A loop's exit condition can never be satisfied under attacker-chosen input, causing denial of service.
Bound every loop with an iteration or time budget when input influences the condition.