tools/tiffsplit.c:279: error: Integer Overflow L2
  ([0, 4294967294] + [0, 4294967294]):unsigned32 by call to `TIFFWriteRawTile`.

tools/tiffsplit.c:260:1: Parameter `out->tif_dir.td_imagelength`
258. }
259. 
260. static int
     ^
261. cpTiles(TIFF* in, TIFF* out)
262. {

tools/tiffsplit.c:279:8: Call
277. 			}
278. 			if (TIFFReadRawTile(in, t, buf, (tmsize_t)bytecounts[t]) < 0 ||
279. 			    TIFFWriteRawTile(out, t, buf, (tmsize_t)bytecounts[t]) < 0) {
            ^
280. 				_TIFFfree(buf);
281. 				return (0);

libtiff/tif_write.c:428:1: Parameter `tif->tif_dir.td_imagelength`
  426.  *     the image on each write (as TIFFWriteScanline does).
  427.  */
  428. tmsize_t
       ^
  429. TIFFWriteRawTile(TIFF* tif, uint32 tile, void* data, tmsize_t cc)
  430. {

libtiff/tif_write.c:433:7: Call
  431. 	static const char module[] = "TIFFWriteRawTile";
  432. 
  433. 	if (!WRITECHECKTILES(tif, module))
             ^
  434. 		return ((tmsize_t)(-1));
  435. 	if (tile >= tif->tif_dir.td_nstrips) {

libtiff/tif_write.c:488:1: Parameter `tif->tif_dir.td_imagelength`
    486.  * that important information is not changed.
    487.  */
    488. int
         ^
    489. TIFFWriteCheck(TIFF* tif, int tiles, const char* module)
    490. {

libtiff/tif_write.c:533:46: Call
    531. 		}
    532. 	}
    533. 	if (tif->tif_dir.td_stripoffset == NULL && !TIFFSetupStrips(tif)) {
                                                      ^
    534. 		tif->tif_dir.td_nstrips = 0;
    535. 		TIFFErrorExt(tif->tif_clientdata, module, "No space for %s arrays",

libtiff/tif_write.c:448:1: Parameter `tif->tif_dir.td_imagelength`
      446.     (TIFFFieldSet(tif,f) && (tif)->tif_dir.td_imagelength == 0)
      447. 
      448. int
           ^
      449. TIFFSetupStrips(TIFF* tif)
      450. {

libtiff/tif_write.c:456:29: Call
      454. 		td->td_stripsperimage =
      455. 		    isUnspecified(tif, FIELD_TILEDIMENSIONS) ?
      456. 			td->td_samplesperpixel : TIFFNumberOfTiles(tif);
                                       ^
      457. 	else
      458. 		td->td_stripsperimage =

libtiff/tif_tile.c:114:1: <LHS trace>
112.  * Compute how many tiles are in an image.
113.  */
114. uint32
     ^
115. TIFFNumberOfTiles(TIFF* tif)
116. {

libtiff/tif_tile.c:114:1: Parameter `tif->tif_dir.td_imagelength`
        112.  * Compute how many tiles are in an image.
        113.  */
        114. uint32
             ^
        115. TIFFNumberOfTiles(TIFF* tif)
        116. {

libtiff/tif_tile.c:114:1: <RHS trace>
112.  * Compute how many tiles are in an image.
113.  */
114. uint32
     ^
115. TIFFNumberOfTiles(TIFF* tif)
116. {

libtiff/tif_tile.c:114:1: Parameter `tif->tif_dir.td_imagelength`
        112.  * Compute how many tiles are in an image.
        113.  */
        114. uint32
             ^
        115. TIFFNumberOfTiles(TIFF* tif)
        116. {

libtiff/tif_tile.c:131:6: Binary operation: ([0, 4294967294] + [0, 4294967294]):unsigned32 by call to `TIFFWriteRawTile` 
        129. 	ntiles = (dx == 0 || dy == 0 || dz == 0) ? 0 :
        130. 	    _TIFFMultiply32(tif, _TIFFMultiply32(tif, TIFFhowmany_32(td->td_imagewidth, dx),
        131. 	    TIFFhowmany_32(td->td_imagelength, dy),
                  ^
        132. 	    "TIFFNumberOfTiles"),
        133. 	    TIFFhowmany_32(td->td_imagedepth, dz), "TIFFNumberOfTiles");
