use new "ssh -Q cipher-auth" query to obtain lists of authenticated
encryption ciphers instead of specifying them manually; ensures that
the new chacha20poly1305@openssh.com mode is tested;

ok markus@ and naddy@ as part of the diff to add
chacha20poly1305@openssh.com
no need for .Pp before displays;
use -Wmissing-prototypes
correctly handle EAGAIN and closed pipe in msgbuf_write()
fail if lka can't load cert file
correctly set verify flag on the listener
Replace the last usage of IA_SIN() and kill this macro.

ok henning@, sthen@, mikeb@, deraadt@
Change /dev/drm* permissions to 0600.

ok deraadt@, naddy@, ajacoutot@
regen
security update to nginx 1.4.4 which fixes CVE-2013-4547
Revert r1.41, in this driver sc_attached does not indicate that the
driver is not yet attached, it is here to prevent the driver to free
unitialized structures in case something wrong happened during the
the initialization...

Found the hard way and ok giovanni@
Initial support for the integrated Lynx Point and Lynx Point LP Ethernet
with external i217 and i218 PHYs.
Requires a changed way of detecting the eeprom flash bank from FreeBSD
as suggested by Masanobu SAITOH.  Thanks to everyone who tested.
add unsigned char casts for specific calls to ctype.h macros.
ok guenther step
Remove unneeded include.

ok deraadt@
hide a bunch of structures (namely arpcom, llinfo_arp, ethernet
multicast macros and in_ifaddr) that reference ifnet in some way;
looked over by deraadt, ok mpi
Change a bunch of daddr_t variables that don't (obviously) contain
512-byte-block information to int64_t, the underlying type of
daddr_t at the moment. No change to .o files. Removal of now
unneeded (long long) casts is next.
Don't cast int64_t variables to (long long) when using %lld.
Cast daddr_t variable to (long long) even for %llx!
Make the bit string unsigned char * in printb() and printb_status().
In practice we shouldn't have chars > 127 in these but it is better
not to assume this.  OK deraadt@
split kernel parts of the if.h into a separate header file if_var.h
which allows us to modify ifnet structure in a relatively safe way;
discussed with deraadt, ok mpi