Subject: rrdtool: glibc "free() invalid size" error with long RPN expressions Package: rrdtool Version: 1.3.1-4 Severity: important
# rrdtool create /tmp/test.rrd --start 'midnight today' --step 300 DS:a1:GAUGE:360:0:U DS:a2:GAUGE:360:0:U DS:a3:GAUGE:360:0:U DS:a4:GAUGE:360:0:U DS:a:COMPUTE:a1,a2,a3,a4,AVG DS:a_dev:COMPUTE:a1,a,-,DUP,*,a2,a,-,DUP,*,a3,a,-,DUP,*,a4,a,-,DUP,*,+,+,+ RRA:LAST:0.5:1:105120 *** glibc detected *** rrdtool: free(): invalid size: 0x08212138 *** ======= Backtrace: ========= /lib/i686/cmov/libc.so.6[0xb7cd1624] /lib/i686/cmov/libc.so.6(cfree+0x96)[0xb7cd3826] /usr/lib/librrd.so.4[0xb7fb6d30] /usr/lib/librrd.so.4(rrd_create_r+0x8e4)[0xb7f973e4] /usr/lib/librrd.so.4(rrd_create+0x277)[0xb7f97a87] rrdtool[0x804a34f] rrdtool[0x804b38d] /lib/i686/cmov/libc.so.6(__libc_start_main+0xe5)[0xb7c79455] rrdtool[0x80492a1] ======= Memory map: ======== 08048000-0804d000 r-xp 00000000 fe:01 128598 /usr/bin/rrdtool 0804d000-0804e000 rw-p 00005000 fe:01 128598 /usr/bin/rrdtool 08211000-08232000 rw-p 08211000 00:00 0 [heap] b7500000-b7521000 rw-p b7500000 00:00 0 b7521000-b7600000 ---p b7521000 00:00 0 b76a1000-b76ad000 r-xp 00000000 fe:01 79683 /lib/libgcc_s.so.1 b76ad000-b76ae000 rw-p 0000b000 fe:01 79683 /lib/libgcc_s.so.1 b76ae000-b77e8000 r--p 00000000 fe:01 81203 /usr/lib/locale/locale-archive b77e8000-b77ea000 rw-p b77e8000 00:00 0 b77ea000-b7812000 r-xp 00000000 fe:01 68303 /usr/lib/libpcre.so.3.12.1 b7812000-b7813000 rw-p 00027000 fe:01 68303 /usr/lib/libpcre.so.3.12.1 b7813000-b7814000 rw-p b7813000 00:00 0 b7814000-b7829000 r-xp 00000000 fe:01 96272 /lib/i686/cmov/libpthread-2.7.so b7829000-b782b000 rw-p 00014000 fe:01 96272 /lib/i686/cmov/libpthread-2.7.so b782b000-b782d000 rw-p b782b000 00:00 0 b782d000-b7840000 r-xp 00000000 fe:01 159638 /usr/lib/libdirect-1.0.so.0.1.0 b7840000-b7841000 rw-p 00012000 fe:01 159638 /usr/lib/libdirect-1.0.so.0.1.0 b7841000-b7848000 r-xp 00000000 fe:01 159640 /usr/lib/libfusion-1.0.so.0.1.0 b7848000-b7849000 rw-p 00006000 fe:01 159640 /usr/lib/libfusion-1.0.so.0.1.0 b7849000-b78ae000 r-xp 00000000 fe:01 159639 /usr/lib/libdirectfb-1.0.so.0.1.0 b78ae000-b78b0000 rw-p 00065000 fe:01 159639 /usr/lib/libdirectfb-1.0.so.0.1.0 b78b0000-b78d6000 r-xp 00000000 fe:01 159698 /usr/lib/libpangoft2-1.0.so.0.2002.3 b78d6000-b78d7000 rw-p 00026000 fe:01 159698 /usr/lib/libpangoft2-1.0.so.0.2002.3 b78d7000-b78d8000 rw-p b78d7000 00:00 0 b78d8000-b78d9000 r-xp 00000000 fe:01 68637 /usr/lib/libxcb-xlib.so.0.0.0 b78d9000-b78da000 rw-p 00000000 fe:01 68637 /usr/lib/libxcb-xlib.so.0.0.0 b78da000-b78de000 r-xp 00000000 