tools/tiff2ps.c:1513: error: Integer Overflow L2
  ([0, max(0, `tif->tif_dir.td_tilelength`)] - 1):unsigned32 by call to `TIFFReadEncodedTile`.

tools/tiff2ps.c:1423:1: Parameter `tif->tif_dir.td_tilelength`
1421. #define MAXLINE		36
1422. 
1423. int
      ^
1424. PS_Lvl2page(FILE* fd, TIFF* tif, uint32 w, uint32 h)
1425. {

tools/tiff2ps.c:1513:18: Call
1511. 		} else {
1512. 			if (tiled_image)
1513. 				byte_count = TIFFReadEncodedTile(tif,
                       ^
1514. 						chunk_no, buf_data,
1515. 						chunk_size);

libtiff/tif_read.c:617:1: Parameter `tif->tif_dir.td_tilelength`
  615.  * amount into the user-supplied buffer.
  616.  */
  617. tmsize_t
       ^
  618. TIFFReadEncodedTile(TIFF* tif, uint32 tile, void* buf, tmsize_t size)
  619. {

libtiff/tif_read.c:636:6: Call
  634. 	else if (size > tilesize)
  635. 		size = tilesize;
  636. 	if (TIFFFillTile(tif, tile) && (*tif->tif_decodetile)(tif,
            ^
  637. 	    (uint8*) buf, size, (uint16)(tile/td->td_stripsperimage))) {
  638. 		(*tif->tif_postdecode)(tif, (uint8*) buf, size);

libtiff/tif_read.c:757:1: Parameter `tif->tif_dir.td_tilelength`
    755.  * expanded, as necessary, to hold the tile's data.
    756.  */
    757. int
         ^
    758. TIFFFillTile(TIFF* tif, uint32 tile)
    759. {

libtiff/tif_read.c:853:10: Call
    851. 		}
    852. 	}
    853. 	return (TIFFStartTile(tif, tile));
                  ^
    854. }
    855. 

libtiff/tif_read.c:933:1: <LHS trace>
931.  * tile has just been read in.
932.  */
933. static int
     ^
934. TIFFStartTile(TIFF* tif, uint32 tile)
935. {

libtiff/tif_read.c:933:1: Parameter `tif->tif_dir.td_imagelength`
      931.  * tile has just been read in.
      932.  */
      933. static int
           ^
      934. TIFFStartTile(TIFF* tif, uint32 tile)
      935. {

libtiff/tif_read.c:948:14: Binary operation: ([0, max(0, tif->tif_dir.td_tilelength)] - 1):unsigned32 by call to `TIFFReadEncodedTile` 
      946. 		td->td_tilelength;
      947. 	tif->tif_col =
      948. 	    (tile % TIFFhowmany_32(td->td_imagelength, td->td_tilelength)) *
                        ^
      949. 		td->td_tilewidth;
      950.         tif->tif_flags &= ~TIFF_BUF4WRITE;
