From: philip@tecnocode.co.uk   
      
   Package: malcontent   
   Version: 0.13.1-5   
      
   The downstream patch `all_apps.patch` carried in (at least) malcontent   
   0.13.1-5 contains a bug which causes a crash on certain `.desktop` files   
   (ones which have `Type=Application` but no `Exec=` line). Typically these   
   `.desktop` files will (apparently) come from snap apps.   
      
   The patch is viewable online here:   
   https://sources.debian.org/patches/malcontent/0.13.1-5/all_apps.patch/   
      
   The bug was discovered/diagnosed in the upstream issue here:   
   https://gitlab.freedesktop.org/pwithnall/malcontent/-/issues/136   
      
   The patch calls `g_app_info_get_commandline()` in three places. The first   
   call correctly has a `NULL` check. The other two do not, and proceed to   
   treat the returned value as if it’s unconditionally non-`NULL`.   
      
   ---   
      
   Given that the patch says it’s for `Bug:   
   https://gitlab.freedesktop.org/pwithnall/malcontent/-/issues/58`, it’s   
   disappointing that the patch wasn’t submitted upstream even though I   
   said I was open to such contributions   
   (https://gitlab.freedesktop.org/pwithnall/malcontent/-/issues/58#note_2035099).   
      
   Review upstream may have caught this issue.   
      
   -----BEGIN PGP SIGNATURE-----   
      
   iQIzBAABCgAdFiEEbftQ0PJq6fUJsBLNxcQs+yaGN8oFAmmcbgUACgkQxcQs+yaG   
   N8rRig/8DXlg7CO+dW6uhQfUJkOk/miuLOo/y/+J4DMOKtTQoA2lw38mueRYgCyf   
   kRtq1MjV4057hN4TjyxECE+cpBmxXyQReQvkHbIIczhTMu6azBEz7n79cSUEu7sn   
   ehamyo8RKoQn2eUX68/q/NHIWFOTDbKXuz3/Tfty8N1gXE6Bst8crdRqWFJNis0U   
   NvtmgAVbEzhtBsm23iD00OB7np3fztAeAPaaCVv9Gf+jFNQWUwHp0/3yMhpNMBTq   
   M4um/8pG8DSeIsIneBLxln1vqnOzI6Qlf31xKSaeuFpgwjRhGabxu1BUsqppC1Jx   
   vUrduSOXN/13xnF0oDbFsn35qpo9PtXBdmRIoFCPoR4CAe9UiH4ujKChjZjp6YfI   
   hQGFb20HI55mn5NnSNlpJkqzvO/+kkQp9IHN7i8euSUr0eyfpJaZV/Z/QjmsGD7i   
   sIeiaURzx8pX/qDxs54T85slECVIjXCdhTcC3uo7PrJmXzPXldiEw8s9vhWaXFZJ   
   q5KUQVLEFfYeVkS1eTJBwCv/r+ikkgCzkssSb7d6b3L15+TTyhcPB7iskYYeMst5   
   G1ipHTAk9JQy8nPKgGFznnck3N7k7IZ2/dtdlILyTPAd5QJkRIJOOg8LJIe1r5yM   
   1YVhuuFvZ29YrS7ntsvuSgTVNT7ZxurJl7P4XBpSzdrX7tcBAGs=   
   =y39z   
   -----END PGP SIGNATURE-----   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)