There are bson_init calls not paired with bson_destroy calls when parsing a few JSON types like DBPointer and code with scope. If the contents of these JSON objects exceed 120 bytes, the JSON parser will allocate a buffer that it does not free.