Your message dated Fri, 25 Apr 2014 20:25:14 +0200
with message-id <[email protected]>
and subject line Re: Bug#552813: rrdcgi also failing
has caused the Debian Bug report #552813,
regarding rrdtool: glibc "free() invalid size" error with long RPN expressions
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
552813: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=552813
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Subject: rrdtool: glibc "free() invalid size" error with long RPN expressions
Package: rrdtool
Version: 1.3.1-4
Severity: important

# rrdtool create /tmp/test.rrd --start 'midnight today' --step 300 
DS:a1:GAUGE:360:0:U DS:a2:GAUGE:360:0:U DS:a3:GAUGE:360:0:U DS:a4:GAUGE:360:0:U 
DS:a:COMPUTE:a1,a2,a3,a4,AVG 
DS:a_dev:COMPUTE:a1,a,-,DUP,*,a2,a,-,DUP,*,a3,a,-,DUP,*,a4,a,-,DUP,*,+,+,+ 
RRA:LAST:0.5:1:105120
*** glibc detected *** rrdtool: free(): invalid size: 0x08212138 ***
======= Backtrace: =========
/lib/i686/cmov/libc.so.6[0xb7cd1624]
/lib/i686/cmov/libc.so.6(cfree+0x96)[0xb7cd3826]
/usr/lib/librrd.so.4[0xb7fb6d30]
/usr/lib/librrd.so.4(rrd_create_r+0x8e4)[0xb7f973e4]
/usr/lib/librrd.so.4(rrd_create+0x277)[0xb7f97a87]
rrdtool[0x804a34f]
rrdtool[0x804b38d]
/lib/i686/cmov/libc.so.6(__libc_start_main+0xe5)[0xb7c79455]
rrdtool[0x80492a1]
======= Memory map: ========
08048000-0804d000 r-xp 00000000 fe:01 128598     /usr/bin/rrdtool
0804d000-0804e000 rw-p 00005000 fe:01 128598     /usr/bin/rrdtool
08211000-08232000 rw-p 08211000 00:00 0          [heap]
b7500000-b7521000 rw-p b7500000 00:00 0
b7521000-b7600000 ---p b7521000 00:00 0
b76a1000-b76ad000 r-xp 00000000 fe:01 79683      /lib/libgcc_s.so.1
b76ad000-b76ae000 rw-p 0000b000 fe:01 79683      /lib/libgcc_s.so.1
b76ae000-b77e8000 r--p 00000000 fe:01 81203      /usr/lib/locale/locale-archive
b77e8000-b77ea000 rw-p b77e8000 00:00 0
b77ea000-b7812000 r-xp 00000000 fe:01 68303      /usr/lib/libpcre.so.3.12.1
b7812000-b7813000 rw-p 00027000 fe:01 68303      /usr/lib/libpcre.so.3.12.1
b7813000-b7814000 rw-p b7813000 00:00 0
b7814000-b7829000 r-xp 00000000 fe:01 96272      
/lib/i686/cmov/libpthread-2.7.so
b7829000-b782b000 rw-p 00014000 fe:01 96272      
/lib/i686/cmov/libpthread-2.7.so
b782b000-b782d000 rw-p b782b000 00:00 0
b782d000-b7840000 r-xp 00000000 fe:01 159638     /usr/lib/libdirect-1.0.so.0.1.0
b7840000-b7841000 rw-p 00012000 fe:01 159638     /usr/lib/libdirect-1.0.so.0.1.0
b7841000-b7848000 r-xp 00000000 fe:01 159640     /usr/lib/libfusion-1.0.so.0.1.0
