Package: sysstat
Version: 11.4.3-1
Severity: normal

The program /usr/bin/sar shows a buffer overflow if I use option either -s or 
-e to specify start or end time.

[whr@ZONGYI-TMACH]:[20]:[~]:$ sar -s 04:00
*** buffer overflow detected ***: sar terminated
======= Backtrace: =========
/lib/x86_64-linux-gnu/libc.so.6(+0x70bcb)[0x7f5c74dd5bcb]
/lib/x86_64-linux-gnu/libc.so.6(__fortify_fail+0x37)[0x7f5c74e5e037]
/lib/x86_64-linux-gnu/libc.so.6(+0xf7170)[0x7f5c74e5c170]
/lib/x86_64-linux-gnu/libc.so.6(__strcat_chk+0x60)[0x7f5c74e5b490]
sar(+0x526e)[0x55bcebb7a26e]
sar(+0x2900)[0x55bcebb77900]
/lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf1)[0x7f5c74d852b1]
sar(+0x2f9a)[0x55bcebb77f9a]
======= Memory map: ========
55bcebb75000-55bcebb8e000 r-xp 00000000 08:15 9185205                    
/usr/bin/sar.sysstat
55bcebd8d000-55bcebd8e000 r--p 00018000 08:15 9185205                    
/usr/bin/sar.sysstat
55bcebd8e000-55bcebd90000 rw-p 00019000 08:15 9185205                    
/usr/bin/sar.sysstat
55bcebd90000-55bcebd95000 rw-p 00000000 00:00 0 
55bced726000-55bced747000 rw-p 00000000 00:00 0                          [heap]
7f5c74b4e000-7f5c74b64000 r-xp 00000000 08:15 11010162                   
/lib/x86_64-linux-gnu/libgcc_s.so.1
7f5c74b64000-7f5c74d63000 ---p 00016000 08:15 11010162                   
/lib/x86_64-linux-gnu/libgcc_s.so.1
7f5c74d63000-7f5c74d64000 r--p 00015000 08:15 11010162                   
/lib/x86_64-linux-gnu/libgcc_s.so.1
7f5c74d64000-7f5c74d65000 rw-p 00016000 08:15 11010162                   
/lib/x86_64-linux-gnu/libgcc_s.so.1
7f5c74d65000-7f5c74efa000 r-xp 00000000 08:15 11013770                   
/lib/x86_64-linux-gnu/libc-2.24.so
7f5c74efa000-7f5c750f9000 ---p 00195000 08:15 11013770                   
/lib/x86_64-linux-gnu/libc-2.24.so
7f5c750f9000-7f5c750fd000 r--p 00194000 08:15 11013770                   
/lib/x86_64-linux-gnu/libc-2.24.so
7f5c750fd000-7f5c750ff000 rw-p 00198000 08:15 11013770                   
/lib/x86_64-linux-gnu/libc-2.24.so
7f5c750ff000-7f5c75103000 rw-p 00000000 00:00 0 
7f5c75103000-7f5c75126000 r-xp 00000000 08:15 11010160                   
/lib/x86_64-linux-gnu/ld-2.24.so
7f5c752f3000-7f5c752f5000 rw-p 00000000 00:00 0 
7f5c75322000-7f5c75326000 rw-p 00000000 00:00 0 
7f5c75326000-7f5c75327000 r--p 00023000 08:15 11010160                   
/lib/x86_64-linux-gnu/ld-2.24.so
7f5c75327000-7f5c75328000 rw-p 00024000 08:15 11010160                   
/lib/x86_64-linux-gnu/ld-2.24.so
7f5c75328000-7f5c75329000 rw-p 00000000 00:00 0 
7ffc0dccb000-7ffc0dced000 rw-p 00000000 00:00 0                          [stack]
7ffc0dde9000-7ffc0ddeb000 r--p 00000000 00:00 0                          [vvar]
7ffc0ddeb000-7ffc0dded000 r-xp 00000000 00:00 0                          [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0                  
[vsyscall]
Aborted (core dumped)
[whr@ZONGYI-TMACH]:[21]:[~]:$ sar -e 23:59
*** buffer overflow detected ***: sar terminated
======= Backtrace: =========
/lib/x86_64-linux-gnu/libc.so.6(+0x70bcb)[0x7f612e29bbcb]
/lib/x86_64-linux-gnu/libc.so.6(__fortify_fail+0x37)[0x7f612e324037]
