libtiff/tif_getimage.c:809: error: Integer Overflow L2
  ([0, +oo] - 1):unsigned32 by call to `_TIFFReadTileAndAllocBuffer`.

libtiff/tif_getimage.c:809:33: Call
807.                         if( buf == NULL )
808.                         {
809.                             if (_TIFFReadTileAndAllocBuffer(
                                     ^
810.                                     tif, (void**) &buf, bufsize, col,
811.                                     row+img->row_offset,0,0)==(tmsize_t)(-1)

libtiff/tif_read.c:1021:1: Parameter `tif->tif_dir.td_imagewidth`
  1019.  * * calls regular TIFFReadEncodedTile() if *buf != NULL
  1020.  */
  1021. tmsize_t
        ^
  1022. _TIFFReadTileAndAllocBuffer(TIFF* tif,
  1023.                             void **buf, tmsize_t bufsizetoalloc,

libtiff/tif_getimage.c:809:33: Call
807.                         if( buf == NULL )
808.                         {
809.                             if (_TIFFReadTileAndAllocBuffer(
                                     ^
810.                                     tif, (void**) &buf, bufsize, col,
811.                                     row+img->row_offset,0,0)==(tmsize_t)(-1)

libtiff/tif_read.c:1021:1: Parameter `tif->tif_dir.td_imagewidth`
  1019.  * * calls regular TIFFReadEncodedTile() if *buf != NULL
  1020.  */
  1021. tmsize_t
        ^
  1022. _TIFFReadTileAndAllocBuffer(TIFF* tif,
  1023.                             void **buf, tmsize_t bufsizetoalloc,

libtiff/tif_getimage.c:809:33: Call
807.                         if( buf == NULL )
808.                         {
809.                             if (_TIFFReadTileAndAllocBuffer(
                                     ^
810.                                     tif, (void**) &buf, bufsize, col,
811.                                     row+img->row_offset,0,0)==(tmsize_t)(-1)

libtiff/tif_read.c:1021:1: Parameter `tif->tif_dir.td_imagewidth`
  1019.  * * calls regular TIFFReadEncodedTile() if *buf != NULL
  1020.  */
  1021. tmsize_t
        ^
  1022. _TIFFReadTileAndAllocBuffer(TIFF* tif,
  1023.                             void **buf, tmsize_t bufsizetoalloc,

libtiff/tif_read.c:1026:36: Call
  1024.                             uint32 x, uint32 y, uint32 z, uint16 s)
  1025. {
  1026.     if (!TIFFCheckRead(tif, 1) || !TIFFCheckTile(tif, x, y, z, s))
                                           ^
  1027.             return ((tmsize_t)(-1));
  1028.     return (_TIFFReadEncodedTileAndAllocBuffer(tif,

libtiff/tif_tile.c:72:1: <LHS trace>
70.  * against the image bounds.
71.  */
72. int
    ^
73. TIFFCheckTile(TIFF* tif, uint32 x, uint32 y, uint32 z, uint16 s)
74. {

libtiff/tif_tile.c:72:1: Parameter `x`
    70.  * against the image bounds.
    71.  */
    72. int
        ^
    73. TIFFCheckTile(TIFF* tif, uint32 x, uint32 y, uint32 z, uint16 s)
    74. {

libtiff/tif_tile.c:78:3: Binary operation: ([0, +oo] - 1):unsigned32 by call to `_TIFFReadTileAndAllocBuffer` 
    76. 
    77. 	if (x >= td->td_imagewidth) {
    78. 		TIFFErrorExt(tif->tif_clientdata, tif->tif_name,
          ^
    79. 			     "%lu: Col out of range, max %lu",
    80. 			     (unsigned long) x,
