improve error checking. set error code on error, and check malloc return.
add missing unlock in one case. ok lteo miod
check stack push return and make some effort to clean up. ok beck miod
convert CRYPTO_memcmp to timingsafe_memcmp based on current policy favoring
libc interfaces over libcrypto interfaces. for now we also prefer
timingsafe_memcmp over timingsafe_bcmp, even when the latter is acceptable.
ok beck deraadt matthew miod
Fix incorrect bounds check in amd64 assembly version of bn_mul_mont();
noticed and fix by Fedor Indutny of Joyent
( https://github.com/joyent/node/issues/7704 )
Remove OPENSSL_instrument_halt and OPENSSL_far_spin, which both might
have been used under DJGPP in the previous century (if at all).
wrap getenv OPENSSL_ALLOW_PROXY_CERTS in an issetugid check, to protect
setuid applications from being fooled.
ok miod
Remove the OPENSSL_*cap getenv's.  A program should not be able to
change the behaviour of the library in such a complicated fashion.
ok miod
Fix memory leak in error path.

OK from miod@
KNF
KNF
More KNF.
More KNF and clean up.
Pull out the sequence number selection and handle this up front. Also, the
correct record is already known, so avoid reassignment.
Switch to the ISC licensed versions of these files, which Google has made
available via boringssl.

ok deraadt@
Specify the correct strength bits for 3DES cipher suites.

From OpenSSL.

ok miod@
Pull the code that builds a DTLS sequence number out into its own function
to avoid duplication. Also use fewer magic numbers.

ok miod@
always compare memcmp against 0, for clarity.
More KNF.
KNF.
KNF.