Subject: Re: [bug#54252] [PATCH] gnu: lemonbar: Update to 1.4.

From: Maxime Devos <[email-masked]>
Date: Fri, 11 Mar 2022 13:32:33 +0100

Maxime Devos schreef op za 05-03-2022 om 10:59 [+0100]:
> Jai Vetrivelan schreef op za 05-03-2022 om 11:35 [+0530]:
> > +  (package
> > +    (name "lemonbar")
> > +    (version "1.4")
> > +    (source (origin
> > +              (method git-fetch)
> > +              (uri (git-reference
> > +                    (url "https://github.com/LemonBoy/bar")
> > +                    (commit (string-append "v" version))))
> > +            (file-name (git-file-name name version))
> 
> At least in the 'master' branch (and presumably also in v1.4), there
> are a few bugs.  At line 789, the return value of 'malloc' is not
> checked, potentially causing a null-pointer dereference (and hence, a
> segfault) at line 790 (in lemonbar.c).

Now reported upstream at <https://github.com/LemonBoy/bar/issues/240>.