tools/tiffmedian.c:769: error: Buffer Overrun L3
  Offset: [7, +oo] (⇐ [0, +oo] + 7) Size: [0, +oo] by call to `TIFFWriteScanline`.

tools/tiffmedian.c:748:1: Parameter `out->tif_rawdata`
746.  * table entry.
747.  */
748. static void
     ^
749. quant(TIFF* in, TIFF* out)
750. {

tools/tiffmedian.c:769:7: Call
767. 			*outptr++ = (unsigned char)histogram[red][green][blue];
768. 		}
769. 		if (TIFFWriteScanline(out, outline, i, 0) < 0)
           ^
770. 			break;
771. 	}

libtiff/tif_write.c:48:1: Parameter `*tif->tif_rawdata`
  46. static int TIFFAppendToStrip(TIFF* tif, uint32 strip, uint8* data, tmsize_t cc);
  47. 
  48. int
      ^
  49. TIFFWriteScanline(TIFF* tif, void* buf, uint32 row, uint16 sample)
  50. {

libtiff/tif_write.c:107:8: Call
  105. 		 * Changing strips -- flush any data present.
  106. 		 */
  107. 		if (!TIFFFlushData(tif))
              ^
  108. 			return (-1);
  109. 		tif->tif_curstrip = strip;

libtiff/tif_flush.c:98:1: Parameter `*tif->tif_rawdata`
     96.  * problems for other people. 
     97.  */
     98. int
         ^
     99. TIFFFlushData(TIFF* tif)
    100. {

libtiff/tif_flush.c:108:10: Call
    106. 			return (0);
    107. 	}
    108. 	return (TIFFFlushData1(tif));
                  ^
    109. }
    110. 

libtiff/tif_write.c:709:1: Parameter `*tif->tif_rawdata`
      707.  * for infinite recursion.
      708.  */
      709. int
           ^
      710. TIFFFlushData1(TIFF* tif)
      711. {

libtiff/tif_write.c:715:4: Call
      713. 		if (!isFillOrder(tif, tif->tif_dir.td_fillorder) &&
      714. 		    (tif->tif_flags & TIFF_NOBITREV) == 0)
      715. 			TIFFReverseBits((uint8*)tif->tif_rawdata,
              ^
      716. 			    tif->tif_rawcc);
      717. 		if (!TIFFAppendToStrip(tif,

libtiff/tif_swab.c:285:1: <Length trace>
283. }
284. 
285. void
     ^
286. TIFFReverseBits(uint8* cp, tmsize_t n)  
287. {

libtiff/tif_swab.c:285:1: Parameter `*cp`
        283. }
        284. 
        285. void
             ^
        286. TIFFReverseBits(uint8* cp, tmsize_t n)  
        287. {

libtiff/tif_swab.c:296:3: Array access: Offset: [7, +oo] (⇐ [0, +oo] + 7) Size: [0, +oo] by call to `TIFFWriteScanline` 
        294. 		cp[5] = TIFFBitRevTable[cp[5]];
        295. 		cp[6] = TIFFBitRevTable[cp[6]];
        296. 		cp[7] = TIFFBitRevTable[cp[7]];
               ^
        297. 		cp += 8;
        298. 	}
