(booting, constraint(s) defined) set the time but only if the clock
should be moved forward by more than a minute, based on ntp replies
that satisfied the constraints. Tested by many; ok deraadt@

on 32bit platforms which cause incorrect results when adding a block
>=512M in size.  sha1 patch from ante84 at gmail.com via openssh github,
sha2 with djm@, ok tedu@

_csu_finish() to _libc_preinit(), which is an .init_array function
in shared libc (and mark it INITFIRST) or a .preinit_array function
in static libc, grabbing the _dl_cb callback there from ld.so.  Then
in _csu_finish(), invoke the dl_clean_boot() callback to free ld.so's
startup bits before main() gets control.
Other cleanups this permits:
- move various startup structures into .data.rel.ro
- the dl* stubs in libc can be strong and call the callbacks provided
via _dl_cb
- no longer need to conditionalize dlctl() calls on presence of _DYNAMIC
original concept and full diff ok kettenis@
ok deraadt@

Problem noticed by bluhm@. Discussed on hackers.
ok claudio@

an absolute value and fix poll loop to first generate messages and
then compute poll flags the write cases. This makes the timeout
workaround for constraints unneeded.  ok reyk@ tb@

checks userland-parsing vs kernel parsing, we are hoping to spot another
bug..

with once the clock is synced. ok deraadt@ florian@

calling it until those are fixed.

For now, this also still uses the existing realpath implmentation
and emits a syslog if we see differening results. Once we have run
with that for a little while we will remove the old code
ok deraadt@

Will get us rid of pointless patches in the ports tree.  ok guenther@

If the time is wrong, we cannot validate dnssec, leading to failed
DNS lookups, so we cannot adjust or set the time.  Work around this
by repeating a failed DNS lookup with a lookup with the DC (check
disabled) bit set. ok florian@

Fixes malloc_conceal...freezero with malloc options C and/or G.

ok jmc@, schwarze@

triggered by a question from Jan Stary <hans at stare dot cz> on misc@;
OK otto@

and remove the lie that these functions would set errno;
tweaks and OK jmc@; OK rob@ on the previous version

Discussed with schwarze and jmc. ok schwarze

i.e. those other than LC_CTYPE, into the CAVEATS section, and
standardize wording somewhat.
OK jmc@

OK rob@

Discussed with and ok jmc@, schwarze@, claudio@

ok claudio@

ok claudio@

Discussed with claudio@ and tedu@.

switched to using a local control socket by default.
OK florian@ sthen@

boolean has a contents length other than 1.
ok claudio@

"sure" claudio@

which is reserved for future use.
ok claudio@

on ttyC0.  While here add drm0 to loongson and add the complete set of
wscons and drm devices to arm64.
ok kettenis@

snmpctl. Separate copies of ber.[ch] have existed and been maintained in sync
in ldap, ldapd, ypldap and snmpd.
This commit moves the BER API into /usr/lib/libutil. All current consumers
already link libutil. ldapd and snmpd regress passes, and release builds.
With help from tb@ and guenther@.
ok deraadt@, tb@

ok kettenis

ok deraadt@

counterparts but return memory in pages marked MAP_CONCEAL and on
free() freezero() is actually called.

- put functions and data which are only used before calling the executable's
start function into their own page-aligned segments for unmapping
(only done on amd64, arm64, armv7, powerpc, and sparc64 so far)
- pass .init_array and .preinit_array functions an addition argument which
is a callback to get a structure which includes a function that frees
the boot text and data
- sometimes delay doing RELRO processing: for a shared-object marked
DF_1_INITFIRST do it after the object's .init_array, for the executable
do it after the .preinit_array
- improve test-ld.so to link against libpthread and trigger its initialization
late
libc changes to use this will come later
ok kettenis@

input file or MAKEDEV script itself; sync up the input file. req by jmc@

running a ports bulk without bumping anything else
(matches what's on amd64.ports and exopi)
ok sthen@ phessler@ espie@ naddy@

reported by Fabio Scotoni <fabio at esse dot ch>;
also garbage collect one .Tn while here