parson.c (13 lines): - line 211: // TODO: This function requires bounds widening logic, so is unchecked. - line 246: // TODO: Requires bounds widening, so left unchecked. - line 333: // TODO: compiler isn't constant folding when checking bounds, so we need the spurious (size_t) 1 here. - line 366: // TODO: Can't prove this - line 462: /* TODO: Memcpy functions below warn "cannot prove argument meets declared - line 475: // TODO: The three statements below need to be changed atomically - line 591: // TODO: The compiler can't do a >= comparison, so unneeded dynamic bounds cast. - line 599: // TODO: This should be atomic - line 647: // TODO: Needs bounds-widening to be checkable - line 769: // TODO: We can't figure this out dynamically - line 939: /* TODO: The way this function deals with end is not well supported by the compiler. - line 1210: // TODO: This does not go through properly if bounded string is a const char, as it should be - line 1783: // TODO: Unchecked because memmove doesn't yet take a type argument