tools/tiff2ps.c:2279: error: Buffer Overrun L3
  Offset: [1, +oo] Size: [0, +oo].

tools/tiff2ps.c:2265:4: <Offset trace>
2263. 		 */
2264. 		if (alpha) {
2265. 			int adjust, i, j = 0;
         ^
2266. 			int ncomps = samplesperpixel - extrasamples;
2267. 			for (i = 0; (i + ncomps) < byte_count; i+=samplesperpixel) {

tools/tiff2ps.c:2265:4: Assignment
2263. 		 */
2264. 		if (alpha) {
2265. 			int adjust, i, j = 0;
         ^
2266. 			int ncomps = samplesperpixel - extrasamples;
2267. 			for (i = 0; (i + ncomps) < byte_count; i+=samplesperpixel) {

tools/tiff2ps.c:2278:16: Assignment
2276. 						break;
2277. 					case 3:
2278. 						buf_data[j++] = buf_data[i] + adjust;
                     ^
2279. 						buf_data[j++] = buf_data[i+1] + adjust;
2280. 						buf_data[j++] = buf_data[i+2] + adjust;

tools/tiff2ps.c:2180:3: <Length trace>
2178. 
2179. 	if (use_rawdata) {
2180. 		chunk_size = (tsize_t) bc[0];
        ^
2181. 		for (chunk_no = 1; chunk_no < num_chunks; chunk_no++)
2182. 			if ((tsize_t) bc[chunk_no] > chunk_size)

tools/tiff2ps.c:2180:3: Assignment
2178. 
2179. 	if (use_rawdata) {
2180. 		chunk_size = (tsize_t) bc[0];
        ^
2181. 		for (chunk_no = 1; chunk_no < num_chunks; chunk_no++)
2182. 			if ((tsize_t) bc[chunk_no] > chunk_size)

tools/tiff2ps.c:2190:30: Call
2188. 			chunk_size = TIFFStripSize(tif);
2189. 	}
2190. 	buf_data = (unsigned char *)_TIFFmalloc(chunk_size);
                                   ^
2191. 	if (!buf_data) {
2192. 		TIFFError(filename, "Can't alloc %lu bytes for %s.",

libtiff/tif_unix.c:312:17: Assignment
  310. {
  311.         if (s == 0)
  312.                 return ((void *) NULL);
                       ^
  313. 
  314. 	return (malloc((size_t) s));

tools/tiff2ps.c:2190:2: Assignment
2188. 			chunk_size = TIFFStripSize(tif);
2189. 	}
2190. 	buf_data = (unsigned char *)_TIFFmalloc(chunk_size);
       ^
2191. 	if (!buf_data) {
2192. 		TIFFError(filename, "Can't alloc %lu bytes for %s.",

tools/tiff2ps.c:2279:7: Array access: Offset: [1, +oo] Size: [0, +oo]
2277. 					case 3:
2278. 						buf_data[j++] = buf_data[i] + adjust;
2279. 						buf_data[j++] = buf_data[i+1] + adjust;
            ^
2280. 						buf_data[j++] = buf_data[i+2] + adjust;
2281. 						break;
