TOCTOU between data size check and read: attacker could replace cache file with larger one and cause buffer overflow.