b7848000-b7849000 rw-p 00006000 fe:01 159640     /usr/lib/libfusion-1.0.so.0.1.0
b7849000-b78ae000 r-xp 00000000 fe:01 159639     
/usr/lib/libdirectfb-1.0.so.0.1.0
b78ae000-b78b0000 rw-p 00065000 fe:01 159639     
/usr/lib/libdirectfb-1.0.so.0.1.0
b78b0000-b78d6000 r-xp 00000000 fe:01 159698     
/usr/lib/libpangoft2-1.0.so.0.2002.3
b78d6000-b78d7000 rw-p 00026000 fe:01 159698     
/usr/lib/libpangoft2-1.0.so.0.2002.3
b78d7000-b78d8000 rw-p b78d7000 00:00 0
b78d8000-b78d9000 r-xp 00000000 fe:01 68637      /usr/lib/libxcb-xlib.so.0.0.0
b78d9000-b78da000 rw-p 00000000 fe:01 68637      /usr/lib/libxcb-xlib.so.0.0.0
b78da000-b78de000 r-xp 00000000 fe:01 68562      /usr/lib/libXdmcp.so.6.0.0
b78de000-b78df000 rw-p 00003000 fe:01 68562      /usr/lib/libXdmcp.so.6.0.0
b78df000-b78e1000 r-xp 00000000 fe:01 68551      /usr/lib/libXau.so.6.0.0
b78e1000-b78e2000 rw-p 00001000 fe:01 68551      /usr/lib/libXau.so.6.0.0
b78e2000-b7906000 r-xp 00000000 fe:01 159507     /usr/lib/libexpat.so.1.5.2
b7906000-b7908000 rw-p 00023000 fe:01 159507     /usr/lib/libexpat.so.1.5.2
b7908000-b7979000 r-xp 00000000 fe:01 159620     /usr/lib/libfreetype.so.6.3.18
b7979000-b797d000 rw-p 00070000 fe:01 159620     /usr/lib/libfreetype.so.6.3.18
b797d000-b797e000 rw-p b797d000 00:00 0
b797e000-b7a32000 r-xp 00000000 fe:01 159675     
/usr/lib/libglib-2.0.so.0.1600.6
b7a32000-b7a33000 rw-p 000b4000 fe:01 159675     
/usr/lib/libglib-2.0.so.0.1600.6
b7a33000-b7a36000 r-xp 00000000 fe:01 159674     
/usr/lib/libgmodule-2.0.so.0.1600.6
b7a36000-b7a37000 rw-p 00002000 fe:01 159674     
/usr/lib/libgmodule-2.0.so.0.1600.6
b7a37000-b7a72000 r-xp 00000000 fe:01 159672     
/usr/lib/libgobject-2.0.so.0.1600.6
b7a72000-b7a73000 rw-p 0003b000 fe:01 159672     
/usr/lib/libgobject-2.0.so.0.1600.6
b7a73000-b7add000 r-xp 00000000 fe:01 159662     /usr/lib/libcairo.so.2.17.5
b7add000-b7adf000 rw-p 0006a000 fe:01 159662     /usr/lib/libcairo.so.2.17.5
b7adf000-b7b1d000 r-xp 00000000 fe:01 159696     
/usr/lib/libpango-1.0.so.0.2002.3
b7b1d000-b7b1f000 rw-p 0003d000 fe:01 159696     
/usr/lib/libpango-1.0.so.0.2002.3
b7b1f000-b7b28000 r-xp 00000000 fe:01 159697     
/usr/lib/libpangocairo-1.0.so.0.2002.3
b7b28000-b7b29000 rw-p 00008000 fe:01 159697     
/usr/lib/libpangocairo-1.0.so.0.2002.3
b7b29000-b7b2a000 rw-p b7b29000 00:00 0
b7b2a000-b7c5d000 r-xp 00000000 fe:01 68380      /usr/lib/libxml2.so.2.6.32
b7c5d000-b7c62000 rw-p 00132000 fe:01 68380      /usr/lib/libxml2.so.2.6.32
b7c62000-b7c63000 rw-p b7c62000 00:00 0
