* TODO: Add future items.

* All catch blocks catch const references.
* sbuild/sbuild-run-parts.cc
  (run_child): Handle exceptions thrown in child.
* sbuild/sbuild-session.cc
  (setup_chroot): Handle exceptions thrown in child.
* Replace all uses std::locale("C") with std::locale::classic().
* Replace all uses of NULL with 0.
* sbuild/sbuild-auth.cc
  (auth): Remove redundant auth_conv_tty dynamic_cast.
  (~auth): Log an error if an exception is caught.
  (set_user): Default uid and gid to current uid and gid, rather
  than 0, for extra safety when an error occurs.
  (run, start): Use reinterpret_cast instead of static_cast when
  casting void *.
  (authenticate): Don't leak hostname array if an exception is
  thrown.

1 files changed, 9 insertions, 0 deletions

diff --git a/TODO b/TODO
index 6e8a8733..d5218aa3 100644
--- a/TODO
+++ b/TODO
@@ -25,6 +25,15 @@ POTENTIAL
   It will require DHCP or static IP configuration and a dynamic
   hostname in order to connect.
 
+* Use of passwd/group databases should be thread-safe
+
+  - Use the _r variants of getpw*, getgr*.
+
+* Use controlling TTY for authentication
+
+  PAM and the conversation handler should use the CTTY, rather than
+  STDIN_FILENO.  The CTTY fd should use FD_CLOEXEC.
+
 * Add tests for
 
 ** Auth