libtiff/tif_dirread.c:2841: error: Buffer Overrun L3
  Offset: [1, +oo] Size: [0, +oo].

libtiff/tif_dirread.c:2832:6: <Length trace>
2830. 	if (direntry->tdir_count<(uint64)tif->tif_dir.td_samplesperpixel)
2831. 		return(TIFFReadDirEntryErrCount);
2832. 	err=TIFFReadDirEntryShortArray(tif,direntry,&m);
           ^
2833. 	if (err!=TIFFReadDirEntryErrOk || m == NULL)
2834. 		return(err);

libtiff/tif_dirread.c:2832:6: Call
2830. 	if (direntry->tdir_count<(uint64)tif->tif_dir.td_samplesperpixel)
2831. 		return(TIFFReadDirEntryErrCount);
2832. 	err=TIFFReadDirEntryShortArray(tif,direntry,&m);
           ^
2833. 	if (err!=TIFFReadDirEntryErrOk || m == NULL)
2834. 		return(err);

libtiff/tif_dirread.c:1290:1: Parameter `**value`
  1288. }
  1289. 
  1290. static enum TIFFReadDirEntryErr TIFFReadDirEntryShortArray(TIFF* tif, TIFFDirEntry* direntry, uint16** value)
        ^
  1291. {
  1292. 	enum TIFFReadDirEntryErr err;

libtiff/tif_dirread.c:2835:2: Assignment
2833. 	if (err!=TIFFReadDirEntryErrOk || m == NULL)
2834. 		return(err);
2835. 	na=m;
       ^
2836. 	nb=tif->tif_dir.td_samplesperpixel;
2837. 	*value=*na++;

libtiff/tif_dirread.c:2837:10: Assignment
2835. 	na=m;
2836. 	nb=tif->tif_dir.td_samplesperpixel;
2837. 	*value=*na++;
               ^
2838. 	nb--;
2839. 	while (nb>0)

libtiff/tif_dirread.c:2841:7: Array access: Offset: [1, +oo] Size: [0, +oo]
2839. 	while (nb>0)
2840. 	{
2841. 		if (*na++!=*value)
            ^
2842. 		{
2843. 			err=TIFFReadDirEntryErrPsdif;
