tools/tiffcrop.c:1015: error: Integer Overflow L2
  ([0, `out->tif_dir.td_imagelength`] - 1):unsigned32 by call to `TIFFWriteTile`.

tools/tiffcrop.c:981:1: Parameter `out->tif_dir.td_imagelength`
979. }
980. 
981. static int writeBufferToContigTiles (TIFF* out, uint8* buf, uint32 imagelength,
     ^
982.                                      uint32 imagewidth, tsample_t spp)
983. {

tools/tiffcrop.c:1015:8: Call
1013. 				cpStripToTile(obuf, bufp + colb, nrow, tilew,
1014. 				    0, iskew);
1015. 			if (TIFFWriteTile(out, obuf, col, row, 0, 0) < 0) {
             ^
1016. 				TIFFError(TIFFFileName(out),
1017. 					  "Error, can't write tile at %lu %lu",

libtiff/tif_write.c:312:1: Parameter `tif->tif_dir.td_imagelength`
  310.  * tile is selected by the (x,y,z,s) coordinates.
  311.  */
  312. tmsize_t
       ^
  313. TIFFWriteTile(TIFF* tif, void* buf, uint32 x, uint32 y, uint32 z, uint16 s)
  314. {

libtiff/tif_write.c:315:7: Call
  313. TIFFWriteTile(TIFF* tif, void* buf, uint32 x, uint32 y, uint32 z, uint16 s)
  314. {
  315. 	if (!TIFFCheckTile(tif, x, y, z, s))
             ^
  316. 		return ((tmsize_t)(-1));
  317. 	/*

libtiff/tif_tile.c:100:1: <LHS trace>
 98.  * against the image bounds.
 99.  */
100. int
     ^
101. TIFFCheckTile(TIFF* tif, uint32 x, uint32 y, uint32 z, uint16 s)
102. {

libtiff/tif_tile.c:100:1: Parameter `y`
     98.  * against the image bounds.
     99.  */
    100. int
         ^
    101. TIFFCheckTile(TIFF* tif, uint32 x, uint32 y, uint32 z, uint16 s)
    102. {

libtiff/tif_tile.c:113:3: Binary operation: ([0, out->tif_dir.td_imagelength] - 1):unsigned32 by call to `TIFFWriteTile` 
    111. 	}
    112. 	if (y >= td->td_imagelength) {
    113. 		TIFFErrorExt(tif->tif_clientdata, tif->tif_name,
           ^
    114. 			     "%lu: Row out of range, max %lu",
    115. 			     (unsigned long) y,
