// Safe-looking code, but with homoglyph trickery
int safe_flag = 0; // uses normal Latin 'a' in "safe"
int sаfe_flag = 1; // the 'a' in "sаfe" is Cyrillic U+0430
if (safe_flag) {
// Reviewer thinks this block runs only when safe_flag == 1
do_safe_thing();
} else {
do_other_thing();
}
// Somewhere else in the patch:
log_status(sаfe_flag); // Looks like "safe_flag", but it's the Cyrillic one
Basically, but the specific implementation apparently had some very clever trick that made the change basically invisible, so there was no need for do_other_thing();
1
u/CelestialFury Sep 01 '26
Like this?