The 2014 Pwnie Nominee For Best Client-Side Bug

Goto Fail (CVE-2014-1266)

Credit: Anonymous

Contrary to popular belief, two gotos are not always better than one. In some cases, they may overflow the Internet goto buffer and wrap around the value of the goto such that it disables TLS. Oops.

(CVE-2014-1266)