tools/tiffcrop.c:1239: error: Integer Overflow L2
  ([0, `out->tif_dir.td_imagelength`] - 1):unsigned32 by call to `TIFFWriteTile`.

tools/tiffcrop.c:1182:1: Parameter `out->tif_dir.td_imagelength`
1180.  * to be written out as a tile.
1181.  */
1182. static int writeBufferToContigTiles (TIFF* out, uint8* buf, uint32 imagelength,
      ^
1183. 				       uint32 imagewidth, tsample_t spp, 
1184.                                        struct dump_opts* dump)

tools/tiffcrop.c:1239:11: Call
1237.         }
1238. 
1239.       if (TIFFWriteTile(out, tilebuf, col, row, 0, 0) < 0)
                ^
1240.         {
1241. 	TIFFError("writeBufferToContigTiles",

libtiff/tif_write.c:312:1: Parameter `tif->tif_dir.td_imagelength`
  310.  * tile is selected by the (x,y,z,s) coordinates.
  311.  */
  312. tmsize_t
       ^
  313. TIFFWriteTile(TIFF* tif, void* buf, uint32 x, uint32 y, uint32 z, uint16 s)
  314. {

libtiff/tif_write.c:315:7: Call
  313. TIFFWriteTile(TIFF* tif, void* buf, uint32 x, uint32 y, uint32 z, uint16 s)
  314. {
  315. 	if (!TIFFCheckTile(tif, x, y, z, s))
             ^
  316. 		return ((tmsize_t)(-1));
  317. 	/*

libtiff/tif_tile.c:100:1: <LHS trace>
 98.  * against the image bounds.
 99.  */
100. int
     ^
101. TIFFCheckTile(TIFF* tif, uint32 x, uint32 y, uint32 z, uint16 s)
102. {

libtiff/tif_tile.c:100:1: Parameter `y`
     98.  * against the image bounds.
     99.  */
    100. int
         ^
    101. TIFFCheckTile(TIFF* tif, uint32 x, uint32 y, uint32 z, uint16 s)
    102. {

libtiff/tif_tile.c:113:3: Binary operation: ([0, out->tif_dir.td_imagelength] - 1):unsigned32 by call to `TIFFWriteTile` 
    111. 	}
    112. 	if (y >= td->td_imagelength) {
    113. 		TIFFErrorExt(tif->tif_clientdata, tif->tif_name,
           ^
    114. 			     "%lu: Row out of range, max %lu",
    115. 			     (unsigned long) y,
