472   UI16 tmpbits;  in parseSWF_SHAPERECORD()
1715   parserrec->OffsetTable = (UI16 *)malloc(MAX(1, (firstOffset/2)) * sizeof( UI16 ) );  in parseSWF_DEFINEFONT()
1769       parserrec->OffsetTable.UI16 =  in parseSWF_DEFINEFONT2()
1770 	(UI16 *) malloc (parserrec->NumGlyphs * sizeof (UI16));  in parseSWF_DEFINEFONT2()
1773 	  parserrec->OffsetTable.UI16[i] = readUInt16 (f);  in parseSWF_DEFINEFONT2()
1783 	parserrec->CodeTableOffset.UI16 = readUInt16 (f);  in parseSWF_DEFINEFONT2()
1801            len = parserrec->OffsetTable.UI16[i + 1] - parserrec->OffsetTable.UI16[i];  in parseSWF_DEFINEFONT2()
1803            len = parserrec->CodeTableOffset.UI16 - parserrec->OffsetTable.UI16[i];  in parseSWF_DEFINEFONT2()
1905       parserrec->OffsetTable.UI16 =  in parseSWF_DEFINEFONT3()
1906 	(UI16 *) malloc (parserrec->NumGlyphs * sizeof (UI16));  in parseSWF_DEFINEFONT3()
1909 	  parserrec->OffsetTable.UI16[i] = readUInt16 (f);  in parseSWF_DEFINEFONT3()
1919 	parserrec->CodeTableOffset.UI16 = readUInt16 (f);  in parseSWF_DEFINEFONT3()
1937            len = parserrec->OffsetTable.UI16[i + 1] - parserrec->OffsetTable.UI16[i];  in parseSWF_DEFINEFONT3()
1939            len = parserrec->CodeTableOffset.UI16 - parserrec->OffsetTable.UI16[i];  in parseSWF_DEFINEFONT3()
1945 	(UI16 *) malloc (parserrec->NumGlyphs * sizeof (UI16));  in parseSWF_DEFINEFONT3()
2026   if (parserrec->nGlyph < 0 || parserrec->nGlyph > (INT_MAX / sizeof(UI16))) {  in parseSWF_DEFINEFONTINFO()
2029   parserrec->CodeTable = (UI16 *)malloc(parserrec->nGlyph*sizeof(UI16));  in parseSWF_DEFINEFONTINFO()
2058   if (parserrec->nGlyph < 0 || parserrec->nGlyph > (INT_MAX / sizeof(UI16))) {  in parseSWF_DEFINEFONTINFO2()
2062   parserrec->CodeTable = (UI16 *)malloc(parserrec->nGlyph*sizeof(UI16));  in parseSWF_DEFINEFONTINFO2()
2309 	  parserrec->tagTypes = (UI16 *)  in parseSWF_DEFINESPRITE()
2310 	  	realloc(parserrec->tagTypes, ((numblocks+1)*sizeof(UI16)));  in parseSWF_DEFINESPRITE()
2481   parserrec->Tags = (UI16 *)malloc(parserrec->Count*sizeof(UI16));  in parseSWF_EXPORTASSETS()
2555   parserrec->Tags = (UI16 *)malloc(parserrec->Count*sizeof(UI16));  in parseSWF_IMPORTASSETS()
2575   parserrec->Tags = (UI16 *)malloc(parserrec->Count*sizeof(UI16));  in parseSWF_IMPORTASSETS2()