Outside of certain areas - if you manage to reliably reproduce the bug, you're likely to able understand the bug, and it's likely you can fix it. But sure, the

Outside of certain areas - if you manage to reliably reproduce the bug, you're likely to able understand the bug, and it's likely you can fix it. But sure, there are areas where things can go very wrong. Prime example being the horrible Debian ssh/ssl key gen entropy bug: https://lists.debian.org/debian-security-announce/2008/msg00152.html https://lists.debian.org/debian-security-announce/2008/msg00... (note that this was a "bug-fix" introduced after a misguided effort of looking for bad code - so a bit different from the typical "I triggered this bug in normal use").