tools/tiffcp.c:1342: error: Buffer Overrun L3
  Offset: [7, +oo] (⇐ [0, +oo] + 7) Size: [0, +oo] by call to `TIFFReadTile`.

tools/tiffcp.c:1316:1: Parameter `in->tif_rawdata`
1314. }
1315. 
1316. DECLAREreadFunc(readContigTilesIntoBuffer)
      ^
1317. {
1318. 	int status = 1;

tools/tiffcp.c:1342:8: Call
1340. 
1341. 		for (col = 0; col < imagewidth && colb < imagew; col += tw) {
1342. 			if (TIFFReadTile(in, tilebuf, col, row, 0, 0) < 0
             ^
1343. 			    && !ignore) {
1344. 				TIFFError(TIFFFileName(in),

libtiff/tif_read.c:659:1: Parameter `*tif->tif_rawdata`
  657.  * tile is selected by the (x,y,z,s) coordinates.
  658.  */
  659. tmsize_t
       ^
  660. TIFFReadTile(TIFF* tif, void* buf, uint32 x, uint32 y, uint32 z, uint16 s)
  661. {

libtiff/tif_read.c:664:10: Call
  662. 	if (!TIFFCheckRead(tif, 1) || !TIFFCheckTile(tif, x, y, z, s))
  663. 		return ((tmsize_t)(-1));
  664. 	return (TIFFReadEncodedTile(tif,
                ^
  665. 	    TIFFComputeTile(tif, x, y, z, s), buf, (tmsize_t)(-1)));
  666. }

libtiff/tif_read.c:672:1: Parameter `*tif->tif_rawdata`
    670.  * amount into the user-supplied buffer.
    671.  */
    672. tmsize_t
         ^
    673. TIFFReadEncodedTile(TIFF* tif, uint32 tile, void* buf, tmsize_t size)
    674. {

libtiff/tif_read.c:709:6: Call
    707. 	else if (size > tilesize)
    708. 		size = tilesize;
    709. 	if (TIFFFillTile(tif, tile) && (*tif->tif_decodetile)(tif,
              ^
    710. 	    (uint8*) buf, size, (uint16)(tile/td->td_stripsperimage))) {
    711. 		(*tif->tif_postdecode)(tif, (uint8*) buf, size);

libtiff/tif_read.c:833:1: Parameter `*tif->tif_rawdata`
      831.  * expanded, as necessary, to hold the tile's data.
      832.  */
      833. int
           ^
      834. TIFFFillTile(TIFF* tif, uint32 tile)
      835. {

libtiff/tif_read.c:938:5: Call
      936. 			if (!isFillOrder(tif, td->td_fillorder) &&
      937. 			    (tif->tif_flags & TIFF_NOBITREV) == 0)
      938. 				TIFFReverseBits(tif->tif_rawdata,
               ^
      939.                                                 tif->tif_rawdataloaded);
      940. 		}

libtiff/tif_swab.c:285:1: <Length trace>
283. }
284. 
285. void
     ^
286. TIFFReverseBits(uint8* cp, tmsize_t n)  
287. {

libtiff/tif_swab.c:285:1: Parameter `*cp`
        283. }
        284. 
        285. void
             ^
        286. TIFFReverseBits(uint8* cp, tmsize_t n)  
        287. {

libtiff/tif_swab.c:296:3: Array access: Offset: [7, +oo] (⇐ [0, +oo] + 7) Size: [0, +oo] by call to `TIFFReadTile` 
        294. 		cp[5] = TIFFBitRevTable[cp[5]];
        295. 		cp[6] = TIFFBitRevTable[cp[6]];
        296. 		cp[7] = TIFFBitRevTable[cp[7]];
               ^
        297. 		cp += 8;
        298. 	}
