BlackBerry resisted announcing major flaw in QNX operating system

The BadAlloc issue [1] [2] is that calloc [3] can return a pointer to a smaller than requested allocation when it should have returned NULL when given arguments those values result in an undetected internal overflow.

[1]: https://us-cert.cisa.gov/ncas/alerts/aa21-229a

[2]: https://msrc-blog.microsoft.com/2021/04/29/badalloc-memory-a...

[3]: https://pubs.opengroup.org/onlinepubs/9699919799/functions/c...