From 70bc07743399d6bc3634a7033fc2cb45cd50049f Mon Sep 17 00:00:00 2001
From: Philippe Antoine <pantoine@oisf.net>
Date: Thu, 5 Mar 2026 10:32:50 +0100
Subject: [PATCH] util: check name length of proposed data directory

Before doing stack allocation

Ticket: 8001
---
 src/util-conf.c | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/src/util-conf.c b/src/util-conf.c
index 734aab80a9..2ac630f12b 100644
--- a/src/util-conf.c
+++ b/src/util-conf.c
@@ -65,9 +65,14 @@ TmEcode ConfigCheckLogDirectoryExists(const char *log_dir)
 
 TmEcode ConfigSetDataDirectory(char *name)
 {
-    if (strlen(name) == 0)
+    size_t name_len = strlen(name);
+    if (name_len == 0)
         return TM_ECODE_OK;
 
+    if (name_len > PATH_MAX) {
+        SCLogError("Too long name for data directory");
+        return TM_ECODE_FAILED;
+    }
     size_t size = strlen(name) + 1;
     char tmp[size];
     strlcpy(tmp, name, size);