libtiff/tif_dirinfo.c:913: error: Buffer Overrun S2
  Offset: `tif->tif_nfieldscompat` Size: [0, +oo].

libtiff/tif_dirinfo.c:887:1: <Offset trace>
885. }
886. 
887. int
     ^
888. TIFFMergeFieldInfo(TIFF* tif, const TIFFFieldInfo info[], uint32 n)
889. {

libtiff/tif_dirinfo.c:887:1: Parameter `tif->tif_nfieldscompat`
885. }
886. 
887. int
     ^
888. TIFFMergeFieldInfo(TIFF* tif, const TIFFFieldInfo info[], uint32 n)
889. {

libtiff/tif_dirinfo.c:911:2: Assignment
909. 		return -1;
910. 	}
911. 	nfields = tif->tif_nfieldscompat++;
      ^
912. 
913. 	tif->tif_fieldscompat[nfields].type = tfiatOther;

libtiff/tif_dirinfo.c:887:1: <Length trace>
885. }
886. 
887. int
     ^
888. TIFFMergeFieldInfo(TIFF* tif, const TIFFFieldInfo info[], uint32 n)
889. {

libtiff/tif_dirinfo.c:887:1: Parameter `*tif->tif_fieldscompat`
885. }
886. 
887. int
     ^
888. TIFFMergeFieldInfo(TIFF* tif, const TIFFFieldInfo info[], uint32 n)
889. {

libtiff/tif_dirinfo.c:898:4: Call
896. 	if (tif->tif_nfieldscompat > 0) {
897. 		tif->tif_fieldscompat = (TIFFFieldArray *)
898. 			_TIFFCheckRealloc(tif, tif->tif_fieldscompat,
        ^
899. 					  tif->tif_nfieldscompat + 1,
900. 					  sizeof(TIFFFieldArray), reason);

libtiff/tif_aux.c:99:2: Assignment
   97. 		  tmsize_t nmemb, tmsize_t elem_size, const char* what)
   98. {
   99. 	void* cp = NULL;
        ^
  100.         tmsize_t count = _TIFFMultiplySSize(tif, nmemb, elem_size, NULL);
  101. 	/*

libtiff/tif_aux.c:116:2: Assignment
  114. 	}
  115. 
  116. 	return cp;
        ^
  117. }
  118. 

libtiff/tif_dirinfo.c:897:3: Assignment
895. 
896. 	if (tif->tif_nfieldscompat > 0) {
897. 		tif->tif_fieldscompat = (TIFFFieldArray *)
       ^
898. 			_TIFFCheckRealloc(tif, tif->tif_fieldscompat,
899. 					  tif->tif_nfieldscompat + 1,

libtiff/tif_dirinfo.c:913:2: Array access: Offset: tif->tif_nfieldscompat Size: [0, +oo]
911. 	nfields = tif->tif_nfieldscompat++;
912. 
913. 	tif->tif_fieldscompat[nfields].type = tfiatOther;
      ^
914. 	tif->tif_fieldscompat[nfields].allocated_size = n;
915. 	tif->tif_fieldscompat[nfields].count = n;
