* Get rid of getenv in as many places as possible. Ideally, we'd only use it to query HOME on Unix systems.
* Get rid of any global variable with a non-trivial constructor (see also the [[Portability Guide]]). The GCC option -Wglobal-constructors is highly useful for that, and should eventually be added to our default list of warnings, once we resolved all of these.
* Add safe variants of strcpy / strcat (like strlcpy/strcat, or strcpy_s / strcat_s, or our own), and replace all strcpy/strcat/strncpy/strncat calls by those.
==== Iterator handling ====