tools/tiffcrop.c:6633: error: Integer Overflow L2
  ([0, 4294967294] + [0, 4294967294]):unsigned32 by call to `writeCroppedImage`.

tools/tiffcrop.c:6542:1: Parameter `(*out)->tif_dir.td_imagewidth`
6540.   } /* end extractImageSection */
6541. 
6542. static int 
      ^
6543. writeSelections(TIFF *in, TIFF **out, struct crop_mask *crop, 
6544.                 struct image_data *image, struct dump_opts *dump,

tools/tiffcrop.c:6633:16: Call
6631.            crop_buff = seg_buffs[i].buffer;
6632.            /* Write the current region to the current file */
6633.            if (writeCroppedImage(in, *out, image, dump,
                     ^
6634.                                  crop->regionlist[i].width, 
6635.                                  crop->regionlist[i].length, 

tools/tiffcrop.c:7381:1: Parameter `out->tif_dir.td_imagewidth`
  7379.  * then passed in as an argument.
  7380.  */
  7381. static int  
        ^
  7382. writeCroppedImage(TIFF *in, TIFF *out, struct image_data *image, 
  7383.                   struct dump_opts *dump, uint32 width, uint32 length, 

tools/tiffcrop.c:7628:11: Call
  7626.     if (config == PLANARCONFIG_CONTIG)
  7627.       {
  7628.       if (writeBufferToContigTiles (out, crop_buff, length, width, spp, dump))
                  ^
  7629.         TIFFError("","Unable to write contiguous tile data for page %d", pagenum);
  7630.       }

tools/tiffcrop.c:1182:1: Parameter `out->tif_dir.td_imagewidth`
    1180.  * to be written out as a tile.
    1181.  */
    1182. static int writeBufferToContigTiles (TIFF* out, uint8* buf, uint32 imagelength,
          ^
    1183. 				       uint32 imagewidth, tsample_t spp, 
    1184.                                        struct dump_opts* dump)

tools/tiffcrop.c:1239:11: Call
    1237.         }
    1238. 
    1239.       if (TIFFWriteTile(out, tilebuf, col, row, 0, 0) < 0)
                    ^
    1240.         {
    1241. 	TIFFError("writeBufferToContigTiles",

libtiff/tif_write.c:312:1: Parameter `tif->tif_dir.td_imagewidth`
      310.  * tile is selected by the (x,y,z,s) coordinates.
      311.  */
      312. tmsize_t
           ^
      313. TIFFWriteTile(TIFF* tif, void* buf, uint32 x, uint32 y, uint32 z, uint16 s)
      314. {

libtiff/tif_write.c:315:7: Call
      313. TIFFWriteTile(TIFF* tif, void* buf, uint32 x, uint32 y, uint32 z, uint16 s)
      314. {
      315. 	if (!TIFFCheckTile(tif, x, y, z, s))
                 ^
      316. 		return ((tmsize_t)(-1));
      317. 	/*

libtiff/tif_tile.c:100:1: Parameter `x`
         98.  * against the image bounds.
         99.  */
        100. int
             ^
        101. TIFFCheckTile(TIFF* tif, uint32 x, uint32 y, uint32 z, uint16 s)
        102. {

libtiff/tif_write.c:324:6: Call
      322. 	 */
      323. 	return (TIFFWriteEncodedTile(tif,
      324. 	    TIFFComputeTile(tif, x, y, z, s), buf, (tmsize_t)(-1)));
                ^
      325. }
      326. 

libtiff/tif_tile.c:63:1: Parameter `tif->tif_dir.td_imagewidth`
        61.  * Compute which tile an (x,y,z,s) value is in.
        62.  */
        63. uint32
            ^
        64. TIFFComputeTile(TIFF* tif, uint32 x, uint32 y, uint32 z, uint16 s)
        65. {

libtiff/tif_write.c:323:10: Call
      321. 	 *     after the output buffer is setup in TIFFWriteBufferSetup.
      322. 	 */
      323. 	return (TIFFWriteEncodedTile(tif,
                    ^
      324. 	    TIFFComputeTile(tif, x, y, z, s), buf, (tmsize_t)(-1)));
      325. }

libtiff/tif_write.c:339:1: Parameter `tif->tif_dir.td_imagewidth`
        337.  *     the image on each write (as TIFFWriteScanline does).
        338.  */
        339. tmsize_t
             ^
        340. TIFFWriteEncodedTile(TIFF* tif, uint32 tile, void* data, tmsize_t cc)
        341. {

libtiff/tif_write.c:346:7: Call
        344. 	uint16 sample;
        345. 
        346. 	if (!WRITECHECKTILES(tif, module))
                   ^
        347. 		return ((tmsize_t)(-1));
        348. 	td = &tif->tif_dir;

libtiff/tif_write.c:488:1: Parameter `tif->tif_dir.td_imagewidth`
          486.  * that important information is not changed.
          487.  */
          488. int
               ^
          489. TIFFWriteCheck(TIFF* tif, int tiles, const char* module)
          490. {

libtiff/tif_write.c:533:46: Call
          531. 		}
          532. 	}
          533. 	if (tif->tif_dir.td_stripoffset == NULL && !TIFFSetupStrips(tif)) {
                                                            ^
          534. 		tif->tif_dir.td_nstrips = 0;
          535. 		TIFFErrorExt(tif->tif_clientdata, module, "No space for %s arrays",

libtiff/tif_write.c:448:1: Parameter `tif->tif_dir.td_imagewidth`
            446.     (TIFFFieldSet(tif,f) && (tif)->tif_dir.td_imagelength == 0)
            447. 
            448. int
                 ^
            449. TIFFSetupStrips(TIFF* tif)
            450. {

libtiff/tif_write.c:456:29: Call
            454. 		td->td_stripsperimage =
            455. 		    isUnspecified(tif, FIELD_TILEDIMENSIONS) ?
            456. 			td->td_samplesperpixel : TIFFNumberOfTiles(tif);
                                             ^
            457. 	else
            458. 		td->td_stripsperimage =

libtiff/tif_tile.c:140:1: <LHS trace>
138.  * Compute how many tiles are in an image.
139.  */
140. uint32
     ^
141. TIFFNumberOfTiles(TIFF* tif)
142. {

libtiff/tif_tile.c:140:1: Parameter `tif->tif_dir.td_imagewidth`
              138.  * Compute how many tiles are in an image.
              139.  */
              140. uint32
                   ^
              141. TIFFNumberOfTiles(TIFF* tif)
              142. {

libtiff/tif_tile.c:140:1: <RHS trace>
138.  * Compute how many tiles are in an image.
139.  */
140. uint32
     ^
141. TIFFNumberOfTiles(TIFF* tif)
142. {

libtiff/tif_tile.c:140:1: Parameter `tif->tif_dir.td_imagewidth`
              138.  * Compute how many tiles are in an image.
              139.  */
              140. uint32
                   ^
              141. TIFFNumberOfTiles(TIFF* tif)
              142. {

libtiff/tif_tile.c:156:40: Binary operation: ([0, 4294967294] + [0, 4294967294]):unsigned32 by call to `writeCroppedImage` 
              154. 		dz = td->td_imagedepth;
              155. 	ntiles = (dx == 0 || dy == 0 || dz == 0) ? 0 :
              156. 	    multiply_32(tif, multiply_32(tif, TIFFhowmany_32(td->td_imagewidth, dx),
                                                          ^
              157. 	    TIFFhowmany_32(td->td_imagelength, dy),
              158. 	    "TIFFNumberOfTiles"),
