Index: TODO
===================================================================
diff -u -r00186f9e5281da9bf5849895d49ba625f54c3654 -r19058dea629d3ea7b8bff6bac8d29587a49010bd
--- TODO	(.../TODO)	(revision 00186f9e5281da9bf5849895d49ba625f54c3654)
+++ TODO	(.../TODO)	(revision 19058dea629d3ea7b8bff6bac8d29587a49010bd)
@@ -5582,6 +5582,12 @@
   retrieved anymore in error message.
 - move dereferencing of members after assertions
 
+- improve robustness of destroy: in case an error happened in a 
+  destroy method in implicit delete operations, a crash was possible,
+  since the state of the object to be delete was somewhat unclear
+  (it might or might not have been deleted). Now, the object 
+  is explicitly kept longer around to allow proper handling).
+
 ========================================================================
 TODO: