libtiff/tif_ojpeg.c:1995: error: Buffer Overrun S2
  Offset: [`sp->in_buffer_next_strile`, +oo] Size: [0, +oo] by call to `TIFFGetStrileOffset`.

libtiff/tif_ojpeg.c:1943:1: Parameter `sp->in_buffer_next_strile`
1941. }
1942. 
1943. static int
      ^
1944. OJPEGReadBufferFill(OJPEGState* sp)
1945. {

libtiff/tif_ojpeg.c:1995:29: Call
1993. 				else
1994. 				{
1995. 					sp->in_buffer_file_pos=TIFFGetStrileOffset(sp->tif, sp->in_buffer_next_strile);
                                  ^
1996. 					if (sp->in_buffer_file_pos!=0)
1997. 					{

libtiff/tif_dirread.c:6233:1: Parameter `strile`
  6231. 
  6232. /* Return the value of the TileOffsets/StripOffsets array for the specified tile/strile */
  6233. uint64 TIFFGetStrileOffset(TIFF *tif, uint32 strile)
        ^
  6234. {
  6235.     return TIFFGetStrileOffsetWithErr(tif, strile, NULL);

libtiff/tif_dirread.c:6235:12: Call
  6233. uint64 TIFFGetStrileOffset(TIFF *tif, uint32 strile)
  6234. {
  6235.     return TIFFGetStrileOffsetWithErr(tif, strile, NULL);
                   ^
  6236. }
  6237. 

libtiff/tif_dirread.c:6239:1: Parameter `strile`
    6237. 
    6238. /* Return the value of the TileOffsets/StripOffsets array for the specified tile/strile */
    6239. uint64 TIFFGetStrileOffsetWithErr(TIFF *tif, uint32 strile, int *pbErr)
          ^
    6240. {
    6241.     TIFFDirectory *td = &tif->tif_dir;

libtiff/tif_dirread.c:6242:12: Call
    6240. {
    6241.     TIFFDirectory *td = &tif->tif_dir;
    6242.     return _TIFFGetStrileOffsetOrByteCountValue(tif, strile,
                     ^
    6243.                                &(td->td_stripoffset_entry),
    6244.                                &(td->td_stripoffset_p), pbErr);

libtiff/tif_dirread.c:6191:1: <Offset trace>
6189. }
6190. 
6191. static uint64 _TIFFGetStrileOffsetOrByteCountValue(TIFF *tif, uint32 strile,
      ^
6192.                                                    TIFFDirEntry* dirent,
6193.                                                    uint64** parray,

libtiff/tif_dirread.c:6191:1: Parameter `strile`
      6189. }
      6190. 
      6191. static uint64 _TIFFGetStrileOffsetOrByteCountValue(TIFF *tif, uint32 strile,
            ^
      6192.                                                    TIFFDirEntry* dirent,
      6193.                                                    uint64** parray,

libtiff/tif_dirread.c:6191:1: <Length trace>
6189. }
6190. 
6191. static uint64 _TIFFGetStrileOffsetOrByteCountValue(TIFF *tif, uint32 strile,
      ^
6192.                                                    TIFFDirEntry* dirent,
6193.                                                    uint64** parray,

libtiff/tif_dirread.c:6191:1: Parameter `**parray`
      6189. }
      6190. 
      6191. static uint64 _TIFFGetStrileOffsetOrByteCountValue(TIFF *tif, uint32 strile,
            ^
      6192.                                                    TIFFDirEntry* dirent,
      6193.                                                    uint64** parray,

libtiff/tif_dirread.c:6229:12: Array access: Offset: [sp->in_buffer_next_strile, +oo] Size: [0, +oo] by call to `TIFFGetStrileOffset` 
      6227.         return 0;
      6228.     }
      6229.     return (*parray)[strile];
                       ^
      6230. }
      6231. 
