USB module bug

In USBModule.c

In the service_call function you have:

 1472:     char* real_serv = malloc (size);
 1473:     USBServiceCall* serv = (USBServiceCall*) (link? real_serv + 4: real_serv);
 1474: 
 1475:     if (serv == NULL)
 1476:     {
 1477:         return 0;
 1478:     }
 1479:     memset (real_serv, 0, size);

which means if malloc returns 0 and link != 0 memset and the rest of service_call will try to reference an invalid pointer.

The same thing happens at line 1380.

Change serv to real_serv in lines 1475 and 1384.

Edit:
I may as well add the lack of va_end in port.c lines 109 and 430.