libtiff/tif_dirread.c:4175: error: Buffer Overrun L3
  Offset: 1 Size: [0, +oo].

libtiff/tif_dirread.c:3903:38: <Length trace>
3901.                                     goto bad;
3902.                                 }
3903.                                 if (!TIFFFetchStripThing(tif,dp,tif->tif_dir.td_nstrips,&tif->tif_dir.td_stripbytecount))  
                                           ^
3904. 					goto bad;
3905. #endif                                

libtiff/tif_dirread.c:3903:38: Call
3901.                                     goto bad;
3902.                                 }
3903.                                 if (!TIFFFetchStripThing(tif,dp,tif->tif_dir.td_nstrips,&tif->tif_dir.td_stripbytecount))  
                                           ^
3904. 					goto bad;
3905. #endif                                

libtiff/tif_dirread.c:5613:1: Parameter `**lpp`
  5611.  * While this routine says "strips", in fact it's also used for tiles.
  5612.  */
  5613. static int
        ^
  5614. TIFFFetchStripThing(TIFF* tif, TIFFDirEntry* dir, uint32 nstrips, uint64** lpp)
  5615. {

libtiff/tif_dirread.c:4175:47: Array access: Offset: 1 Size: [0, +oo]
4173. 			   && tif->tif_dir.td_nstrips > 2
4174. 			   && tif->tif_dir.td_compression == COMPRESSION_NONE
4175. 			   && tif->tif_dir.td_stripbytecount[0] != tif->tif_dir.td_stripbytecount[1]
                                                    ^
4176. 			   && tif->tif_dir.td_stripbytecount[0] != 0
4177. 			   && tif->tif_dir.td_stripbytecount[1] != 0 ) {
