Invalid read patch for pkg-ng. see https://github.com/pkgng/pkgng/issues/452

progressmeter.c.patch

diff --git a/pkg/progressmeter.c b/pkg/progressmeter.c
index fddab1f..a33917c 100644
--- a/pkg/progressmeter.c
+++ b/pkg/progressmeter.c
@@ -183,7 +183,7 @@ refresh_progress_meter(void)
        else
                percent = 100;
 
-       snprintf(buf + strlen(buf), win_size - strlen(buf-8),
+       snprintf(buf + strlen(buf), win_size - strlen(buf) - 8,
            " %3d%% ", percent);
 
        /* amount transferred */

In the context the expression buf - 8 seems to be an invalid read.