contrib/addtiffo/tif_overview.c:150: error: Buffer Overrun L3
  Offset: 1 Size: [0, +oo] by call to `TIFFSetDirectory`.

contrib/addtiffo/tif_overview.c:146:9: Call
144. /*      Write directory, and return byte offset.                        */
145. /* -------------------------------------------------------------------- */
146.     if( TIFFWriteCheck( hTIFF, bTiled, "TIFFBuildOverviews" ) == 0 )
             ^
147.         return 0;
148. 

libtiff/tif_write.c:488:1: Parameter `*tif->tif_dir.td_stripbytecount`
  486.  * that important information is not changed.
  487.  */
  488. int
       ^
  489. TIFFWriteCheck(TIFF* tif, int tiles, const char* module)
  490. {

contrib/addtiffo/tif_overview.c:149:5: Call
147.         return 0;
148. 
149.     TIFFWriteDirectory( hTIFF );
         ^
150.     TIFFSetDirectory( hTIFF, (tdir_t) (TIFFNumberOfDirectories(hTIFF)-1) );
151. 

libtiff/tif_dirwrite.c:163:1: Parameter `*tif->tif_dir.td_stripbytecount`
  161.  * storage that's been changed.
  162.  */
  163. int
       ^
  164. TIFFWriteDirectory(TIFF* tif)
  165. {

libtiff/tif_dirwrite.c:166:9: Call
  164. TIFFWriteDirectory(TIFF* tif)
  165. {
  166. 	return TIFFWriteDirectorySec(tif,TRUE,TRUE,NULL);
               ^
  167. }
  168. 

libtiff/tif_dirwrite.c:345:1: Parameter `*tif->tif_dir.td_stripbytecount`
    343. }
    344. 
    345. static int
         ^
    346. TIFFWriteDirectorySec(TIFF* tif, int isimage, int imagedone, uint64* pdiroff)
    347. {

contrib/addtiffo/tif_overview.c:150:5: Call
148. 
149.     TIFFWriteDirectory( hTIFF );
150.     TIFFSetDirectory( hTIFF, (tdir_t) (TIFFNumberOfDirectories(hTIFF)-1) );
         ^
151. 
152.     nOffset = TIFFCurrentDirOffset( hTIFF );

libtiff/tif_dir.c:1350:1: Parameter `*tif->tif_dir.td_stripbytecount`
  1348.  * NB: Directories are numbered starting at 0.
  1349.  */
  1350. int
        ^
  1351. TIFFSetDirectory(TIFF* tif, uint16 dirn)
  1352. {

libtiff/tif_dir.c:1375:10: Call
  1373. 	 */
  1374. 	tif->tif_dirnumber = 0;
  1375. 	return (TIFFReadDirectory(tif));
                 ^
  1376. }
  1377. 

libtiff/tif_dirread.c:3389:1: <Length trace>
3387.  * format. We read directories sequentially.
3388.  */
3389. int
      ^
3390. TIFFReadDirectory(TIFF* tif)
3391. {

libtiff/tif_dirread.c:3389:1: Parameter `*tif->tif_dir.td_stripbytecount`
    3387.  * format. We read directories sequentially.
    3388.  */
    3389. int
          ^
    3390. TIFFReadDirectory(TIFF* tif)
    3391. {

libtiff/tif_dirread.c:3417:2: Call
    3415. 	tif->tif_flags &= ~TIFF_BUF4WRITE;      /* reset before new dir */
    3416. 	/* free any old stuff and reinit */
    3417. 	TIFFFreeDirectory(tif);
           ^
    3418. 	TIFFDefaultDirectory(tif);
    3419. 	/*

libtiff/tif_dir.c:1065:1: Parameter `*tif->tif_dir.td_stripbytecount`
      1063.  * Release storage associated with a directory.
      1064.  */
      1065. void
            ^
      1066. TIFFFreeDirectory(TIFF* tif)
      1067. {

libtiff/tif_dirread.c:3872:47: Array access: Offset: 1 Size: [0, +oo] by call to `TIFFSetDirectory` 
    3870. 			   && tif->tif_dir.td_nstrips > 2
    3871. 			   && tif->tif_dir.td_compression == COMPRESSION_NONE
    3872. 			   && tif->tif_dir.td_stripbytecount[0] != tif->tif_dir.td_stripbytecount[1]
                                                        ^
    3873. 			   && tif->tif_dir.td_stripbytecount[0] != 0
    3874. 			   && tif->tif_dir.td_stripbytecount[1] != 0 ) {
