Is there some way to limit the maximum number of bytes allocated when decoding string or buffer?

[owenmpierce]

This table says that buffers and strings are encoded as a varuint length followed by the actual data. What if someone with evil intent creates a packet that has a buffer instruction with a gigantic length varuint, say gigabytes big. Is this library going to attempt to create such a gigantic buffer? There should be some way to place upper limits on the expected size of buffer and string length, as well as array elements, shouldn't there?

[ekantor]

You can check the size of the buffer manually. If you use socket.io you can limit message size too.