Description of problem:

If we send to syslog a specially crafted log message, stack guard variable protecting bufParseTAG array in parseLegacySyslogMsg() gets rewritten and rsyslog gets terminated.

Version-Release number of selected component (if applicable):

rsyslog-4.6.2-3.el61.1.i686

How reproducible:

everytime on ia-32 on x86-64 stack guard variable won't get rewritten as it is located 8 bytes above bufParseTAG array

Actual results:

glibc prints the following message and rsyslog gets terminated:

stack smashing detected : rsyslogd terminated

Expected results:

No abortion.

Additional info:

For more info, please, see the following private comment.