								setTimeout(function wait() {
									if (processing > 0) {
										setTimeout(wait, 10);
									} else {
										if (dirctorys.length > 0) {
											doScan([dirctorys.shift()], true);
											setTimeout(wait, 10);
										} else {
											notifyto && clearTimeout(notifyto);
											fm.notify({type : 'readdir', cnt : -1});
											dfrd.resolve([files, paths, renames, hashes]);
										}
									}
								}, 10);
The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.