getpass: fix password parsing from console

Incorrect password if use backspace while entered the password.

Regression from f7bfdbabf2d5398f4c266eabb0992a04af661f22

The '?:' operator has lower priority than the '-' operator
RELEASE-NOTES: Synced with 5a47062cada9
TFTP: fix crash on time-out

tftp_done() can get called with its TFTP state pointer still being NULL
on an early time-out, which caused a segfault when dereferenced.

Reported-by: Glenn Sheridan
Bug: http://curl.haxx.se/mail/lib-2014-01/0246.html
RELEASE-NOTES: changed encoding to UTF-8 like previous releases
hostip: don't remove DNS entries that are in use

hostcache_timestamp_remove() should remove old *unused* entries from the
host cache, but it never checked whether the entry was actually in
use. This complements commit 030a2b8cb.

Bug: http://curl.haxx.se/bug/view.cgi?id=1327
unit1396: make the test pass the OOM torture tests
unit1304: make the test pass the OOM torture tests
oauth2: Fixed a memory leak in an OOM condition
lib1900: make the test pass the OOM torture tests
tests: make a few lib15?? tests pass the OOM torture tests
RELEASE-NOTES: done for 7.35.0
THANKS: 19 new contributors from the 7.35.0 release notes
bump: start working on 7.35.1
examples: gitignore more binaries
http2: handle 101 responses and switch to HTTP2
http2: switch recv/send functions to http2 ones after 101
nss: do not fail if NSS does not implement a cipher

... that the user does not ask for
nss: do not use the NSS_ENABLE_ECC define

It is not provided by NSS public headers.

Bug: https://bugzilla.redhat.com/1058776
ntlm: Added support for NTLMv2
ntlm: Added cross platform support for writing NTLMv2 timestamp in buffer

Added conversion functions write32_le() and write64_le() to ensure the
NTLMv2 timestamp is always written in little-endian.