tools/tiff2ps.c:2302: error: Buffer Overrun L3
  Offset: [1, +oo] Size: [0, +oo].

tools/tiff2ps.c:2288:4: <Offset trace>
2286. 		 */
2287. 		if (alpha) {
2288. 			int adjust, i, j = 0;
         ^
2289. 			int ncomps = samplesperpixel - extrasamples;
2290. 			for (i = 0; (i + ncomps) < byte_count; i+=samplesperpixel) {

tools/tiff2ps.c:2288:4: Assignment
2286. 		 */
2287. 		if (alpha) {
2288. 			int adjust, i, j = 0;
         ^
2289. 			int ncomps = samplesperpixel - extrasamples;
2290. 			for (i = 0; (i + ncomps) < byte_count; i+=samplesperpixel) {

tools/tiff2ps.c:2301:16: Assignment
2299. 						break;
2300. 					case 3:
2301. 						buf_data[j++] = buf_data[i] + adjust;
                     ^
2302. 						buf_data[j++] = buf_data[i+1] + adjust;
2303. 						buf_data[j++] = buf_data[i+2] + adjust;

tools/tiff2ps.c:2203:3: <Length trace>
2201. 
2202. 	if (use_rawdata) {
2203. 		chunk_size = (tsize_t) bc[0];
        ^
2204. 		for (chunk_no = 1; chunk_no < num_chunks; chunk_no++)
2205. 			if ((tsize_t) bc[chunk_no] > chunk_size)

tools/tiff2ps.c:2203:3: Assignment
2201. 
2202. 	if (use_rawdata) {
2203. 		chunk_size = (tsize_t) bc[0];
        ^
2204. 		for (chunk_no = 1; chunk_no < num_chunks; chunk_no++)
2205. 			if ((tsize_t) bc[chunk_no] > chunk_size)

tools/tiff2ps.c:2213:30: Call
2211. 			chunk_size = TIFFStripSize(tif);
2212. 	}
2213. 	buf_data = (unsigned char *)limitMalloc(chunk_size);
                                   ^
2214. 	if (!buf_data) {
2215. 		TIFFError(filename, "Can't alloc %lu bytes for %s.",

tools/tiff2ps.c:252:3: Assignment
  250. 		        (uint64)s, (uint64)maxMalloc);
  251. 		fprintf(stderr, "                  use -M option to change limit.\n");
  252. 		return NULL;
         ^
  253. 	}
  254. 	return _TIFFmalloc(s);

tools/tiff2ps.c:2213:2: Assignment
2211. 			chunk_size = TIFFStripSize(tif);
2212. 	}
2213. 	buf_data = (unsigned char *)limitMalloc(chunk_size);
       ^
2214. 	if (!buf_data) {
2215. 		TIFFError(filename, "Can't alloc %lu bytes for %s.",

tools/tiff2ps.c:2302:7: Array access: Offset: [1, +oo] Size: [0, +oo]
2300. 					case 3:
2301. 						buf_data[j++] = buf_data[i] + adjust;
2302. 						buf_data[j++] = buf_data[i+1] + adjust;
            ^
2303. 						buf_data[j++] = buf_data[i+2] + adjust;
2304. 						break;
