AOSP Source Releases Are So Late Developers Disassemble Libraries to Report Bugs(github.com)
288 points by tharen 4 hours ago | 129 comments
tl;dr: Android 17's September 2026 builds introduced a regression in bionic's `wcscspn()` and `wcspbrk()`: when the reject set contains only characters below U+0100, the functions incorrectly stop at the first character ≥ U+0100, breaking any wide-string scan on text with emoji, CJK, or extended Latin. The bug was found by disassembling the shipped `libc.so` because AOSP source releases lag months behind device builds, and existing bionic tests missed it since they only used ASCII input.
HN Discussion:
  • •EU regulation on update timelines may have inadvertently caused rushed/buggy releases
  • ↓Title is hyperbolic since disassembly wasn't strictly required to find the bug
  • ↑Google is becoming hostile to openness and we need a freer Android alternative
  • ↑AI-assisted reverse engineering makes closed/delayed source releases increasingly futile
  • ~Open source availability wouldn't necessarily help given Google's under-resourcing of components like NDK