Selling the source of a virus, is it illegal?

It all boils down to whose fault it would be if he let the virus out, doesn't it? Make him sign something saying that you can't be held responsible for whatever he does with the virus (in lawyer-ish terms, of course).