From b89dcfbfbd38f8d19f1d4f24f81820b1048572c8 Mon Sep 17 00:00:00 2001
From: Peter Hutterer <peter.hutterer@who-t.net>
Date: Mon, 18 May 2009 16:07:08 +1000
Subject: [PATCH] Xi: fix length field in XIQueryPointer.

Buttons append 4-byte units to the end of the reply, they need to be
included too.

Reported-by: Mark Dokter
Signed-off-by: Peter Hutterer <peter.hutterer@who-t.net>
---
 Xi/querydp.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/Xi/querydp.c b/Xi/querydp.c
index 2925ddea0..2e2cfaaec 100644
--- a/Xi/querydp.c
+++ b/Xi/querydp.c
@@ -127,6 +127,7 @@ ProcXIQueryPointer(ClientPtr client)
     {
         int i, down;
         rep.buttons_len = ((pDev->button->numButtons/8) + 3)/4;
+        rep.length += rep.buttons_len;
         buttons = xcalloc(rep.buttons_len, 4);
         if (!buttons)
             return BadAlloc;