fe:01 68562 /usr/lib/libXdmcp.so.6.0.0 b78de000-b78df000 rw-p 00003000 fe:01 68562 /usr/lib/libXdmcp.so.6.0.0 b78df000-b78e1000 r-xp 00000000 fe:01 68551 /usr/lib/libXau.so.6.0.0 b78e1000-b78e2000 rw-p 00001000 fe:01 68551 /usr/lib/libXau.so.6.0.0 b78e2000-b7906000 r-xp 00000000 fe:01 159507 /usr/lib/libexpat.so.1.5.2 b7906000-b7908000 rw-p 00023000 fe:01 159507 /usr/lib/libexpat.so.1.5.2 b7908000-b7979000 r-xp 00000000 fe:01 159620 /usr/lib/libfreetype.so.6.3.18 b7979000-b797d000 rw-p 00070000 fe:01 159620 /usr/lib/libfreetype.so.6.3.18 b797d000-b797e000 rw-p b797d000 00:00 0 b797e000-b7a32000 r-xp 00000000 fe:01 159675 /usr/lib/libglib-2.0.so.0.1600.6 b7a32000-b7a33000 rw-p 000b4000 fe:01 159675 /usr/lib/libglib-2.0.so.0.1600.6 b7a33000-b7a36000 r-xp 00000000 fe:01 159674 /usr/lib/libgmodule-2.0.so.0.1600.6 b7a36000-b7a37000 rw-p 00002000 fe:01 159674 /usr/lib/libgmodule-2.0.so.0.1600.6 b7a37000-b7a72000 r-xp 00000000 fe:01 159672 /usr/lib/libgobject-2.0.so.0.1600.6 b7a72000-b7a73000 rw-p 0003b000 fe:01 159672 /usr/lib/libgobject-2.0.so.0.1600.6 b7a73000-b7add000 r-xp 00000000 fe:01 159662 /usr/lib/libcairo.so.2.17.5 b7add000-b7adf000 rw-p 0006a000 fe:01 159662 /usr/lib/libcairo.so.2.17.5 b7adf000-b7b1d000 r-xp 00000000 fe:01 159696 /usr/lib/libpango-1.0.so.0.2002.3 b7b1d000-b7b1f000 rw-p 0003d000 fe:01 159696 /usr/lib/libpango-1.0.so.0.2002.3 b7b1f000-b7b28000 r-xp 00000000 fe:01 159697 /usr/lib/libpangocairo-1.0.so.0.2002.3 b7b28000-b7b29000 rw-p 00008000 fe:01 159697 /usr/lib/libpangocairo-1.0.so.0.2002.3 b7b29000-b7b2a000 rw-p b7b29000 00:00 0 b7b2a000-b7c5d000 r-xp 00000000 fe:01 68380 /usr/lib/libxml2.so.2.6.32 b7c5d000-b7c62000 rw-p 00132000 fe:01 68380 /usr/lib/libxml2.so.2.6.32 b7c62000-b7c63000 rw-p b7c62000 00:00 0 b7c63000-b7db8000 r-xp 00000000 fe:01 96258 /lib/i686/cmov/libc-2.7.so b7db8000-b7db9000 r--p 00155000 fe:01 96258 /lib/i686/cmov/libc-2.7.so b7db9000-b7dbb000 rw-p 00156000 fe:01 96258 /lib/i686/cmov/libc-2.7.so b7dbb000-b7dbe000 rw-p b7dbb000 00:00 0 b7dbe000-b7dc0000 r-xp 00000000 fe:01 96261 /lib/i686/cmov/libdl-2.7.so b7dc0000-b7dc2000 rw-p 00001000 fe:01 96261 /lib/i686/cmov/libdl-2.7.so b7dc2000-b7de6000 r-xp 00000000 fe:01 96262 /lib/i686/cmov/libm-2.7.so b7de6000-b7de8000 rw-p 00023000 fe:01 96262 /lib/i686/cmov/libm-2.7.so b7de8000-b7e10000 r-xp 00000000 fe:01 159647 /usr/lib/libpixman-1.so.0.10.0 b7e10000-b7e11000 rw-p 00027000 fe:01 159647 /usr/lib/libpixman-1.so.0.10.0 b7e11000-b7efc000 r-xp 00000000 fe:01 68675 /usr/lib/libX11.so.6.2.0 b7efc000-b7f00000 rw-p 000ea000 fe:01 68675 /usr/lib/libX11.so.6.2.0 