It's possible that these aren't the original file contents, but rather the result of a manual attempt to stop the bleeding. Someone may have hoped that overwri

It's possible that these aren't the original file contents, but rather the result of a manual attempt to stop the bleeding. Someone may have hoped that overwriting the bad file with an all-0 file of the correct size would make the update benign. Or following the "QA was bypassed because there was a critical vulnerability" hypothesis, stopping distribution of the real patch may be an attempt to reduce access to the real data and slow reverse-engineering of the vulnerability.