tools/tiff2ps.c:2211: error: Integer Overflow L2
  ([0, max(0, `tif->tif_dir.td_tilelength`)] - 1):unsigned32 by call to `TIFFReadEncodedTile`.

tools/tiff2ps.c:2121:1: Parameter `tif->tif_dir.td_tilelength`
2119. #define MAXLINE		36
2120. 
2121. int
      ^
2122. PS_Lvl2page(FILE* fd, TIFF* tif, uint32 w, uint32 h)
2123. {

tools/tiff2ps.c:2211:18: Call
2209. 		} else {
2210. 			if (tiled_image)
2211. 				byte_count = TIFFReadEncodedTile(tif,
                       ^
2212. 						chunk_no, buf_data,
2213. 						chunk_size);

libtiff/tif_read.c:649:1: Parameter `tif->tif_dir.td_tilelength`
  647.  * amount into the user-supplied buffer.
  648.  */
  649. tmsize_t
       ^
  650. TIFFReadEncodedTile(TIFF* tif, uint32 tile, void* buf, tmsize_t size)
  651. {

libtiff/tif_read.c:668:6: Call
  666. 	else if (size > tilesize)
  667. 		size = tilesize;
  668. 	if (TIFFFillTile(tif, tile) && (*tif->tif_decodetile)(tif,
            ^
  669. 	    (uint8*) buf, size, (uint16)(tile/td->td_stripsperimage))) {
  670. 		(*tif->tif_postdecode)(tif, (uint8*) buf, size);

libtiff/tif_read.c:792:1: Parameter `tif->tif_dir.td_tilelength`
    790.  * expanded, as necessary, to hold the tile's data.
    791.  */
    792. int
         ^
    793. TIFFFillTile(TIFF* tif, uint32 tile)
    794. {

libtiff/tif_read.c:901:10: Call
    899. 		}
    900. 	}
    901. 	return (TIFFStartTile(tif, tile));
                  ^
    902. }
    903. 

libtiff/tif_read.c:987:1: <LHS trace>
985.  * tile has just been read in.
986.  */
987. static int
     ^
988. TIFFStartTile(TIFF* tif, uint32 tile)
989. {

libtiff/tif_read.c:987:1: Parameter `tif->tif_dir.td_tilelength`
      985.  * tile has just been read in.
      986.  */
      987. static int
           ^
      988. TIFFStartTile(TIFF* tif, uint32 tile)
      989. {

libtiff/tif_read.c:1005:14: Binary operation: ([0, max(0, tif->tif_dir.td_tilelength)] - 1):unsigned32 by call to `TIFFReadEncodedTile` 
      1003. 		td->td_tilelength;
      1004. 	tif->tif_col =
      1005. 	    (tile % TIFFhowmany_32(td->td_imagelength, td->td_tilelength)) *
                         ^
      1006. 		td->td_tilewidth;
      1007.         tif->tif_flags &= ~TIFF_BUF4WRITE;
