Constant MAX_PAUSE_BYTES 

const MAX_PAUSE_BYTES: u64 = _; // 4_096u64

PauseSnapshot is two scalars. Anything bigger than 4 KiB on disk is either junk or attacker-controlled — refuse to even parse it.