+ if (!s->stripdata && !s->stripoff) {
+ av_log(avctx, AV_LOG_ERROR, "Image data is missing\n");
+ return -1;
+ }
+ /* now we have the data and may start decoding */
+ if ((ret = init_image(s)) < 0)
+ return ret;
+
+ if (s->strips == 1 && !s->stripsize) {
+ av_log(avctx, AV_LOG_WARNING, "Image data size missing\n");
+ s->stripsize = buf_size - s->stripoff;
+ }
+ stride = p->linesize[0];
+ dst = p->data[0];
+ for (i = 0; i < s->height; i += s->rps) {
+ if (s->stripsizes) {
+ if (s->stripsizes >= end_buf)
+ return AVERROR_INVALIDDATA;
+ ssize = tget(&s->stripsizes, s->sstype, s->le);
+ } else
+ ssize = s->stripsize;
+
+ if (s->stripdata) {
+ if (s->stripdata >= end_buf)
+ return AVERROR_INVALIDDATA;
+ soff = tget(&s->stripdata, s->sot, s->le);
+ } else
+ soff = s->stripoff;
+
+ if (soff > buf_size || ssize > buf_size - soff) {
+ av_log(avctx, AV_LOG_ERROR, "Invalid strip size/offset\n");
+ return -1;
+ }
+ if (tiff_unpack_strip(s, dst, stride, orig_buf + soff, ssize,
+ FFMIN(s->rps, s->height - i)) < 0)
+ break;
+ dst += s->rps * stride;
+ }
+ if (s->predictor == 2) {
+ dst = p->data[0];
+ soff = s->bpp >> 3;
+ ssize = s->width * soff;
+ for (i = 0; i < s->height; i++) {
+ for (j = soff; j < ssize; j++)
+ dst[j] += dst[j - soff];
+ dst += stride;
+ }
+ }
+
+ if (s->invert) {
+ uint8_t *src;
+ int j;