In our current BSONElement code, we strlen for our fieldNameSize calculation:

BSONElement(...) { while (*d) ++d; _fieldNameSize = d - _data; }

To ensure that this strlen is bounds checked, we should at minimum use std::strnlen.