tools/tiff2pdf.c:2936: error: Integer Overflow L2
  ([0, `input->tif_dir.td_tilelength`] - 1):unsigned32 by call to `TIFFReadEncodedTile`.

tools/tiff2pdf.c:2711:1: Parameter `input->tif_dir.td_tilelength`
2709.  */
2710. 
2711. tsize_t t2p_readwrite_pdf_image_tile(T2P* t2p, TIFF* input, TIFF* output, ttile_t tile){
      ^
2712. 
2713. 	uint16 edge=0;

tools/tiff2pdf.c:2909:16: Call
2907. 
2908. 		if(t2p->pdf_sample == T2P_SAMPLE_PLANAR_SEPARATE_TO_CONTIG){
2909. 			septilesize=TIFFTileSize(input);
                     ^
2910. 			septilecount=TIFFNumberOfTiles(input);
2911. 			/* tilesize=septilesize*t2p->tiff_samplesperpixel; */

libtiff/tif_tile.c:249:1: Parameter `tif->tif_dir.td_tilelength`
  247. 	return (TIFFVTileSize64(tif, tif->tif_dir.td_tilelength));
  248. }
  249. tmsize_t
       ^
  250. TIFFTileSize(TIFF* tif)
  251. {

libtiff/tif_tile.c:255:4: Call
  253. 	uint64 m;
  254. 	tmsize_t n;
  255. 	m=TIFFTileSize64(tif);
          ^
  256. 	n=(tmsize_t)m;
  257. 	if ((uint64)n!=m)

libtiff/tif_tile.c:244:1: Parameter `tif->tif_dir.td_tilelength`
    242.  * Compute the # bytes in a row-aligned tile.
    243.  */
    244. uint64
         ^
    245. TIFFTileSize64(TIFF* tif)
    246. {

libtiff/tif_tile.c:247:10: Call
    245. TIFFTileSize64(TIFF* tif)
    246. {
    247. 	return (TIFFVTileSize64(tif, tif->tif_dir.td_tilelength));
                  ^
    248. }
    249. tmsize_t

libtiff/tif_tile.c:177:1: Parameter `tif->tif_dir.td_tilelength`
      175.  * Compute the # bytes in a variable length, row-aligned tile.
      176.  */
      177. uint64
           ^
      178. TIFFVTileSize64(TIFF* tif, uint32 nrows)
      179. {

tools/tiff2pdf.c:2936:6: Call
2934. 			for(i=0;i<t2p->tiff_samplesperpixel;i++){
2935. 				read = 
2936. 					TIFFReadEncodedTile(input, 
           ^
2937. 						tile + i*tilecount, 
2938. 						(tdata_t) &(samplebuffer[samplebufferoffset]), 

libtiff/tif_read.c:649:1: Parameter `tif->tif_dir.td_tilelength`
  647.  * amount into the user-supplied buffer.
  648.  */
  649. tmsize_t
       ^
  650. TIFFReadEncodedTile(TIFF* tif, uint32 tile, void* buf, tmsize_t size)
  651. {

libtiff/tif_read.c:668:6: Call
  666. 	else if (size > tilesize)
  667. 		size = tilesize;
  668. 	if (TIFFFillTile(tif, tile) && (*tif->tif_decodetile)(tif,
            ^
  669. 	    (uint8*) buf, size, (uint16)(tile/td->td_stripsperimage))) {
  670. 		(*tif->tif_postdecode)(tif, (uint8*) buf, size);

libtiff/tif_read.c:792:1: Parameter `tif->tif_dir.td_tilelength`
    790.  * expanded, as necessary, to hold the tile's data.
    791.  */
    792. int
         ^
    793. TIFFFillTile(TIFF* tif, uint32 tile)
    794. {

libtiff/tif_read.c:901:10: Call
    899. 		}
    900. 	}
    901. 	return (TIFFStartTile(tif, tile));
                  ^
    902. }
    903. 

libtiff/tif_read.c:990:1: <LHS trace>
988.  * tile has just been read in.
989.  */
990. static int
     ^
991. TIFFStartTile(TIFF* tif, uint32 tile)
992. {

libtiff/tif_read.c:990:1: Parameter `tif->tif_dir.td_imagelength`
      988.  * tile has just been read in.
      989.  */
      990. static int
           ^
      991. TIFFStartTile(TIFF* tif, uint32 tile)
      992. {

libtiff/tif_read.c:1008:14: Binary operation: ([0, input->tif_dir.td_tilelength] - 1):unsigned32 by call to `TIFFReadEncodedTile` 
      1006. 		td->td_tilelength;
      1007. 	tif->tif_col =
      1008. 	    (tile % TIFFhowmany_32(td->td_imagelength, td->td_tilelength)) *
                         ^
      1009. 		td->td_tilewidth;
      1010.         tif->tif_flags &= ~TIFF_BUF4WRITE;
