check for dcmap=>hash in metafo/geoip
Fix ev_is_active() checks on timers

If a started one-shot timer fires in the same loop iteration as
another event, but the other event precedes it in execution,
the timer's state can be "pending", but "!active" during the
other event's callback.

There were some bad assumptions that any started timer which
hadn't yet actually executed its callback was "active" sprinkled
around the plugins.  None of them appear to be of significant
consequence, although there's a remote possibility of
connect/write timeout races (data arrives just as timeout expires)
in plugin_http_status and plugin_tcp_connect leading to assert
failures only in debug builds (but no effect in non-debug).
Fix error string leak on geoip 'nets' reload failures
update maxmind FIPS region code database URLs
another str_combine_n application
various logf_pathname() fixups for log outputs
Revert "another str_combine_n application"

This reverts commit ccfb5fa65eace88deec81243319e9b83bea826ad.

(This was applied in the wrong branch!)
Do not call listen() on socks from failed autoscan bind()s

This is mostly harmless, but we end up with a pointless
  listening socket bound to some random client port that we're
  not actually accepting connections on.
fix "make install" directory-creation stuff

This has been broken since it was first implemented in fae09b19
almost a year ago.  I guess the problem has mostly been masked
by distro packaging and/or runtime mkdir stuff, but this at least
gets rid of the pointless "system" directory created by the bug.
Update GeoIP country code list
prevent country/continent-table overflows
Fixup invalid memcmp() semantics on labels/dnames

Technically this doesn't cause real problems, but that's
a combination of typical memcmp/malloc implementation details
and our internal data formats (len byte first), neither of which
may be wholly reliable in some esoteric cases.  With this patch,
we no longer ask memcmp to potentially read uninitialized/invalid
memory in these cases, which gets rid of our only known violations
of strict_memcmp with -faddress-sanitizer.
Remove automake subdir-objects; give libdmn/ its own Makefile.am

This is a partial backport of some work on the 2.x branches, so
that we can remove the subdir-objects option, as it seems to be
causing other problems on some platforms (Issue #69).
update ax_pthread.m4 from autoconf-archive
Fix a couple small memleaks on bad config inputs

Found by the new version of Coverity.
warn about deprecated SPF RRs in 1.x
NEWS + version bump for 1.11.3
Bugfix: use correct TTL values in negative responses

I apparently misread RFC 2308 back when I first implemented
this, and nobody has noticed the bug until now.

For some reason I got it in my head that the resolvers
were supposed to look at the ncache/minimum field of the SOA
record directly for themselves to identify the negative
cache lifetime.  However, the RFC-correct behavior is that
the auth server is responsible for setting the primary TTL
of the SOA record in negative responses to the minimum of
the ncache/minimum field and the actual SOA TTL.
Bugfix: plugin_geoip v4_overlay databases not reloading correctly

One of the timer callbacks involved in reloading the v4_overlay
databases was stopping the wrong timer, and the net result of that
was the update is never applied and the event keeps firing every
5 seconds over and over, issuing a syslog message like this
every time:

plugin_geoip: map 'x': Processing GeoIP database '/x/GeoIP.dat'
plugin_geoip: map 'x': Processing GeoIP database '/x/GeoIP.dat'
plugin_geoip: map 'x': Processing GeoIP database '/x/GeoIP.dat'
...
NEWS update for 1.11.4