src/crypto/x509/x509_vfy.c (3 lines):
	- line 240: break;              /* FIXME: If this happens, we should take
	- line 2051: * Add only if not also in base. TODO: need something cleverer here
	- line 2064: /* TODO: optionally prune deleted entries */


src/crypto/asn1/tasn_utl.c (2 lines):
	- line 267: /* FIXME: need to search application table too */
	- line 276: /* FIXME: should log the value or OID of unsupported type */


src/crypto/fipsmodule/rsa/rsa_impl.c (1 line):
	- line 180: // TODO: p and q are also CONSTTIME_SECRET but not yet marked as such


src/tool/digest.cc (1 line):
	- line 173: // TODO: When given "--binary" or "-b", we should print " *" instead of "  "


src/crypto/hrss/hrss.c (1 line):
	- line 67: // TODO: MSVC can likely also be made to work with vector operations, but ^ must


src/crypto/x509v3/v3_alt.c (1 line):
	- line 629: /* FIXME: should allow other character types... */


src/ssl/ssl_asn1.cc (1 line):
	- line 759: /* TODO: in time we can include |is_server| for servers too, then we can