Suricata

In SCConfLogOpenRedis(), when Redis output is configured in stream/xadd mode with a positive stream-maxlen value, Suricata allocates redis_setup.stream_format and immediately passes it to snprintf().

Current code path:

src/util-log-redis.c:
- SCConfLogOpenRedis()
- redis mode is "stream" or "xadd"
- stream-maxlen is greater than 0
- log_ctx->redis_setup.stream_format = SCCalloc(100, sizeof(char))
- snprintf(log_ctx->redis_setup.stream_format, ...)

If SCCalloc() fails, stream_format is NULL and snprintf() dereferences it, causing a crash during Redis output initialization.

Nearby Redis initialization code already uses FatalError() for unrecoverable setup failures, for example when allocating the Redis context or validating required Redis configuration. This suggests the missing allocation check is an oversight.

Proposed fix:
Check redis_setup.stream_format after SCCalloc() and call FatalError() if allocation fails, before passing it to snprintf().

Patch branch:
https://github.com/kenifor/suricata/tree/fix-redis-stream-format-alloc

Pull request:
TBD