fairly obvious reallocarray() conversion
sync
Use rtfree() instead of RTFREE(), NULLify some free'd route pointers and
kill the macro.

ok mikeb@, henning@
Don't check for an empty list of interfaces.  This is never true even if
you don't have a physical interface on your machine, so why rawip should
be more clever^Wparanoid than the others?

ok henning@, mikeb@
RTFREE() is no more.
Document that lo0 must be present on your system by panic(9)ing if we
cannot create it.

Suggested by and ok claudio@
Bump libressl version string to 2.1.

This makes 'openssl version' print a string that matches the -portable
release number.  Thanks to @blakkeim for pointing it out.

The version integer is left alone, with the idea of discouraging software from
relying on magic numbers for detecting features. Software configuration should
do explicit feature tests instead.

ok beck@, deraadt@
rely on reallocarray() to give us the overflow detection, rather than
hand-crafting a solution.
ok millert
obvious use of reallocarray()
Do not skip saving callee-saved registers in trap frames if compiling without
option DDB; some parts of trap() depend upon the whole frame being
populated (especially when running on PCXS processors).
ok kettenis@
even if a table has zero columns, do not segfault in the formatter;
bug reported by bentley@
seems like a good time to make the ressl default TLSv1 only.
ok guenther
create a REALLOCARRAY macro, and use it where it gives us overflow
protection for free
ok guenther
Apply reallocarray() idiom.
ok guenther
fix memory leak in error path
Add a new ls_rcscripts() function to properly get all rc.d(8) scripts
ignoring irrelevant stuffs under /etc/rc.d.

reworked based on a submission from Craig R. Skinner
ok schwarze@
add a (high) limit to the number of header lines we're willing to keep in
memory for rewriting purposes, this will prevent sessions from sending an
insanely large number of continuations to a single header and starve us.
when From, To and Cc headers present users without domains, append the
listener hostname to avoid smtpd relaying a header that will be rewritten
by the destination MX.

ok eric@
use reallocarray()
Disable SSLv3 by default.

OK sthen@ jsing@