The above code is in the function format_cb_pane_tabs in the source file format.c. It will lead to potential NPD problem. In Line 590, the library function evbuffer_new() is likely to return null pointer (See the below figures). In Line 595, in the library function EVBUFFER_LENGTH (which is actually evbuffer_get_length), buffer will be passed into it and dereferenced (See the below figures).

The above two figures are the source code in libevent. By looking into this, I suspect this should be a potential NPD bug. Can you help to confirm whether this is a true bug?

Thanks very much. Look forward to your reply.