Avoid a buffer overflow that can be triggered by sending specially crafted
DTLS fragments.

Fix for CVE-2014-0195, from OpenSSL.

Reported to OpenSSL by Juri Aedla.

ok deraadt@ beck@
Ensure that sess_cert is not NULL before trying to use it.

Fixes CVE-2014-3470, from OpenSSL.

ok deraadt@
Do not recurse when a 'Hello Request' message is received while getting
DTLS fragments. A stream of 'Hello Request' messages will result in
infinite recursion, eventually crashing the DTLS client or server.

Fixes CVE-2014-0221, from OpenSSL.

Reported to OpenSSL by Imre Rad.
Remove conditional pipeline rewind on 88100, introduced in 1.19 - this seems
to create subtle problems, and removing it does not prevent existing signal
delivery tests from having the correct behaviour. And this is likely redundant
with DAE processing in sigreturn.

We should probably rewind if XIP_V is not set, but does this ever happen
in real life? To be investigated on a rainy day.

This seems to fix spurious signals encountered building libstdc++ and perl.
Reset properly when c0-change-trigger is increased from zero so panes
don't get stuck.
fix inverted test that caused PKCS#11 keys that were explicitly listed
not to be preferred. Reported by Dirk-Willem van Gulik
Properly track switching G0 and G1 modes between US-ASCII and VT100 line
drawing rather than just treating them as SO and SI.
when relying on the local enqueuer, fix an issue with long To and Cc lines
that can lead to broken headers and confuse some MUA

issue spotted by tedu@
replace sendmail with smtpd in a comment

reported by Scott McEachern <scott@blackstaff.ca>
ok deraadt@ and todd@
Update description of optional argument "datalen" to reality.
Issue pointed out by, tweak and "looks ok" jmc@
s/assember/assembler/ before someone gets offended.  At the last
hackathon, just saying 'ass ember' was enough to start giggles.
Unfortunately far more offensive stuff remains in here...
Allocate the struct itty array in ttystats_init() with M_ZERO.

ok millert
Fix modf() on sparc

For large integral values, modf returned uninitialized data in iptr since 1992.
Found while debugging python segfaults.

ok miod
Add basic regression test for modf() issue.

encouraged by deraadt and miod
Clint Pachl points out "authtable" is optional;
g/c unused IFT_L2VLAN, ok reyk bluhm
the #define stays since it's userland visible and who knows what uses it
Document bwi(4) interrupt error flags by using named constants
instead of magic numbers. Constants found in Linux brcmsmac.
ok claudio@
Modify to ANSI-style function declarations.  No binary change.
In run(4), fix TXWI and RXWI offset calculations for RT5592 devices.
Makes RT5592 devices work, except for an 11a scanning issue, according
to Brendan MacDonell who submitted this patch on tech@. Thanks!
ok claudio@
More KNF.