Push ELF export limit to a constant

volatility3/framework/constants/linux/__init__.py

@@ -234,3 +234,5 @@ BLUETOOTH_PROTOCOLS = (
     "HIDP",
     "AVDTP",
 )
+
+ELF_MAX_EXTRACTION_SIZE = 1024 * 1024 * 1024 * 4 - 1

volatility3/framework/plugins/linux/elfs.py

@@ -105,8 +105,9 @@ class Elfs(plugins.PluginInterface):
 
             real_size = end - start
 
-            if real_size < 0 or real_size > 100000000:
-                continue
+            # Check if ELF has a legitimate size
+            if real_size < 0 or real_size > constants.linux.ELF_MAX_EXTRACTION_SIZE:
+                raise ValueError(f"The claimed size of the ELF is invalid: {real_size}")
 
             sections[start] = real_size