cvs update
missing va_start in packet_disconnect
fix uninitialised variable warnings found by clang/llvm-3,3
fix all -Wsigned-pointer warnings reported by clang/llvm-3.3
this turned out bigger than I expected, after I changed channel ids to be
unsigned...
restore backwards search behaviour for tun_open()
fix if w/empty statement
enforce KERBEROS5 for lib/Makefile, too
missing free; found by leakmalloc
update to CVS 20131027
my comment was in error :)
memleaks found by valgrind
raise SIGSEGV unconditionally on sshbuf corruption

it's unsafe to continue in this case, so don't try.
fix broken sshbuf_set_max_size

a duplicate assignment to rlen messed up what we were intending to do

fix regress failure caused by bad math when doing sshbuf_set_max_size
on a buffer with no data in it
bzero sizeof(*ptr) not sizeof(ptr)

spotted by Ben Hawkes
fix loop direction while searching for tun device

Patch from Matthew Dempsky
explain logic a little better here
short-circuit sshbuf_maybe_pack when buf->off==0
check sshbuf_from return value in sshbuf_fromb

Spotted by Ben Hawkes
check for nul-termination of SOCKS4 username

Spotted by Ben Hawkes
fix exploitable u32 overflow in sshbuf_get_cstring

when len > 2^32-4 it will wrap. Add a new "string too long" error
to report excessive string lengths and add a unit test that would
have caught this.

Spotted by Ivan Fratric