tools/tiff2ps.c:2256: error: Buffer Overrun L3
  Offset: [7, +oo] (⇐ [0, +oo] + 7) Size: [0, +oo] by call to `TIFFReverseBits`.

tools/tiff2ps.c:2203:3: Assignment
2201. 
2202. 	if (use_rawdata) {
2203. 		chunk_size = (tsize_t) bc[0];
        ^
2204. 		for (chunk_no = 1; chunk_no < num_chunks; chunk_no++)
2205. 			if ((tsize_t) bc[chunk_no] > chunk_size)

tools/tiff2ps.c:2213:30: Call
2211. 			chunk_size = TIFFStripSize(tif);
2212. 	}
2213. 	buf_data = (unsigned char *)limitMalloc(chunk_size);
                                   ^
2214. 	if (!buf_data) {
2215. 		TIFFError(filename, "Can't alloc %lu bytes for %s.",

tools/tiff2ps.c:252:3: Assignment
  250. 		        (uint64)s, (uint64)maxMalloc);
  251. 		fprintf(stderr, "                  use -M option to change limit.\n");
  252. 		return NULL;
         ^
  253. 	}
  254. 	return _TIFFmalloc(s);

tools/tiff2ps.c:2213:2: Assignment
2211. 			chunk_size = TIFFStripSize(tif);
2212. 	}
2213. 	buf_data = (unsigned char *)limitMalloc(chunk_size);
       ^
2214. 	if (!buf_data) {
2215. 		TIFFError(filename, "Can't alloc %lu bytes for %s.",

tools/tiff2ps.c:2256:8: Call
2254. 						  buf_data, chunk_size);
2255. 			if (fillorder == FILLORDER_LSB2MSB)
2256. 			    TIFFReverseBits(buf_data, byte_count);
             ^
2257. 		} else {
2258. 			if (tiled_image)

libtiff/tif_swab.c:283:1: <Length trace>
281. }
282. 
283. void
     ^
284. TIFFReverseBits(uint8* cp, tmsize_t n)  
285. {

libtiff/tif_swab.c:283:1: Parameter `*cp`
  281. }
  282. 
  283. void
       ^
  284. TIFFReverseBits(uint8* cp, tmsize_t n)  
  285. {

libtiff/tif_swab.c:294:3: Array access: Offset: [7, +oo] (⇐ [0, +oo] + 7) Size: [0, +oo] by call to `TIFFReverseBits` 
  292. 		cp[5] = TIFFBitRevTable[cp[5]];
  293. 		cp[6] = TIFFBitRevTable[cp[6]];
  294. 		cp[7] = TIFFBitRevTable[cp[7]];
         ^
  295. 		cp += 8;
  296. 	}
