This looks like a dbusmenu bug. dbusmenu does this call:
g_dbus_proxy_new(priv->session_bus, G_DBUS_PROXY_FLAGS_DO_NOT_AUTO_START, dbusmenu_interface_info, priv->dbus_name, priv->dbus_object, DBUSMENU_INTERFACE, priv->menuproxy_cancel, menuproxy_build_cb, client);
and makes no assurances that 'client' will continue to be around long enough to receive the results. If 'client' gets freed before then the call to menuproxy_build_cb() will crash.
This looks like a dbusmenu bug. dbusmenu does this call:
and makes no assurances that 'client' will continue to be around long enough to receive the results. If 'client' gets freed before then the call to menuproxy_ build_cb( ) will crash.