2 - How we will handle DCOP needs sorting out. Among other things, we
3 need to check that service and service-ownership semantics map to DCOP
6 - Activation needs some careful additional thinking-through.
8 - Property list feature on message bus (list of properties associated
9 with a connection). May also include message matching rules
10 that involve the properties of the source or destination
13 - Automatic service activation, should probably be done through a message flag.
15 - Disconnecting the remote end on invalid UTF-8 is probably not a good
16 idea. The definitiion of "valid" is slightly fuzzy. I think it might
17 be better to just silently "fix" the UTF-8, or perhaps return an error.
19 Owen says we should only validate the UTF-8 on dbus_message_get_string()
20 (changing get_string to have an error return, and allowing a type error
23 - The convenience functions in dbus-bus.h should perhaps have
24 the signatures that they would have if they were autogenerated
25 stubs. e.g. the acquire service function. We should also evaluate
26 which of these functions to include, in light of the fact that
27 GLib/Qt native stubs will probably also exist.
29 - assorted _-prefixed symbols in libdbus aren't actually used by
30 libdbus, only by the message bus. These bloat up the library
31 size. Not sure how to fix, really.
33 - build and install the Doxygen manual in Makefile when --enable-docs
35 - if you send the same message to multiple connections, the serial number
36 will only be right for one of them. Probably need to just write() the serial
37 number, rather than putting it in the DBusMessage, or something.
39 - perhaps the bus driver should have properties that reflect attributes
40 of the session, such as hostname, architecture, operating system,
41 etc. Could be useful for code that wants to special-case behavior
42 for a particular host or class of hosts, for example.
44 - currently the security policy stuff for messages to/from
45 the bus driver is kind of strange; basically it's hardcoded that
46 you can always talk to the driver, but the default config file
47 has rules for it anyway, or something. it's conceptually
50 - when making a method call, if the call serial were globally unique,
51 we could forward the call serial along with any method calls made
52 as a result of the first method call, and allow reentrancy that was
53 strictly part of the call stack of said method call. But I don't
54 really see how to do this without making the user pass around the
55 call serial to all method calls all the time, or disallowing
58 - the invalid messages in the test suite are all useless because
59 they are invalid for the wrong reasons due to protocol changes.
60 (Consider extending test suite to validate that they are
61 invalid for right reason, e.g. an "INVALID_ERROR Foo" line
64 - I don't want to introduce DBusObject, but refcounting and object
65 data could still be factored out into an internal "base class"
68 - modify the auth protocol to also support other initial-handshake
71 - document the auth protocol as a set of states and transitions, and
72 then reimplement it in those terms
74 - dbus_gproxy or dbus_g_proxy?
76 - add dbus_message_has_path(), maybe has_member/interface
78 - re_align_field_recurse() in dbus-message.c is broken because it
79 crashes on some types of header field values. security problem.
81 - the system daemon has to be able to reload changes to the
82 security policy without restarting, because apps won't
83 be coded to handle it restarting
85 - modify the wire protocol to keep the args signature separate
86 from the args themselves. Make the name of TYPE_CUSTOM part
87 of the type signature, rather than part of the value.
88 Then you have the full typecheck in a single string.
90 - dbus_message_iter_init_array_iterator has "iter" and "iterator"
91 in the same function name
93 - the GLib bindings varargs take DBUS_TYPE_WHATEVER and
94 return stuff allocated with dbus_malloc(); should this
95 be made more "G" at some expense in code duplication?
96 You also still have to use some D-BUS functions such as
97 dbus_message_get_args() which takes a DBusError.
98 Probably we need to either fully encapsulate and hide
99 dbus/dbus.h, or encapsulate it slightly less e.g. no
100 GError. Or maybe it's as simple as "never return dbus_malloc()
101 memory" and just fully encapsulate the get_args() type of
104 - need to define bus behavior if you send a message to
105 yourself; is it an error, or allowed? If allowed,
106 we need to have a test for it in the test suite.
108 - the max_replies_per_connection resource limit isn't implemented
110 - array lengths should probably be returned as size_t rather than int
111 (though they are kind of a pita to pass in as size_t with the
112 varargs, so maybe not - what does glib do with g_object_get()?)
114 - the varargs dbus_message_get_args() needs to support OBJECT_PATH
115 and OBJECT_PATH_ARRAY
117 - recursive dispatch, see dbus_connection_dispatch()
119 - the auth protocol may as well use hex encoding instead of
120 base64, then we can dump the base64 implementation and
123 - rename HEADER_FIELD_SERVICE -> HEADER_FIELD_DESTINATION
124 and HEADER_FIELD_SENDER_SERVICE -> HEADER_FIELD_SENDER
125 for both dbus-protocol.h and in the spec
127 - Better error checking for bogus configuration files. Currently if a
128 configuration file tries to include itself the bus crashes on start. We
129 should probably have a check against this.