libtiff/tif_getimage.c:447: error: Buffer Overrun L3
  Offset: [0, 255] Size: [0, +oo] by call to `PickContigCase`.

libtiff/tif_getimage.c:246:2: Assignment
244. 	img->row_offset = 0;
245. 	img->col_offset = 0;
246. 	img->redcmap = NULL;
      ^
247. 	img->greencmap = NULL;
248. 	img->bluecmap = NULL;

libtiff/tif_getimage.c:447:8: Call
445. 	    !(planarconfig == PLANARCONFIG_SEPARATE && img->samplesperpixel > 1);
446. 	if (img->isContig) {
447. 		if (!PickContigCase(img)) {
            ^
448. 			sprintf(emsg, "Sorry, can not handle image");
449. 			return 0;

libtiff/tif_getimage.c:2379:1: Parameter `*img->redcmap`
  2377.  * Select the appropriate conversion routine for packed data.
  2378.  */
  2379. static int
        ^
  2380. PickContigCase(TIFFRGBAImage* img)
  2381. {

libtiff/tif_getimage.c:2419:8: Call
  2417. 			break;
  2418. 		case PHOTOMETRIC_SEPARATED:
  2419. 			if (buildMap(img)) {
               ^
  2420. 				if (img->bitspersample == 8) {
  2421. 					if (!img->Map)

libtiff/tif_getimage.c:2341:1: Parameter `*img->redcmap`
    2339.  * by the associated put routine.
    2340.  */
    2341. static int
          ^
    2342. buildMap(TIFFRGBAImage* img)
    2343. {

libtiff/tif_getimage.c:2369:34: Call
    2367. 	 * unpacking tables for samples < 8 bits.
    2368. 	 */
    2369. 	if (img->bitspersample <= 8 && !makecmap(img))
                                           ^
    2370. 	    return (0);
    2371. 	break;

libtiff/tif_getimage.c:2303:10: <Offset trace>
2301. 	}
2302.     p = (uint32*)(img->PALmap + 256);
2303.     for (i = 0; i < 256; i++) {
               ^
2304. 	TIFFRGBValue c;
2305. 	img->PALmap[i] = p;

libtiff/tif_getimage.c:2303:10: Assignment
      2301. 	}
      2302.     p = (uint32*)(img->PALmap + 256);
      2303.     for (i = 0; i < 256; i++) {
                     ^
      2304. 	TIFFRGBValue c;
      2305. 	img->PALmap[i] = p;

libtiff/tif_getimage.c:2329:6: Assignment
      2327. 	    break;
      2328. 	case 8:
      2329. 	    CMAP(i);
                 ^
      2330. 	    break;
      2331. 	}

libtiff/tif_getimage.c:2285:1: <Length trace>
2283.  * number.
2284.  */
2285. static int
      ^
2286. makecmap(TIFFRGBAImage* img)
2287. {

libtiff/tif_getimage.c:2285:1: Parameter `*img->redcmap`
      2283.  * number.
      2284.  */
      2285. static int
            ^
      2286. makecmap(TIFFRGBAImage* img)
      2287. {

libtiff/tif_getimage.c:2290:5: Assignment
      2288.     int bitspersample = img->bitspersample;
      2289.     int nsamples = 8 / bitspersample;
      2290.     uint16* r = img->redcmap;
                ^
      2291.     uint16* g = img->greencmap;
      2292.     uint16* b = img->bluecmap;

libtiff/tif_getimage.c:2329:6: Array access: Offset: [0, 255] Size: [0, +oo] by call to `PickContigCase` 
      2327. 	    break;
      2328. 	case 8:
      2329. 	    CMAP(i);
                 ^
      2330. 	    break;
      2331. 	}
