I have excatly same versions of diskfon and bullet.library that you have.
diskfont.library 45.7 (01/26/02)
bullet.library 44.1 (05/01/99)
No Outline fonts and all (two) .otag fonts removed and fixfonts runned.
No difference.
You shouldn't go around deleting .otag files.
What is happening is NetSurf has decided you have a font with no name (probably due to a corrupt font cache, .font file or a bug in my code), so it is trying to read FONTS:.otag. This probably isn't the cause of the crash, as that file open will just fail. There is definitely a problem with the font scanner but I don't really have anything to go on to track it down. If you're using diskfont fonts the scan is irrelevant anyway, as it's for font substitution for characters that aren't in the current font, which isn't possible to do when all your fonts are forced into ISO-8859-1.
You can trick it into skipping the font scan by creating a file "FontGlyphCache" containing the following:
0x0000 "CGTimes"
Put that file in your user directory (PROGDIR:Users/default or whatever) and it won't scan as it'll think it already has.
I'll add something to skip the scan if outline fonts aren't being used.