tools/tiffdump.c:486: error: Buffer Overrun L3
  Offset: [71, +oo] (⇐ [64, +oo] + 7) Size: [0, +oo] by call to `TIFFSwabArrayOfLong8`.

tools/tiffdump.c:283:3: Assignment
281. 		if (swabflag)
282. 			TIFFSwabShort(&dircount);
283. 		direntrysize = 12;
       ^
284. 	} else {
285. 		uint64 dircount64;

tools/tiffdump.c:299:11: Call
297. 		direntrysize = 20;
298. 	}
299. 	dirmem = _TIFFmalloc(dircount * direntrysize);
               ^
300. 	if (dirmem == NULL) {
301. 		Fatal("No space for TIFF directory");

libtiff/tif_unix.c:253:1: Parameter `s`
  251. #endif
  252. 
  253. void*
       ^
  254. _TIFFmalloc(tmsize_t s)
  255. {

libtiff/tif_unix.c:256:10: Array declaration
  254. _TIFFmalloc(tmsize_t s)
  255. {
  256. 	return (malloc((size_t) s));
                ^
  257. }
  258. 

libtiff/tif_unix.c:256:2: Assignment
  254. _TIFFmalloc(tmsize_t s)
  255. {
  256. 	return (malloc((size_t) s));
        ^
  257. }
  258. 

tools/tiffdump.c:299:2: Assignment
297. 		direntrysize = 20;
298. 	}
299. 	dirmem = _TIFFmalloc(dircount * direntrysize);
      ^
300. 	if (dirmem == NULL) {
301. 		Fatal("No space for TIFF directory");

tools/tiffdump.c:341:7: Assignment
339. 	    (unsigned long long)nextdiroff, (unsigned long long)nextdiroff);
340. #endif
341. 	for (dp = (uint8*)dirmem, n = dircount; n > 0; n--) {
           ^
342. 		uint16 tag;
343. 		uint16 type;

tools/tiffdump.c:354:3: Assignment
352. 		if (swabflag)
353. 			TIFFSwabShort(&tag);
354. 		dp += sizeof(uint16);
       ^
355. 		type = *(uint16*)dp;
356. 		dp += sizeof(uint16);

tools/tiffdump.c:356:3: Assignment
354. 		dp += sizeof(uint16);
355. 		type = *(uint16*)dp;
356. 		dp += sizeof(uint16);
       ^
357. 		if (swabflag)
358. 			TIFFSwabShort(&type);

tools/tiffdump.c:369:4: Assignment
367. 			if (swabflag)
368. 				TIFFSwabLong(&count32);
369. 			dp += sizeof(uint32);
        ^
370. 			count = count32;
371. 		}

tools/tiffdump.c:390:3: Assignment
388. 		datasize = count*typewidth;
389. 		datafits = 1;
390. 		datamem = dp;
       ^
391. 		dataoffset = 0;
392. 		datatruncated = 0;

tools/tiffdump.c:486:7: Call
484. 					case TIFF_SLONG8:
485. 					case TIFF_IFD8:
486. 						TIFFSwabArrayOfLong8((uint64*)datamem,count);
           ^
487. 						break;
488. 				}

libtiff/tif_swab.c:121:1: <Length trace>
119. 
120. #ifndef TIFFSwabArrayOfLong8
121. void
     ^
122. TIFFSwabArrayOfLong8(register uint64* lp, tmsize_t n)
123. {

libtiff/tif_swab.c:121:1: Parameter `*lp`
  119. 
  120. #ifndef TIFFSwabArrayOfLong8
  121. void
       ^
  122. TIFFSwabArrayOfLong8(register uint64* lp, tmsize_t n)
  123. {

libtiff/tif_swab.c:129:3: Assignment
  127. 	/* XXX unroll loop some */
  128. 	while (n-- > 0) {
  129. 		cp = (unsigned char *)lp;
         ^
  130. 		t = cp[7]; cp[7] = cp[0]; cp[0] = t;
  131. 		t = cp[6]; cp[6] = cp[1]; cp[1] = t;

libtiff/tif_swab.c:130:7: Array access: Offset: [71, +oo] (⇐ [64, +oo] + 7) Size: [0, +oo] by call to `TIFFSwabArrayOfLong8` 
  128. 	while (n-- > 0) {
  129. 		cp = (unsigned char *)lp;
  130. 		t = cp[7]; cp[7] = cp[0]; cp[0] = t;
             ^
  131. 		t = cp[6]; cp[6] = cp[1]; cp[1] = t;
  132. 		t = cp[5]; cp[5] = cp[2]; cp[2] = t;
