OpenSSL Security Advisory: TLS heartbeat read overrun
"Don't roll your own parsers" should really be up there with "Don't roll your own crypto". This advisory is scant on details, but this extension protocol[0] neither looks complex nor beyond mechanical code generation to me.  Just simple enough to be dangerous. And it's pretty new, so this must be recently authored vulnerable code.[0] http://tools.ietf.org/html/draft-ietf-tls-dtls-heartbeat-04