Checking the counts it seems fixed in latter versions >=Yakkety - or just not 
used there.
I tried a few rrd calls, but not reproducible for me.

The issue itself is in handling commandline arguments.

It passes on args and eventually fails at
"pnp[steps + 1].op = OP_END;"

Alsmost for sure that is an out-of-bounds.
Allocated as:
  rrd_realloc(rpnp, (++steps + 2), ...
That is iterated whenever the parsing loops, but it seems there is a combo that 
exeeds that.

But the arguments are missing in the bug reports and normal operations
seem to work, we'd need somebody chiming in on that having the issue
assisting with repro. It is depending on the args passed almost for sure

** Changed in: rrdtool (Ubuntu)
       Status: New => Incomplete

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1608579

Title:
  
/usr/bin/rrdtool:11:rpn_parse:parse_cvdef:rrd_graph_script:rrd_graph_v:rrd_graph

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rrdtool/+bug/1608579/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to