[ryanlol]

> In a proprietary system, it may have been there forever.

Why? Heartbleed was discovered by fuzzing the compiled binaries, not by eyeballing the source code.

Nothing prevents you from performing the exact same research on proprietary software.