contrib/addtiffo/tif_overview.c:865: error: Buffer Overrun L3
  Offset: [1, +oo] Size: [0, +oo] by call to `TIFFCreateOvrCache`.

contrib/addtiffo/tif_overview.c:856:22: Call
854.         }
855. 
856.         nDirOffset = TIFF_WriteOverview( hTIFF, nOXSize, nOYSize,
                          ^
857.                                          nBitsPerPixel, nPlanarConfig,
858.                                          nSamples, nOBlockXSize, nOBlockYSize,

contrib/addtiffo/tif_overview.c:149:9: Call
  147. /*      Write directory, and return byte offset.                        */
  148. /* -------------------------------------------------------------------- */
  149.     if( TIFFWriteCheck( hTIFF, bTiled, "TIFFBuildOverviews" ) == 0 )
               ^
  150.         return 0;
  151. 

libtiff/tif_write.c:564:1: Parameter `*tif->tif_dir.td_stripoffset_p`
    562.  * that important information is not changed.
    563.  */
    564. int
         ^
    565. TIFFWriteCheck(TIFF* tif, int tiles, const char* module)
    566. {

contrib/addtiffo/tif_overview.c:865:25: Call
863.                                          nHorSubsampling, nVerSubsampling );
864.         
865.         papoRawBIs[i] = TIFFCreateOvrCache( hTIFF, nDirOffset );
                             ^
866.     }
867. 

contrib/addtiffo/tif_ovrcache.c:41:1: Parameter `*hTIFF->tif_dir.td_stripoffset_p`
  39. /************************************************************************/
  40. 
  41. TIFFOvrCache *TIFFCreateOvrCache( TIFF *hTIFF, toff_t nDirOffset )
      ^
  42. 
  43. {

contrib/addtiffo/tif_ovrcache.c:55:5: Call
  53. /* -------------------------------------------------------------------- */
  54.     nBaseDirOffset = TIFFCurrentDirOffset( psCache->hTIFF );
  55.     TIFFSetSubDirectory( hTIFF, nDirOffset );
          ^
  56.     
  57.     TIFFGetField( hTIFF, TIFFTAG_IMAGEWIDTH, &(psCache->nXSize) );

libtiff/tif_dir.c:1649:1: Parameter `*tif->tif_dir.td_stripoffset_p`
    1647.  * the SubIFD tag (e.g. thumbnail images).
    1648.  */
    1649. int
          ^
    1650. TIFFSetSubDirectory(TIFF* tif, uint64 diroff)
    1651. {

libtiff/tif_dir.c:1658:10: Call
    1656. 	 */
    1657. 	tif->tif_dirnumber = 0;
    1658. 	return (TIFFReadDirectory(tif));
                   ^
    1659. }
    1660. 

libtiff/tif_dirread.c:3920:42: Call
      3918.                                         goto bad;
      3919.                                     }
      3920.                                     if (!TIFFFetchStripThing(tif,dp,tif->tif_dir.td_nstrips,&tif->tif_dir.td_stripoffset_p))  
                                                     ^
      3921.                                             goto bad;
      3922.                                 }

libtiff/tif_dirread.c:5621:1: Parameter `**lpp`
        5619.  * While this routine says "strips", in fact it's also used for tiles.
        5620.  */
        5621. static int
              ^
        5622. TIFFFetchStripThing(TIFF* tif, TIFFDirEntry* dir, uint32 nstrips, uint64** lpp)
        5623. {

libtiff/tif_dirread.c:4269:13: Call
      4267.             TIFFStripSize64(tif) > 0x7FFFFFFFUL )
      4268.         {
      4269.             TryChopUpUncompressedBigTiff(tif);
                        ^
      4270.         }
      4271. 

libtiff/tif_dirread.c:5900:10: Assignment
        5898. 
        5899.     /* Check that the strips are contiguous and of the expected size */
        5900.     for( i = 0; i < td->td_nstrips; i++ )
                       ^
        5901.     {
        5902.         if( i == td->td_nstrips - 1 )

libtiff/tif_dirread.c:5916:26: Call
        5914.                 return;
        5915.             }
        5916.             if( i > 0 && TIFFGetStrileOffset(tif, i) !=
                                       ^
        5917.                     TIFFGetStrileOffset(tif, i-1) + TIFFGetStrileByteCount(tif, i-1) )
        5918.             {

libtiff/tif_dirread.c:6233:1: Parameter `strile`
          6231. 
          6232. /* Return the value of the TileOffsets/StripOffsets array for the specified tile/strile */
          6233. uint64 TIFFGetStrileOffset(TIFF *tif, uint32 strile)
                ^
          6234. {
          6235.     return TIFFGetStrileOffsetWithErr(tif, strile, NULL);

libtiff/tif_dirread.c:6235:12: Call
          6233. uint64 TIFFGetStrileOffset(TIFF *tif, uint32 strile)
          6234. {
          6235.     return TIFFGetStrileOffsetWithErr(tif, strile, NULL);
                           ^
          6236. }
          6237. 

libtiff/tif_dirread.c:6239:1: Parameter `strile`
            6237. 
            6238. /* Return the value of the TileOffsets/StripOffsets array for the specified tile/strile */
            6239. uint64 TIFFGetStrileOffsetWithErr(TIFF *tif, uint32 strile, int *pbErr)
                  ^
            6240. {
            6241.     TIFFDirectory *td = &tif->tif_dir;

libtiff/tif_dirread.c:6242:12: Call
            6240. {
            6241.     TIFFDirectory *td = &tif->tif_dir;
            6242.     return _TIFFGetStrileOffsetOrByteCountValue(tif, strile,
                             ^
            6243.                                &(td->td_stripoffset_entry),
            6244.                                &(td->td_stripoffset_p), pbErr);

libtiff/tif_dirread.c:6191:1: <Offset trace>
6189. }
6190. 
6191. static uint64 _TIFFGetStrileOffsetOrByteCountValue(TIFF *tif, uint32 strile,
      ^
6192.                                                    TIFFDirEntry* dirent,
6193.                                                    uint64** parray,

libtiff/tif_dirread.c:6191:1: Parameter `strile`
              6189. }
              6190. 
              6191. static uint64 _TIFFGetStrileOffsetOrByteCountValue(TIFF *tif, uint32 strile,
                    ^
              6192.                                                    TIFFDirEntry* dirent,
              6193.                                                    uint64** parray,

libtiff/tif_dirread.c:6191:1: <Length trace>
6189. }
6190. 
6191. static uint64 _TIFFGetStrileOffsetOrByteCountValue(TIFF *tif, uint32 strile,
      ^
6192.                                                    TIFFDirEntry* dirent,
6193.                                                    uint64** parray,

libtiff/tif_dirread.c:6191:1: Parameter `**parray`
              6189. }
              6190. 
              6191. static uint64 _TIFFGetStrileOffsetOrByteCountValue(TIFF *tif, uint32 strile,
                    ^
              6192.                                                    TIFFDirEntry* dirent,
              6193.                                                    uint64** parray,

libtiff/tif_dirread.c:6229:12: Array access: Offset: [1, +oo] Size: [0, +oo] by call to `TIFFCreateOvrCache` 
              6227.         return 0;
              6228.     }
              6229.     return (*parray)[strile];
                               ^
              6230. }
              6231. 
