Created attachment 6054 [details] ghostscript-tif-fail-close.patch If opening the output device for tiffg3 fails for any reason, we segfault in tfax_close() because of a missing NULL check before calling TIFFCleanup(). Original bug report: https://bugzilla.redhat.com/show_bug.cgi?id=571520
Applied the patch as r10924. Since all the devices in gdevtfax.c share the same closing function, this bug applied to all of them. However, this was the only call to TIFFCleanup were the NULL check was missing, so none of the devices outside of gdevtfax.c were affected. Thanks Tim!
*** Bug 691447 has been marked as a duplicate of this bug. ***