libtiff/tif_ojpeg.c:1998: error: Buffer Overrun S2
  Offset: [`sp->in_buffer_next_strile`, +oo] Size: [0, +oo] by call to `TIFFGetStrileByteCount`.

libtiff/tif_ojpeg.c:1943:1: Parameter `sp->in_buffer_next_strile`
1941. }
1942. 
1943. static int
      ^
1944. OJPEGReadBufferFill(OJPEGState* sp)
1945. {

libtiff/tif_ojpeg.c:1998:68: Call
1996. 					if (sp->in_buffer_file_pos!=0)
1997. 					{
1998.                                                 uint64 bytecount = TIFFGetStrileByteCount(sp->tif, sp->in_buffer_next_strile);
                                                                         ^
1999. 						if (sp->in_buffer_file_pos>=sp->file_size)
2000. 							sp->in_buffer_file_pos=0;

libtiff/tif_dirread.c:6248:1: Parameter `strile`
  6246. 
  6247. /* Return the value of the TileByteCounts/StripByteCounts array for the specified tile/strile */
  6248. uint64 TIFFGetStrileByteCount(TIFF *tif, uint32 strile)
        ^
  6249. {
  6250.     return TIFFGetStrileByteCountWithErr(tif, strile, NULL);

libtiff/tif_dirread.c:6250:12: Call
  6248. uint64 TIFFGetStrileByteCount(TIFF *tif, uint32 strile)
  6249. {
  6250.     return TIFFGetStrileByteCountWithErr(tif, strile, NULL);
                   ^
  6251. }
  6252. 

libtiff/tif_dirread.c:6254:1: Parameter `strile`
    6252. 
    6253. /* Return the value of the TileByteCounts/StripByteCounts array for the specified tile/strile */
    6254. uint64 TIFFGetStrileByteCountWithErr(TIFF *tif, uint32 strile, int *pbErr)
          ^
    6255. {
    6256.     TIFFDirectory *td = &tif->tif_dir;

libtiff/tif_dirread.c:6257:12: Call
    6255. {
    6256.     TIFFDirectory *td = &tif->tif_dir;
    6257.     return _TIFFGetStrileOffsetOrByteCountValue(tif, strile,
                     ^
    6258.                                &(td->td_stripbytecount_entry),
    6259.                                &(td->td_stripbytecount_p), pbErr);

libtiff/tif_dirread.c:6191:1: <Offset trace>
6189. }
6190. 
6191. static uint64 _TIFFGetStrileOffsetOrByteCountValue(TIFF *tif, uint32 strile,
      ^
6192.                                                    TIFFDirEntry* dirent,
6193.                                                    uint64** parray,

libtiff/tif_dirread.c:6191:1: Parameter `strile`
      6189. }
      6190. 
      6191. static uint64 _TIFFGetStrileOffsetOrByteCountValue(TIFF *tif, uint32 strile,
            ^
      6192.                                                    TIFFDirEntry* dirent,
      6193.                                                    uint64** parray,

libtiff/tif_dirread.c:6191:1: <Length trace>
6189. }
6190. 
6191. static uint64 _TIFFGetStrileOffsetOrByteCountValue(TIFF *tif, uint32 strile,
      ^
6192.                                                    TIFFDirEntry* dirent,
6193.                                                    uint64** parray,

libtiff/tif_dirread.c:6191:1: Parameter `**parray`
      6189. }
      6190. 
      6191. static uint64 _TIFFGetStrileOffsetOrByteCountValue(TIFF *tif, uint32 strile,
            ^
      6192.                                                    TIFFDirEntry* dirent,
      6193.                                                    uint64** parray,

libtiff/tif_dirread.c:6229:12: Array access: Offset: [sp->in_buffer_next_strile, +oo] Size: [0, +oo] by call to `TIFFGetStrileByteCount` 
      6227.         return 0;
      6228.     }
      6229.     return (*parray)[strile];
                       ^
      6230. }
      6231. 
