Rich Felker on Nostr: I haven't followed closely but what I heard early on was that the bug was an existing ...

I haven't followed closely but what I heard early on was that the bug was an existing parser crash bug on bad input from data files (virus definition files or whatever) and an update to the data, not a change in the code, triggered it.