tools/tiff2pdf.c:5387: error: Integer Overflow L2
  ([0, max(4294967295, `input->tif_dir.td_tilelength`)] - 1):unsigned32 by call to `t2p_readwrite_pdf_image_tile`.

tools/tiff2pdf.c:5267:1: Parameter `input->tif_dir.td_tilelength`
5265. */
5266. 
5267. tsize_t t2p_write_pdf(T2P* t2p, TIFF* input, TIFF* output){
      ^
5268. 
5269. 	tsize_t written=0;

tools/tiff2pdf.c:5274:2: Call
5272. 	uint16 i=0;
5273. 
5274. 	t2p_read_tiff_init(t2p, input);
       ^
5275. 	if(t2p->t2p_error!=T2P_ERR_OK){return(0);}
5276. 	t2p->pdf_xrefoffsets= (uint32*) _TIFFmalloc(TIFFSafeMultiply(tmsize_t,t2p->pdf_xrefcount,sizeof(uint32)) );

tools/tiff2pdf.c:1029:1: Parameter `input->tif_dir.td_tilelength`
  1027. */
  1028. 
  1029. void t2p_read_tiff_init(T2P* t2p, TIFF* input){
        ^
  1030. 
  1031. 	tdir_t directorycount=0;

tools/tiff2pdf.c:5306:3: Call
5304. 	written += t2p_write_pdf_obj_end(output);
5305. 	for(t2p->pdf_page=0;t2p->pdf_page<t2p->tiff_pagecount;t2p->pdf_page++){
5306. 		t2p_read_tiff_data(t2p, input);
        ^
5307. 		if(t2p->t2p_error!=T2P_ERR_OK){return(0);}
5308. 		t2p->pdf_xrefoffsets[t2p->pdf_xrefcount++]=written;

tools/tiff2pdf.c:1244:1: Parameter `input->tif_dir.td_tilelength`
  1242. */
  1243. 
  1244. void t2p_read_tiff_data(T2P* t2p, TIFF* input){
        ^
  1245. 
  1246. 	int i=0;

tools/tiff2pdf.c:1260:2: Call
  1258.         
  1259. 	
  1260. 	TIFFSetDirectory(input, t2p->tiff_pages[t2p->pdf_page].page_directory);
         ^
  1261. 
  1262. 	TIFFGetField(input, TIFFTAG_IMAGEWIDTH, &(t2p->tiff_width));

libtiff/tif_dir.c:1530:1: Parameter `tif->tif_dir.td_tilelength`
    1528.  * NB: Directories are numbered starting at 0.
    1529.  */
    1530. int
          ^
    1531. TIFFSetDirectory(TIFF* tif, uint16 dirn)
    1532. {

tools/tiff2pdf.c:5386:5: Call
5384. 				written += t2p_write_pdf_stream_start(output);
5385. 				streamlen=written;
5386. 				t2p_read_tiff_size_tile(t2p, input, i2);
          ^
5387. 				written += t2p_readwrite_pdf_image_tile(t2p, input, output, i2);
5388. 				t2p_write_advance_directory(t2p, output);

tools/tiff2pdf.c:1995:1: Parameter `input->tif_dir.td_tilelength`
  1993. */
  1994. 
  1995. void t2p_read_tiff_size_tile(T2P* t2p, TIFF* input, ttile_t tile){
        ^
  1996. 
  1997. 	uint64* tbc = NULL;

tools/tiff2pdf.c:5387:16: Call
5385. 				streamlen=written;
5386. 				t2p_read_tiff_size_tile(t2p, input, i2);
5387. 				written += t2p_readwrite_pdf_image_tile(t2p, input, output, i2);
                     ^
5388. 				t2p_write_advance_directory(t2p, output);
5389. 				if(t2p->t2p_error!=T2P_ERR_OK){return(0);}

tools/tiff2pdf.c:2711:1: Parameter `input->tif_dir.td_tilelength`
  2709.  */
  2710. 
  2711. tsize_t t2p_readwrite_pdf_image_tile(T2P* t2p, TIFF* input, TIFF* output, ttile_t tile){
        ^
  2712. 
  2713. 	uint16 edge=0;

tools/tiff2pdf.c:2891:10: Call
  2889. 		}
  2890. 
  2891. 		read = TIFFReadEncodedTile(
                 ^
  2892. 			input, 
  2893. 			tile, 

libtiff/tif_read.c:649:1: Parameter `tif->tif_dir.td_tilelength`
    647.  * amount into the user-supplied buffer.
    648.  */
    649. tmsize_t
         ^
    650. TIFFReadEncodedTile(TIFF* tif, uint32 tile, void* buf, tmsize_t size)
    651. {

libtiff/tif_read.c:668:6: Call
    666. 	else if (size > tilesize)
    667. 		size = tilesize;
    668. 	if (TIFFFillTile(tif, tile) && (*tif->tif_decodetile)(tif,
              ^
    669. 	    (uint8*) buf, size, (uint16)(tile/td->td_stripsperimage))) {
    670. 		(*tif->tif_postdecode)(tif, (uint8*) buf, size);

libtiff/tif_read.c:792:1: Parameter `tif->tif_dir.td_tilelength`
      790.  * expanded, as necessary, to hold the tile's data.
      791.  */
      792. int
           ^
      793. TIFFFillTile(TIFF* tif, uint32 tile)
      794. {

libtiff/tif_read.c:901:10: Call
      899. 		}
      900. 	}
      901. 	return (TIFFStartTile(tif, tile));
                    ^
      902. }
      903. 

libtiff/tif_read.c:990:1: <LHS trace>
988.  * tile has just been read in.
989.  */
990. static int
     ^
991. TIFFStartTile(TIFF* tif, uint32 tile)
992. {

libtiff/tif_read.c:990:1: Parameter `tif->tif_dir.td_tilelength`
        988.  * tile has just been read in.
        989.  */
        990. static int
             ^
        991. TIFFStartTile(TIFF* tif, uint32 tile)
        992. {

libtiff/tif_read.c:1008:14: Binary operation: ([0, max(4294967295, input->tif_dir.td_tilelength)] - 1):unsigned32 by call to `t2p_readwrite_pdf_image_tile` 
        1006. 		td->td_tilelength;
        1007. 	tif->tif_col =
        1008. 	    (tile % TIFFhowmany_32(td->td_imagelength, td->td_tilelength)) *
                           ^
        1009. 		td->td_tilewidth;
        1010.         tif->tif_flags &= ~TIFF_BUF4WRITE;
