ea5d11
diff -up ghostscript-9.10/psi/ialloc.c.crash ghostscript-9.10/psi/ialloc.c
ea5d11
--- ghostscript-9.10/psi/ialloc.c.crash	2013-08-30 11:37:28.000000000 +0100
ea5d11
+++ ghostscript-9.10/psi/ialloc.c	2014-06-04 10:47:58.294526685 +0100
ea5d11
@@ -160,6 +160,7 @@ gs_alloc_ref_array(gs_ref_memory_t * mem
ea5d11
                    uint num_refs, client_name_t cname)
ea5d11
 {
ea5d11
     ref *obj;
ea5d11
+    int i;
ea5d11
 
ea5d11
     /* If we're allocating a run of refs already, */
ea5d11
     /* and we aren't about to overflow the maximum run length, use it. */
ea5d11
@@ -224,6 +225,9 @@ gs_alloc_ref_array(gs_ref_memory_t * mem
ea5d11
             cp->where = (ref_packed *)obj;
ea5d11
         }
ea5d11
     }
ea5d11
+    for (i = 0; i < num_refs; i++) {
ea5d11
+        make_null(&(obj[i]));
ea5d11
+    }
ea5d11
     make_array(parr, attrs | mem->space, num_refs, obj);
ea5d11
     return 0;
ea5d11
 }