b7c63000-b7db8000 r-xp 00000000 fe:01 96258      /lib/i686/cmov/libc-2.7.so
b7db8000-b7db9000 r--p 00155000 fe:01 96258      /lib/i686/cmov/libc-2.7.so
b7db9000-b7dbb000 rw-p 00156000 fe:01 96258      /lib/i686/cmov/libc-2.7.so
b7dbb000-b7dbe000 rw-p b7dbb000 00:00 0
b7dbe000-b7dc0000 r-xp 00000000 fe:01 96261      /lib/i686/cmov/libdl-2.7.so
b7dc0000-b7dc2000 rw-p 00001000 fe:01 96261      /lib/i686/cmov/libdl-2.7.so
b7dc2000-b7de6000 r-xp 00000000 fe:01 96262      /lib/i686/cmov/libm-2.7.so
b7de6000-b7de8000 rw-p 00023000 fe:01 96262      /lib/i686/cmov/libm-2.7.so
b7de8000-b7e10000 r-xp 00000000 fe:01 159647     /usr/lib/libpixman-1.so.0.10.0
b7e10000-b7e11000 rw-p 00027000 fe:01 159647     /usr/lib/libpixman-1.so.0.10.0
b7e11000-b7efc000 r-xp 00000000 fe:01 68675      /usr/lib/libX11.so.6.2.0
b7efc000-b7f00000 rw-p 000ea000 fe:01 68675      /usr/lib/libX11.so.6.2.0
b7f00000-b7f01000 rw-p b7f00000 00:00 0
b7f01000-b7f09000 r-xp 00000000 fe:01 159659     /usr/lib/libXrender.so.1.3.0
b7f09000-b7f0a000 rw-p 00007000 fe:01 159659     /usr/lib/libXrender.so.1.3.0
b7f0a000-b7f21000 r-xp 00000000 fe:01 68628      /usr/lib/libxcb.so.1.0.0
b7f21000-b7f22000 rw-p 00017000 fe:01 68628      /usr/lib/libxcb.so.1.0.0
b7f22000-b7f28000 r-xp 00000000 fe:01 159653     /usr/lib/libxcb-render.so.0.0.0
b7f28000-b7f29000 rw-p 00005000 fe:01 159653     /usr/lib/libxcb-render.so.0.0.0
b7f29000-b7f2c000 r-xp 00000000 fe:01 159656     
/usr/lib/libxcb-render-util.so.0.0.0
b7f2c000-b7f2d000 rw-p 00002000 fe:01 159656     
/usr/lib/libxcb-render-util.so.0.0.0
b7f2d000-b7f50000 r-xp 00000000 fe:01 159650     /usr/lib/libpng12.so.0.27.0
b7f50000-b7f51000 rw-p 00023000 fe:01 159650     /usr/lib/libpng12.so.0.27.0
b7f51000-b7f7b000 r-xp 00000000 fe:01 159627     /usr/lib/libfontconfig.so.1.3.0
b7f7b000-b7f7c000 rw-p 0002a000 fe:01 159627     /usr/lib/libfontconfig.so.1.3.0
b7f7c000-b7f7d000 rw-p b7f7c000 00:00 0
b7f7d000-b7f91000 r-xp 00000000 fe:01 66329      /usr/lib/libz.so.1.2.3.3
b7f91000-b7f92000 rw-p 00013000 fe:01 66329      /usr/lib/libz.so.1.2.3.3
b7f92000-b7fbf000 r-xp 00000000 fe:01 159705     /usr/lib/librrd.so.4.0.0
b7fbf000-b7fc3000 rw-p 0002d000 fe:01 159705     /usr/lib/librrd.so.4.0.0
b7fc8000-b7fca000 rw-p b7fc8000 00:00 0
b7fca000-b7fcb000 r-xp b7fca000 00:00 0          [vdso]
b7fcb000-b7fe5000 r-xp 00000000 fe:01 79682      /lib/ld-2.7.so
b7fe5000-b7fe7000 rw-p 0001a000 fe:01 79682      /lib/ld-2.7.so
bfbd2000-bfbe7000 rw-p bffeb000 00:00 0          [stack]
Abgebrochen

