Bruce Schneier was asking the other day whether the Apple bug might be a deliberate backdoor. This GnuTLS bug seems startlingly similar. It's enough to make you wonder.

https://www.schneier.com/blog/archives/2014/02/was_the_ios_ssl.html