libtiff/tif_getimage.c:675: error: Integer Overflow L2
  ([0, +oo] - 1):unsigned32 by call to `_TIFFReadTileAndAllocBuffer`.

libtiff/tif_getimage.c:675:10: Call
673. 	while (tocol < w)
674.         {
675. 	    if (_TIFFReadTileAndAllocBuffer(tif, (void**) &buf, bufsize, col,
              ^
676. 			     row+img->row_offset, 0, 0)==(tmsize_t)(-1) &&
677.                 (buf == NULL || img->stoponerr))

libtiff/tif_read.c:1026:1: Parameter `tif->tif_dir.td_imagewidth`
  1024.  * * calls regular TIFFReadEncodedTile() if *buf != NULL
  1025.  */
  1026. tmsize_t
        ^
  1027. _TIFFReadTileAndAllocBuffer(TIFF* tif,
  1028.                             void **buf, tmsize_t bufsizetoalloc,

libtiff/tif_getimage.c:675:10: Call
673. 	while (tocol < w)
674.         {
675. 	    if (_TIFFReadTileAndAllocBuffer(tif, (void**) &buf, bufsize, col,
              ^
676. 			     row+img->row_offset, 0, 0)==(tmsize_t)(-1) &&
677.                 (buf == NULL || img->stoponerr))

libtiff/tif_read.c:1026:1: Parameter `tif->tif_dir.td_imagewidth`
  1024.  * * calls regular TIFFReadEncodedTile() if *buf != NULL
  1025.  */
  1026. tmsize_t
        ^
  1027. _TIFFReadTileAndAllocBuffer(TIFF* tif,
  1028.                             void **buf, tmsize_t bufsizetoalloc,

libtiff/tif_getimage.c:675:10: Call
673. 	while (tocol < w)
674.         {
675. 	    if (_TIFFReadTileAndAllocBuffer(tif, (void**) &buf, bufsize, col,
              ^
676. 			     row+img->row_offset, 0, 0)==(tmsize_t)(-1) &&
677.                 (buf == NULL || img->stoponerr))

libtiff/tif_read.c:1026:1: Parameter `tif->tif_dir.td_imagewidth`
  1024.  * * calls regular TIFFReadEncodedTile() if *buf != NULL
  1025.  */
  1026. tmsize_t
        ^
  1027. _TIFFReadTileAndAllocBuffer(TIFF* tif,
  1028.                             void **buf, tmsize_t bufsizetoalloc,

libtiff/tif_read.c:1031:36: Call
  1029.                             uint32 x, uint32 y, uint32 z, uint16 s)
  1030. {
  1031.     if (!TIFFCheckRead(tif, 1) || !TIFFCheckTile(tif, x, y, z, s))
                                           ^
  1032.             return ((tmsize_t)(-1));
  1033.     return (_TIFFReadEncodedTileAndAllocBuffer(tif,

libtiff/tif_tile.c:74:1: <LHS trace>
72.  * against the image bounds.
73.  */
74. int
    ^
75. TIFFCheckTile(TIFF* tif, uint32 x, uint32 y, uint32 z, uint16 s)
76. {

libtiff/tif_tile.c:74:1: Parameter `x`
    72.  * against the image bounds.
    73.  */
    74. int
        ^
    75. TIFFCheckTile(TIFF* tif, uint32 x, uint32 y, uint32 z, uint16 s)
    76. {

libtiff/tif_tile.c:80:3: Binary operation: ([0, +oo] - 1):unsigned32 by call to `_TIFFReadTileAndAllocBuffer` 
    78. 
    79. 	if (x >= td->td_imagewidth) {
    80. 		TIFFErrorExt(tif->tif_clientdata, tif->tif_name,
          ^
    81. 			     "%lu: Col out of range, max %lu",
    82. 			     (unsigned long) x,
