Yeah, this goes back to the whole "Open Source and corporate funding" story. As far as I can find, sudo doesn't get any direct funding at the moment, although various companies have undoubtedly contributed patches.
Re:Heap-based buffer overflow in Sudo
by brigandish on Wednesday January 27, 2021 @08:20AM
(#25927883)
It’s nice when those with differing viewpoints can find common ground over their profound disappointment with the world (or at least their profession).
Reading the code of important open source projects is not for the faint hearted!
But this is frakkin sudo we're talking about.
It's a wonder that anything works, ever.