libtiff/tif_jpeg.c:812: error: Integer Overflow L2
  ([0, +oo] - 7):unsigned32 by call to `JPEGFixupTagsSubsamplingSkip`.

libtiff/tif_jpeg.c:743:1: Parameter `data->bufferbytesleft`
741. }
742. 
743. static int
     ^
744. JPEGFixupTagsSubsamplingSec(struct JPEGFixupTagsSubsamplingData* data)
745. {

libtiff/tif_jpeg.c:752:9: Call
750. 		while (1)
751. 		{
752. 			if (!JPEGFixupTagsSubsamplingReadByte(data,&m))
             ^
753. 				return(0);
754. 			if (m==255)

libtiff/tif_jpeg.c:855:1: Parameter `data->bufferbytesleft`
  853. }
  854. 
  855. static int
       ^
  856. JPEGFixupTagsSubsamplingReadByte(struct JPEGFixupTagsSubsamplingData* data, uint8* result)
  857. {

libtiff/tif_jpeg.c:759:9: Call
757. 		while (1)
758. 		{
759. 			if (!JPEGFixupTagsSubsamplingReadByte(data,&m))
             ^
760. 				return(0);
761. 			if (m!=255)

libtiff/tif_jpeg.c:855:1: Parameter `data->bufferbytesleft`
  853. }
  854. 
  855. static int
       ^
  856. JPEGFixupTagsSubsamplingReadByte(struct JPEGFixupTagsSubsamplingData* data, uint8* result)
  857. {

libtiff/tif_jpeg.c:808:11: Call
806. 					uint8 p;
807. 					uint8 ph,pv;
808. 					if (!JPEGFixupTagsSubsamplingReadWord(data,&n))
               ^
809. 						return(0);
810. 					if (n!=8+data->tif->tif_dir.td_samplesperpixel*3)

libtiff/tif_jpeg.c:885:1: Parameter `data->bufferbytesleft`
  883. }
  884. 
  885. static int
       ^
  886. JPEGFixupTagsSubsamplingReadWord(struct JPEGFixupTagsSubsamplingData* data, uint16* result)
  887. {

libtiff/tif_jpeg.c:890:7: Call
  888. 	uint8 ma;
  889. 	uint8 mb;
  890. 	if (!JPEGFixupTagsSubsamplingReadByte(data,&ma))
             ^
  891. 		return(0);
  892. 	if (!JPEGFixupTagsSubsamplingReadByte(data,&mb))

libtiff/tif_jpeg.c:855:1: Parameter `data->bufferbytesleft`
    853. }
    854. 
    855. static int
         ^
    856. JPEGFixupTagsSubsamplingReadByte(struct JPEGFixupTagsSubsamplingData* data, uint8* result)
    857. {

libtiff/tif_jpeg.c:812:6: Call
810. 					if (n!=8+data->tif->tif_dir.td_samplesperpixel*3)
811. 						return(0);
812. 					JPEGFixupTagsSubsamplingSkip(data,7);
          ^
813. 					if (!JPEGFixupTagsSubsamplingReadByte(data,&p))
814. 						return(0);

libtiff/tif_jpeg.c:898:1: <LHS trace>
896. }
897. 
898. static void
     ^
899. JPEGFixupTagsSubsamplingSkip(struct JPEGFixupTagsSubsamplingData* data, uint16 skiplength)
900. {

libtiff/tif_jpeg.c:898:1: Parameter `skiplength`
  896. }
  897. 
  898. static void
       ^
  899. JPEGFixupTagsSubsamplingSkip(struct JPEGFixupTagsSubsamplingData* data, uint16 skiplength)
  900. {

libtiff/tif_jpeg.c:898:1: <RHS trace>
896. }
897. 
898. static void
     ^
899. JPEGFixupTagsSubsamplingSkip(struct JPEGFixupTagsSubsamplingData* data, uint16 skiplength)
900. {

libtiff/tif_jpeg.c:898:1: Parameter `skiplength`
  896. }
  897. 
  898. static void
       ^
  899. JPEGFixupTagsSubsamplingSkip(struct JPEGFixupTagsSubsamplingData* data, uint16 skiplength)
  900. {

libtiff/tif_jpeg.c:904:3: Binary operation: ([0, +oo] - 7):unsigned32 by call to `JPEGFixupTagsSubsamplingSkip` 
  902. 	{
  903. 		data->buffercurrentbyte+=skiplength;
  904. 		data->bufferbytesleft-=skiplength;
         ^
  905. 	}
  906. 	else
