drain the log messages after receiving the keystate from the unpriv
child. otherwise it might block while sending. ok djm@
add encrypt-then-mac (EtM) modes to openssh by defining new mac algorithms
that change the packet format and compute the MAC over the encrypted
message (including the packet size) instead of the plaintext data;
these EtM modes are considered more secure and used by default.
feedback and ok djm@
add etm modes
test the integrity of the packets; with djm@
fix typo, s/tem/etm in hmac-ripemd160-tem. ok markus@
add hmac-ripemd160-etm@openssh.com
include commented RCD ID - it helps our tools to sync with portable OpenSSH
Don't print zero length matches in -o mode.  Found by otto@ who
initially proposed a different fix.  OK otto@
document RES_USE_DNSSEC; text tweaked by sthen
ok jakob
Add a regression test for the bug millert@ fixed previously.

OK millert@
Add the test output.  No cookie for me.
reset incoming_packet buffer for each new packet in EtM-case, too;
this happens if packets are parsed only parially (e.g. ignore
messages sent when su/sudo turn off echo); noted by sthen/millert
use OpenSSL's EVP_aes_{128,192,256}_ctr() API and remove our hand-rolled
counter mode code; ok djm@
Rearrange the code a bit to prevent splx() from being called with an
uninitialized variable.  Found by Owain G. Ainsworth, ok guenther
Previous commit introduced a bug; only return early from m88k_layout_frame()
if reload_completed; INITIAL_ELIMINATION_OFFSET() invokes it (which is very
likely a source for more bugs, to be investigated)
properly handle the case where a process has disappeared in between grep'ing
and printing it

discussed with and ok millert@
pipex_init can be called multiple times (by whatever subsystems want to use
it), so return early if the work has already been done.

ok yasuoka@ jmatthew@
iMac G3 grahic cards have a ``misc'' pci subclass that's why they weren't
attached to vgafb(4) since the use of the generic DEVICE_IS_VGA_PCI macro
in r1.26. Correct this and document why we should attach devices with such
subclass.

Fix a regression introduced in august when adding the glue to attach drm(4)
on macppc, reported by brynet@ and nick@ on bugs@, thanks and sorry for the
delay!
Change load_cfg to fix a crash reported by jasper.
oops, debug printf sneaked in. i must be out of practice.

spotted by krw@, poked by jmatthew@