Reply to comment:

Anonymous
I understand that. Yet, randomized testing might have caught it.<br /><br />And yes, proper randomized testing involves sending both compliant and non-compliant data.