In error case length of extra data could be uninitialized. This would
result randomly sized request later in function.

Signed-off-by: Pauli Nieminen <[email protected]>
---
 src/XIProperties.c |    1 +
 1 files changed, 1 insertions(+), 0 deletions(-)

diff --git a/src/XIProperties.c b/src/XIProperties.c
index 045cc71..0f77e58 100644
--- a/src/XIProperties.c
+++ b/src/XIProperties.c
@@ -150,6 +150,7 @@ XIChangeProperty(Display* dpy, int deviceid, Atom property, 
Atom type,
 
     default:
        /* BadValue will be generated */ ;
+        len = 0;
     }
 
     /* we use data instead of Data32 and friends to avoid Xlib's braindead
-- 
1.6.3.3

_______________________________________________
[email protected]: X.Org development
Archives: http://lists.x.org/archives/xorg-devel
Info: http://lists.x.org/mailman/listinfo/xorg-devel

Reply via email to