Spread of buggy software raises new questions