The patches are public; but whether they actually address the perceived problem -- nor even if the perceived problem is actually a problem -- cannot be determined without knowing what the problem is.

Actually, I do. As you will find out.

I look forward to reading your patch. But I find it hard to reconcile your two statements. On one hand you admit you don't know what the problem is, yet on the other you assert you know what you are talking about. Both can't be right. IMO if you understand the patches you should be able to figure out the attack and recreate it.