tools/tiff2ps.c:1900: error: Null Dereference
  pointer `tf_buf` last assigned on line 1899 could be null and is dereferenced by call to `memset()` at line 1900, column 9.

tools/tiff2ps.c:1884:1: start of procedure PSDataBW()
1882. }
1883. 
1884. void
      ^
1885. PSDataBW(FILE* fd, TIFF* tif, uint32 w, uint32 h)
1886. {

tools/tiff2ps.c:1887:2: 
1885. PSDataBW(FILE* fd, TIFF* tif, uint32 w, uint32 h)
1886. {
1887. 	int breaklen = MAXLINE;
       ^
1888. 	unsigned char* tf_buf;
1889. 	unsigned char* cp;

tools/tiff2ps.c:1890:2: 
1888. 	unsigned char* tf_buf;
1889. 	unsigned char* cp;
1890. 	tsize_t stripsize = TIFFStripSize(tif);
       ^
1891. 	tstrip_t s;
1892. 

libtiff/tif_strip.c:235:1: start of procedure TIFFStripSize()
  233. 	return (TIFFVStripSize64(tif, rps));
  234. }
  235. tmsize_t
       ^
  236. TIFFStripSize(TIFF* tif)
  237. {

libtiff/tif_strip.c:238:2: 
  236. TIFFStripSize(TIFF* tif)
  237. {
  238. 	static const char module[] = "TIFFStripSize";
        ^
  239. 	uint64 m;
  240. 	tmsize_t n;

libtiff/tif_strip.c:241:2: Skipping TIFFStripSize64(): empty list of specs
  239. 	uint64 m;
  240. 	tmsize_t n;
  241. 	m=TIFFStripSize64(tif);
        ^
  242. 	n=(tmsize_t)m;
  243. 	if ((uint64)n!=m)

libtiff/tif_strip.c:242:2: 
  240. 	tmsize_t n;
  241. 	m=TIFFStripSize64(tif);
  242. 	n=(tmsize_t)m;
        ^
  243. 	if ((uint64)n!=m)
  244. 	{

libtiff/tif_strip.c:243:6: Taking false branch
  241. 	m=TIFFStripSize64(tif);
  242. 	n=(tmsize_t)m;
  243. 	if ((uint64)n!=m)
            ^
  244. 	{
  245. 		TIFFErrorExt(tif->tif_clientdata,module,"Integer overflow");

libtiff/tif_strip.c:248:2: 
  246. 		n=0;
  247. 	}
  248. 	return(n);
        ^
  249. }
  250. 

libtiff/tif_strip.c:249:1: return from a call to TIFFStripSize
  247. 	}
  248. 	return(n);
  249. }
       ^
  250. 
  251. /*

tools/tiff2ps.c:1895:2: 
1893. #if defined( EXP_ASCII85ENCODER )
1894. 	tsize_t	ascii85_l;		/* Length, in bytes, of ascii85_p[] data */
1895. 	uint8	*ascii85_p = 0;		/* Holds ASCII85 encoded data */
       ^
1896. #endif
1897. 

tools/tiff2ps.c:1898:2: 
1896. #endif
1897. 
1898. 	(void) w; (void) h;
       ^
1899. 	tf_buf = (unsigned char *) _TIFFmalloc(stripsize);
1900.         memset(tf_buf, 0, stripsize);

tools/tiff2ps.c:1898:12: 
1896. #endif
1897. 
1898. 	(void) w; (void) h;
                 ^
1899. 	tf_buf = (unsigned char *) _TIFFmalloc(stripsize);
1900.         memset(tf_buf, 0, stripsize);

tools/tiff2ps.c:1899:2: 
1897. 
1898. 	(void) w; (void) h;
1899. 	tf_buf = (unsigned char *) _TIFFmalloc(stripsize);
       ^
1900.         memset(tf_buf, 0, stripsize);
1901. 	if (tf_buf == NULL) {

libtiff/tif_unix.c:253:1: start of procedure _TIFFmalloc()
  251. #endif
  252. 
  253. void*
       ^
  254. _TIFFmalloc(tmsize_t s)
  255. {

libtiff/tif_unix.c:256:2: 
  254. _TIFFmalloc(tmsize_t s)
  255. {
  256. 	return (malloc((size_t) s));
        ^
  257. }
  258. 

libtiff/tif_unix.c:257:1: return from a call to _TIFFmalloc
  255. {
  256. 	return (malloc((size_t) s));
  257. }
       ^
  258. 
  259. void

tools/tiff2ps.c:1900:9: 
1898. 	(void) w; (void) h;
1899. 	tf_buf = (unsigned char *) _TIFFmalloc(stripsize);
1900.         memset(tf_buf, 0, stripsize);
              ^
1901. 	if (tf_buf == NULL) {
1902. 		TIFFError(filename, "No space for scanline buffer");
