Pull up following revision(s) (requested by rmind in ticket #869):
	sys/kern/sys_generic.c: revision 1.106 via patch

Fix various possible dereferences via uvmspace_free() of non-initialized *vm.
Also, error case might happen before proc_vmspace_getref() (hi <ad>!).
Thanks CID 4551 and 4552. This is serious, pullup will be requested.
OK by <wrstuden>.
Ticket #869.
Pull up following patches (requested by xtraeme in ticket #809)

	share/man/man4/options.4		patch
	sys/arch/i386/conf/files.i386		patch
	sys/arch/i386/i386/est.c		delete
	sys/arch/i386/i386/identcpu.c		patch
	sys/arch/i386/include/cpu.h		patch
	sys/arch/x86/conf/files.x86		patch
	sys/arch/x86/include/cpuvar.h		patch
	sys/arch/x86/x86/est.c			new file
	sys/arch/x86/x86/intel_busclock.c	new file
	sys/arch/amd64/amd64/identcpu.c		patch
	sys/arch/amd64/conf/GENERIC		patch

 Add support for the VIA C7-M and Eden processors in the Enhanced
 Speedstep driver.
 amd64: The Enhanced Speedstep driver is now able to work on EM64T
 CPUs running in 64bit mode.
ticket #809
Pull up following revision(s) (requested by bouyer in ticket #882):
	sys/dev/ic/ahcisata_core.c: revision 1.5
	sys/dev/ic/ahcisatareg.h: revision 1.2

Fix various error handling bugs:
- the value of the ATA error register would be computed wrongly, leading to
  bogus error values reported to wd(4)
- the channel would not always be restarted after an error, so the next
  command would not be handled by the controller
- a timeout condition would not be properly reported to wd(4), leading
  to a short transfer instead of a reset/retry
these bugs would cause a AHCI SATA channel to be stalled (no more command
processed) after a "ID not found" or "Aborted command" error reported by the
drive.
Ticket #882.
Pull up following revision(s) (requested by degroote in ticket #881):
	sys/netinet/ip_input.c: revision 1.253
	sys/netinet6/ip6_input.c: revision 1.110

In some FAST_IPSEC, spl level is not restored correctly. Fix that.
Spotted by Wolfgang Stukenbrock in pr/36800
Ticket #881.
Pull up following revision(s) (requested by martti in ticket #879):
	sys/dist/ipf/netinet/fil.c: revision 1.41

Fixed IPF bug #1794544
   keep frags does not work with IPv6
Ticket #879.
Pull up following revision(s) (requested by martti in ticket #880):
	sys/dist/ipf/netinet/ip_state.c: revision 1.28
	sys/dist/ipf/netinet/ip_nat.c: revision 1.32
	sys/dist/ipf/netinet/ip_nat.h: revision 1.12
	sys/dist/ipf/netinet/ip_state.h: revision 1.10

Fixed IPF bug #1774745
   retransmitted ACK may initiate connection state transition
Ticket #880.
Pullup rev. 1.28 (requested by jun in ticket #878):

 NetBSD/hpcmips couldn't make iso-image.
ticket #878
Pull up following revision(s) (requested by martin in ticket #884):
	distrib/notes/sparc64/install: revision 1.27
Add a warning that booting the install kernel from a Solaris root partition
may fail for non obvious reasons. Fixes for the bootloader will not be
available in-time for 4.0, unfortunately.
ticket #884
ticket #885
Pull up following revision(s) (requested by adrianp in ticket #883):
	etc/defaults/security.conf: revision 1.20
	etc/security: revision 1.104
The location of the pkg_info binary can now be specified in
/etc/security.conf.
The default remains as /usr/sbin/pkg_info.  This should fix PR# 36746.
ticket 883
Pull up following revision(s) (requested by uwe in ticket #902):
	sys/arch/landisk/dev/obio.c: revision 1.2

Pass correct size in CFATTACH_DECL (obio_softc, not device).

I have no idea how/why it's been working all this time, but I guess
today's changes to struct device shifted delicate numerology balance
and exposed the problem that's been around since the import.