contrib/addtiffo/tif_overview.c:883: error: Buffer Overrun L3
  Offset: [7, +oo] (⇐ [0, +oo] + 7) Size: [0, +oo] by call to `TIFFDestroyOvrCache`.

contrib/addtiffo/tif_overview.c:685:1: Parameter `hTIFF->tif_rawdata`
683. /************************************************************************/
684. 
685. void TIFFBuildOverviews( TIFF *hTIFF, int nOverviews, int * panOvList,
     ^
686.                          int bUseSubIFDs, const char *pszResampleMethod,
687.                          int (*pfnProgress)( double, void * ),

contrib/addtiffo/tif_overview.c:883:9: Call
881.     for( i = 0; i < nOverviews; i++ )
882.     {
883.         TIFFDestroyOvrCache( papoRawBIs[i] );
             ^
884.     }
885. 

contrib/addtiffo/tif_ovrcache.c:325:1: Parameter `*psCache->hTIFF->tif_rawdata`
  323. /************************************************************************/
  324. 
  325. void TIFFDestroyOvrCache( TIFFOvrCache * psCache )
       ^
  326. 
  327. {

contrib/addtiffo/tif_ovrcache.c:329:9: Call
  327. {
  328.     while( psCache->nBlockOffset < psCache->nBlocksPerColumn )
  329.         TIFFWriteOvrRow( psCache );
               ^
  330. 
  331.     _TIFFfree( psCache->pabyRow1Blocks );

contrib/addtiffo/tif_ovrcache.c:134:1: Parameter `*psCache->hTIFF->tif_rawdata`
    132. /************************************************************************/
    133. 
    134. static void TIFFWriteOvrRow( TIFFOvrCache * psCache )
         ^
    135. 
    136. {

contrib/addtiffo/tif_ovrcache.c:254:5: Call
    252. /*      Restore access to original directory.                           */
    253. /* -------------------------------------------------------------------- */
    254.     TIFFFlush( psCache->hTIFF );
             ^
    255.     /* TODO: add checks on error status return of TIFFFlush */
    256.     TIFFSetSubDirectory( psCache->hTIFF, nBaseDirOffset );

libtiff/tif_flush.c:32:1: Parameter `*tif->tif_rawdata`
      30. #include "tiffiop.h"
      31. 
      32. int
          ^
      33. TIFFFlush(TIFF* tif)
      34. {

libtiff/tif_flush.c:83:13: Call
      81. 
      82.     if ((tif->tif_flags & (TIFF_DIRTYDIRECT|TIFF_DIRTYSTRIP)) 
      83.         && !TIFFWriteDirectory(tif))
                      ^
      84.         return (0);
      85. 

libtiff/tif_dirwrite.c:163:1: Parameter `*tif->tif_rawdata`
        161.  * storage that's been changed.
        162.  */
        163. int
             ^
        164. TIFFWriteDirectory(TIFF* tif)
        165. {

libtiff/tif_dirwrite.c:166:9: Call
        164. TIFFWriteDirectory(TIFF* tif)
        165. {
        166. 	return TIFFWriteDirectorySec(tif,TRUE,TRUE,NULL);
                     ^
        167. }
        168. 

libtiff/tif_dirwrite.c:345:1: Parameter `*tif->tif_rawdata`
          343. }
          344. 
          345. static int
               ^
          346. TIFFWriteDirectorySec(TIFF* tif, int isimage, int imagedone, uint64* pdiroff)
          347. {

libtiff/tif_dirwrite.c:384:12: Call
          382. 		    && (tif->tif_flags & TIFF_BEENWRITING) != 0 )
          383. 		{
          384. 		    if( !TIFFFlushData1(tif) )
                          ^
          385.                     {
          386. 			TIFFErrorExt(tif->tif_clientdata, module,

libtiff/tif_write.c:709:1: Parameter `*tif->tif_rawdata`
            707.  * for infinite recursion.
            708.  */
            709. int
                 ^
            710. TIFFFlushData1(TIFF* tif)
            711. {

libtiff/tif_write.c:715:4: Call
            713. 		if (!isFillOrder(tif, tif->tif_dir.td_fillorder) &&
            714. 		    (tif->tif_flags & TIFF_NOBITREV) == 0)
            715. 			TIFFReverseBits((uint8*)tif->tif_rawdata,
                    ^
            716. 			    tif->tif_rawcc);
            717. 		if (!TIFFAppendToStrip(tif,

libtiff/tif_swab.c:285:1: <Length trace>
283. }
284. 
285. void
     ^
286. TIFFReverseBits(uint8* cp, tmsize_t n)  
287. {

libtiff/tif_swab.c:285:1: Parameter `*cp`
              283. }
              284. 
              285. void
                   ^
              286. TIFFReverseBits(uint8* cp, tmsize_t n)  
              287. {

libtiff/tif_swab.c:296:3: Array access: Offset: [7, +oo] (⇐ [0, +oo] + 7) Size: [0, +oo] by call to `TIFFDestroyOvrCache` 
              294. 		cp[5] = TIFFBitRevTable[cp[5]];
              295. 		cp[6] = TIFFBitRevTable[cp[6]];
              296. 		cp[7] = TIFFBitRevTable[cp[7]];
                     ^
              297. 		cp += 8;
              298. 	}
