Bug#863197: sysstat: sar program buffer overflow when option -s or -e are specified

2017-05-23 Thread Bernhard Übelacker
Hello, just tried to reproduce the issue I think the problem here is just with a short time format ('04:00'). In that case 5 characters are copied by strncpy in parse_timestamp to timestamp variable. Unfortunately these 5 characters do not contain the termination, therefore the following strcat

Bug#863197: sysstat: sar program buffer overflow when option -s or -e are specified

2017-05-23 Thread WHR
Package: sysstat Version: 11.4.3-1 Severity: normal The program /usr/bin/sar shows a buffer overflow if I use option either -s or -e to specify start or end time. [whr@ZONGYI-TMACH]:[20]:[~]:$ sar -s 04:00 *** buffer overflow detected ***: sar terminated === Backtrace: =