The validateBSON tests need improvement, in that they do not actively attempt to circumvent the validator. There are no tests of objects that are valid if you overrun the buffer, but not otherwise, no specific tests of subobjects that claim to be too large, etc. There are also only a few targeted tests of validating/rejecting specific field types.