- * modify delscreen to more effectively delete all windows on the
- given screen.
- * modify wnoutrefresh to call pnoutrefresh if its parameter is a
- pad, rather than treating it as an error, and modify new_panel to
- permit its window-parameter to be a pad
- * modify curses_trace() to show the trace-mask as symbols, e.g.,
- TRACE_ORDINARY, DEBUG_LEVEL(3).
- * improve checks for valid mouse events when an intermediate mouse
- state is not part of the mousemask specified by the caller
- * allow extended-color number in opts parameter of wattr_on.
- * improve _tracecchar_t2 formatting of base+combining character.
- * trim out some unwanted linker options from ncurses*config and .pc
- files seen in Fedora 36+.
- * improve shell-scripts with shellcheck
- * improve use of "trap" in shell scripts, using a script.
- * modify make-tar.sh scripts to make timestamps more predictable.
+ * In addition to the new, safer function tiparm_s, ncurses adds
+ checks to make the older tiparm, tparm and tgoto functions safer:
+ + the terminfo functions tiparm and tparm ensure that the
+ capability string comes from the terminal description which
+ ncurses loads, rather than from random data which the
+ application happens to have.
+ + the tgoto function disallows capabilities which its analysis
+ shows will attempt to use string parameters.
+ + ncurses uses internal functions which correspond to tiparm,
+ and tgoto which ensure that the capability strings which are
+ passed to these functions come from the loaded terminal
+ description.
+ * improve check in lib_tparm.c, ensuring that a char* fits into a
+ TPARM_ARG
+ * modify _nc_syserr_abort to use _nc_env_access, rather than only
+ checking root uid
+ * improve thread lock in lib_trace.c
+ * modify flushinp to use file descriptors in SCREEN, rather than
+ from TERMINAL, and check if they are for a terminal, like SVr4
+ * modify mcprint to use file descriptor in SCREEN, for consistency
+ * modify internal function _nc_read_file_entry to show relevant
+ filename in warnings
+ * improve checks in internal function convert_string for corrupt
+ terminfo entry
+ * review/improve handling of out-of-memory conditions
+ * limit delays to 30 seconds, i.e., padding delays in terminfo, as
+ well as napms and delay_output functions
+ * fix reallocation loop for vsnprintf in _nc_sprintf_string by
+ copying the va_list variable
+ * modify delscreen to limit the windows which it creates to just
+ those associated with the screen
+ * modify endwin to return an error if it is called again without an
+ intervening screen update
+ * modify wenclose to handle pads
+ * eliminate use of PATH_MAX in lib_trace.c
+ * provide for any CCHARW_MAX greater than 1