1801   u16 iFreeBlk;                         /* Address of the next freeblock */  in freeSpace()  local
1824     iFreeBlk = 0;  /* Shortcut for the case when the freelist is empty */  in freeSpace()
1826     while( (iFreeBlk = get2byte(&data[iPtr]))<iStart ){  in freeSpace()
1827       if( iFreeBlk<=iPtr ){  in freeSpace()
1828         if( iFreeBlk==0 ) break; /* TH3: corrupt082.100 */  in freeSpace()
1831       iPtr = iFreeBlk;  in freeSpace()
1833     if( iFreeBlk>pPage->pBt->usableSize-4 ){ /* TH3: corrupt081.100 */  in freeSpace()
1836     assert( iFreeBlk>iPtr || iFreeBlk==0 || CORRUPT_DB );  in freeSpace()
1844     if( iFreeBlk && iEnd+3>=iFreeBlk ){  in freeSpace()
1845       nFrag = iFreeBlk - iEnd;  in freeSpace()
1846       if( iEnd>iFreeBlk ) return SQLITE_CORRUPT_PAGE(pPage);  in freeSpace()
1847       iEnd = iFreeBlk + get2byte(&data[iFreeBlk+2]);  in freeSpace()
1852       iFreeBlk = get2byte(&data[iFreeBlk]);  in freeSpace()
1879     put2byte(&data[hdr+1], iFreeBlk);  in freeSpace()
1890   put2byte(&data[iStart], iFreeBlk);  in freeSpace()