# Output-json-http lead to segfault

**URL:** https://forum.suricata.io/t/output-json-http-lead-to-segfault/6062
**Category:** Developers
**Tags:** suricata
**Created:** [October 15, 2025, 6:38am UTC](https://forum.suricata.io/t/output-json-http-lead-to-segfault/6062 "2025-10-15T06:38:49Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![liheng562653799](https://avatars.discourse-cdn.com/v4/letter/l/f19dbf/32.png) [@liheng562653799](https://forum.suricata.io/u/liheng562653799)
#### Post date: [October 15, 2025, 6:38am UTC](https://forum.suricata.io/t/output-json-http-lead-to-segfault/6062/1 "2025-10-15T06:38:49Z")

</div>

**Problem:**  
When transfer a large file(larger than normal linux thread stack size 8192KB) by http, function “BodyPrintableBuffer” may lead to segfault dule to dynamically allocated array “printable\_buf“ on stack.

**Solution:**  
May be we can add a limit on the array size.

---

<div class="post-metadata">

### Author: ![Jeff\_Lucovsky](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/jeff_lucovsky/32/11_2.png) [@Jeff\_Lucovsky](https://forum.suricata.io/u/Jeff_Lucovsky)
#### Post date: [October 15, 2025, 12:35pm UTC](https://forum.suricata.io/t/output-json-http-lead-to-segfault/6062/2 "2025-10-15T12:35:38Z")

</div>

Thanks for reporting this. Would you mind creating a ticket so we can track and address it?

Do you have a pcap that demonstrates the problem? That would be helpful to include in the Redmine ticket if it can be shared.

---

<div class="post-metadata">

### Author: ![liheng562653799](https://avatars.discourse-cdn.com/v4/letter/l/f19dbf/32.png) [@liheng562653799](https://forum.suricata.io/u/liheng562653799)
#### Post date: [October 16, 2025, 1:59am UTC](https://forum.suricata.io/t/output-json-http-lead-to-segfault/6062/3 "2025-10-16T01:59:24Z")

</div>

I had just create a ticket, [Bug #8004 output: http eve log lead to segfault](https://redmine.openinfosecfoundation.org/issues/8004)

I’m sorry, I don’t have a pcap beacause the problem occured to me one year ago.