1216     u8 *pEnd = &pIter[8];  in btreeParseCellPtr()  local
1220     }while( (*pIter)>=0x80 && pIter<pEnd );  in btreeParseCellPtr()
1289     u8 *pEnd = &pIter[8];  in btreeParseCellPtrIndex()  local
1293     }while( *(pIter)>=0x80 && pIter<pEnd );  in btreeParseCellPtrIndex()
1335   u8 *pEnd;                                /* End mark for a varint */  in cellSizePtr()  local
1349     pEnd = &pIter[8];  in cellSizePtr()
1353     }while( *(pIter)>=0x80 && pIter<pEnd );  in cellSizePtr()
1376   u8 *pEnd;              /* End mark for a varint */  in cellSizePtrNoPayload()  local
1390   pEnd = pIter + 9;  in cellSizePtrNoPayload()
1391   while( (*pIter++)&0x80 && pIter<pEnd );  in cellSizePtrNoPayload()
1397   u8 *pEnd;            /* End mark for a varint */  in cellSizePtrTableLeaf()  local
1411     pEnd = &pIter[8];  in cellSizePtrTableLeaf()
1415     }while( *(pIter)>=0x80 && pIter<pEnd );  in cellSizePtrTableLeaf()
1536         u8 *pEnd = &data[cellOffset + nCell*2];  in defragmentPage()  local
1557         for(pAddr=&data[cellOffset]; pAddr<pEnd; pAddr+=2){  in defragmentPage()
7288   u8 * const pEnd = &aData[usableSize];  in rebuildPage()  local
7306   pData = pEnd;  in rebuildPage()
7311     if( SQLITE_WITHIN(pCell,aData+j,pEnd) ){  in rebuildPage()
7312       if( ((uptr)(pCell+sz))>(uptr)pEnd ) return SQLITE_CORRUPT_BKPT;  in rebuildPage()
7383   u8 *pEnd;                       /* Maximum extent of cell data */  in pageInsertArray()  local
7387   pEnd = pCArray->apEnd[k];  in pageInsertArray()
7404     if( (uptr)(pCArray->apCell[i]+sz)>(uptr)pEnd  in pageInsertArray()
7405      && (uptr)(pCArray->apCell[i])<(uptr)pEnd  in pageInsertArray()
7418       pEnd = pCArray->apEnd[k];  in pageInsertArray()
7441   u8 * const pEnd = &aData[pPg->pBt->usableSize];  in pageFreeArray()  local
7451     if( SQLITE_WITHIN(pCell, pStart, pEnd) ){  in pageFreeArray()
7464         if( pFree+sz>pEnd ){  in pageFreeArray()