libtiff/tif_getimage.c:448: error: Buffer Overrun L3
  Offset: [0, 255] Size: [0, +oo] by call to `PickContigCase`.

libtiff/tif_getimage.c:247:2: Assignment
245. 	img->row_offset = 0;
246. 	img->col_offset = 0;
247. 	img->redcmap = NULL;
      ^
248. 	img->greencmap = NULL;
249. 	img->bluecmap = NULL;

libtiff/tif_getimage.c:448:8: Call
446. 	    !(planarconfig == PLANARCONFIG_SEPARATE && img->samplesperpixel > 1);
447. 	if (img->isContig) {
448. 		if (!PickContigCase(img)) {
            ^
449. 			sprintf(emsg, "Sorry, can not handle image");
450. 			goto fail_return;

libtiff/tif_getimage.c:2389:1: Parameter `*img->redcmap`
  2387.  * Select the appropriate conversion routine for packed data.
  2388.  */
  2389. static int
        ^
  2390. PickContigCase(TIFFRGBAImage* img)
  2391. {

libtiff/tif_getimage.c:2429:8: Call
  2427. 			break;
  2428. 		case PHOTOMETRIC_SEPARATED:
  2429. 			if (buildMap(img)) {
               ^
  2430. 				if (img->bitspersample == 8) {
  2431. 					if (!img->Map)

libtiff/tif_getimage.c:2351:1: Parameter `*img->redcmap`
    2349.  * by the associated put routine.
    2350.  */
    2351. static int
          ^
    2352. buildMap(TIFFRGBAImage* img)
    2353. {

libtiff/tif_getimage.c:2379:34: Call
    2377. 	 * unpacking tables for samples < 8 bits.
    2378. 	 */
    2379. 	if (img->bitspersample <= 8 && !makecmap(img))
                                           ^
    2380. 	    return (0);
    2381. 	break;

libtiff/tif_getimage.c:2313:10: <Offset trace>
2311. 	}
2312.     p = (uint32*)(img->PALmap + 256);
2313.     for (i = 0; i < 256; i++) {
               ^
2314. 	TIFFRGBValue c;
2315. 	img->PALmap[i] = p;

libtiff/tif_getimage.c:2313:10: Assignment
      2311. 	}
      2312.     p = (uint32*)(img->PALmap + 256);
      2313.     for (i = 0; i < 256; i++) {
                     ^
      2314. 	TIFFRGBValue c;
      2315. 	img->PALmap[i] = p;

libtiff/tif_getimage.c:2339:6: Assignment
      2337. 	    break;
      2338. 	case 8:
      2339. 	    CMAP(i);
                 ^
      2340. 	    break;
      2341. 	}

libtiff/tif_getimage.c:2295:1: <Length trace>
2293.  * number.
2294.  */
2295. static int
      ^
2296. makecmap(TIFFRGBAImage* img)
2297. {

libtiff/tif_getimage.c:2295:1: Parameter `*img->redcmap`
      2293.  * number.
      2294.  */
      2295. static int
            ^
      2296. makecmap(TIFFRGBAImage* img)
      2297. {

libtiff/tif_getimage.c:2300:5: Assignment
      2298.     int bitspersample = img->bitspersample;
      2299.     int nsamples = 8 / bitspersample;
      2300.     uint16* r = img->redcmap;
                ^
      2301.     uint16* g = img->greencmap;
      2302.     uint16* b = img->bluecmap;

libtiff/tif_getimage.c:2339:6: Array access: Offset: [0, 255] Size: [0, +oo] by call to `PickContigCase` 
      2337. 	    break;
      2338. 	case 8:
      2339. 	    CMAP(i);
                 ^
      2340. 	    break;
      2341. 	}
