A study of more than 6,000 patches found that even working patches can introduce new bugs, break something else, or are open to bypass.