/lib/x86_64-linux-gnu/libc.so.6(+0xf7170)[0x7f612e322170]
/lib/x86_64-linux-gnu/libc.so.6(__strcat_chk+0x60)[0x7f612e321490]
sar(+0x526e)[0x55601059726e]
sar(+0x2900)[0x556010594900]
/lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf1)[0x7f612e24b2b1]
sar(+0x2f9a)[0x556010594f9a]
======= Memory map: ========
556010592000-5560105ab000 r-xp 00000000 08:15 9185205                    
/usr/bin/sar.sysstat
5560107aa000-5560107ab000 r--p 00018000 08:15 9185205                    
/usr/bin/sar.sysstat
5560107ab000-5560107ad000 rw-p 00019000 08:15 9185205                    
/usr/bin/sar.sysstat
5560107ad000-5560107b2000 rw-p 00000000 00:00 0 
5560113a1000-5560113c2000 rw-p 00000000 00:00 0                          [heap]
7f612e014000-7f612e02a000 r-xp 00000000 08:15 11010162                   
/lib/x86_64-linux-gnu/libgcc_s.so.1
7f612e02a000-7f612e229000 ---p 00016000 08:15 11010162                   
/lib/x86_64-linux-gnu/libgcc_s.so.1
7f612e229000-7f612e22a000 r--p 00015000 08:15 11010162                   
/lib/x86_64-linux-gnu/libgcc_s.so.1
7f612e22a000-7f612e22b000 rw-p 00016000 08:15 11010162                   
/lib/x86_64-linux-gnu/libgcc_s.so.1
7f612e22b000-7f612e3c0000 r-xp 00000000 08:15 11013770                   
/lib/x86_64-linux-gnu/libc-2.24.so
7f612e3c0000-7f612e5bf000 ---p 00195000 08:15 11013770                   
/lib/x86_64-linux-gnu/libc-2.24.so
7f612e5bf000-7f612e5c3000 r--p 00194000 08:15 11013770                   
/lib/x86_64-linux-gnu/libc-2.24.so
7f612e5c3000-7f612e5c5000 rw-p 00198000 08:15 11013770                   
/lib/x86_64-linux-gnu/libc-2.24.so
7f612e5c5000-7f612e5c9000 rw-p 00000000 00:00 0 
7f612e5c9000-7f612e5ec000 r-xp 00000000 08:15 11010160                   
/lib/x86_64-linux-gnu/ld-2.24.so
7f612e7b9000-7f612e7bb000 rw-p 00000000 00:00 0 
7f612e7e8000-7f612e7ec000 rw-p 00000000 00:00 0 
7f612e7ec000-7f612e7ed000 r--p 00023000 08:15 11010160                   
/lib/x86_64-linux-gnu/ld-2.24.so
7f612e7ed000-7f612e7ee000 rw-p 00024000 08:15 11010160                   
/lib/x86_64-linux-gnu/ld-2.24.so
7f612e7ee000-7f612e7ef000 rw-p 00000000 00:00 0 
7ffeef5ec000-7ffeef60e000 rw-p 00000000 00:00 0                          [stack]
7ffeef67f000-7ffeef681000 r--p 00000000 00:00 0                          [vvar]
7ffeef681000-7ffeef683000 r-xp 00000000 00:00 0                          [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0                  
[vsyscall]
Aborted (core dumped)


-- System Information:
Debian Release: 9.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64
 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.9.0-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages sysstat depends on:
ii  debconf [debconf-2.0]  1.5.60
ii  libc6                  2.24-10
ii  libsensors4            1:3.4.0-4
ii  lsb-base               9.20161125
ii  ucf                    3.0036
ii  xz-utils               5.2.2-1.2+b1

Versions of packages sysstat recommends:
ii  cron [cron-daemon]  3.0pl1-128+b1

Versions of packages sysstat suggests:
pn  isag  <none>

-- debconf information:
  sysstat/remove_files: true
  sysstat/enable: false

Reply via email to