tools/tiffdump.c:494: error: Buffer Overrun L3
  Offset: [71, +oo] (⇐ [64, +oo] + 7) Size: [0, +oo] by call to `TIFFSwabArrayOfLong8`.

tools/tiffdump.c:290:3: Assignment
288. 		if (swabflag)
289. 			TIFFSwabShort(&dircount);
290. 		direntrysize = 12;
       ^
291. 	} else {
292. 		uint64 dircount64 = 0;

tools/tiffdump.c:306:11: Call
304. 		direntrysize = 20;
305. 	}
306. 	dirmem = _TIFFmalloc(dircount * direntrysize);
               ^
307. 	if (dirmem == NULL) {
308. 		Fatal("No space for TIFF directory");

libtiff/tif_unix.c:261:17: Assignment
  259. {
  260.         if (s == 0)
  261.                 return ((void *) NULL);
                       ^
  262. 
  263. 	return (malloc((size_t) s));

tools/tiffdump.c:306:2: Assignment
304. 		direntrysize = 20;
305. 	}
306. 	dirmem = _TIFFmalloc(dircount * direntrysize);
      ^
307. 	if (dirmem == NULL) {
308. 		Fatal("No space for TIFF directory");

tools/tiffdump.c:348:7: Assignment
346. 	    (unsigned long long)nextdiroff, (unsigned long long)nextdiroff);
347. #endif
348. 	for (dp = (uint8*)dirmem, n = dircount; n > 0; n--) {
           ^
349. 		uint16 tag;
350. 		uint16 type;

tools/tiffdump.c:361:3: Assignment
359. 		if (swabflag)
360. 			TIFFSwabShort(&tag);
361. 		dp += sizeof(uint16);
       ^
362. 		type = *(uint16*)dp;
363. 		dp += sizeof(uint16);

tools/tiffdump.c:363:3: Assignment
361. 		dp += sizeof(uint16);
362. 		type = *(uint16*)dp;
363. 		dp += sizeof(uint16);
       ^
364. 		if (swabflag)
365. 			TIFFSwabShort(&type);

tools/tiffdump.c:376:4: Assignment
374. 			if (swabflag)
375. 				TIFFSwabLong(&count32);
376. 			dp += sizeof(uint32);
        ^
377. 			count = count32;
378. 		}

tools/tiffdump.c:397:3: Assignment
395. 		datasize = count*typewidth;
396. 		datafits = 1;
397. 		datamem = dp;
       ^
398. 		dataoffset = 0;
399. 		datatruncated = 0;

tools/tiffdump.c:494:7: Call
492. 					case TIFF_SLONG8:
493. 					case TIFF_IFD8:
494. 						TIFFSwabArrayOfLong8((uint64*)datamem,(tmsize_t)count);
           ^
495. 						break;
496. 				}

libtiff/tif_swab.c:121:1: <Length trace>
119. 
120. #ifndef TIFFSwabArrayOfLong8
121. void
     ^
122. TIFFSwabArrayOfLong8(register uint64* lp, tmsize_t n)
123. {

libtiff/tif_swab.c:121:1: Parameter `*lp`
  119. 
  120. #ifndef TIFFSwabArrayOfLong8
  121. void
       ^
  122. TIFFSwabArrayOfLong8(register uint64* lp, tmsize_t n)
  123. {

libtiff/tif_swab.c:129:3: Assignment
  127. 	/* XXX unroll loop some */
  128. 	while (n-- > 0) {
  129. 		cp = (unsigned char *)lp;
         ^
  130. 		t = cp[7]; cp[7] = cp[0]; cp[0] = t;
  131. 		t = cp[6]; cp[6] = cp[1]; cp[1] = t;

libtiff/tif_swab.c:130:7: Array access: Offset: [71, +oo] (⇐ [64, +oo] + 7) Size: [0, +oo] by call to `TIFFSwabArrayOfLong8` 
  128. 	while (n-- > 0) {
  129. 		cp = (unsigned char *)lp;
  130. 		t = cp[7]; cp[7] = cp[0]; cp[0] = t;
             ^
  131. 		t = cp[6]; cp[6] = cp[1]; cp[1] = t;
  132. 		t = cp[5]; cp[5] = cp[2]; cp[2] = t;
