"Full disclosure" from the University of Minnesota

The researchers at the University of Minnesota have posted a
description of the work they did [PDF] as part of their 'hypocrite
commits' project. It includes a list of the buggy commits they posted and
how they were handled.

In the following we will show two parts: (1)
the message log of our disclosure of the findings to the community, and (2)
the patches we submitted. By showing the details of the patches and the
exchange of messages, we wish to help the community to confirm that the
buggy patches were 'stopped' during message exchanges and not merged into
the actual Linux code. No other interactions with the Linux Kernel team
has involved intentional deception or intentionally misleading or bad
patches. This misguided behavior on our part was limited to the patches
described and clarified in this document.

Amusingly, one of their attempts to submit a buggy commit was, itself,
buggy, yielding a valid change overall.