libtiff/tif_getimage.c:728: error: Integer Overflow L2
  ([0, +oo] - 1):unsigned32 by call to `TIFFReadTile`.

libtiff/tif_getimage.c:722:8: Call
720. 		for (col = 0; col < w; col += tw)
721. 		{
722. 			if (TIFFReadTile(tif, p0, col+img->col_offset,  
            ^
723. 			    row+img->row_offset,0,0)!=(tmsize_t)(-1) && img->stoponerr)
724. 			{

libtiff/tif_read.c:415:1: Parameter `tif->tif_dir.td_imagewidth`
  413.  * tile is selected by the (x,y,z,s) coordinates.
  414.  */
  415. tmsize_t
       ^
  416. TIFFReadTile(TIFF* tif, void* buf, uint32 x, uint32 y, uint32 z, uint16 s)
  417. {

libtiff/tif_getimage.c:728:8: Call
726. 				break;
727. 			}
728. 			if (TIFFReadTile(tif, p1, col+img->col_offset,  
            ^
729. 			    row+img->row_offset,0,1)!=(tmsize_t)(-1) && img->stoponerr)
730. 			{

libtiff/tif_read.c:415:1: Parameter `tif->tif_dir.td_imagewidth`
  413.  * tile is selected by the (x,y,z,s) coordinates.
  414.  */
  415. tmsize_t
       ^
  416. TIFFReadTile(TIFF* tif, void* buf, uint32 x, uint32 y, uint32 z, uint16 s)
  417. {

libtiff/tif_getimage.c:734:8: Call
732. 				break;
733. 			}
734. 			if (TIFFReadTile(tif, p2, col+img->col_offset,  
            ^
735. 			    row+img->row_offset,0,2)!=(tmsize_t)(-1) && img->stoponerr)
736. 			{

libtiff/tif_read.c:415:1: Parameter `tif->tif_dir.td_imagewidth`
  413.  * tile is selected by the (x,y,z,s) coordinates.
  414.  */
  415. tmsize_t
       ^
  416. TIFFReadTile(TIFF* tif, void* buf, uint32 x, uint32 y, uint32 z, uint16 s)
  417. {

libtiff/tif_getimage.c:722:8: Call
720. 		for (col = 0; col < w; col += tw)
721. 		{
722. 			if (TIFFReadTile(tif, p0, col+img->col_offset,  
            ^
723. 			    row+img->row_offset,0,0)!=(tmsize_t)(-1) && img->stoponerr)
724. 			{

libtiff/tif_read.c:415:1: Parameter `tif->tif_dir.td_imagewidth`
  413.  * tile is selected by the (x,y,z,s) coordinates.
  414.  */
  415. tmsize_t
       ^
  416. TIFFReadTile(TIFF* tif, void* buf, uint32 x, uint32 y, uint32 z, uint16 s)
  417. {

libtiff/tif_getimage.c:728:8: Call
726. 				break;
727. 			}
728. 			if (TIFFReadTile(tif, p1, col+img->col_offset,  
            ^
729. 			    row+img->row_offset,0,1)!=(tmsize_t)(-1) && img->stoponerr)
730. 			{

libtiff/tif_read.c:415:1: Parameter `tif->tif_dir.td_imagewidth`
  413.  * tile is selected by the (x,y,z,s) coordinates.
  414.  */
  415. tmsize_t
       ^
  416. TIFFReadTile(TIFF* tif, void* buf, uint32 x, uint32 y, uint32 z, uint16 s)
  417. {

libtiff/tif_read.c:418:33: Call
  416. TIFFReadTile(TIFF* tif, void* buf, uint32 x, uint32 y, uint32 z, uint16 s)
  417. {
  418. 	if (!TIFFCheckRead(tif, 1) || !TIFFCheckTile(tif, x, y, z, s))
                                       ^
  419. 		return ((tmsize_t)(-1));
  420. 	return (TIFFReadEncodedTile(tif,

libtiff/tif_tile.c:100:1: <LHS trace>
 98.  * against the image bounds.
 99.  */
100. int
     ^
101. TIFFCheckTile(TIFF* tif, uint32 x, uint32 y, uint32 z, uint16 s)
102. {

libtiff/tif_tile.c:100:1: Parameter `x`
     98.  * against the image bounds.
     99.  */
    100. int
         ^
    101. TIFFCheckTile(TIFF* tif, uint32 x, uint32 y, uint32 z, uint16 s)
    102. {

libtiff/tif_tile.c:106:3: Binary operation: ([0, +oo] - 1):unsigned32 by call to `TIFFReadTile` 
    104. 
    105. 	if (x >= td->td_imagewidth) {
    106. 		TIFFErrorExt(tif->tif_clientdata, tif->tif_name,
           ^
    107. 			     "%lu: Col out of range, max %lu",
    108. 			     (unsigned long) x,
