tools/tiff2pdf.c:5424: error: Integer Overflow L2
  ([0, max(4294967295, `input->tif_dir.td_tilelength`)] - 1):unsigned32 by call to `t2p_readwrite_pdf_image_tile`.

tools/tiff2pdf.c:5304:1: Parameter `input->tif_dir.td_tilelength`
5302. */
5303. 
5304. tsize_t t2p_write_pdf(T2P* t2p, TIFF* input, TIFF* output){
      ^
5305. 
5306. 	tsize_t written=0;

tools/tiff2pdf.c:5311:2: Call
5309. 	uint16 i=0;
5310. 
5311. 	t2p_read_tiff_init(t2p, input);
       ^
5312. 	if(t2p->t2p_error!=T2P_ERR_OK){return(0);}
5313. 	t2p->pdf_xrefoffsets= (uint32*) _TIFFmalloc(TIFFSafeMultiply(tmsize_t,t2p->pdf_xrefcount,sizeof(uint32)) );

tools/tiff2pdf.c:1030:1: Parameter `input->tif_dir.td_tilelength`
  1028. */
  1029. 
  1030. void t2p_read_tiff_init(T2P* t2p, TIFF* input){
        ^
  1031. 
  1032. 	tdir_t directorycount=0;

tools/tiff2pdf.c:5343:3: Call
5341. 	written += t2p_write_pdf_obj_end(output);
5342. 	for(t2p->pdf_page=0;t2p->pdf_page<t2p->tiff_pagecount;t2p->pdf_page++){
5343. 		t2p_read_tiff_data(t2p, input);
        ^
5344. 		if(t2p->t2p_error!=T2P_ERR_OK){return(0);}
5345. 		t2p->pdf_xrefoffsets[t2p->pdf_xrefcount++]=written;

tools/tiff2pdf.c:1245:1: Parameter `input->tif_dir.td_tilelength`
  1243. */
  1244. 
  1245. void t2p_read_tiff_data(T2P* t2p, TIFF* input){
        ^
  1246. 
  1247. 	int i=0;

tools/tiff2pdf.c:1261:2: Call
  1259.         
  1260. 	
  1261. 	TIFFSetDirectory(input, t2p->tiff_pages[t2p->pdf_page].page_directory);
         ^
  1262. 
  1263. 	TIFFGetField(input, TIFFTAG_IMAGEWIDTH, &(t2p->tiff_width));

libtiff/tif_dir.c:1535:1: Parameter `tif->tif_dir.td_tilelength`
    1533.  * NB: Directories are numbered starting at 0.
    1534.  */
    1535. int
          ^
    1536. TIFFSetDirectory(TIFF* tif, uint16 dirn)
    1537. {

tools/tiff2pdf.c:5423:5: Call
5421. 				written += t2p_write_pdf_stream_start(output);
5422. 				streamlen=written;
5423. 				t2p_read_tiff_size_tile(t2p, input, i2);
          ^
5424. 				written += t2p_readwrite_pdf_image_tile(t2p, input, output, i2);
5425. 				t2p_write_advance_directory(t2p, output);

tools/tiff2pdf.c:2016:1: Parameter `input->tif_dir.td_tilelength`
  2014. */
  2015. 
  2016. void t2p_read_tiff_size_tile(T2P* t2p, TIFF* input, ttile_t tile){
        ^
  2017. 
  2018. 	uint64* tbc = NULL;

tools/tiff2pdf.c:5424:16: Call
5422. 				streamlen=written;
5423. 				t2p_read_tiff_size_tile(t2p, input, i2);
5424. 				written += t2p_readwrite_pdf_image_tile(t2p, input, output, i2);
                     ^
5425. 				t2p_write_advance_directory(t2p, output);
5426. 				if(t2p->t2p_error!=T2P_ERR_OK){return(0);}

tools/tiff2pdf.c:2739:1: Parameter `input->tif_dir.td_tilelength`
  2737.  */
  2738. 
  2739. tsize_t t2p_readwrite_pdf_image_tile(T2P* t2p, TIFF* input, TIFF* output, ttile_t tile){
        ^
  2740. 
  2741. 	uint16 edge=0;

tools/tiff2pdf.c:2919:10: Call
  2917. 		}
  2918. 
  2919. 		read = TIFFReadEncodedTile(
                 ^
  2920. 			input, 
  2921. 			tile, 

libtiff/tif_read.c:649:1: Parameter `tif->tif_dir.td_tilelength`
    647.  * amount into the user-supplied buffer.
    648.  */
    649. tmsize_t
         ^
    650. TIFFReadEncodedTile(TIFF* tif, uint32 tile, void* buf, tmsize_t size)
    651. {

libtiff/tif_read.c:668:6: Call
    666. 	else if (size > tilesize)
    667. 		size = tilesize;
    668. 	if (TIFFFillTile(tif, tile) && (*tif->tif_decodetile)(tif,
              ^
    669. 	    (uint8*) buf, size, (uint16)(tile/td->td_stripsperimage))) {
    670. 		(*tif->tif_postdecode)(tif, (uint8*) buf, size);

libtiff/tif_read.c:792:1: Parameter `tif->tif_dir.td_tilelength`
      790.  * expanded, as necessary, to hold the tile's data.
      791.  */
      792. int
           ^
      793. TIFFFillTile(TIFF* tif, uint32 tile)
      794. {

libtiff/tif_read.c:901:10: Call
      899. 		}
      900. 	}
      901. 	return (TIFFStartTile(tif, tile));
                    ^
      902. }
      903. 

libtiff/tif_read.c:990:1: <LHS trace>
988.  * tile has just been read in.
989.  */
990. static int
     ^
991. TIFFStartTile(TIFF* tif, uint32 tile)
992. {

libtiff/tif_read.c:990:1: Parameter `tif->tif_dir.td_tilelength`
        988.  * tile has just been read in.
        989.  */
        990. static int
             ^
        991. TIFFStartTile(TIFF* tif, uint32 tile)
        992. {

libtiff/tif_read.c:1012:19: Binary operation: ([0, max(4294967295, input->tif_dir.td_tilelength)] - 1):unsigned32 by call to `t2p_readwrite_pdf_image_tile` 
        1010.         }
        1011. 	tif->tif_row = (tile % howmany32) * td->td_tilelength;
        1012.         howmany32=TIFFhowmany_32(td->td_imagelength, td->td_tilelength);
                                ^
        1013.         if (howmany32 == 0) {
        1014.                 TIFFErrorExt(tif->tif_clientdata,module,"Zero tiles");