The issue disappears when I try a shorter RPN expression for a_dev.

-- System Information:
Debian Release: 5.0.3
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.26-2-686 (SMP w/1 CPU core)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages rrdtool depends on:
ii  libc6                  2.7-18            GNU C Library: Shared libraries
ii  libfontconfig1         2.6.0-3           generic font configuration library
ii  libpixman-1-0          0.10.0-2          pixel-manipulation library for X a
ii  libpng12-0             1.2.27-2+lenny2   PNG library - runtime
ii  librrd4                1.3.1-4           Time-series data storage and displ
ii  libx11-6               2:1.1.5-2         X11 client-side library
ii  libxcb-render-util0    0.2.1+git1-1      utility libraries for X C Binding
ii  libxcb-render0         1.1-1.2           X C Binding, render extension
ii  libxcb1                1.1-1.2           X C Binding
ii  libxrender1            1:0.9.4-2         X Rendering Extension client libra
ii  zlib1g                 1:1.2.3.3.dfsg-12 compression library - runtime

rrdtool recommends no packages.

Versions of packages rrdtool suggests:
ii  librrds-perl                  1.3.1-4    Time-series data storage and displ

-- no debconf information

--- End Message ---
--- Begin Message ---
Source: rrdtool
Source-Version: 1.4.7-1

On Wed, Dec 09, 2009 at 10:28:18AM +1100, Martin Schwenke wrote:
> I'm seeing something very similar in rrdcgi on armel:
> 
>   *** glibc detected *** /usr/bin/rrdcgi: free(): invalid pointer: 0x000b9838 
> ***
>   [Wed Dec 09 09:54:52 2009] [error] [client 192.168.20.31] Premature end of 
> script headers: temperature.cgi
> 
> A different script on the same box produces a different
> error:
> 
>   *** glibc detected *** /usr/bin/rrdcgi: munmap_chunk(): invalid pointer: 
> 0x0009f010 ***
>   [Wed Dec 09 10:07:54 2009] [error] [client 192.168.20.31] Premature end of 
> script headers: index.cgi

This was fixed in 1.4.7 which introduced a limit for the number of RPN
expressions:

% rrdtool create /tmp/test.rrd --start 'midnight today' --step 300 
DS:a1:GAUGE:360:0:U DS:a2:GAUGE:360:0:U DS:a3:GAUGE:360:0:U DS:a4:GAUGE:360:0:U 
DS:a:COMPUTE:a1,a2,a3,a4,AVG 
DS:a_dev:COMPUTE:a1,a,-,DUP,*,a2,a,-,DUP,*,a3,a,-,DUP,*,a4,a,-,DUP,*,+,+,+ 
RRA:LAST:0.5:1:105120
ERROR: Maximum 19 RPN nodes permitted. Got 23 RPN nodes at present.
% rrdtool create /tmp/test.rrd --step 300 DS:a1:GAUGE:360:0:U 
DS:a2:GAUGE:360:0:U DS:a3:GAUGE:360:0:U DS:a4:GAUGE:360:0:U 
DS:a:COMPUTE:a1,a2,a3,a4,AVG 
DS:a_dev:COMPUTE:a1,a,-,DUP,*,a2,a,-,DUP,*,a3,a,-,DUP,*,a4,a,-,DUP,*,+,+,+ 
RRA:LAST:0.5:1:105120
ERROR: Maximum 19 RPN nodes permitted. Got 23 RPN nodes at present.

-- 
Sebastian "tokkee" Harl +++ GnuPG-ID: 0x8501C7FC +++ http://tokkee.org/

Those who would give up Essential Liberty to purchase a little Temporary
Safety, deserve neither Liberty nor Safety.         -- Benjamin Franklin

Attachment: signature.asc
Description: Digital signature


--- End Message ---

Reply via email to