Comment Comment by zmguy This bug was in fact discovered by a Google employee: https://www.openssl.org/news/secadv_20140407.txt parent zmguy 12 years ago