b7f00000-b7f01000 rw-p b7f00000 00:00 0 b7f01000-b7f09000 r-xp 00000000 fe:01 159659 /usr/lib/libXrender.so.1.3.0 b7f09000-b7f0a000 rw-p 00007000 fe:01 159659 /usr/lib/libXrender.so.1.3.0 b7f0a000-b7f21000 r-xp 00000000 fe:01 68628 /usr/lib/libxcb.so.1.0.0 b7f21000-b7f22000 rw-p 00017000 fe:01 68628 /usr/lib/libxcb.so.1.0.0 b7f22000-b7f28000 r-xp 00000000 fe:01 159653 /usr/lib/libxcb-render.so.0.0.0 b7f28000-b7f29000 rw-p 00005000 fe:01 159653 /usr/lib/libxcb-render.so.0.0.0 b7f29000-b7f2c000 r-xp 00000000 fe:01 159656 /usr/lib/libxcb-render-util.so.0.0.0 b7f2c000-b7f2d000 rw-p 00002000 fe:01 159656 /usr/lib/libxcb-render-util.so.0.0.0 b7f2d000-b7f50000 r-xp 00000000 fe:01 159650 /usr/lib/libpng12.so.0.27.0 b7f50000-b7f51000 rw-p 00023000 fe:01 159650 /usr/lib/libpng12.so.0.27.0 b7f51000-b7f7b000 r-xp 00000000 fe:01 159627 /usr/lib/libfontconfig.so.1.3.0 b7f7b000-b7f7c000 rw-p 0002a000 fe:01 159627 /usr/lib/libfontconfig.so.1.3.0 b7f7c000-b7f7d000 rw-p b7f7c000 00:00 0 b7f7d000-b7f91000 r-xp 00000000 fe:01 66329 /usr/lib/libz.so.1.2.3.3 b7f91000-b7f92000 rw-p 00013000 fe:01 66329 /usr/lib/libz.so.1.2.3.3 b7f92000-b7fbf000 r-xp 00000000 fe:01 159705 /usr/lib/librrd.so.4.0.0 b7fbf000-b7fc3000 rw-p 0002d000 fe:01 159705 /usr/lib/librrd.so.4.0.0 b7fc8000-b7fca000 rw-p b7fc8000 00:00 0 b7fca000-b7fcb000 r-xp b7fca000 00:00 0 [vdso] b7fcb000-b7fe5000 r-xp 00000000 fe:01 79682 /lib/ld-2.7.so b7fe5000-b7fe7000 rw-p 0001a000 fe:01 79682 /lib/ld-2.7.so bfbd2000-bfbe7000 rw-p bffeb000 00:00 0 [stack] Abgebrochen The issue disappears when I try a shorter RPN expression for a_dev. -- System Information: Debian Release: 5.0.3 APT prefers stable APT policy: (500, 'stable') Architecture: i386 (i686) Kernel: Linux 2.6.26-2-686 (SMP w/1 CPU core) Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages rrdtool depends on: ii libc6 2.7-18 GNU C Library: Shared libraries ii libfontconfig1 2.6.0-3 generic font configuration library ii libpixman-1-0 0.10.0-2 pixel-manipulation library for X a ii libpng12-0 1.2.27-2+lenny2 PNG library - runtime ii librrd4 1.3.1-4 Time-series data storage and displ ii libx11-6 2:1.1.5-2 X11 client-side library ii libxcb-render-util0 0.2.1+git1-1 utility libraries for X C Binding ii libxcb-render0 1.1-1.2 X C Binding, render extension ii libxcb1 1.1-1.2 X C Binding ii libxrender1 1:0.9.4-2 X Rendering Extension client libra ii zlib1g 1:1.2.3.3.dfsg-12 compression library - runtime rrdtool recommends no packages. Versions of packages rrdtool suggests: ii librrds-perl 1.3.1-4 Time-series data storage and displ -- no debconf information

