tools/tiffdump.c:490: error: Buffer Overrun L3
  Offset: [71, +oo] (⇐ [64, +oo] + 7) Size: [0, +oo] by call to `TIFFSwabArrayOfLong8`.

tools/tiffdump.c:287:3: Assignment
285. 		if (swabflag)
286. 			TIFFSwabShort(&dircount);
287. 		direntrysize = 12;
       ^
288. 	} else {
289. 		uint64 dircount64;

tools/tiffdump.c:303:11: Call
301. 		direntrysize = 20;
302. 	}
303. 	dirmem = _TIFFmalloc(dircount * direntrysize);
               ^
304. 	if (dirmem == NULL) {
305. 		Fatal("No space for TIFF directory");

libtiff/tif_unix.c:253:1: Parameter `s`
  251. #endif
  252. 
  253. void*
       ^
  254. _TIFFmalloc(tmsize_t s)
  255. {

libtiff/tif_unix.c:256:10: Array declaration
  254. _TIFFmalloc(tmsize_t s)
  255. {
  256. 	return (malloc((size_t) s));
                ^
  257. }
  258. 

libtiff/tif_unix.c:256:2: Assignment
  254. _TIFFmalloc(tmsize_t s)
  255. {
  256. 	return (malloc((size_t) s));
        ^
  257. }
  258. 

tools/tiffdump.c:303:2: Assignment
301. 		direntrysize = 20;
302. 	}
303. 	dirmem = _TIFFmalloc(dircount * direntrysize);
      ^
304. 	if (dirmem == NULL) {
305. 		Fatal("No space for TIFF directory");

tools/tiffdump.c:345:7: Assignment
343. 	    (unsigned long long)nextdiroff, (unsigned long long)nextdiroff);
344. #endif
345. 	for (dp = (uint8*)dirmem, n = dircount; n > 0; n--) {
           ^
346. 		uint16 tag;
347. 		uint16 type;

tools/tiffdump.c:358:3: Assignment
356. 		if (swabflag)
357. 			TIFFSwabShort(&tag);
358. 		dp += sizeof(uint16);
       ^
359. 		type = *(uint16*)dp;
360. 		dp += sizeof(uint16);

tools/tiffdump.c:360:3: Assignment
358. 		dp += sizeof(uint16);
359. 		type = *(uint16*)dp;
360. 		dp += sizeof(uint16);
       ^
361. 		if (swabflag)
362. 			TIFFSwabShort(&type);

tools/tiffdump.c:373:4: Assignment
371. 			if (swabflag)
372. 				TIFFSwabLong(&count32);
373. 			dp += sizeof(uint32);
        ^
374. 			count = count32;
375. 		}

tools/tiffdump.c:394:3: Assignment
392. 		datasize = count*typewidth;
393. 		datafits = 1;
394. 		datamem = dp;
       ^
395. 		dataoffset = 0;
396. 		datatruncated = 0;

tools/tiffdump.c:490:7: Call
488. 					case TIFF_SLONG8:
489. 					case TIFF_IFD8:
490. 						TIFFSwabArrayOfLong8((uint64*)datamem,(tmsize_t)count);
           ^
491. 						break;
492. 				}

libtiff/tif_swab.c:121:1: <Length trace>
119. 
120. #ifndef TIFFSwabArrayOfLong8
121. void
     ^
122. TIFFSwabArrayOfLong8(register uint64* lp, tmsize_t n)
123. {

libtiff/tif_swab.c:121:1: Parameter `*lp`
  119. 
  120. #ifndef TIFFSwabArrayOfLong8
  121. void
       ^
  122. TIFFSwabArrayOfLong8(register uint64* lp, tmsize_t n)
  123. {

libtiff/tif_swab.c:129:3: Assignment
  127. 	/* XXX unroll loop some */
  128. 	while (n-- > 0) {
  129. 		cp = (unsigned char *)lp;
         ^
  130. 		t = cp[7]; cp[7] = cp[0]; cp[0] = t;
  131. 		t = cp[6]; cp[6] = cp[1]; cp[1] = t;

libtiff/tif_swab.c:130:7: Array access: Offset: [71, +oo] (⇐ [64, +oo] + 7) Size: [0, +oo] by call to `TIFFSwabArrayOfLong8` 
  128. 	while (n-- > 0) {
  129. 		cp = (unsigned char *)lp;
  130. 		t = cp[7]; cp[7] = cp[0]; cp[0] = t;
             ^
  131. 		t = cp[6]; cp[6] = cp[1]; cp[1] = t;
  132. 		t = cp[5]; cp[5] = cp[2]; cp[2] = t;
