RSA blinding: check highly unlikely cases
Introduced POLARSSL_HAVE_READDIR_R for systems without it
Convert SOCKET to int to prevent compiler warnings under MSVC.

From kernel objects at msdn:
    Kernel object handles are process specific. That is, a process must either create the object or open an existing object to obtain a kernel object handle. The per-process limit on kernel handles is 2^24.

Windows Internals by Russinovich and Solomon as well says that the high bits are zero.
Forced cast to prevent MSVC compiler warning
Make get_pkcs_padding() constant-time
Minor change that makes life easier for static analyzers / compilers
Check HMAC in constant-time in crypt_and_hash
Make all hash checking in programs constant-time
Safer buffer comparisons in the SSL modules
Makefile now produces a .so.X with SOVERSION in it
bump_version script also handled SOVERSION for library/Makefile
Fixed X.509 hostname comparison (with non-regular characters)
SSL now gracefully handles missing RNG
Clarify comments of mpi_mul_int()
crypt_and_hash: check MAC earlier
Renamed test_offset to prevent clash with one in ctr_drbg.c
Removed Windows auto-spawn client code
RSA-OAEP decrypt: reorganise code
Check OAEP padding in a more constant-time way
Check PKCS 1.5 padding in a more constant-time way

(Avoid branches that depend on secret data.)