In two places, there is a missing va_end.
1087 return FALSE;
Created attachment 111872 [details] [review]
_dbus_string_append_printf_valist: avoid leaking copy of varargs
Fixed the other one in git for 1.9.8 immediately, since the fix was so trivial.
(In reply to Simon McVittie from comment #1)
> Review required.
3 weeks later, timed out and pushed it anyway.