doc/3RDPARTY					1.989, 1.991 via patch
external/ibm-public/postfix/dist/HISTORY	patch
external/ibm-public/postfix/dist/makedefs	patch
external/ibm-public/postfix/dist/src/global/dict_ldap.c	patch
external/ibm-public/postfix/dist/src/global/mail_version.h	patch
external/ibm-public/postfix/dist/src/oqmgr/qmgr_message.c	patch
external/ibm-public/postfix/dist/src/postscreen/postscreen_access.c patch
external/ibm-public/postfix/dist/src/util/myaddrinfo.c	patch
external/ibm-public/postfix/dist/src/util/sys_defs.h	patch

	Update Postfix to version 2.8.13. Changes since version 2.8.12:
	- The postscreen_access_list feature failed to ignore case in the first
	  character of a command (e.g., permit, reject, etc.). Reported by
	  Francis Picabia. (This fix is incorrectly listed in the HISTORY
	  files of earlier releases, and will be removed with a future patch.)
	- Strip the datalink suffix (e.g., %eth0) from IPv6 addresses returned
	  by the system getaddrinfo() routine. Such suffixes break the default
	  mynetworks value, the Postfix SMTP server's reverse/forward DNS
	  name/address mapping check, and possibly more.
	- To eliminate the possibility of collisions with connection cache
	  lookup keys, the Postfix LDAP client now computes those lookup keys
	  by joining the number-valued connection properties with ASCII null,
	  just like it already did with the string-valued connection
	  properties.
	- There was a memory leak during one-time TLS library initialization
	  (introduced with Postfix 2.5). Reported by Coverity.
	- There was a memory leak in the unused oqmgr(8) program (introduced
	  with Postfix 2.3). Reported by Coverity.
	[tron, ticket #771]
Pull up following revision(s) (requested by tron in ticket #772):
	lib/librefuse/refuse.c: revision 1.96
FUSE seems to allow short writes without errors but PUFFS doesn't. Work
around this by returning ENOSPC in case of a short write to avoid protocol
errors. This change is based on problem analysis provided by Antti Kantee.
This fixes PR lib/45129 by myself.
Pull up following revision(s) (requested by msaitoh in ticket #774):
	sys/arch/arm/arm/cpufunc.c: revision 1.119
Enable DCache Streaming Switch and Write Allocate.
This change improve system performance significantly.
Pull up following revision(s) (requested by msaitoh in ticket #775):
	sys/dev/marvell/if_mvgbe.c: revision 1.34
Fix a bug that a multicast filter entry is incorrectly overrode
on some cases.
Pull up following revision(s) (requested by rmind in ticket #776):
	usr.sbin/npf/npfctl/npf.conf.5: revision 1.26
	usr.sbin/npf/npfctl/npfctl.c: revision 1.26
	dist/pf/usr.sbin/ftp-proxy/npf.c: revision 1.2
	lib/libnpf/npf.c: revision 1.15
	sys/net/npf/npf_ctl.c: revision 1.20
	lib/libnpf/npf.h: revision 1.12
	lib/libnpf/npf.3: revision 1.6
	lib/libnpf/npf.3: revision 1.7
	usr.sbin/npf/npfctl/npf_build.c: revision 1.17
	sys/net/npf/npf.h: revision 1.24
- Add NPF version check in proplist as well, not only ioctl.  Bump the version.
- Fix a bug in table entry lookup.
- Updates/fixes to the man pages.  Misc.
Remove a superfluous quote and fix a recurring typo.
ftp-proxy: disable NPF bits for now; it will be re-done.
Pull up following revision(s) (requested by mlelstv in ticket #778):
	sys/kern/uipc_syscalls.c: revision 1.157
	sys/kern/uipc_syscalls.c: revision 1.158
If an untraced process sleeps in recvmsg/sendmsg, the syscall does not
allocate an iov structure for ktrace. When tracing is then enabled
and the process wakes up, it crashes the kernel.
Undo the last commit which introduced this error path.
Avoid the mentioned kmem_alloc assertion by adding a sanity check analog
to similar code in sys_generic.c for I/O on file handles instead of
sockets.
This also causes the syscall to return EMSGSIZE if the msg_iovlen member
of the msg structure is less than or equal to 0, as defined in
recvmsg(2)/sendmsg(2).
The sanity check prevented messages that carry only ancillary data.
Tickets 771,772,774-776,778.
Back out part of ticket #777 accidentally committed with ticket #776,
to fix the netbsd-6 build.