Add variant of openssl_pkcs7_verify that ignores cert expiration

Summary: iOS devices enable the user to create a new fb account via the Settings menu. To ensure that the registration request is from a bonafide iOS device the device includes a validation token in the API request - this token is signed by a cert on the device.

The cert has expired and as a result, users creating accounts using the device need to do additional confirmation via email.
This diff adds a variant of openssl_pkcs7_verify that ignores cert expiration during the cert validation process.

Reviewed By: @siyengar

Differential Revision: D1504444
Updated ezpublish-kernel

Summary: Closes https://github.com/facebook/hhvm/pull/3510

Reviewed By: @ptarjan

Differential Revision: D1503428
move writer class for reuse in memory status page

Summary: Move the writer class so that it can be reused for the memory status page. This also have an initial class for the memory status page which will be populated with metrics on in later diffs.

Reviewed By: @edwinsmith

Differential Revision: D1505623
Streamline destructor call

Summary: Using baseless mode, and a memory operand instead of a load
saves two instructions for the table-lookup destructor
call sequence.

Reviewed By: @bertmaher

Differential Revision: D1503998
Compile warning in ipc format

Summary: Cygwin's sysv ipc layer uses a long long int for key_t which makes for noise when compiling
And I hate warnings

Reviewed By: @JoelMarcey

Differential Revision: D1502077
Revert "Merge pull request #3516 from MaideCa/thirdparty_sqlite_386"

This reverts commit eb5a264803fab4e8c974b6fd68522c83fc3ac263, reversing
changes made to 8a9a63d5af72bc37ceb12dea57834c8af41a52a7.
Fix compile error for non tls code branch

Summary: New VASM code has a new template for how emitTLSLoad work
however there is no corresponding template for the non fast-tls branch so the compile is failing

Since there is currently only one call into the new version of emitTLSLoad from emitGCContext
this has the non fast tls branch use the previous call until the new code has working stuff for the non-fast tls branch as well

This is also a fix for github issue #3519

Reviewed By: @edwinsmith

Differential Revision: D1508584
Updated kohana to 3.3.2

Summary: Pass => Skip changes are due to https://github.com/kohana/kohana/issues/47
Closes https://github.com/facebook/hhvm/pull/3531

Reviewed By: @fredemmott

Differential Revision: D1506869
Fixes adding locals from the memoize implementation into the wrapper

Reviewed By: @jano

Differential Revision: D1507287
Static link against libbfd because the ABI is not stable

Summary: Fixes the following issues:
https://github.com/facebook/hhvm/issues/1368
https://github.com/facebook/hhvm/issues/3262
Closes https://github.com/facebook/hhvm/pull/3521

Reviewed By: @ptarjan

Differential Revision: D1506176
Fix upgrade auto-restart with 0 retries

Summary: If you do `hh_client --retries 0`, the first time we'll kill
the server, the second time we'll start it back up, and the third time
will work (if the server is up by that point). We should start the
server in the same pass we kill it in -- that shouldn't count as a
retry.

Reviewed By: @elgenie

Differential Revision: D1507218
Update third-party to include Sqlite revert

See discussion at https://github.com/facebook/hhvm/commit/5bf9f0501304ecbdabcbfb977ca1d51f18372e74