emalloc 4912 ext/standard/string.c result = (char *)safe_emalloc(input_len, mult, 1); safe_emalloc 495 ext/standard/url.c start = to = (unsigned char *) safe_emalloc(3, len, 1); safe_emalloc 605 ext/standard/url.c str = (unsigned char *) safe_emalloc(3, len, 1); safe_emalloc 74 ext/standard/uuencode.c p = *dest = safe_emalloc((size_t) ceil(src_len * 1.38), 1, 46); safe_emalloc 132 ext/standard/uuencode.c p = *dest = safe_emalloc((size_t) ceil(src_len * 0.75), 1, 1); safe_emalloc 749 ext/standard/var.c s = (char *) safe_emalloc(PG(serialize_precision), 1, MAX_LENGTH_OF_DOUBLE + 1); safe_emalloc 187 ext/standard/var_unserializer.c char *str = safe_emalloc(*len, 1, 1); safe_emalloc 37 ext/standard/versioning.c char *buf = safe_emalloc(len, 2, 1), *q, lp, lq; safe_emalloc 1212 ext/sybase_ct/php_sybase_ct.c result->data[i] = (zval *) safe_emalloc(sizeof(zval), result->num_fields, 0); safe_emalloc 1313 ext/sybase_ct/php_sybase_ct.c result->data = (zval **) safe_emalloc(sizeof(zval *), SYBASE_ROWS_BLOCK, 0); safe_emalloc 1321 ext/sybase_ct/php_sybase_ct.c result->tmp_buffer = (char **) safe_emalloc(sizeof(char *), num_fields, 0); safe_emalloc 1322 ext/sybase_ct/php_sybase_ct.c result->lengths = (CS_INT *) safe_emalloc(sizeof(CS_INT), num_fields, 0); safe_emalloc 1323 ext/sybase_ct/php_sybase_ct.c result->indicators = (CS_SMALLINT *) safe_emalloc(sizeof(CS_INT), num_fields, 0); safe_emalloc 1324 ext/sybase_ct/php_sybase_ct.c result->datafmt = (CS_DATAFMT *) safe_emalloc(sizeof(CS_DATAFMT), num_fields, 0); safe_emalloc 1325 ext/sybase_ct/php_sybase_ct.c result->numerics = (unsigned char *) safe_emalloc(sizeof(unsigned char), num_fields, 0); safe_emalloc 1326 ext/sybase_ct/php_sybase_ct.c result->types = (CS_INT *) safe_emalloc(sizeof(CS_INT), num_fields, 0); safe_emalloc 1390 ext/sybase_ct/php_sybase_ct.c result->fields = (sybase_field *) safe_emalloc(sizeof(sybase_field), num_fields, 0); safe_emalloc 343 ext/sysvmsg/sysvmsg.c messagebuffer = (struct php_msgbuf *) safe_emalloc(maxsize, 1, sizeof(struct php_msgbuf)); safe_emalloc 418 ext/sysvmsg/sysvmsg.c messagebuffer = safe_emalloc(msg_var.len, 1, sizeof(struct php_msgbuf)); safe_emalloc 444 ext/sysvmsg/sysvmsg.c messagebuffer = safe_emalloc(message_len, 1, sizeof(struct php_msgbuf)); safe_emalloc 176 ext/wddx/wddx.c stack->elements = (void **) safe_emalloc(sizeof(void **), STACK_BLOCK_SIZE, 0); safe_emalloc 173 ext/xml/compat.c attrs = safe_emalloc((nb_attributes * 2) + 1, sizeof(int *), 0); safe_emalloc 515 ext/xml/xml.c args = safe_emalloc(sizeof(zval **), argc, 0); safe_emalloc 636 ext/xml/xml.c newbuf = safe_emalloc(len, 4, 1); safe_emalloc 1492 ext/xml/xml.c parser->ltags = safe_emalloc(XML_MAXLEVEL, sizeof(char *), 0); safe_emalloc 122 ext/xsl/xsltprocessor.c value = (xmlChar*) safe_emalloc (str_len, sizeof(xmlChar), 0); safe_emalloc 125 ext/xsl/xsltprocessor.c value = (xmlChar*) safe_emalloc (str_len, sizeof(xmlChar), 0); safe_emalloc 145 ext/xsl/xsltprocessor.c params = (char **)safe_emalloc((2 * zend_hash_num_elements(parht) + 1), sizeof(char *), 0); safe_emalloc 233 ext/xsl/xsltprocessor.c fci.params = safe_emalloc(fci.param_count, sizeof(zval**), 0); safe_emalloc 234 ext/xsl/xsltprocessor.c args = safe_emalloc(fci.param_count, sizeof(zval *), 0); safe_emalloc 1406 ext/zip/php_zip.c buffer = safe_emalloc(len, 1, 1); safe_emalloc 2771 ext/zip/php_zip.c buffer = safe_emalloc(len, 1, 2); safe_emalloc 55 ext/zlib/zlib.c return (voidpf)safe_emalloc(items, size, 0); safe_emalloc 235 main/network.c *sal = safe_emalloc((n + 1), sizeof(*sal), 0); safe_emalloc 267 main/network.c *sal = safe_emalloc(2, sizeof(*sal), 0);