sadc "double free or corruption"

Confirm bug in sadc:

*** glibc detected *** /usr/lib/sysstat/sadc: double free or corruption (!prev): 0x000000000124d1c0 ***
======= Backtrace: =========
/lib/libc.so.6[0x7fd3c0f7dcb8]
/lib/libc.so.6(cfree+0x76)[0x7fd3c0f80276]
/usr/lib/sysstat/sadc[0x401f9b]
/usr/lib/sysstat/sadc[0x402af3]
/lib/libc.so.6(__libc_start_main+0xe6)[0x7fd3c0f245a6]
/usr/lib/sysstat/sadc[0x401939]
======= Memory map: ========
00400000-0040e000 r-xp 00000000 08:07 701279 /usr/lib/sysstat/sadc
0060d000-0060e000 r--p 0000d000 08:07 701279 /usr/lib/sysstat/sadc
0060e000-00610000 rw-p 0000e000 08:07 701279 /usr/lib/sysstat/sadc
01247000-01268000 rw-p 01247000 00:00 0 [heap]
7fd3bc000000-7fd3bc021000 rw-p 7fd3bc000000 00:00 0
7fd3bc021000-7fd3c0000000 ---p 7fd3bc021000 00:00 0
7fd3c0cee000-7fd3c0d04000 r-xp 00000000 08:01 211800 /lib/libgcc_s.so.1
7fd3c0d04000-7fd3c0f04000 ---p 00016000 08:01 211800 /lib/libgcc_s.so.1
7fd3c0f04000-7fd3c0f05000 r--p 00016000 08:01 211800 /lib/libgcc_s.so.1
7fd3c0f05000-7fd3c0f06000 rw-p 00017000 08:01 211800 /lib/libgcc_s.so.1
7fd3c0f06000-7fd3c106e000 r-xp 00000000 08:01 211840 /lib/libc-2.9.so
7fd3c106e000-7fd3c126e000 ---p 00168000 08:01 211840 /lib/libc-2.9.so
7fd3c126e000-7fd3c1272000 r--p 00168000 08:01 211840 /lib/libc-2.9.so
7fd3c1272000-7fd3c1273000 rw-p 0016c000 08:01 211840 /lib/libc-2.9.so
7fd3c1273000-7fd3c1278000 rw-p 7fd3c1273000 00:00 0
7fd3c1278000-7fd3c1298000 r-xp 00000000 08:01 211814 /lib/ld-2.9.so
7fd3c1444000-7fd3c1483000 r--p 00000000 08:07 668954 /usr/lib/locale/en_US.utf8/LC_CTYPE
7fd3c1483000-7fd3c1485000 rw-p 7fd3c1483000 00:00 0
7fd3c148a000-7fd3c148b000 r--p 00000000 08:07 668955 /usr/lib/locale/en_US.utf8/LC_NUMERIC
7fd3c148b000-7fd3c148c000 r--p 00000000 08:07 668956 /usr/lib/locale/en_US.utf8/LC_TIME
7fd3c148c000-7fd3c1493000 r--s 00000000 08:07 652263 /usr/lib/gconv/gconv-modules.cache
7fd3c1493000-7fd3c1494000 r--p 00000000 08:07 668959 /usr/lib/locale/en_US.utf8/LC_MESSAGES/SYS_LC_MESSAGES
7fd3c1494000-7fd3c1497000 rw-p 7fd3c1494000 00:00 0
7fd3c1497000-7fd3c1498000 r--p 0001f000 08:01 211814 /lib/ld-2.9.so
7fd3c1498000-7fd3c1499000 rw-p 00020000 08:01 211814 /lib/ld-2.9.so
7fffc9484000-7fffc9499000 rw-p 7ffffffea000 00:00 0 [stack]
7fffc95ff000-7fffc9600000 r-xp 7fffc95ff000 00:00 0 [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0 [vsyscall]

System:
# uname -a
Linux nexus 2.6.28-13-server #45-Ubuntu SMP Tue Jun 30 22:56:18 UTC 2009 x86_64 GNU/Linux
# lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 9.04
Release: 9.04
Codename: jaunty

Affected Packages:
ii sysstat 8.1.7-1 sar, iostat and mpstat -...

There's a patch proposed in upstream.
Any reviewers?

This bug was fixed in the package sysstat - 9.0.3-2ubuntu1

---------------
sysstat (9.0.3-2ubuntu1) karmic; urgency=low

  * sadc. Fix double free corruption. (LP: #396026)

 -- Chuck Short <email address hidden> Mon, 28 Sep 2009 14:50:52 -0400

Just upgraded, jaunty to karmic, and started getting this email:

*** glibc detected *** /usr/lib/sysstat/sadc: double free or corruption (!prev): 0x00000000014ed4d0 ***

# apt-cache policy sysstat
sysstat:
  Installed: 9.0.3-2ubuntu1
  Candidate: 9.0.3-2ubuntu1
  Version table:
 *** 9.0.3-2ubuntu1 0
        500 file: karmic/main Packages
        100 /var/lib/dpkg/status

# uname -a
Linux noname 2.6.31-17-server #54-Ubuntu SMP Thu Dec 10 18:06:56 UTC 2009 x86_64 GNU/Linux

# lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 9.10
Release: 9.10
Codename: karmic

So it looks like it is still broken?

I confirm - broken in sysstat 9.0.3-2ubuntu1 in 9.10.

Debian upstream says this is fixed in sysstat upstream 9.0.4, which was packaged for Debian in August 09: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507659

I can confirm the broken in 9.0.3-2ubuntu1 in 9.10 using the 2.6.31-305-ec2 kernel. Using 2.6.32 this problem doesn't exist.