libtiff/tif_dirread.c:2752: error: Buffer Overrun L3
  Offset: [1, +oo] Size: [0, +oo].

libtiff/tif_dirread.c:2743:6: <Length trace>
2741. 	if (direntry->tdir_count<(uint64)tif->tif_dir.td_samplesperpixel)
2742. 		return(TIFFReadDirEntryErrCount);
2743. 	err=TIFFReadDirEntryShortArray(tif,direntry,&m);
           ^
2744. 	if (err!=TIFFReadDirEntryErrOk)
2745. 		return(err);

libtiff/tif_dirread.c:2743:6: Call
2741. 	if (direntry->tdir_count<(uint64)tif->tif_dir.td_samplesperpixel)
2742. 		return(TIFFReadDirEntryErrCount);
2743. 	err=TIFFReadDirEntryShortArray(tif,direntry,&m);
           ^
2744. 	if (err!=TIFFReadDirEntryErrOk)
2745. 		return(err);

libtiff/tif_dirread.c:1194:1: Parameter `**value`
  1192. }
  1193. 
  1194. static enum TIFFReadDirEntryErr TIFFReadDirEntryShortArray(TIFF* tif, TIFFDirEntry* direntry, uint16** value)
        ^
  1195. {
  1196. 	enum TIFFReadDirEntryErr err;

libtiff/tif_dirread.c:2746:2: Assignment
2744. 	if (err!=TIFFReadDirEntryErrOk)
2745. 		return(err);
2746. 	na=m;
       ^
2747. 	nb=tif->tif_dir.td_samplesperpixel;
2748. 	*value=*na++;

libtiff/tif_dirread.c:2748:10: Assignment
2746. 	na=m;
2747. 	nb=tif->tif_dir.td_samplesperpixel;
2748. 	*value=*na++;
               ^
2749. 	nb--;
2750. 	while (nb>0)

libtiff/tif_dirread.c:2752:7: Array access: Offset: [1, +oo] Size: [0, +oo]
2750. 	while (nb>0)
2751. 	{
2752. 		if (*na++!=*value)
            ^
2753. 		{
2754. 			err=TIFFReadDirEntryErrPsdif;
