Oh there has to be an upper limit for things like buffer overflow or just plain RAM capacity limits. But even with allowing the max possible range of characters you are still looking at something like 100,000 in a single 1mb size and I'm sure they could manage to do that and still pass it along to a high quality hashing function.

If you try putting in a password longer than that yes reject it.