Byte arrays aren't limited in size in the protocol
Byte arrays in the protocol don't have a size limit. This is important specially during the login stage where the user doesn't need to be authed.
If it helps here is what I did to patch it https://hub.spigotmc.org/stash/projects/SPIGOT/repos/craftbukkit/commits/fc9ee90fc543adbbe1641cc722b0b2d4b800f668
And someone felt the need to go public with this. (Effects bungee more than vanilla but still somewhat of an issue for vanilla) https://www.reddit.com/r/admincraft/comments/4cbeva/psa_serious_exploit_in_all_bungeecord_versions/
2016-03-28, 11:48 PM
2016-05-14, 06:13 AM
2016-04-08, 12:45 PM
0
2