libtiff/tif_getimage.c:934: error: Integer Overflow L2
  ([0, +oo] - 1):unsigned32 by call to `TIFFReadEncodedStrip`.

libtiff/tif_getimage.c:907:37: Call
905. 	}
906. 
907. 	buf = (unsigned char*) _TIFFmalloc(TIFFStripSize(tif));
                                         ^
908. 	if (buf == 0) {
909. 		TIFFErrorExt(tif->tif_clientdata, TIFFFileName(tif), "No space for strip buffer");

libtiff/tif_strip.c:211:1: Parameter `tif->tif_dir.td_imagelength`
  209. 	return (TIFFVStripSize64(tif, rps));
  210. }
  211. tmsize_t
       ^
  212. TIFFStripSize(TIFF* tif)
  213. {

libtiff/tif_strip.c:217:4: Call
  215. 	uint64 m;
  216. 	tmsize_t n;
  217. 	m=TIFFStripSize64(tif);
          ^
  218. 	n=(tmsize_t)m;
  219. 	if ((uint64)n!=m)

libtiff/tif_strip.c:202:1: Parameter `tif->tif_dir.td_imagelength`
    200.  * to hold the strip.
    201.  */
    202. uint64
         ^
    203. TIFFStripSize64(TIFF* tif)
    204. {

libtiff/tif_getimage.c:912:22: Call
910. 		return (0);
911. 	}
912. 	_TIFFmemset(buf, 0, TIFFStripSize(tif));
                          ^
913. 
914. 	flip = setorientation(img);

libtiff/tif_strip.c:211:1: Parameter `tif->tif_dir.td_imagelength`
  209. 	return (TIFFVStripSize64(tif, rps));
  210. }
  211. tmsize_t
       ^
  212. TIFFStripSize(TIFF* tif)
  213. {

libtiff/tif_strip.c:217:4: Call
  215. 	uint64 m;
  216. 	tmsize_t n;
  217. 	m=TIFFStripSize64(tif);
          ^
  218. 	n=(tmsize_t)m;
  219. 	if ((uint64)n!=m)

libtiff/tif_strip.c:202:1: Parameter `tif->tif_dir.td_imagelength`
    200.  * to hold the strip.
    201.  */
    202. uint64
         ^
    203. TIFFStripSize64(TIFF* tif)
    204. {

libtiff/tif_getimage.c:934:7: Call
932. 		if ((nrowsub%subsamplingver)!=0)
933. 			nrowsub+=subsamplingver-nrowsub%subsamplingver;
934. 		if (TIFFReadEncodedStrip(tif,
           ^
935. 		    TIFFComputeStrip(tif,row+img->row_offset, 0),
936. 		    buf,

libtiff/tif_read.c:316:1: <LHS trace>
314.  * amount into the user-supplied buffer.
315.  */
316. tmsize_t
     ^
317. TIFFReadEncodedStrip(TIFF* tif, uint32 strip, void* buf, tmsize_t size)
318. {

libtiff/tif_read.c:316:1: Parameter `tif->tif_dir.td_imagelength`
  314.  * amount into the user-supplied buffer.
  315.  */
  316. tmsize_t
       ^
  317. TIFFReadEncodedStrip(TIFF* tif, uint32 strip, void* buf, tmsize_t size)
  318. {

libtiff/tif_read.c:344:2: Binary operation: ([0, +oo] - 1):unsigned32 by call to `TIFFReadEncodedStrip` 
  342. 	if (rowsperstrip>td->td_imagelength)
  343. 		rowsperstrip=td->td_imagelength;
  344. 	stripsperplane=((td->td_imagelength+rowsperstrip-1)/rowsperstrip);
        ^
  345. 	stripinplane=(strip%stripsperplane);
  346. 	plane=(uint16)(strip/stripsperplane);
