A small, one-line upstream kernel change fixed a subtle hardware‑synchronization bug in the Exynos4 camera driver — but the security conversation that followed has been about more than code: it’s about how vendors map open‑source components to products, what a vendor attestation actually means...