tools/tiff2pdf.c:5535: error: Integer Overflow L2
  ([0, max(4294967295, `input->tif_dir.td_tilelength`)] - 1):unsigned32 by call to `t2p_readwrite_pdf_image_tile`.

tools/tiff2pdf.c:5415:1: Parameter `input->tif_dir.td_tilelength`
5413. */
5414. 
5415. tsize_t t2p_write_pdf(T2P* t2p, TIFF* input, TIFF* output){
      ^
5416. 
5417. 	tsize_t written=0;

tools/tiff2pdf.c:5422:2: Call
5420. 	uint16 i=0;
5421. 
5422. 	t2p_read_tiff_init(t2p, input);
       ^
5423. 	if(t2p->t2p_error!=T2P_ERR_OK){return(0);}
5424. 	t2p->pdf_xrefoffsets= (uint32*) _TIFFmalloc(TIFFSafeMultiply(tmsize_t,t2p->pdf_xrefcount,sizeof(uint32)) );

tools/tiff2pdf.c:1043:1: Parameter `input->tif_dir.td_tilelength`
  1041. */
  1042. 
  1043. void t2p_read_tiff_init(T2P* t2p, TIFF* input){
        ^
  1044. 
  1045. 	tdir_t directorycount=0;

tools/tiff2pdf.c:5454:3: Call
5452. 	written += t2p_write_pdf_obj_end(output);
5453. 	for(t2p->pdf_page=0;t2p->pdf_page<t2p->tiff_pagecount;t2p->pdf_page++){
5454. 		t2p_read_tiff_data(t2p, input);
        ^
5455. 		if(t2p->t2p_error!=T2P_ERR_OK){return(0);}
5456. 		t2p->pdf_xrefoffsets[t2p->pdf_xrefcount++]=written;

tools/tiff2pdf.c:1258:1: Parameter `input->tif_dir.td_tilelength`
  1256. */
  1257. 
  1258. void t2p_read_tiff_data(T2P* t2p, TIFF* input){
        ^
  1259. 
  1260. 	int i=0;

tools/tiff2pdf.c:1274:2: Call
  1272.         
  1273. 	
  1274. 	TIFFSetDirectory(input, t2p->tiff_pages[t2p->pdf_page].page_directory);
         ^
  1275. 
  1276. 	TIFFGetField(input, TIFFTAG_IMAGEWIDTH, &(t2p->tiff_width));

libtiff/tif_dir.c:1595:1: Parameter `tif->tif_dir.td_tilelength`
    1593.  * NB: Directories are numbered starting at 0.
    1594.  */
    1595. int
          ^
    1596. TIFFSetDirectory(TIFF* tif, uint16 dirn)
    1597. {

tools/tiff2pdf.c:5534:5: Call
5532. 				written += t2p_write_pdf_stream_start(output);
5533. 				streamlen=written;
5534. 				t2p_read_tiff_size_tile(t2p, input, i2);
          ^
5535. 				written += t2p_readwrite_pdf_image_tile(t2p, input, output, i2);
5536. 				t2p_write_advance_directory(t2p, output);

tools/tiff2pdf.c:2037:1: Parameter `input->tif_dir.td_tilelength`
  2035. */
  2036. 
  2037. void t2p_read_tiff_size_tile(T2P* t2p, TIFF* input, ttile_t tile){
        ^
  2038. 
  2039. 	uint64* tbc = NULL;

tools/tiff2pdf.c:5535:16: Call
5533. 				streamlen=written;
5534. 				t2p_read_tiff_size_tile(t2p, input, i2);
5535. 				written += t2p_readwrite_pdf_image_tile(t2p, input, output, i2);
                     ^
5536. 				t2p_write_advance_directory(t2p, output);
5537. 				if(t2p->t2p_error!=T2P_ERR_OK){return(0);}

tools/tiff2pdf.c:2761:1: Parameter `input->tif_dir.td_tilelength`
  2759.  */
  2760. 
  2761. tsize_t t2p_readwrite_pdf_image_tile(T2P* t2p, TIFF* input, TIFF* output, ttile_t tile){
        ^
  2762. 
  2763. 	uint16 edge=0;

tools/tiff2pdf.c:2946:10: Call
  2944. 		}
  2945. 
  2946. 		read = TIFFReadEncodedTile(
                 ^
  2947. 			input, 
  2948. 			tile, 

libtiff/tif_read.c:681:1: Parameter `tif->tif_dir.td_tilelength`
    679.  * amount into the user-supplied buffer.
    680.  */
    681. tmsize_t
         ^
    682. TIFFReadEncodedTile(TIFF* tif, uint32 tile, void* buf, tmsize_t size)
    683. {

libtiff/tif_read.c:718:6: Call
    716. 	else if (size > tilesize)
    717. 		size = tilesize;
    718. 	if (TIFFFillTile(tif, tile) && (*tif->tif_decodetile)(tif,
              ^
    719. 	    (uint8*) buf, size, (uint16)(tile/td->td_stripsperimage))) {
    720. 		(*tif->tif_postdecode)(tif, (uint8*) buf, size);

libtiff/tif_read.c:842:1: Parameter `tif->tif_dir.td_tilelength`
      840.  * expanded, as necessary, to hold the tile's data.
      841.  */
      842. int
           ^
      843. TIFFFillTile(TIFF* tif, uint32 tile)
      844. {

libtiff/tif_read.c:951:10: Call
      949. 		}
      950. 	}
      951. 	return (TIFFStartTile(tif, tile));
                    ^
      952. }
      953. 

libtiff/tif_read.c:1040:1: <LHS trace>
1038.  * tile has just been read in.
1039.  */
1040. static int
      ^
1041. TIFFStartTile(TIFF* tif, uint32 tile)
1042. {

libtiff/tif_read.c:1040:1: Parameter `tif->tif_dir.td_imagelength`
        1038.  * tile has just been read in.
        1039.  */
        1040. static int
              ^
        1041. TIFFStartTile(TIFF* tif, uint32 tile)
        1042. {

libtiff/tif_read.c:1062:19: Binary operation: ([0, max(4294967295, input->tif_dir.td_tilelength)] - 1):unsigned32 by call to `t2p_readwrite_pdf_image_tile` 
        1060.         }
        1061. 	tif->tif_row = (tile % howmany32) * td->td_tilelength;
        1062.         howmany32=TIFFhowmany_32(td->td_imagelength, td->td_tilelength);
                                ^
        1063.         if (howmany32 == 0) {
        1064.                 TIFFErrorExt(tif->tif_clientdata,module,"Zero tiles");
