I'm not making a claim about this bug, I'm saying that oracles and leaks are common and that nginx seems like a good target for them.