Checking the counts it seems fixed in latter versions >=Yakkety - or just not used there. I tried a few rrd calls, but not reproducible for me.
The issue itself is in handling commandline arguments. It passes on args and eventually fails at "pnp[steps + 1].op = OP_END;" Alsmost for sure that is an out-of-bounds. Allocated as: rrd_realloc(rpnp, (++steps + 2), ... That is iterated whenever the parsing loops, but it seems there is a combo that exeeds that. But the arguments are missing in the bug reports and normal operations seem to work, we'd need somebody chiming in on that having the issue assisting with repro. It is depending on the args passed almost for sure ** Changed in: rrdtool (Ubuntu) Status: New => Incomplete -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1608579 Title: /usr/bin/rrdtool:11:rpn_parse:parse_cvdef:rrd_graph_script:rrd_graph_v:rrd_graph To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/rrdtool/+bug/1608579/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs