Add variant of openssl_pkcs7_verify that ignores cert expiration

Summary: iOS devices enable the user to create a new fb account via the Settings menu. To ensure that the registration request is from a bonafide iOS device the device includes a validation token in the API request - this token is signed by a cert on the device.

The cert has expired and as a result, users creating accounts using the device need to do additional confirmation via email.
This diff adds a variant of openssl_pkcs7_verify that ignores cert expiration during the cert validation process.

Reviewed By: @siyengar

Differential Revision: D1504444
Updated ezpublish-kernel

Summary: Closes https://github.com/facebook/hhvm/pull/3510

Reviewed By: @ptarjan

Differential Revision: D1503428
move writer class for reuse in memory status page

Summary: Move the writer class so that it can be reused for the memory status page. This also have an initial class for the memory status page which will be populated with metrics on in later diffs.

Reviewed By: @edwinsmith

Differential Revision: D1505623
Streamline destructor call

Summary: Using baseless mode, and a memory operand instead of a load
saves two instructions for the table-lookup destructor
call sequence.

Reviewed By: @bertmaher

Differential Revision: D1503998
Compile warning in ipc format

Summary: Cygwin's sysv ipc layer uses a long long int for key_t which makes for noise when compiling
And I hate warnings

Reviewed By: @JoelMarcey

Differential Revision: D1502077
Revert "Merge pull request #3516 from MaideCa/thirdparty_sqlite_386"

This reverts commit eb5a264803fab4e8c974b6fd68522c83fc3ac263, reversing
changes made to 8a9a63d5af72bc37ceb12dea57834c8af41a52a7.
Fix compile error for non tls code branch

Summary: New VASM code has a new template for how emitTLSLoad work
however there is no corresponding template for the non fast-tls branch so the compile is failing

Since there is currently only one call into the new version of emitTLSLoad from emitGCContext
this has the non fast tls branch use the previous call until the new code has working stuff for the non-fast tls branch as well

This is also a fix for github issue #3519

Reviewed By: @edwinsmith

Differential Revision: D1508584
Updated kohana to 3.3.2

Summary: Pass => Skip changes are due to https://github.com/kohana/kohana/issues/47
Closes https://github.com/facebook/hhvm/pull/3531

Reviewed By: @fredemmott

Differential Revision: D1506869
Fixes adding locals from the memoize implementation into the wrapper

Reviewed By: @jano

Differential Revision: D1507287
Static link against libbfd because the ABI is not stable

Summary: Fixes the following issues:
https://github.com/facebook/hhvm/issues/1368
https://github.com/facebook/hhvm/issues/3262
Closes https://github.com/facebook/hhvm/pull/3521

Reviewed By: @ptarjan

Differential Revision: D1506176
Fix upgrade auto-restart with 0 retries

Summary: If you do `hh_client --retries 0`, the first time we'll kill
the server, the second time we'll start it back up, and the third time
will work (if the server is up by that point). We should start the
server in the same pass we kill it in -- that shouldn't count as a
retry.

Reviewed By: @elgenie

Differential Revision: D1507218
Update third-party to include Sqlite revert

See discussion at https://github.com/facebook/hhvm/commit/5bf9f0501304ecbdabcbfb977ca1d51f18372e74
Revert "Dump the unit in assert in refineType"

Summary: This reverts commit 359d2fbbeb873bf0f014d745316748f04bb47a51.

Pretty sure this is just breaking stacktraces for the existing crash.

Reviewed By: @ptarjan

Differential Revision: D1509702
Manpage for hh_client

Summary: Debian wants this. `hh_server` and friends to come.

Reviewed By: @elgenie, @JoelMarcey

Differential Revision: D1506481
Fix crash when cloning collection iterators

Summary: HHVM would crash when cloning collection iterators because it didn't have
the proper logic to initialize the native fields in c_VectorIterator,
c_MapIterator, etc.

This diff fixes HHVM to properly implement cloning for collection
iterator objects.

Reviewed By: @bertmaher, @elgenie

Differential Revision: D1505417
Joomla Test Updates

Summary: Closes https://github.com/facebook/hhvm/pull/3530

Reviewed By: @ptarjan

Differential Revision: D1506217
implement VASM emitTLSLoad for non-fast TLS

Summary: emitGetGContext unconditionally calls into emitTLSLoad(..., ..., Vreg)
which didn't previously exist when fast-TLS was unavailable.
Closes https://github.com/facebook/hhvm/pull/3537

Reviewed By: @edwinsmith

Differential Revision: D1509101
Fix kernel version detection for x.y kernels

Summary: Some version of debian is shipping 3.14-1.

Fixes #3513

Reviewed By: @ptarjan

Differential Revision: D1503114
Fix Freetype to look for ft2build.h first

In the previous configuration, it would find freetype2 for me, but then fail to #include freetype.h through the macro header include.  In this configuration, it finds ft2build.h goes along happily.
Update GDFT for Facebook vs OSS