Do they fuzz systems like this, or do they just ship it as soon as the test suite passes?

It seems like there's a whole world of hurt waiting to arrive if people can start to inject data into these systems.