libtiff/tif_dirwrite.c:560: error: Buffer Overrun L3
  Offset: [0, 23] Size: [0, +oo] by call to `TIFFWriteDirectoryTagLongLong8Array`.

libtiff/tif_dirwrite.c:420:2: Assignment
418. 		tif->tif_flags &= ~(TIFF_BEENWRITING|TIFF_BUFFERSETUP);
419. 	}
420. 	dir=NULL;
      ^
421. 	dirmem=NULL;
422. 	dirsize=0;

libtiff/tif_dirwrite.c:560:11: Call
558. 				else
559. 				{
560. 					if (!TIFFWriteDirectoryTagLongLong8Array(tif,&ndir,dir,TIFFTAG_TILEOFFSETS,tif->tif_dir.td_nstrips,tif->tif_dir.td_stripoffset_p))
               ^
561. 						goto bad;
562. 				}

libtiff/tif_dirwrite.c:1694:1: Parameter `*dir`
  1692. /************************************************************************/
  1693. 
  1694. static int
        ^
  1695. TIFFWriteDirectoryTagLongLong8Array(TIFF* tif, uint32* ndir, TIFFDirEntry* dir, uint16 tag, uint32 count, uint64* value)
  1696. {

libtiff/tif_dirwrite.c:1770:11: Call
  1768.         }
  1769. 
  1770.         o=TIFFWriteDirectoryTagCheckedLongArray(tif,ndir,dir,tag,count,p);
                  ^
  1771.         _TIFFfree(p);
  1772.     }

libtiff/tif_dirwrite.c:2173:1: Parameter `*dir`
    2171. }
    2172. 
    2173. static int
          ^
    2174. TIFFWriteDirectoryTagCheckedLongArray(TIFF* tif, uint32* ndir, TIFFDirEntry* dir, uint16 tag, uint32 count, uint32* value)
    2175. {

libtiff/tif_dirwrite.c:2180:9: Call
    2178. 	if (tif->tif_flags&TIFF_SWAB)
    2179. 		TIFFSwabArrayOfLong(value,count);
    2180. 	return(TIFFWriteDirectoryTagData(tif,ndir,dir,tag,TIFF_LONG,count,count*4,value));
                  ^
    2181. }
    2182. 

libtiff/tif_dirwrite.c:2492:1: <Offset trace>
2490. }
2491. 
2492. static int
      ^
2493. TIFFWriteDirectoryTagData(TIFF* tif, uint32* ndir, TIFFDirEntry* dir, uint16 tag, uint16 datatype, uint32 count, uint32 datalength, void* data)
2494. {

libtiff/tif_dirwrite.c:2492:1: Parameter `*ndir`
      2490. }
      2491. 
      2492. static int
            ^
      2493. TIFFWriteDirectoryTagData(TIFF* tif, uint32* ndir, TIFFDirEntry* dir, uint16 tag, uint16 datatype, uint32 count, uint32 datalength, void* data)
      2494. {

libtiff/tif_dirwrite.c:2492:1: <Length trace>
2490. }
2491. 
2492. static int
      ^
2493. TIFFWriteDirectoryTagData(TIFF* tif, uint32* ndir, TIFFDirEntry* dir, uint16 tag, uint16 datatype, uint32 count, uint32 datalength, void* data)
2494. {

libtiff/tif_dirwrite.c:2492:1: Parameter `*dir`
      2490. }
      2491. 
      2492. static int
            ^
      2493. TIFFWriteDirectoryTagData(TIFF* tif, uint32* ndir, TIFFDirEntry* dir, uint16 tag, uint16 datatype, uint32 count, uint32 datalength, void* data)
      2494. {

libtiff/tif_dirwrite.c:2511:2: Array access: Offset: [0, 23] Size: [0, +oo] by call to `TIFFWriteDirectoryTagLongLong8Array` 
      2509. 			dir[n]=dir[n-1];
      2510. 	}
      2511. 	dir[m].tdir_tag=tag;
             ^
      2512. 	dir[m].tdir_type=datatype;
      2513. 	dir[m].tdir_count=count;
