Created attachment 116298 [details]
Patch file for the bug fix submitted.
Insufficient memory for terminating null character of string is a bug.
Fix does one byte of memory allocation for null termination of string.
This patch is based on version 1.1.14 of libXcursor.
Thanks for the fix, pushed to git master:
This was retroactively assigned CVE-2015-9262: