libtiff/tif_getimage.c:1043: error: Integer Overflow L2
  ([0, +oo] - 1):unsigned32 by call to `TIFFReadEncodedStrip`.

libtiff/tif_getimage.c:995:14: Call
993.         uint16 colorchannels;
994. 
995. 	stripsize = TIFFStripSize(tif);  
                  ^
996. 	bufsize = TIFFSafeMultiply(tmsize_t,alpha?4:3,stripsize);
997. 	if (bufsize == 0) {

libtiff/tif_strip.c:211:1: Parameter `tif->tif_dir.td_imagelength`
  209. 	return (TIFFVStripSize64(tif, rps));
  210. }
  211. tmsize_t
       ^
  212. TIFFStripSize(TIFF* tif)
  213. {

libtiff/tif_strip.c:217:4: Call
  215. 	uint64 m;
  216. 	tmsize_t n;
  217. 	m=TIFFStripSize64(tif);
          ^
  218. 	n=(tmsize_t)m;
  219. 	if ((uint64)n!=m)

libtiff/tif_strip.c:202:1: Parameter `tif->tif_dir.td_imagelength`
    200.  * to hold the strip.
    201.  */
    202. uint64
         ^
    203. TIFFStripSize64(TIFF* tif)
    204. {

libtiff/tif_getimage.c:1043:7: Call
1041. 		nrow = (row + rowstoread > h ? h - row : rowstoread);
1042. 		offset_row = row + img->row_offset;
1043. 		if (TIFFReadEncodedStrip(tif, TIFFComputeStrip(tif, offset_row, 0),
            ^
1044. 		    p0, ((row + img->row_offset)%rowsperstrip + nrow) * scanline)==(tmsize_t)(-1)
1045. 		    && img->stoponerr)

libtiff/tif_read.c:316:1: <LHS trace>
314.  * amount into the user-supplied buffer.
315.  */
316. tmsize_t
     ^
317. TIFFReadEncodedStrip(TIFF* tif, uint32 strip, void* buf, tmsize_t size)
318. {

libtiff/tif_read.c:316:1: Parameter `tif->tif_dir.td_imagelength`
  314.  * amount into the user-supplied buffer.
  315.  */
  316. tmsize_t
       ^
  317. TIFFReadEncodedStrip(TIFF* tif, uint32 strip, void* buf, tmsize_t size)
  318. {

libtiff/tif_read.c:344:2: Binary operation: ([0, +oo] - 1):unsigned32 by call to `TIFFReadEncodedStrip` 
  342. 	if (rowsperstrip>td->td_imagelength)
  343. 		rowsperstrip=td->td_imagelength;
  344. 	stripsperplane=((td->td_imagelength+rowsperstrip-1)/rowsperstrip);
        ^
  345. 	stripinplane=(strip%stripsperplane);
  346. 	plane=(uint16)(strip/stripsperplane);
