Add some tests for cookies.

* Mostly extracted from Opera cookie testsuite.
* Shows one bug with parsing expiration date of cookies in
ExpirationTest.
openssl: security update

Fix for CVE-2014-0224
Fix for CVE-2014-0221
Fix for CVE-2014-0195
Fix for CVE-2014-3470
Fix for CVE-2014-0076
Fix for CVE-2010-5298
HttpAuthentication: Check LockBuffer() success...

... in _H() MD5 digest method. Thanks to axeld
for the suggestion.
TermViewStates: Style fixes
TermViewStates: Check if fView is NULL before using it.
Fix #10902 Terminal crashes setting window size.

Terminal crashes because fView is not connected to App Server when
this is called so calling fView->GetMouse() is not allowed. We could
perhaps check to make sure that fView is connected to App Server by
checking that fView->Window() != NULL, but, a better way to handle this
is to grab the already set fLastClickPoint variable from fView
which eliminates the need to grab the current mouse position again.
Worst case scenario is that fLastClickPoint hasn't been set in which
case Terminal won't find anything to highlight or unhighlight.

Also check to make sure that fView != NULL here for good measure.

Fixes #10902
DiskUsage: Style fixes.
DiskUsage: Open file/folder on cmd-click, zoom on regular click.
Revert "Fix #10902 Terminal crashes setting window size."

This reverts commit 4c8d2387169eb503e9a4a347645dd37c238d1c8a.
Revert "TermViewStates: Check if fView is NULL before using it."

This reverts commit b84955c73892d942d2b53e7a992b63e774e52789.
HttpHeaders: Check assigning self in operator=()
HttpHeaders: Small code refactorings
Also check BList::Add() for success when adding a BHttpHeader.
UrlContext: Improved comment
HttpRequest.h: Fixed some formatting
Add gcc4 ALE package.
CID 1108421: BUrl constructor missing initializers.
Sort cookies by path length (longest first)

* This makes sure the most specific cookies are sent first, matching
what other browsers do.
Better handling of parse errors in HttpTime

strptime can return non-NULL values even if it only parsed part of the
string. This was sometimes making us use the wrong format. Now we try
all formats and checks how much of the string strptime managed to parse.
We stop when it has parsed a big enough part of it.
Fix some issues detected by the testsuite

* An empty "expires" field results in a session cookie, rather than
rejecting the cookie altogether
* A page can set a cookie it is not allowed to access (for example in a
subdirectory of where the page is located). Separate IsValidForUrl and
_CanBeSetFromUrl to perform the appropriate checks in each case.
* Limit cookie path to 4096 characters. As a result of the previous
change, a page would be allowed to set a cookie with an aribrarily long
subpath, wasting disk space and RAM by growing hte cookie jar.
* Don't allow path with . or .. elements. These are a source of
confusion and are not needed.
* Reset the cookie fields when parsing failed. This does not matter when
using the cookie jar, but is useful when working directly with
BNetworkCookie.
Add some more tests for cookies

Also derived from Opera test suite.
* Fix nbsp instead of space in some tests (I shouldn't have copypasted
these...)
* Add most of the advanced tests from Opera. This exposed several bugs
in the cookie code (all fixed) as well as strptime and strtol (tickets
opened)
* All the cookie2 tests are skipped. I didn't find any use of it on the
internets, so it doesn't seem useful to implement it.
* The last two tests sets are still missing. I'll add them next week.