Package: sysstat Version: 11.4.3-1 Severity: normal The program /usr/bin/sar shows a buffer overflow if I use option either -s or -e to specify start or end time.
[whr@ZONGYI-TMACH]:[20]:[~]:$ sar -s 04:00 *** buffer overflow detected ***: sar terminated ======= Backtrace: ========= /lib/x86_64-linux-gnu/libc.so.6(+0x70bcb)[0x7f5c74dd5bcb] /lib/x86_64-linux-gnu/libc.so.6(__fortify_fail+0x37)[0x7f5c74e5e037] /lib/x86_64-linux-gnu/libc.so.6(+0xf7170)[0x7f5c74e5c170] /lib/x86_64-linux-gnu/libc.so.6(__strcat_chk+0x60)[0x7f5c74e5b490] sar(+0x526e)[0x55bcebb7a26e] sar(+0x2900)[0x55bcebb77900] /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf1)[0x7f5c74d852b1] sar(+0x2f9a)[0x55bcebb77f9a] ======= Memory map: ======== 55bcebb75000-55bcebb8e000 r-xp 00000000 08:15 9185205 /usr/bin/sar.sysstat 55bcebd8d000-55bcebd8e000 r--p 00018000 08:15 9185205 /usr/bin/sar.sysstat 55bcebd8e000-55bcebd90000 rw-p 00019000 08:15 9185205 /usr/bin/sar.sysstat 55bcebd90000-55bcebd95000 rw-p 00000000 00:00 0 55bced726000-55bced747000 rw-p 00000000 00:00 0 [heap] 7f5c74b4e000-7f5c74b64000 r-xp 00000000 08:15 11010162 /lib/x86_64-linux-gnu/libgcc_s.so.1 7f5c74b64000-7f5c74d63000 ---p 00016000 08:15 11010162 /lib/x86_64-linux-gnu/libgcc_s.so.1 7f5c74d63000-7f5c74d64000 r--p 00015000 08:15 11010162 /lib/x86_64-linux-gnu/libgcc_s.so.1 7f5c74d64000-7f5c74d65000 rw-p 00016000 08:15 11010162 /lib/x86_64-linux-gnu/libgcc_s.so.1 7f5c74d65000-7f5c74efa000 r-xp 00000000 08:15 11013770 /lib/x86_64-linux-gnu/libc-2.24.so 7f5c74efa000-7f5c750f9000 ---p 00195000 08:15 11013770 /lib/x86_64-linux-gnu/libc-2.24.so 7f5c750f9000-7f5c750fd000 r--p 00194000 08:15 11013770 /lib/x86_64-linux-gnu/libc-2.24.so 7f5c750fd000-7f5c750ff000 rw-p 00198000 08:15 11013770 /lib/x86_64-linux-gnu/libc-2.24.so 7f5c750ff000-7f5c75103000 rw-p 00000000 00:00 0 7f5c75103000-7f5c75126000 r-xp 00000000 08:15 11010160 /lib/x86_64-linux-gnu/ld-2.24.so 7f5c752f3000-7f5c752f5000 rw-p 00000000 00:00 0 7f5c75322000-7f5c75326000 rw-p 00000000 00:00 0 7f5c75326000-7f5c75327000 r--p 00023000 08:15 11010160 /lib/x86_64-linux-gnu/ld-2.24.so 7f5c75327000-7f5c75328000 rw-p 00024000 08:15 11010160 /lib/x86_64-linux-gnu/ld-2.24.so 7f5c75328000-7f5c75329000 rw-p 00000000 00:00 0 7ffc0dccb000-7ffc0dced000 rw-p 00000000 00:00 0 [stack] 7ffc0dde9000-7ffc0ddeb000 r--p 00000000 00:00 0 [vvar] 7ffc0ddeb000-7ffc0dded000 r-xp 00000000 00:00 0 [vdso] ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0 [vsyscall] Aborted (core dumped) [whr@ZONGYI-TMACH]:[21]:[~]:$ sar -e 23:59 *** buffer overflow detected ***: sar terminated ======= Backtrace: ========= /lib/x86_64-linux-gnu/libc.so.6(+0x70bcb)[0x7f612e29bbcb] /lib/x86_64-linux-gnu/libc.so.6(__fortify_fail+0x37)[0x7f612e324037] /lib/x86_64-linux-gnu/libc.so.6(+0xf7170)[0x7f612e322170] /lib/x86_64-linux-gnu/libc.so.6(__strcat_chk+0x60)[0x7f612e321490] sar(+0x526e)[0x55601059726e] sar(+0x2900)[0x556010594900] /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf1)[0x7f612e24b2b1] sar(+0x2f9a)[0x556010594f9a] ======= Memory map: ======== 556010592000-5560105ab000 r-xp 00000000 08:15 9185205 /usr/bin/sar.sysstat 5560107aa000-5560107ab000 r--p 00018000 08:15 9185205 /usr/bin/sar.sysstat 5560107ab000-5560107ad000 rw-p 00019000 08:15 9185205 /usr/bin/sar.sysstat 5560107ad000-5560107b2000 rw-p 00000000 00:00 0 5560113a1000-5560113c2000 rw-p 00000000 00:00 0 [heap] 7f612e014000-7f612e02a000 r-xp 00000000 08:15 11010162 /lib/x86_64-linux-gnu/libgcc_s.so.1 7f612e02a000-7f612e229000 ---p 00016000 08:15 11010162 /lib/x86_64-linux-gnu/libgcc_s.so.1 7f612e229000-7f612e22a000 r--p 00015000 08:15 11010162 /lib/x86_64-linux-gnu/libgcc_s.so.1 7f612e22a000-7f612e22b000 rw-p 00016000 08:15 11010162 /lib/x86_64-linux-gnu/libgcc_s.so.1 7f612e22b000-7f612e3c0000 r-xp 00000000 08:15 11013770 /lib/x86_64-linux-gnu/libc-2.24.so 7f612e3c0000-7f612e5bf000 ---p 00195000 08:15 11013770 /lib/x86_64-linux-gnu/libc-2.24.so 7f612e5bf000-7f612e5c3000 r--p 00194000 08:15 11013770 /lib/x86_64-linux-gnu/libc-2.24.so 7f612e5c3000-7f612e5c5000 rw-p 00198000 08:15 11013770 /lib/x86_64-linux-gnu/libc-2.24.so 7f612e5c5000-7f612e5c9000 rw-p 00000000 00:00 0 7f612e5c9000-7f612e5ec000 r-xp 00000000 08:15 11010160 /lib/x86_64-linux-gnu/ld-2.24.so 7f612e7b9000-7f612e7bb000 rw-p 00000000 00:00 0 7f612e7e8000-7f612e7ec000 rw-p 00000000 00:00 0 7f612e7ec000-7f612e7ed000 r--p 00023000 08:15 11010160 /lib/x86_64-linux-gnu/ld-2.24.so 7f612e7ed000-7f612e7ee000 rw-p 00024000 08:15 11010160 /lib/x86_64-linux-gnu/ld-2.24.so 7f612e7ee000-7f612e7ef000 rw-p 00000000 00:00 0 7ffeef5ec000-7ffeef60e000 rw-p 00000000 00:00 0 [stack] 7ffeef67f000-7ffeef681000 r--p 00000000 00:00 0 [vvar] 7ffeef681000-7ffeef683000 r-xp 00000000 00:00 0 [vdso] ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0 [vsyscall] Aborted (core dumped) -- System Information: Debian Release: 9.0 APT prefers testing APT policy: (500, 'testing') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.9.0-2-amd64 (SMP w/2 CPU cores) Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages sysstat depends on: ii debconf [debconf-2.0] 1.5.60 ii libc6 2.24-10 ii libsensors4 1:3.4.0-4 ii lsb-base 9.20161125 ii ucf 3.0036 ii xz-utils 5.2.2-1.2+b1 Versions of packages sysstat recommends: ii cron [cron-daemon] 3.0pl1-128+b1 Versions of packages sysstat suggests: pn isag <none> -- debconf information: sysstat/remove_files: true sysstat/enable: false