Merge from stable/10, r259741:

vga_pci: Improve boot display detection

The previous code was checking the "VGA Enable" bit on the video card's
parent PCI-to-PCI bridge only. This didn't work for the case where the
video card is attached to the root PCI bus (ie. the card has no parent
PCI-to-PCI bridge).

Now, the new code:
    1. checks the "VGA Enable" bit on the parent bridge only if it's a
       PCI-to-PCI bridge;
    2. always checks the "I/O" and "Memory address space decoding" bits
       on the video card itself.

However, vendor-specific bits are not used.

This fixes the use of many integrated Radeon cards: without this patch,
we fail to detect them as the boot display and, when radeonkms looks for
the Video BIOS, it skips the shadow copy made by the System BIOS. It
then fails to fully initialize the card, because the shadow copy is the
only way to read the Video BIOS in these situations. A workaround was to
force the boot display selection using the "hw.pci.default_vgapci_unit"
tunable.

A previous version of this patch added a new function doing the checks.
Now, the vga_pci_is_boot_display() function is used to perform the
checks (only until the boot display is found) and return if the given
device is the boot display or not.

Furthermore, vga_pci_attach() logs "Boot video device" if the card being
attached it the Chosen One:
    vgapci0: <VGA-compatible display> [...]
    vgapci0: Boot video device

Reviewed by:	kib@, jhb@ (both a previous version)
Tested by:	lunatic_ (#freebsd-xorg, integrated Radeon card,
		xmj (#freebsd-xorg, i915+NVIDIA cards)
Approved by:	re (gjb)
Merge from stable/10, r259742:

drm/ttm, drm/radeon: Replace EINTR/ERESTART by ERESTARTSYS...

... for msleep/cv_*wait() return values, where wait_event*() is used
on Linux. ERESTARTSYS is the return code expected by callers when the
operation was interrupted.

For instance, this is the case of radeon_cs_ioctl() (radeon_cs.c): if
an error occurs, and the code isn't ERESTARTSYS (eg. EINTR), it logs an
error.

Note that ERESTARTSYS is defined as ERESTART, but this keeps callers'
code close to Linux.

Submitted by:	avg@ (previous version)
Approved by:	re (gjb)
Merge from stable/10, r259745:

drm: Lower priority of "EDID checksum is invalid" message

The priority goes from "error" to "debug".

Connectors are polled every 10 seconds. Reading EDID is part of this
polling. However, when an invalid EDID is returned, this error message
is logged. When using Newcons for instance, having a kernel message
every 10 seconds is getting annoying.

Now that it's a debug message, it'll be logged only if hw.dri.debug is
enabled. This fix console spamming for some users.

Tested by:	Larry Rosenman <ler@lerctr.org>
Approved by:	re (gjb)
Revert one line from r248885, which uncovered several bugs in processing
interaction between ksocket_incoming2() and soreceive().

This is direct commit to releng/10.0. A conservative solution for releng
branch. Proper fix in head is r259681.

PR:		184601
Sponsored by:	Nginx, Inc.
Approved by:	re (gjb)
MFS r249447:
  Apply patch from upstream Heimdal for encoding fix

  RFC 4402 specifies the implementation of the gss_pseudo_random()
  function for the krb5 mechanism (and the C bindings therein).
  The implementation uses a PRF+ function that concatenates the output
  of individual krb5 pseudo-random operations produced with a counter
  and seed.  The original implementation of this function in Heimdal
  incorrectly encoded the counter as a little-endian integer, but the
  RFC specifies the counter encoding as big-endian.  The implementation
  initializes the counter to zero, so the first block of output (16 octets,
  for the modern AES enctypes 17 and 18) is unchanged.  (RFC 4402 specifies
  that the counter should begin at 1, but both existing implementations
  begin with zero and it looks like the standard will be re-issued, with
  test vectors, to begin at zero.)

  This is upstream's commit f85652af868e64811f2b32b815d4198e7f9017f6,
  from 13 October, 2013:
  % Fix krb5's gss_pseudo_random() (n is big-endian)
  %
  % The first enctype RFC3961 prf output length's bytes are correct because
  % the little- and big-endian representations of unsigned zero are the
  % same.  The second block of output was wrong because the counter was not
  % being encoded as big-endian.
  %
  % This change could break applications.  But those applications would not
  % have been interoperating with other implementations anyways (in
  % particular: MIT's).

Approved by:	re (gjb)
Update releng/10.0 to -RC3 as part of the 10.0-RELEASE cycle.

Approved by:	re (implicit)
Sponsored by:	The FreeBSD Foundation
MFstable10 r259277, r259494, r259577, r259768, r259783:

r259277 (rodrigc):
   Mention BIND removal in release notes.

r259494 (rodrigc):
  Add OFED and Mellanox items to release notes.
  Add release note items from Chelsio.

r259577 (rodrigc):
  Add SVN revision numbers for Mellanox updates.
  Add SVN revision numbers for Chelsio updates.
  Indent.

r259768 (rodrigc):
  Merge release note updates.

r259783 (rodrigc):
  Mention jemalloc upgrade to 3.4.0

Approved by:	re (implicit)
Sponsored by:	The FreeBSD Foundation
MFstable10 r259788, r259789:

r259788:
  Update FreeBSD version entity values.

r259789:
  Switch references from -CURRENT to -STABLE.

Approved by:	re (implicit)
Sponsored by:	The FreeBSD Foundation
Update release.url from snapshots/ to releases/.

Approved by:	re (implicit)
Sponsored by:	The FreeBSD Foundation
Add a note that the latest version of the release notes will exist
on the website.

Approved by:	re (implicit)
Sponsored by:	The FreeBSD Foundation
Specify there are no security advisories.
Comment the 'doc' and 'rc-scripts' sections.

This is done to silence tidy(1) when cleaning up
the generated html.

Approved by:	re (implicit)
Sponsored by:	The FreeBSD Foundation
Add list of rc(8) scripts added/removed in 10.0-RELEASE.

Approved by:	re (implicit)
Sponsored by:	The FreeBSD Foundation
Fix an undo error that crept in during formatting changes.

Approved by:	re (implicit)
Sponsored by:	The FreeBSD Foundation
Add the installation article, copied from releng/9.2,
modified for releng/10.0/.

It is not yet linked to the build.

Approved by:	re (implicit)
Sponsored by:	The FreeBSD Foundation
Fix a typo in an XML element, incorrectly updated for docbook 5.0

Approved by:	re (implicit)
Sponsored by:	The FreeBSD Foundation
Link the installation article to the build.

Approved by:	re (implicit)
Sponsored by:	The FreeBSD Foundation
MFstable10 r259809 (rodrigc):
  Add pointer to wiki for Hyper-V information.

Approved by:	re (implicit)
Sponsored by:	The FreeBSD Foundation
MF10 r259974 (MFC r259973):

Tighten default restrictions for ntpd(8) server and provide a link
to NTP access restriction documentation.

Approved by:	re (gjb)