Currently no check is done on the length of the VInt/VLong values that are transmitted in messages of Hot Rod protocol.
(the next byte is read until its MSB is 0)
We could limit the length of the VInt value to 5 bytes and VLong to 9 bytes and throw an exception like "stream corrupted" if the limit is exceeded, for the purposes of input data validation ...