From 64e9775707ef6032de6b985f08f9a4a53528c2c5 Mon Sep 17 00:00:00 2001
From: Roman Khimov <roman@nspcc.ru>
Date: Wed, 7 Oct 2020 23:07:10 +0300
Subject: [PATCH] vm/stackitem: limit reads for bigint values

They can't exceed 33 bytes.
---
 pkg/vm/stackitem/serialization.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkg/vm/stackitem/serialization.go b/pkg/vm/stackitem/serialization.go
index b3b111a7d..f9a9c7390 100644
--- a/pkg/vm/stackitem/serialization.go
+++ b/pkg/vm/stackitem/serialization.go
@@ -104,7 +104,7 @@ func DecodeBinaryStackItem(r *io.BinReader) Item {
 		var b = r.ReadBool()
 		return NewBool(b)
 	case IntegerT:
-		data := r.ReadVarBytes()
+		data := r.ReadVarBytes(bigint.MaxBytesLen)
 		num := bigint.FromBytes(data)
 		return NewBigInteger(num)
 	case ArrayT, StructT: