Comment 6 for bug 1872560

It looks like bson.c in whoopsie was originally taken from here:

https://github.com/10gen-archive/mongo-c-driver-legacy/tree/master/src

The upstream repo has seen a lot of security fixes since the code was copied, perhaps we should investigate re-syncing it before attempting to fix it ourselves.