xkb: Fix memory leak in error path

map is allocated but not freed if reply length and data don't match.

Signed-off-by: Pauli Nieminen <ext-pauli.nieminen@nokia.com>
Reviewed-by: Peter Hutterer <peter.hutterer@who-t.net>
(cherry picked from commit adc0697cfcfba295a15d7a307125093cbccd637f)

1 files changed, 1 insertions, 0 deletions

diff --git a/xkb/xkb.c b/xkb/xkb.c
index 935f5ea6a..a82cc38cc 100644
--- a/xkb/xkb.c
+++ b/xkb/xkb.c
@@ -3019,6 +3019,7 @@ register unsigned	bit;
 	    to = (CARD8 *)wire;
 	    if ((to-map)!=length) {
 		client->errorValue = _XkbErrCode2(0xff,length);
+		free(map);
 		return BadLength;
 	    }
 	}