libtiff/tif_dirwrite.c:557: error: Buffer Overrun L3
  Offset: [0, 23] Size: [0, +oo] by call to `TIFFWriteDirectoryTagLongLong8Array`.

libtiff/tif_dirwrite.c:422:2: Assignment
420. 		tif->tif_flags &= ~(TIFF_BEENWRITING|TIFF_BUFFERSETUP);
421. 	}
422. 	dir=NULL;
      ^
423. 	dirmem=NULL;
424. 	dirsize=0;

libtiff/tif_dirwrite.c:557:26: Call
555.                     */
556.                     if (tif->tif_dir.td_stripoffset != NULL &&
557.                         !TIFFWriteDirectoryTagLongLong8Array(tif,&ndir,dir,TIFFTAG_STRIPOFFSETS,tif->tif_dir.td_nstrips,tif->tif_dir.td_stripoffset))
                              ^
558.                         goto bad;
559. 				}

libtiff/tif_dirwrite.c:1601:1: Parameter `*dir`
  1599. /************************************************************************/
  1600. 
  1601. static int
        ^
  1602. TIFFWriteDirectoryTagLongLong8Array(TIFF* tif, uint32* ndir, TIFFDirEntry* dir, uint16 tag, uint32 count, uint64* value)
  1603. {

libtiff/tif_dirwrite.c:1647:7: Call
  1645.     }
  1646. 
  1647.     o=TIFFWriteDirectoryTagCheckedLongArray(tif,ndir,dir,tag,count,p);
              ^
  1648.     _TIFFfree(p);
  1649. 

libtiff/tif_dirwrite.c:2011:1: Parameter `*dir`
    2009. }
    2010. 
    2011. static int
          ^
    2012. TIFFWriteDirectoryTagCheckedLongArray(TIFF* tif, uint32* ndir, TIFFDirEntry* dir, uint16 tag, uint32 count, uint32* value)
    2013. {

libtiff/tif_dirwrite.c:2018:9: Call
    2016. 	if (tif->tif_flags&TIFF_SWAB)
    2017. 		TIFFSwabArrayOfLong(value,count);
    2018. 	return(TIFFWriteDirectoryTagData(tif,ndir,dir,tag,TIFF_LONG,count,count*4,value));
                  ^
    2019. }
    2020. 

libtiff/tif_dirwrite.c:2307:1: <Offset trace>
2305. }
2306. 
2307. static int
      ^
2308. TIFFWriteDirectoryTagData(TIFF* tif, uint32* ndir, TIFFDirEntry* dir, uint16 tag, uint16 datatype, uint32 count, uint32 datalength, void* data)
2309. {

libtiff/tif_dirwrite.c:2307:1: Parameter `*ndir`
      2305. }
      2306. 
      2307. static int
            ^
      2308. TIFFWriteDirectoryTagData(TIFF* tif, uint32* ndir, TIFFDirEntry* dir, uint16 tag, uint16 datatype, uint32 count, uint32 datalength, void* data)
      2309. {

libtiff/tif_dirwrite.c:2307:1: <Length trace>
2305. }
2306. 
2307. static int
      ^
2308. TIFFWriteDirectoryTagData(TIFF* tif, uint32* ndir, TIFFDirEntry* dir, uint16 tag, uint16 datatype, uint32 count, uint32 datalength, void* data)
2309. {

libtiff/tif_dirwrite.c:2307:1: Parameter `*dir`
      2305. }
      2306. 
      2307. static int
            ^
      2308. TIFFWriteDirectoryTagData(TIFF* tif, uint32* ndir, TIFFDirEntry* dir, uint16 tag, uint16 datatype, uint32 count, uint32 datalength, void* data)
      2309. {

libtiff/tif_dirwrite.c:2326:2: Array access: Offset: [0, 23] Size: [0, +oo] by call to `TIFFWriteDirectoryTagLongLong8Array` 
      2324. 			dir[n]=dir[n-1];
      2325. 	}
      2326. 	dir[m].tdir_tag=tag;
             ^
      2327. 	dir[m].tdir_type=datatype;
      2328. 	dir[m].tdir_count=count;
