Use the correct rf revision number for AR2425 radios. When read from
hardware the revision is zero. Linux also hardcodes this value.
ok reyk
Replace the protocol directives for HTTP with a new generic filtering
language.  The grammar is inspired by pf and allows to write versatile
last-matching filter rules in protocol sections starting with the
"pass", "block" or "match" keywords.  This work was started almost two
years ago and replaces large parts of relayd(8)'s HTTP and filtering
code.  The initial version reimplements and extends HTTP filtering,
but will be improved to support generic TCP and other protocols later.

With some testing, feedback, and help from benno@ and andre@.

OK benno@
Update the default relayd.conf with the new filtering grammar.

OK benno@
Update and extend the regress tests to use the new grammar of the
filtering rules.  Some of the filenames are based on the old grammar,
we keep them for now and just update the contents to have a
before/after comparison of the features.

Most of the work was done by Andre de Oliveira (andre@)

OK bluhm@ benno@
Replace memset(a, 0, ...); free(a); by explicit_bzero(a, ...); free(a); in
fear a smartass-optimizing compiler decides memset is useless immediately
before free().

ok jsing@ deraadt@ tedu@
changes to improve portability

ok beck@ deraadt@ jsing@ guenther@
Clean up after arc4random u_int32_t uint32_t change
ok jsing@
{malloc,reallocarray} + memset(,0,) -> calloc
ok tedu@
The "tag" keyword in redirections has been renamed to "pftag".
rephrase the stpcpy() warning
new wording agreed by at least kettenis@ millert@ otto@
Unifdef -UPKCS_TESTVECT - we don't want the random data used in OAEP padding
to get overwritten by a known value, ever.
oops, stripped a / too many
Remove mention that the PRNG needs to be seeded before invoking some
functions.
Sync x11/gnome with reality.
Update to match the current state of crypto/rand, and remove MLINKS for
RAND_event and RAND_screen.
sort out the MLINKS mess, and tweak previous a bit;
Better workaround for OS X sigaltstack() bug

OS X's sigaltstack() fails with ENOMEM if ss_size < MINSIGSTKSZ even
if SS_DISABLE is specified in ss_flags.  Rather than add code to try
to cope with this stupidity, just don't bother restoring the original
signal stack.
autoconf(9) is your friend and it knows you more than you think.  It
even knows your children!  So let him handle the seperation correctly.

Do not rewrite your own custom config_detach_children(9) and as a bonus
start removing the usbd_port tentacles from the stack.

ok pirofti@, yuo@, miod@, deraadt@
Minor cleanups

Rename _waitpid() to safewaitpid() to avoid POSIX reserved identifier
namespace.

KNF nit: return value expressions should be surrounded by parentheses,
per style(9).

Ensure SIGCHLD is set to SIG_DFL, not SIG_IGN.  POSIX allows (and
requires under XSI) that terminated child processes not leave zombies
if SIGCHLD is set to SIG_IGN, and it also allows execve() to leave
SIGCHLD set to SIG_IGN.