fix(ui): gate redraw on suspend flag to stop bleed-through over editor

The editor rewrite (async g_child_watch) dropped the background_mode
guard that paused the main loop while an external editor (e.g. nano)
runs. ui_update/ui_resize/ui_redraw instead self-guarded on isendwin(),
which is unreliable: any doupdate() during the editor session (e.g. the
readline redisplay after the alt+c keypress) clears it, after which the
~10Hz main-loop ui_update() repaints the status bar, chat window and
input pad over the editor. The most visible artifact is the per-minute
status-bar clock digit bleeding through onto the editor screen.

Track suspension explicitly with a ui_suspended flag set in
ui_suspend()/ui_resume() and gate ui_update/ui_resize/ui_redraw on it
(kept alongside isendwin() for the shutdown/closed-screen case). The
flag stays TRUE for the whole editor session regardless of isendwin
flapping, so nothing repaints over the editor.

src/omemo/omemo.c

@@ -804,6 +804,10 @@ omemo_on_message_send(ProfWin* win, const char* const message, gboolean request_
     tag_len = AES128_GCM_TAG_LENGTH;
     tag = gcry_malloc_secure(tag_len);
     key_tag = gcry_malloc_secure(AES128_GCM_KEY_LENGTH + AES128_GCM_TAG_LENGTH);
+    if (!tag || !key_tag) {
+        log_error("[OMEMO][SEND] cannot allocate secure buffers");
+        goto out;
+    }
 
     key = gcry_random_bytes_secure(AES128_GCM_KEY_LENGTH + AES128_GCM_IV_LENGTH, GCRY_VERY_STRONG_RANDOM);
     if (!key) {
@@ -1993,10 +1997,6 @@ _cache_device_identity(const char* const jid, uint32_t device_id, ec_public_key*
         g_hash_table_insert(omemo_static_data.fingerprint_ac, strdup(jid), ac);
     }
 
-    if (!fingerprint) {
-        return;
-    }
-
     char* formatted_fingerprint = omemo_format_fingerprint(fingerprint);
     if (formatted_fingerprint) {
         autocomplete_add(ac, formatted_fingerprint);

src/tools/editor.c

@@ -24,7 +24,6 @@
 #include "ncurses.h"
 #include "ui/ui.h"
 #include "xmpp/xmpp.h"
-#include "ui/ui.h"
 
 typedef struct EditorContext
 {
@@ -121,11 +120,11 @@ launch_editor(gchar* initial_content, void (*callback)(gchar* content, void* dat
 
     ui_suspend();
 
-    // Ensure GLib's SIGCHLD handler is installed before forking to prevent
-    // zombie children if the editor is launched before the main loop starts.
-    GMainContext* main_ctx = g_main_context_default();
-    g_main_context_acquire(main_ctx);
-    g_main_context_release(main_ctx);
+    // Force GLib to install its SIGCHLD handler before forking. Creating a
+    // GChildWatchSource for our own pid is the documented trigger; we never
+    // attach or dispatch it, just rely on the side effect.
+    GSource* sigchld_warmup = g_child_watch_source_new(getpid());
+    g_source_unref(sigchld_warmup);
 
     pid_t pid = fork();
     if (pid == -1) {

src/ui/core.c

@@ -54,6 +54,7 @@
 
 static int inp_size;
 static gboolean perform_resize = FALSE;
+static gboolean ui_suspended = FALSE;
 static GTimer* ui_idle_time;
 static WINDOW* main_scr;
 
@@ -63,6 +64,14 @@ static Display* display;
 
 static void _ui_draw_term_title(void);
 
+// Skip drawing while an external editor is active (ui_suspended) or after the
+// screen has been closed (endwin).
+static gboolean
+_ui_redraw_suspended(void)
+{
+    return ui_suspended || isendwin();
+}
+
 static void
 _ui_close(void)
 {
@@ -120,8 +129,7 @@ ui_sigwinch_handler(int sig)
 void
 ui_update(void)
 {
-    // UI is suspended
-    if (isendwin()) {
+    if (_ui_redraw_suspended()) {
         return;
     }
 
@@ -179,6 +187,7 @@ ui_reset_idle_time(void)
 void
 ui_suspend(void)
 {
+    ui_suspended = TRUE;
     inp_suspend();
     endwin();
 }
@@ -186,6 +195,7 @@ ui_suspend(void)
 void
 ui_resume(void)
 {
+    ui_suspended = FALSE;
     refresh();
     inp_resume();
 }
@@ -193,8 +203,7 @@ ui_resume(void)
 void
 ui_resize(void)
 {
-    // UI is suspended
-    if (isendwin()) {
+    if (_ui_redraw_suspended()) {
         return;
     }
 
@@ -216,8 +225,7 @@ ui_resize(void)
 void
 ui_redraw(void)
 {
-    // UI is suspended
-    if (isendwin()) {
+    if (_ui_redraw_suspended()) {
         return;
     }
 

src/ui/statusbar.c

@@ -170,12 +170,7 @@ status_bar_current(guint i)
 void
 status_bar_inactive(const int win)
 {
-    int true_win = win;
-    if (true_win == 0) {
-        true_win = 10;
-    }
-
-    g_hash_table_remove(statusbar->tabs, GINT_TO_POINTER(true_win));
+    g_hash_table_remove(statusbar->tabs, GINT_TO_POINTER((win == 0) ? CONSOLE_TAB_ID : win));
 
     status_bar_draw();
 }
@@ -183,8 +178,6 @@ status_bar_inactive(const int win)
 void
 _create_tab(const int win, win_type_t wintype, char* identifier, gboolean highlight)
 {
-    int true_win = win == 0 ? 10 : win;
-
     StatusBarTab* tab = g_new0(StatusBarTab, 1);
     tab->identifier = strdup(identifier);
     tab->highlight = highlight;
@@ -214,7 +207,7 @@ _create_tab(const int win, win_type_t wintype, char* identifier, gboolean highli
         }
     }
 
-    g_hash_table_replace(statusbar->tabs, GINT_TO_POINTER(true_win), tab);
+    g_hash_table_replace(statusbar->tabs, GINT_TO_POINTER((win == 0) ? CONSOLE_TAB_ID : win), tab);
 
     status_bar_draw();
 }

src/xmpp/jid.c

@@ -15,6 +15,7 @@
 #include <glib.h>
 
 #include "common.h"
+#include "log.h"
 #include "xmpp/jid.h"
 
 #define JID_MAX_PART_LEN  1023