Niklas Larsson

Reading the documentation for GDIPlus [(Link)](https://docs.microsoft.com/en-us/windows/win32/api/gdiplusinit/nf-gdiplusinit-gdiplusstartup): > You must call GdiplusStartup before you create any GDI+ objects, and you must delete all of your GDI+ objects (or have them go...

I don't see how we can use more precise types if the C libraries don't. If the C header uses `int` and `long` and similar types in its prototypes, and...

The primitives should be defined in `support/chez/support.ss` (and racket and gambit), if needed (they might not need anything but what's put out in codegen). The bootstrap files shouldn't have to...

It feels a bit weird to have those primitives implemented in C instead of calling out to the Scheme backend. I guess it would have to be fixed for the...

The source for the scheme support code is in `support/chez/support.ss` (and corresponding for racket and gambit). As the compiler itself doesn't rely on it, there is no need for a...

It would also be good to see if the Javascript backend is susceptible.

If you haven't seen it there is a [talk](https://www.youtube.com/watch?v=BcC3KScZ-yA) by @akeep at the Scheme Workshop that goes into some of that. It would be nice to have such things written...

It would be nice if there was a way to execute processes without starting a shell. You don't want to send any untrusted data via the shell. Sending it as...

It's not efficiency that is why I would like a shell-free alternative, it's because starting a shell makes it very hard to secure. A fallback to `execv` if a shell...

Windows for one certainly doesn't have /dev/urandom