At ext/bson/read.c:73, the error message displays the last byte in the string, the one that it expected to be null, but isn't. However, instead of showing the byte at length-1, it displays the byte at length, which is off by one. This has the potential to print something beyond the allocated length of the buffer.