contrib/addtiffo/tif_overview.c:883: error: Buffer Overrun L3
  Offset: [7, +oo] (⇐ [0, +oo] + 7) Size: [0, +oo] by call to `TIFFDestroyOvrCache`.

contrib/addtiffo/tif_overview.c:685:1: Parameter `hTIFF->tif_rawdata`
683. /************************************************************************/
684. 
685. void TIFFBuildOverviews( TIFF *hTIFF, int nOverviews, int * panOvList,
     ^
686.                          int bUseSubIFDs, const char *pszResampleMethod,
687.                          int (*pfnProgress)( double, void * ),

contrib/addtiffo/tif_overview.c:883:9: Call
881.     for( i = 0; i < nOverviews; i++ )
882.     {
883.         TIFFDestroyOvrCache( papoRawBIs[i] );
             ^
884.     }
885. 

contrib/addtiffo/tif_ovrcache.c:325:1: Parameter `*psCache->hTIFF->tif_rawdata`
  323. /************************************************************************/
  324. 
  325. void TIFFDestroyOvrCache( TIFFOvrCache * psCache )
       ^
  326. 
  327. {

contrib/addtiffo/tif_ovrcache.c:329:9: Call
  327. {
  328.     while( psCache->nBlockOffset < psCache->nBlocksPerColumn )
  329.         TIFFWriteOvrRow( psCache );
               ^
  330. 
  331.     _TIFFfree( psCache->pabyRow1Blocks );

contrib/addtiffo/tif_ovrcache.c:134:1: Parameter `*psCache->hTIFF->tif_rawdata`
    132. /************************************************************************/
    133. 
    134. static void TIFFWriteOvrRow( TIFFOvrCache * psCache )
         ^
    135. 
    136. {

contrib/addtiffo/tif_ovrcache.c:254:5: Call
    252. /*      Restore access to original directory.                           */
    253. /* -------------------------------------------------------------------- */
    254.     TIFFFlush( psCache->hTIFF );
             ^
    255.     /* TODO: add checks on error status return of TIFFFlush */
    256.     TIFFSetSubDirectory( psCache->hTIFF, nBaseDirOffset );

libtiff/tif_flush.c:32:1: Parameter `*tif->tif_rawdata`
      30. #include "tiffiop.h"
      31. 
      32. int
          ^
      33. TIFFFlush(TIFF* tif)
      34. {

libtiff/tif_flush.c:38:10: Call
      36.         return 1;
      37. 
      38.     if (!TIFFFlushData(tif))
                   ^
      39.         return (0);
      40.                 

libtiff/tif_flush.c:98:1: Parameter `*tif->tif_rawdata`
         96.  * problems for other people. 
         97.  */
         98. int
             ^
         99. TIFFFlushData(TIFF* tif)
        100. {

libtiff/tif_flush.c:108:10: Call
        106. 			return (0);
        107. 	}
        108. 	return (TIFFFlushData1(tif));
                      ^
        109. }
        110. 

libtiff/tif_write.c:712:1: Parameter `*tif->tif_rawdata`
          710.  * for infinite recursion.
          711.  */
          712. int
               ^
          713. TIFFFlushData1(TIFF* tif)
          714. {

libtiff/tif_write.c:718:4: Call
          716. 		if (!isFillOrder(tif, tif->tif_dir.td_fillorder) &&
          717. 		    (tif->tif_flags & TIFF_NOBITREV) == 0)
          718. 			TIFFReverseBits((uint8*)tif->tif_rawdata,
                  ^
          719. 			    tif->tif_rawcc);
          720. 		if (!TIFFAppendToStrip(tif,

libtiff/tif_swab.c:285:1: <Length trace>
283. }
284. 
285. void
     ^
286. TIFFReverseBits(uint8* cp, tmsize_t n)  
287. {

libtiff/tif_swab.c:285:1: Parameter `*cp`
            283. }
            284. 
            285. void
                 ^
            286. TIFFReverseBits(uint8* cp, tmsize_t n)  
            287. {

libtiff/tif_swab.c:296:3: Array access: Offset: [7, +oo] (⇐ [0, +oo] + 7) Size: [0, +oo] by call to `TIFFDestroyOvrCache` 
            294. 		cp[5] = TIFFBitRevTable[cp[5]];
            295. 		cp[6] = TIFFBitRevTable[cp[6]];
            296. 		cp[7] = TIFFBitRevTable[cp[7]];
                   ^
            297. 		cp += 8;
            298. 	}
