fwiw, people point to the simplicity of the mistake as evidence of it being accidental. i disagree. it actually reveals a complete lack of effective testing, and testing is the first concern when building risky systems. not all tests even make it into the published source
to accept it as accidental you must simultaneously accept that the developers were competent at designing and building the system, and abjectly incompetent at testing it. while certainly possible, it's more likely that the error was intentional
further, if one were to intentionally introduce such an error, merging someone else's code that happens to have a subtle but critical error is a great way to do it. a kind of "goto fail" combined with liblzma
nothing proven. just my 2¢
