Since lengths in BSON are int32's we could have invalid BSON where this value is negative. The code should catch this whenever we read an int32 and return an error if the value is negative instead of potentially panicking or causing some error further down the call chain.