Engine crash via ShortenString size underflow

Stack-based buffer overflow in Suricata 8.0.0 allows local users to crash the engine by loading a crafted LDAP inspection rule. ShortenString subtracts from a zero or minimal output size while abbreviating the long ldap.responses.attribute_type keyword, underflowing its unsigned half-length calculation before writing into a stack buffer. Exploitation requires control of a rule containing that keyword and a transform when the engine starts or reloads its rules; the documented consequence is loss of the Suricata process.