libtiff/tif_getimage.c:2205: error: Buffer Overrun L3
  Offset: [0, 1] Size: [0, +oo] by call to `makebwmap`.

libtiff/tif_getimage.c:2183:9: Assignment
2181.     /* treat 16 bit the same as eight bit */
2182.     if( img->bitspersample == 16 )
2183.         range = (int32) 255;
              ^
2184. 
2185.     img->Map = (TIFFRGBValue*) _TIFFmalloc((range+1) * sizeof (TIFFRGBValue));

libtiff/tif_getimage.c:2185:32: Call
2183.         range = (int32) 255;
2184. 
2185.     img->Map = (TIFFRGBValue*) _TIFFmalloc((range+1) * sizeof (TIFFRGBValue));
                                     ^
2186.     if (img->Map == NULL) {
2187. 		TIFFErrorExt(img->tif->tif_clientdata, TIFFFileName(img->tif),

libtiff/tif_unix.c:253:1: Parameter `s`
  251. #endif
  252. 
  253. void*
       ^
  254. _TIFFmalloc(tmsize_t s)
  255. {

libtiff/tif_unix.c:256:10: Array declaration
  254. _TIFFmalloc(tmsize_t s)
  255. {
  256. 	return (malloc((size_t) s));
                ^
  257. }
  258. 

libtiff/tif_unix.c:256:2: Assignment
  254. _TIFFmalloc(tmsize_t s)
  255. {
  256. 	return (malloc((size_t) s));
        ^
  257. }
  258. 

libtiff/tif_getimage.c:2185:5: Assignment
2183.         range = (int32) 255;
2184. 
2185.     img->Map = (TIFFRGBValue*) _TIFFmalloc((range+1) * sizeof (TIFFRGBValue));
          ^
2186.     if (img->Map == NULL) {
2187. 		TIFFErrorExt(img->tif->tif_clientdata, TIFFFileName(img->tif),

libtiff/tif_getimage.c:2205:7: Call
2203. 	 * unpacking tables for samples <= 8 bits.
2204. 	 */
2205. 	if (!makebwmap(img))
            ^
2206. 	    return (0);
2207. 	/* no longer need Map, free it */

libtiff/tif_getimage.c:2134:10: <Offset trace>
2132.     }
2133.     p = (uint32*)(img->BWmap + 256);
2134.     for (i = 0; i < 256; i++) {
               ^
2135. 	TIFFRGBValue c;
2136. 	img->BWmap[i] = p;

libtiff/tif_getimage.c:2134:10: Assignment
  2132.     }
  2133.     p = (uint32*)(img->BWmap + 256);
  2134.     for (i = 0; i < 256; i++) {
                 ^
  2135. 	TIFFRGBValue c;
  2136. 	img->BWmap[i] = p;

libtiff/tif_getimage.c:2115:1: <Length trace>
2113.  * number.
2114.  */
2115. static int
      ^
2116. makebwmap(TIFFRGBAImage* img)
2117. {

libtiff/tif_getimage.c:2115:1: Parameter `*img->Map`
  2113.  * number.
  2114.  */
  2115. static int
        ^
  2116. makebwmap(TIFFRGBAImage* img)
  2117. {

libtiff/tif_getimage.c:2118:5: Assignment
  2116. makebwmap(TIFFRGBAImage* img)
  2117. {
  2118.     TIFFRGBValue* Map = img->Map;
            ^
  2119.     int bitspersample = img->bitspersample;
  2120.     int nsamples = 8 / bitspersample;

libtiff/tif_getimage.c:2140:6: Array access: Offset: [0, 1] Size: [0, +oo] by call to `makebwmap` 
  2138. #define	GREY(x)	c = Map[x]; *p++ = PACK(c,c,c);
  2139. 	case 1:
  2140. 	    GREY(i>>7);
             ^
  2141. 	    GREY((i>>6)&1);
  2142. 	    GREY((i>>5)&1);
