diff --git a/save/region/mca.go b/save/region/mca.go
index 65912e8..e38c3fc 100644
--- a/save/region/mca.go
+++ b/save/region/mca.go
@@ -125,6 +125,10 @@ func (r *Region) ReadSector(x, y int) (data []byte, err error) {
 		return
 	}
 
+	if length < 0 || length > 1024*1024 {
+		err = errors.New("data too large")
+		return
+	}
 	data = make([]byte, length)
 	_, err = io.ReadFull(r.f, data)