mark more occurances of readdir_r with dangerous non-malloc there ...
more / refine TODO
renumber