fix(ui): address PR review comments

- inputwin.c: improve MB_CUR_MAX error message with actionable advice
- inputwin.c: add log_error when input window pad allocation fails
- statusbar.c: add log_warning for invalid cols values
- window.c: simplify _check_subwin_width using CLAMP macro

.github/workflows/ci-code.yml

@@ -29,10 +29,10 @@ jobs:
     name: Linux
     steps:
       - uses: actions/checkout@v4
-      - name: Build
-        run: docker build -f Dockerfile.${{ matrix.flavor }} -t profanity .
       - name: Run tests
-        run: docker run profanity ./ci-build.sh
+        run: |
+          docker build -f Dockerfile.${{ matrix.flavor }} -t profanity .
+          docker run profanity ./ci-build.sh
 
   code-style:
     runs-on: ubuntu-latest
@@ -107,7 +107,7 @@ jobs:
     name: Code Coverage
     steps:
       - uses: actions/checkout@v4
-      - name: Build
+      - name: Build and run coverage
-        run: docker build -f Dockerfile.arch -t profanity-cov .
+        run: |
-      - name: Run coverage
+          docker build -f Dockerfile.arch -t profanity-cov .
-        run: docker run profanity-cov ./ci-build.sh --coverage-only
+          docker run profanity-cov ./ci-build.sh --coverage-only

CONTRIBUTING.md

@@ -152,7 +152,7 @@ We have a static analyzer `check-cwe134.sh` that detects CWE-134 format string v
 ./check-cwe134.sh
 ```
 
-This checks for unsafe patterns where data could be passed directly as a format string to functions like `printf`, `cons_show`, etc. Never pass a raw string for formatting; use `"%s"` format specifier instead.
+This checks for unsafe patterns where user-controlled data could be passed directly as a format string to functions like `cons_show`, `log_error`, `win_println`, etc. Always use `"%s"` format specifier when printing user data.
 
 ### Finding typos
 

Dockerfile.arch

@@ -1,10 +1,9 @@
-FROM archlinux:latest
+FROM archlinux
 
 ENV TERM=xterm
 ENV CC="ccache gcc"
 
-RUN pacman -Syyu --noconfirm
+RUN pacman -Syu --noconfirm
-
 # reflector is optional - if it fails due to network issues, continue with default mirrorlist
 RUN pacman -S --needed --noconfirm reflector && \
     (reflector --latest 20 --protocol https --sort rate --save /etc/pacman.d/mirrorlist || true)

ci-build.sh

@@ -86,6 +86,7 @@ extract_test_count() {
 # and checks that the test framework reports the failure correctly
 verify_test_failure_detection()
 {
+    echo
     echo "==> Verifying test failure detection..."
     
     # Create a simple failing test

src/xmpp/iq.c

@@ -2532,6 +2532,9 @@ _disco_items_result_handler(xmpp_stanza_t* const stanza)
     }
 
     xmpp_stanza_t* child = xmpp_stanza_get_children(query);
+    if (child == NULL) {
+        return;
+    }
 
     while (child) {
         const char* stanza_name = xmpp_stanza_get_name(child);

tests/functionaltests/test_lastactivity.c

@@ -23,7 +23,7 @@ responds_to_last_activity_request(void **state)
         "</iq>"
     );
 
-    // Verify that CProof responds with last activity info
+    // Verify profanity responds with last activity info
     // The 'seconds' attribute indicates idle time
     assert_true(stbbr_received(
         "<iq id='last1' type='result' to='buddy1@localhost/mobile'>"