Even djb had flaws in his C code despite being a semi-god. It took a $10k bounty and several years to be found but it was there !