How I Made a Heap Overflow in Curl
It still blows my mind that so many devices depend on a library largely written by a single person.  The level of pressure must be insane and it shows in this bit:<p>"Reading the code now it is impossible not to see the bug. Yes, it truly aches having to accept the fact that I did this mistake without noticing and that the flaw then remained undiscovered in code for 1315 days. I apologize. I am but a human."<p>If Daniel happens to read this, thanks for your hard work, and I really don't think any apology is necessary.  After all, the source was right there for any of us to read and review.