Hey

To continue to subject of where we may have security-related problems, one way
to identify possible suspects of where to put efforts is to do Cyclomatic
Complexity checks on our code base:

         http://daniel.haxx.se/blog/2008/10/07/curl-cyclomatic-complexity/

My summary there links to Simon Josefsson's generated report on the curl code:

         http://josefsson.org/cyclo/cyclo-curl.html

That's an interesting summary of "bad" functions in libcurl that we should
consider fixing to become simpler and thus less "risky". While I may not agree
completely with that tool's conclusion on every detail, I think that table is
very interesting!

Thanks Simon!

-- 
  / daniel.haxx.se