bug in untested code discovered during code review