tiffdec: use bytestream2 to simplify overread/overwrite protection