X-Git-Url: https://mattmccutchen.net/rsync/rsync.git/blobdiff_plain/27741d9fd96988b03608d9c2493602012b9b37cf..0e23e41d484b0edc653f2b402bb2ea0a18e00444:/TODO

diff --git a/TODO b/TODO
index 82758233..e3ed8df4 100644
--- a/TODO
+++ b/TODO
@@ -299,6 +299,16 @@ Win32
   we are correct to call close(), because shutdown() discards
   untransmitted data.
 
+DEVELOPMENT ----------------------------------------------------------
+
+Splint
+
+  Build rsync with SPLINT to try to find security holes.  Add
+  annotations as necessary.  Keep track of the number of warnings
+  found initially, and see how many of them are real bugs, or real
+  security bugs.  Knowing the percentage of likely hits would be
+  really interesting for other projects.
+
 DOCUMENTATION --------------------------------------------------------
 
 Update README