Google Researcher Publishes Windows 10 Zero-Day Security Vulnerability
  "Personally I think it's a bit harsh,"
  Wright says, "every fix is different
  and they should allow for some
  flexibility in their deadline."

As far as I can tell, (1) this is a denial-of-service bug, not a privilege escalation or remote root exploit, i.e. a low-severity bug; (2) it is unlikely any code depends on the infinite loop triggering, meaning this fix doesn't call for great architectural upheval; and (3) the deadline was already extended to 91 days, rather than the usual 90.If you'd give out deadline extensions for this bug you'd give them out for almost any bug, so you may as well not have deadlines at all.