libtiff/tif_getimage.c:468: error: Buffer Overrun L3
  Offset: [0, 255] Size: [0, +oo] by call to `PickContigCase`.

libtiff/tif_getimage.c:267:2: Assignment
265. 	img->row_offset = 0;
266. 	img->col_offset = 0;
267. 	img->redcmap = NULL;
      ^
268. 	img->greencmap = NULL;
269. 	img->bluecmap = NULL;

libtiff/tif_getimage.c:468:8: Call
466. 	    !(planarconfig == PLANARCONFIG_SEPARATE && img->samplesperpixel > 1);
467. 	if (img->isContig) {
468. 		if (!PickContigCase(img)) {
            ^
469. 			sprintf(emsg, "Sorry, can not handle image");
470. 			goto fail_return;

libtiff/tif_getimage.c:2508:1: Parameter `*img->redcmap`
  2506.  * Select the appropriate conversion routine for packed data.
  2507.  */
  2508. static int
        ^
  2509. PickContigCase(TIFFRGBAImage* img)
  2510. {

libtiff/tif_getimage.c:2552:36: Call
  2550. 			break;
  2551. 		case PHOTOMETRIC_SEPARATED:
  2552. 			if (img->samplesperpixel >=4 && buildMap(img)) {
                                           ^
  2553. 				if (img->bitspersample == 8) {
  2554. 					if (!img->Map)

libtiff/tif_getimage.c:2470:1: Parameter `*img->redcmap`
    2468.  * by the associated put routine.
    2469.  */
    2470. static int
          ^
    2471. buildMap(TIFFRGBAImage* img)
    2472. {

libtiff/tif_getimage.c:2498:34: Call
    2496. 	 * unpacking tables for samples < 8 bits.
    2497. 	 */
    2498. 	if (img->bitspersample <= 8 && !makecmap(img))
                                           ^
    2499. 	    return (0);
    2500. 	break;

libtiff/tif_getimage.c:2432:10: <Offset trace>
2430. 	}
2431.     p = (uint32*)(img->PALmap + 256);
2432.     for (i = 0; i < 256; i++) {
               ^
2433. 	TIFFRGBValue c;
2434. 	img->PALmap[i] = p;

libtiff/tif_getimage.c:2432:10: Assignment
      2430. 	}
      2431.     p = (uint32*)(img->PALmap + 256);
      2432.     for (i = 0; i < 256; i++) {
                     ^
      2433. 	TIFFRGBValue c;
      2434. 	img->PALmap[i] = p;

libtiff/tif_getimage.c:2458:6: Assignment
      2456. 	    break;
      2457. 	case 8:
      2458. 	    CMAP(i);
                 ^
      2459. 	    break;
      2460. 	}

libtiff/tif_getimage.c:2414:1: <Length trace>
2412.  * number.
2413.  */
2414. static int
      ^
2415. makecmap(TIFFRGBAImage* img)
2416. {

libtiff/tif_getimage.c:2414:1: Parameter `*img->redcmap`
      2412.  * number.
      2413.  */
      2414. static int
            ^
      2415. makecmap(TIFFRGBAImage* img)
      2416. {

libtiff/tif_getimage.c:2419:5: Assignment
      2417.     int bitspersample = img->bitspersample;
      2418.     int nsamples = 8 / bitspersample;
      2419.     uint16* r = img->redcmap;
                ^
      2420.     uint16* g = img->greencmap;
      2421.     uint16* b = img->bluecmap;

libtiff/tif_getimage.c:2458:6: Array access: Offset: [0, 255] Size: [0, +oo] by call to `PickContigCase` 
      2456. 	    break;
      2457. 	case 8:
      2458. 	    CMAP(i);
                 ^
      2459. 	    break;
      2460. 	}
