contrib/addtiffo/tif_ovrcache.c:203: error: Integer Overflow L2
  ([0, 4294967294] + [0, 4294967294]):unsigned32 by call to `TIFFWriteEncodedStrip`.

contrib/addtiffo/tif_ovrcache.c:167:12: Call
165. /* -------------------------------------------------------------------- */
166.     nBaseDirOffset = TIFFCurrentDirOffset( psCache->hTIFF );
167.     nRet = TIFFSetSubDirectory( psCache->hTIFF, psCache->nDirOffset );
                ^
168.     assert( nRet == 1 );
169. 

libtiff/tif_dir.c:1406:1: Parameter `tif->tif_dir.td_imagewidth`
  1404.  * the SubIFD tag (e.g. thumbnail images).
  1405.  */
  1406. int
        ^
  1407. TIFFSetSubDirectory(TIFF* tif, uint64 diroff)
  1408. {

libtiff/tif_dir.c:1415:10: Call
  1413. 	 */
  1414. 	tif->tif_dirnumber = 0;
  1415. 	return (TIFFReadDirectory(tif));
                 ^
  1416. }
  1417. 

libtiff/tif_dirread.c:3404:1: Parameter `tif->tif_dir.td_imagewidth`
    3402.  * format. We read directories sequentially.
    3403.  */
    3404. int
          ^
    3405. TIFFReadDirectory(TIFF* tif)
    3406. {

contrib/addtiffo/tif_ovrcache.c:205:10: Call
203. 					TIFFWriteEncodedStrip( psCache->hTIFF, nTileID,
204. 					    pabyData,
205. 					    TIFFVStripSize(psCache->hTIFF,RowsInStrip) );
              ^
206. 				}
207. 			}

libtiff/tif_strip.c:127:1: Parameter `tif->tif_dir.td_imagewidth`
  125. 		return(_TIFFMultiply64(tif,nrows,TIFFScanlineSize64(tif),module));
  126. }
  127. tmsize_t
       ^
  128. TIFFVStripSize(TIFF* tif, uint32 nrows)
  129. {

libtiff/tif_strip.c:133:4: Call
  131. 	uint64 m;
  132. 	tmsize_t n;
  133. 	m=TIFFVStripSize64(tif,nrows);
          ^
  134. 	n=(tmsize_t)m;
  135. 	if ((uint64)n!=m)

libtiff/tif_strip.c:77:1: Parameter `tif->tif_dir.td_imagewidth`
    75.  * Compute the # bytes in a variable height, row-aligned strip.
    76.  */
    77. uint64
        ^
    78. TIFFVStripSize64(TIFF* tif, uint32 nrows)
    79. {

contrib/addtiffo/tif_ovrcache.c:203:6: Call
201. 					if ((iTileY+1)*psCache->nBlockYSize>psCache->nYSize)
202. 						RowsInStrip=psCache->nYSize-iTileY*psCache->nBlockYSize;
203. 					TIFFWriteEncodedStrip( psCache->hTIFF, nTileID,
          ^
204. 					    pabyData,
205. 					    TIFFVStripSize(psCache->hTIFF,RowsInStrip) );

libtiff/tif_write.c:183:1: Parameter `tif->tif_dir.td_imagewidth`
  181.  * NB: Image length must be setup before writing.
  182.  */
  183. tmsize_t
       ^
  184. TIFFWriteEncodedStrip(TIFF* tif, uint32 strip, void* data, tmsize_t cc)
  185. {

libtiff/tif_write.c:190:7: Call
  188. 	uint16 sample;
  189. 
  190. 	if (!WRITECHECKSTRIPS(tif, module))
             ^
  191. 		return ((tmsize_t) -1);
  192. 	/*

libtiff/tif_write.c:488:1: Parameter `tif->tif_dir.td_imagewidth`
    486.  * that important information is not changed.
    487.  */
    488. int
         ^
    489. TIFFWriteCheck(TIFF* tif, int tiles, const char* module)
    490. {

libtiff/tif_write.c:533:46: Call
    531. 		}
    532. 	}
    533. 	if (tif->tif_dir.td_stripoffset == NULL && !TIFFSetupStrips(tif)) {
                                                      ^
    534. 		tif->tif_dir.td_nstrips = 0;
    535. 		TIFFErrorExt(tif->tif_clientdata, module, "No space for %s arrays",

libtiff/tif_write.c:448:1: Parameter `tif->tif_dir.td_imagewidth`
      446.     (TIFFFieldSet(tif,f) && (tif)->tif_dir.td_imagelength == 0)
      447. 
      448. int
           ^
      449. TIFFSetupStrips(TIFF* tif)
      450. {

libtiff/tif_write.c:456:29: Call
      454. 		td->td_stripsperimage =
      455. 		    isUnspecified(tif, FIELD_TILEDIMENSIONS) ?
      456. 			td->td_samplesperpixel : TIFFNumberOfTiles(tif);
                                       ^
      457. 	else
      458. 		td->td_stripsperimage =

libtiff/tif_tile.c:114:1: <LHS trace>
112.  * Compute how many tiles are in an image.
113.  */
114. uint32
     ^
115. TIFFNumberOfTiles(TIFF* tif)
116. {

libtiff/tif_tile.c:114:1: Parameter `tif->tif_dir.td_imagewidth`
        112.  * Compute how many tiles are in an image.
        113.  */
        114. uint32
             ^
        115. TIFFNumberOfTiles(TIFF* tif)
        116. {

libtiff/tif_tile.c:114:1: <RHS trace>
112.  * Compute how many tiles are in an image.
113.  */
114. uint32
     ^
115. TIFFNumberOfTiles(TIFF* tif)
116. {

libtiff/tif_tile.c:114:1: Parameter `tif->tif_dir.td_imagewidth`
        112.  * Compute how many tiles are in an image.
        113.  */
        114. uint32
             ^
        115. TIFFNumberOfTiles(TIFF* tif)
        116. {

libtiff/tif_tile.c:130:48: Binary operation: ([0, 4294967294] + [0, 4294967294]):unsigned32 by call to `TIFFWriteEncodedStrip` 
        128. 		dz = td->td_imagedepth;
        129. 	ntiles = (dx == 0 || dy == 0 || dz == 0) ? 0 :
        130. 	    _TIFFMultiply32(tif, _TIFFMultiply32(tif, TIFFhowmany_32(td->td_imagewidth, dx),
                                                            ^
        131. 	    TIFFhowmany_32(td->td_imagelength, dy),
        132. 	    "TIFFNumberOfTiles"),
