Comment 32 for bug 943880

What all these bugs have in common is that synaptics driver is used, but the only thing I see that looks suspicious is that BOOL is redefined as char for X, the common definition is int. However that seems to be done consistently so not likely to be a problem, sizeof(BOOL) = 1 inside synaptics, which seems to be a result of X being braindead.

XiChangeDeviceProperty seems to be slightly buggy, new_value.size = len; should probably be new_value.size = total_len; However this is unlikely to be a major problem in this bug since I doubt it corrupts things in the way shown here.