tools/tiff2ps.c:2216: error: Buffer Overrun L3
  Offset: [7, +oo] (⇐ [0, +oo] + 7) Size: [0, +oo] by call to `TIFFReverseBits`.

tools/tiff2ps.c:2163:3: Assignment
2161. 
2162. 	if (use_rawdata) {
2163. 		chunk_size = (tsize_t) bc[0];
        ^
2164. 		for (chunk_no = 1; chunk_no < num_chunks; chunk_no++)
2165. 			if ((tsize_t) bc[chunk_no] > chunk_size)

tools/tiff2ps.c:2173:30: Call
2171. 			chunk_size = TIFFStripSize(tif);
2172. 	}
2173. 	buf_data = (unsigned char *)_TIFFmalloc(chunk_size);
                                   ^
2174. 	if (!buf_data) {
2175. 		TIFFError(filename, "Can't alloc %lu bytes for %s.",

libtiff/tif_unix.c:261:17: Assignment
  259. {
  260.         if (s == 0)
  261.                 return ((void *) NULL);
                       ^
  262. 
  263. 	return (malloc((size_t) s));

tools/tiff2ps.c:2173:2: Assignment
2171. 			chunk_size = TIFFStripSize(tif);
2172. 	}
2173. 	buf_data = (unsigned char *)_TIFFmalloc(chunk_size);
       ^
2174. 	if (!buf_data) {
2175. 		TIFFError(filename, "Can't alloc %lu bytes for %s.",

tools/tiff2ps.c:2216:8: Call
2214. 						  buf_data, chunk_size);
2215. 			if (fillorder == FILLORDER_LSB2MSB)
2216. 			    TIFFReverseBits(buf_data, byte_count);
             ^
2217. 		} else {
2218. 			if (tiled_image)

libtiff/tif_swab.c:285:1: <Length trace>
283. }
284. 
285. void
     ^
286. TIFFReverseBits(uint8* cp, tmsize_t n)  
287. {

libtiff/tif_swab.c:285:1: Parameter `*cp`
  283. }
  284. 
  285. void
       ^
  286. TIFFReverseBits(uint8* cp, tmsize_t n)  
  287. {

libtiff/tif_swab.c:296:3: Array access: Offset: [7, +oo] (⇐ [0, +oo] + 7) Size: [0, +oo] by call to `TIFFReverseBits` 
  294. 		cp[5] = TIFFBitRevTable[cp[5]];
  295. 		cp[6] = TIFFBitRevTable[cp[6]];
  296. 		cp[7] = TIFFBitRevTable[cp[7]];
         ^
  297. 		cp += 8;
  298. 	}
