Xi: fix length field in XIQueryPointer.

Buttons append 4-byte units to the end of the reply, they need to be
included too.

Reported-by: Mark Dokter
Signed-off-by: Peter Hutterer <peter.hutterer@who-t.net>

1 files changed, 1 insertions, 0 deletions

diff --git a/Xi/querydp.c b/Xi/querydp.c
index 2925ddea0..2e2cfaaec 100644
--- a/Xi/querydp.c
+++ b/Xi/querydp.c
@@ -127,6 +127,7 @@ ProcXIQueryPointer(ClientPtr client)
     {
         int i, down;
         rep.buttons_len = ((pDev->button->numButtons/8) + 3)/4;
+        rep.length += rep.buttons_len;
         buttons = xcalloc(rep.buttons_len, 4);
         if (!buttons)
             return BadAlloc;