Constant MAX_HEADER_BLOCK 

pub const MAX_HEADER_BLOCK: usize = _; // 10_485_760usize

Hard cap on a commit/tag header block (everything before the blank line). Real gpgsig/mergetag blocks are a few KiB; 10 MiB refuses pathological input before any allocation amplification.