tools/tiffcp.c:1379: error: Buffer Overrun L3
  Offset: [7, +oo] (⇐ [0, +oo] + 7) Size: [0, +oo] by call to `TIFFReadTile`.

tools/tiffcp.c:1353:1: Parameter `in->tif_rawdata`
1351. }
1352. 
1353. DECLAREreadFunc(readContigTilesIntoBuffer)
      ^
1354. {
1355. 	int status = 1;

tools/tiffcp.c:1379:8: Call
1377. 
1378. 		for (col = 0; col < imagewidth && colb < imagew; col += tw) {
1379. 			if (TIFFReadTile(in, tilebuf, col, row, 0, 0) < 0
             ^
1380. 			    && !ignore) {
1381. 				TIFFError(TIFFFileName(in),

libtiff/tif_read.c:972:1: Parameter `*tif->tif_rawdata`
  970.  * tile is selected by the (x,y,z,s) coordinates.
  971.  */
  972. tmsize_t
       ^
  973. TIFFReadTile(TIFF* tif, void* buf, uint32 x, uint32 y, uint32 z, uint16 s)
  974. {

libtiff/tif_read.c:977:10: Call
  975. 	if (!TIFFCheckRead(tif, 1) || !TIFFCheckTile(tif, x, y, z, s))
  976. 		return ((tmsize_t)(-1));
  977. 	return (TIFFReadEncodedTile(tif,
                ^
  978. 	    TIFFComputeTile(tif, x, y, z, s), buf, (tmsize_t)(-1)));
  979. }

libtiff/tif_read.c:985:1: Parameter `*tif->tif_rawdata`
    983.  * amount into the user-supplied buffer.
    984.  */
    985. tmsize_t
         ^
    986. TIFFReadEncodedTile(TIFF* tif, uint32 tile, void* buf, tmsize_t size)
    987. {

libtiff/tif_read.c:1022:6: Call
    1020. 	else if (size > tilesize)
    1021. 		size = tilesize;
    1022. 	if (TIFFFillTile(tif, tile) && (*tif->tif_decodetile)(tif,
               ^
    1023. 	    (uint8*) buf, size, (uint16)(tile/td->td_stripsperimage))) {
    1024. 		(*tif->tif_postdecode)(tif, (uint8*) buf, size);

libtiff/tif_read.c:1217:1: Parameter `*tif->tif_rawdata`
      1215.  * expanded, as necessary, to hold the tile's data.
      1216.  */
      1217. int
            ^
      1218. TIFFFillTile(TIFF* tif, uint32 tile)
      1219. {

libtiff/tif_read.c:1378:5: Call
      1376.                             !isFillOrder(tif, td->td_fillorder) &&
      1377. 			    (tif->tif_flags & TIFF_NOBITREV) == 0)
      1378. 				TIFFReverseBits(tif->tif_rawdata,
                ^
      1379.                                                 tif->tif_rawdataloaded);
      1380. 		}

libtiff/tif_swab.c:283:1: <Length trace>
281. }
282. 
283. void
     ^
284. TIFFReverseBits(uint8* cp, tmsize_t n)  
285. {

libtiff/tif_swab.c:283:1: Parameter `*cp`
        281. }
        282. 
        283. void
             ^
        284. TIFFReverseBits(uint8* cp, tmsize_t n)  
        285. {

libtiff/tif_swab.c:294:3: Array access: Offset: [7, +oo] (⇐ [0, +oo] + 7) Size: [0, +oo] by call to `TIFFReadTile` 
        292. 		cp[5] = TIFFBitRevTable[cp[5]];
        293. 		cp[6] = TIFFBitRevTable[cp[6]];
        294. 		cp[7] = TIFFBitRevTable[cp[7]];
               ^
        295. 		cp += 8;
        296. 	}
