Functions like bson_iter_init or bson_iter_recurse consistently are not checked for return values in the code base. Some cases are not expected to fail (on BSON we create) but some may fail on malformed input.

We may do well do add assertions on such cases, so users will get a more sensible error or stack trace in the possibly rare event that this could occur.