determine and use maximum file size instead of magical constants

ok guenther
i'm a dumbdumb. fix build.
Fix invocation of _OSC.  We were passing the capabilities in the wrong DWORD
and specifyig the wrong DWORD count.  Moreover we should not evaluate _PDC
if _OSC is present.  Might not be perfect yet, but what we had previously
was uterrly and totally wrong.

ok guenther@
Remove redundant check and wrong fix: fat.c checks already take care
about cluster chains.  If the user didn't want to fix them at that time,
he asks for trouble -- and these checks didn't help in all cases either.

discussed with and ok krw@
reboot(9): Add MI reboot entry function

Now, for kernel to "reboot" (reboot, halt, or shutdown), MD boot(9) is called
in some places.  This change introduces a new MI function reboot(9) which is
simply a wrapper to call MD boot(9).

OK kettenis@ deraadt@
Fix copy for CCM, GCM and XTS.

Internal pointers in CCM, GCM and XTS contexts should either be
NULL or set to point to the appropriate key schedule. This needs
to be adjusted when copying contexts.

OpenSSL PR #3272 with further fixes, from OpenSSL trunk
missing prototypes
OK tedu@ but don't ask him questions about mrouted, ever
Use the correct type, found by naddy@.
In ASN1_get_object(), reject primitive encodings using the indefinite length
constructed form. OpenSSL PR #2438 via OpenSSL trunk
Make this file parsable by pod2man without errors.
ok bcook@
Also make these files parsable by pod2man..
ok bcook@
Apparently better fix for OpenSSL PR #3397 (Joyent bug #7704), from OpenSSL
trunk
move IPv6 prefix adding from workq to taskq; as a happy benefit, we
can delete 2 dozen or so lines that check to see if we've queued
up a prefix addition multiple times.

ok stsp@
split ext2fs_read for the upcoming ext4 extent bits, like FreeBSD has done

ok guenther
it has been 4888 days since the transient feature to define short macros
for apps that haven't had time to make the appropriate changes was added.
time's up.
fix dacl->size_hi header change
In ssl3_get_cert_verify(), allow for larger messages to accomodate keys
larger than 4096-bit RSA which the most paranoid of us are using; OpenSSL
PR #319 via OpenSSL trunk.
In RSA_eay_private_encrypt(), correctly return the smaller BN; OpenSSL
PR #3418 via OpenSSL trunk
in_proto_cksum_out: zero the icmp cksum before going on so that we do not
require the caller to do so. lteo needs that for divert soon, and is in line
with tcp/udp and the general approach that the rest of the stack should not
need to do anything regarding the cksums but setting the "needs it" flag.
ok lteo
use optval for setsockopt consistently
OK benno@