Enumerate all control candidates.
Still has a crash bug in core/?