tools/tiffdither.c:139: error: Integer Overflow L2
  ([0, 4294967294] + [0, 4294967294]):unsigned32 by call to `TIFFWriteScanline`.

tools/tiffdither.c:60:1: Parameter `out->tif_dir.td_imagelength`
58.  * This code is stolen from tiffmedian.
59.  */
60. static int
    ^
61. fsdither(TIFF* in, TIFF* out)
62. {

tools/tiffdither.c:139:7: Call
137. 			}
138. 		}
139. 		if (TIFFWriteScanline(out, outline, i-1, 0) < 0)
           ^
140. 			goto skip_on_error;
141. 	}

libtiff/tif_write.c:48:1: Parameter `tif->tif_dir.td_imagelength`
  46. static int TIFFAppendToStrip(TIFF* tif, uint32 strip, uint8* data, tmsize_t cc);
  47. 
  48. int
      ^
  49. TIFFWriteScanline(TIFF* tif, void* buf, uint32 row, uint16 sample)
  50. {

libtiff/tif_write.c:56:7: Call
  54. 	uint32 strip;
  55. 
  56. 	if (!WRITECHECKSTRIPS(tif, module))
            ^
  57. 		return (-1);
  58. 	/*

libtiff/tif_write.c:510:1: Parameter `tif->tif_dir.td_imagelength`
    508.  * that important information is not changed.
    509.  */
    510. int
         ^
    511. TIFFWriteCheck(TIFF* tif, int tiles, const char* module)
    512. {

libtiff/tif_write.c:557:46: Call
    555. 		}
    556. 	}
    557. 	if (tif->tif_dir.td_stripoffset == NULL && !TIFFSetupStrips(tif)) {
                                                      ^
    558. 		tif->tif_dir.td_nstrips = 0;
    559. 		TIFFErrorExt(tif->tif_clientdata, module, "No space for %s arrays",

libtiff/tif_write.c:470:1: Parameter `tif->tif_dir.td_imagelength`
      468.     (TIFFFieldSet(tif,f) && (tif)->tif_dir.td_imagelength == 0)
      469. 
      470. int
           ^
      471. TIFFSetupStrips(TIFF* tif)
      472. {

libtiff/tif_write.c:478:29: Call
      476. 		td->td_stripsperimage =
      477. 		    isUnspecified(tif, FIELD_TILEDIMENSIONS) ?
      478. 			td->td_samplesperpixel : TIFFNumberOfTiles(tif);
                                       ^
      479. 	else
      480. 		td->td_stripsperimage =

libtiff/tif_tile.c:114:1: <LHS trace>
112.  * Compute how many tiles are in an image.
113.  */
114. uint32
     ^
115. TIFFNumberOfTiles(TIFF* tif)
116. {

libtiff/tif_tile.c:114:1: Parameter `tif->tif_dir.td_imagelength`
        112.  * Compute how many tiles are in an image.
        113.  */
        114. uint32
             ^
        115. TIFFNumberOfTiles(TIFF* tif)
        116. {

libtiff/tif_tile.c:114:1: <RHS trace>
112.  * Compute how many tiles are in an image.
113.  */
114. uint32
     ^
115. TIFFNumberOfTiles(TIFF* tif)
116. {

libtiff/tif_tile.c:114:1: Parameter `tif->tif_dir.td_imagelength`
        112.  * Compute how many tiles are in an image.
        113.  */
        114. uint32
             ^
        115. TIFFNumberOfTiles(TIFF* tif)
        116. {

libtiff/tif_tile.c:131:6: Binary operation: ([0, 4294967294] + [0, 4294967294]):unsigned32 by call to `TIFFWriteScanline` 
        129. 	ntiles = (dx == 0 || dy == 0 || dz == 0) ? 0 :
        130. 	    _TIFFMultiply32(tif, _TIFFMultiply32(tif, TIFFhowmany_32(td->td_imagewidth, dx),
        131. 	    TIFFhowmany_32(td->td_imagelength, dy),
                  ^
        132. 	    "TIFFNumberOfTiles"),
        133. 	    TIFFhowmany_32(td->td_imagedepth, dz), "TIFFNumberOfTiles");
