tools/tiffcp.c:1390: error: Buffer Overrun L3
  Offset: [7, +oo] (⇐ [0, +oo] + 7) Size: [0, +oo] by call to `TIFFReadTile`.

tools/tiffcp.c:1358:1: Parameter `in->tif_rawdata`
1356. }
1357. 
1358. DECLAREreadFunc(readSeparateTilesIntoBuffer)
      ^
1359. {
1360. 	int status = 1;

tools/tiffcp.c:1390:9: Call
1388. 
1389. 			for (s = 0; s < spp; s++) {
1390. 				if (TIFFReadTile(in, tilebuf, col, row, 0, s) < 0
              ^
1391. 				    && !ignore) {
1392. 					TIFFError(TIFFFileName(in),

libtiff/tif_read.c:636:1: Parameter `*tif->tif_rawdata`
  634.  * tile is selected by the (x,y,z,s) coordinates.
  635.  */
  636. tmsize_t
       ^
  637. TIFFReadTile(TIFF* tif, void* buf, uint32 x, uint32 y, uint32 z, uint16 s)
  638. {

libtiff/tif_read.c:641:10: Call
  639. 	if (!TIFFCheckRead(tif, 1) || !TIFFCheckTile(tif, x, y, z, s))
  640. 		return ((tmsize_t)(-1));
  641. 	return (TIFFReadEncodedTile(tif,
                ^
  642. 	    TIFFComputeTile(tif, x, y, z, s), buf, (tmsize_t)(-1)));
  643. }

libtiff/tif_read.c:649:1: Parameter `*tif->tif_rawdata`
    647.  * amount into the user-supplied buffer.
    648.  */
    649. tmsize_t
         ^
    650. TIFFReadEncodedTile(TIFF* tif, uint32 tile, void* buf, tmsize_t size)
    651. {

libtiff/tif_read.c:668:6: Call
    666. 	else if (size > tilesize)
    667. 		size = tilesize;
    668. 	if (TIFFFillTile(tif, tile) && (*tif->tif_decodetile)(tif,
              ^
    669. 	    (uint8*) buf, size, (uint16)(tile/td->td_stripsperimage))) {
    670. 		(*tif->tif_postdecode)(tif, (uint8*) buf, size);

libtiff/tif_read.c:792:1: Parameter `*tif->tif_rawdata`
      790.  * expanded, as necessary, to hold the tile's data.
      791.  */
      792. int
           ^
      793. TIFFFillTile(TIFF* tif, uint32 tile)
      794. {

libtiff/tif_read.c:897:5: Call
      895. 			if (!isFillOrder(tif, td->td_fillorder) &&
      896. 			    (tif->tif_flags & TIFF_NOBITREV) == 0)
      897. 				TIFFReverseBits(tif->tif_rawdata,
               ^
      898.                                                 tif->tif_rawdataloaded);
      899. 		}

libtiff/tif_swab.c:285:1: <Length trace>
283. }
284. 
285. void
     ^
286. TIFFReverseBits(uint8* cp, tmsize_t n)  
287. {

libtiff/tif_swab.c:285:1: Parameter `*cp`
        283. }
        284. 
        285. void
             ^
        286. TIFFReverseBits(uint8* cp, tmsize_t n)  
        287. {

libtiff/tif_swab.c:296:3: Array access: Offset: [7, +oo] (⇐ [0, +oo] + 7) Size: [0, +oo] by call to `TIFFReadTile` 
        294. 		cp[5] = TIFFBitRevTable[cp[5]];
        295. 		cp[6] = TIFFBitRevTable[cp[6]];
        296. 		cp[7] = TIFFBitRevTable[cp[7]];
               ^
        297. 		cp += 8;
        298. 	}
