contrib/addtiffo/tif_overview.c:836: error: Buffer Overrun L3
  Offset: 1 Size: [0, +oo] by call to `TIFFCreateOvrCache`.

contrib/addtiffo/tif_overview.c:827:22: Call
825.         }
826. 
827.         nDirOffset = TIFF_WriteOverview( hTIFF, nOXSize, nOYSize,
                          ^
828.                                          nBitsPerPixel, nPlanarConfig,
829.                                          nSamples, nOBlockXSize, nOBlockYSize,

contrib/addtiffo/tif_overview.c:146:9: Call
  144. /*      Write directory, and return byte offset.                        */
  145. /* -------------------------------------------------------------------- */
  146.     if( TIFFWriteCheck( hTIFF, bTiled, "TIFFBuildOverviews" ) == 0 )
               ^
  147.         return 0;
  148. 

libtiff/tif_write.c:488:1: Parameter `*tif->tif_dir.td_stripbytecount`
    486.  * that important information is not changed.
    487.  */
    488. int
         ^
    489. TIFFWriteCheck(TIFF* tif, int tiles, const char* module)
    490. {

contrib/addtiffo/tif_overview.c:836:25: Call
834.                                          nHorSubsampling, nVerSubsampling );
835.         
836.         papoRawBIs[i] = TIFFCreateOvrCache( hTIFF, nDirOffset );
                             ^
837.     }
838. 

contrib/addtiffo/tif_ovrcache.c:43:1: Parameter `*hTIFF->tif_dir.td_stripbytecount`
  41. /************************************************************************/
  42. 
  43. TIFFOvrCache *TIFFCreateOvrCache( TIFF *hTIFF, toff_t nDirOffset )
      ^
  44. 
  45. {

contrib/addtiffo/tif_ovrcache.c:57:5: Call
  55. /* -------------------------------------------------------------------- */
  56.     nBaseDirOffset = TIFFCurrentDirOffset( psCache->hTIFF );
  57.     TIFFSetSubDirectory( hTIFF, nDirOffset );
          ^
  58.     
  59.     TIFFGetField( hTIFF, TIFFTAG_IMAGEWIDTH, &(psCache->nXSize) );

libtiff/tif_dir.c:1384:1: Parameter `*tif->tif_dir.td_stripbytecount`
    1382.  * the SubIFD tag (e.g. thumbnail images).
    1383.  */
    1384. int
          ^
    1385. TIFFSetSubDirectory(TIFF* tif, uint64 diroff)
    1386. {

libtiff/tif_dir.c:1393:10: Call
    1391. 	 */
    1392. 	tif->tif_dirnumber = 0;
    1393. 	return (TIFFReadDirectory(tif));
                   ^
    1394. }
    1395. 

libtiff/tif_dirread.c:3389:1: <Length trace>
3387.  * format. We read directories sequentially.
3388.  */
3389. int
      ^
3390. TIFFReadDirectory(TIFF* tif)
3391. {

libtiff/tif_dirread.c:3389:1: Parameter `*tif->tif_dir.td_stripbytecount`
      3387.  * format. We read directories sequentially.
      3388.  */
      3389. int
            ^
      3390. TIFFReadDirectory(TIFF* tif)
      3391. {

libtiff/tif_dirread.c:3417:2: Call
      3415. 	tif->tif_flags &= ~TIFF_BUF4WRITE;      /* reset before new dir */
      3416. 	/* free any old stuff and reinit */
      3417. 	TIFFFreeDirectory(tif);
             ^
      3418. 	TIFFDefaultDirectory(tif);
      3419. 	/*

libtiff/tif_dir.c:1065:1: Parameter `*tif->tif_dir.td_stripbytecount`
        1063.  * Release storage associated with a directory.
        1064.  */
        1065. void
              ^
        1066. TIFFFreeDirectory(TIFF* tif)
        1067. {

libtiff/tif_dirread.c:3872:47: Array access: Offset: 1 Size: [0, +oo] by call to `TIFFCreateOvrCache` 
      3870. 			   && tif->tif_dir.td_nstrips > 2
      3871. 			   && tif->tif_dir.td_compression == COMPRESSION_NONE
      3872. 			   && tif->tif_dir.td_stripbytecount[0] != tif->tif_dir.td_stripbytecount[1]
                                                          ^
      3873. 			   && tif->tif_dir.td_stripbytecount[0] != 0
      3874. 			   && tif->tif_dir.td_stripbytecount[1] != 0 ) {
