Denial of service via HAMT Decoding Bug

[scacaca]

Summary

Trying to read malformed HAMT sharded directories can cause memory leaks.

Description

If you are reading untrusted user input, an attacker can then trigger a memory leaks. Because there is no size limit for the child nodes of the HAMT bucket here.
there is a similar vulnerablity
The fix can be something like this.
In js-hamt-sharding,. there is similarly no corresponding logic for size limits on child nodes