Constant MAX_PAYLOAD_BYTES 

pub const MAX_PAYLOAD_BYTES: usize = _; // 4_194_304usize

Hard byte bound applied before parsing (attacker-controlled input).