Just someone reading source code. Coincidentally, the same way Heartbleed was found.