[Pkg-xfce-devel] Bug#736080: Bug#736080: pu: package xfce4-weather-plugin/0.7.4-5

[Yves-Alexis Perez]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On Sun, Jan 19, 2014 at 04:17:33PM +0100, Julien Cristau wrote:
> On Sun, Jan 19, 2014 at 16:04:03 +0100, Yves-Alexis Perez wrote:
> 
> > Package: release.debian.org
> > Severity: normal
> > Owner: pkg-xfce-devel at lists.alioth.debian.org
> > User: release.debian.org at packages.debian.org
> > Usertags: pu
> > 
> > Hi,
> > 
> > it seems that the weather.com format changed again, in a way which makes
> > xfce4-weather-plugin crash in Wheezy (see #735478). This doesn't affect
> > Jessie/sid where it doesn't use weather.com anymore.
> > 
> > A tiny patch fixes the issue, so it'd be nice if this could be allowed
> > to go to PU.
> > 
> are there any other places where this kind of trivial missing input
> check is missing?  Might be worth being slightly more proactive about
> this to avoid a crash next month...

I did a quick search, and this is the only g_assert() I could find.

But it's an XML parser, so I can't really promise it won't choke on
other chances in the input format, unfortunately.

Regards,
- -- 
Yves-Alexis Perez
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBCgAGBQJS2/ReAAoJEG3bU/KmdcClVOEH/R5kjH9FYPolRRgod0leC/vb
aHoTUU257D+1KJROmxCsq6RS69yL6HTHHZz9irMj9F/c0H755aWNAtfbLMMSKPTV
Mcvwh6mOBrAQEYKUuIu/P5VRgTYNZ+GLY0e+z6/ECanmVxQL5nHKAIWb8WTCcOaC
1FYKR+b0DI3Fdd2OruN4Qt4fRjlUnr0sFAWxVpbpqsrXqJ6mi2ff9mrGF6wuo6jt
7O86v0FatIuzMKe3Dy5SKQ9WNRks7t57T+40JbGDsOj4/G92nXuKiI1cCcLWTUM1
VT2uNuGK+qjdXoEo/iHbG22hM1znk1VXsNDw701TTISX3UP+AAhOYY2WIhAVP30=
=B24U
-----END PGP SIGNATURE-----