4 ms·

- someone just outright botches the implementation. Heartbleed wound up in OpenSSL for years before anyone noticed.