Real TIFF decoding
MakeFileWork reads Intel and Motorola TIFF headers, validates the image directory and strip bounds, and decodes uncompressed 8-bit RGB, RGBA and grayscale images before verifying the PNG output.
Safe, explicit scope
Processing is local and bounded to 30 MB, 10,000 pixels per dimension and 40 megapixels. Compressed, planar, indexed and malformed TIFF variants are rejected rather than guessed.