Comment by linkregister

The kind of bug that can be fixed by overwriting instructions with NOPs is trivial. The OP isn't trying to invalidate Microsoft's SDLC & QA. They just wanted a solution.