triggered by a question from Jan Stary <hans at stare dot cz> on misc@;
OK otto@

and remove the lie that these functions would set errno;
tweaks and OK jmc@; OK rob@ on the previous version

Discussed with schwarze and jmc. ok schwarze

i.e. those other than LC_CTYPE, into the CAVEATS section, and
standardize wording somewhat.
OK jmc@

OK rob@

Discussed with and ok jmc@, schwarze@, claudio@

ok claudio@

ok claudio@

Discussed with claudio@ and tedu@.

boolean has a contents length other than 1.
ok claudio@

"sure" claudio@

which is reserved for future use.
ok claudio@

snmpctl. Separate copies of ber.[ch] have existed and been maintained in sync
in ldap, ldapd, ypldap and snmpd.
This commit moves the BER API into /usr/lib/libutil. All current consumers
already link libutil. ldapd and snmpd regress passes, and release builds.
With help from tb@ and guenther@.
ok deraadt@, tb@

counterparts but return memory in pages marked MAP_CONCEAL and on
free() freezero() is actually called.

reported by Fabio Scotoni <fabio at esse dot ch>;
also garbage collect one .Tn while here

allocate pages, don't call abort() because of corefile data leakage
concerns, but simply _exit().  The reasoning is _rs_init() will only
fail if someone finds a way to apply specific pressure against this
failure point, for the purpose of leaking information into a core which
they can read.  We don't need a corefile in this instance to debug that.
So take this "lever" away from whoever in the future wants to do that.

patch from Peter Piwowarski <peterjpiwowarski at gmail dot com>

the wrong idiom. ok tedu@ but probably needs some tweakin

ok tedu@

ok deraadt@ tedu@

ok deraadt@ claudio@

* mention LC_COLLATE;
* clarify that all these functions are infested, including the *_l() versions;
* avoid ENVIRONMENT, these functions don't inspect it;
* and point to the C library functions that change the locale.
OK millert@

clearly stating which arguments have to be avoided, and mention the
header files defining the constants required for the checks.
Feedback and OK guenther@, OK bluhm@.

CAVEATS pointing to the new CAVEATS section in setlocale(3).
Make those in wprintf(3) and wscanf(3) more concise
since duplicate information is a bad idea.
Incompleteness of information originally pointed out by millert@.
OK millert@

work with our old code.  In fmt_scaled() move the check before
calling llabs().
found by regress/lib/libutil/fmt_scaled; OK deraadt@ millert@ tedu@

by me and others indicate that it is the optimum.

making the number of pools variable.  Do not document the malloc
conf settings atm, don't know yet if they will stay.  Thanks to all
the testers. ok deraadt@

tested by many; ok florian@

patch from Hiltjo Posthuma <hiltjo at codemadness dot org>

now that there is essentially no malloc.conf;
text tweaked by deraadt; ok otto deraadt

libs have it, it is a function that is considered harmful, so:
Delete malloc_usable_size(). It is a function that blurs the line
between malloc managed memory and application managed memory and
exposes some of the internal workings of malloc.  If an application
relies on that, it is likely to break using another implementation
of malloc.  If you want usable size x, just allocate x bytes. ok
deraadt@ and other devs

here could creates non-uniformity since very short fetches of 0 would
be excluded.  blocks of 0 are just as random as any other data, including
blocks of 4 4 4..  This is a misguided attempt to identify errors from the
entropy churn/gather code doesn't make sense, errors don't happen.
ok bcook

PROTO_NORMAL().  Problem noted by deraadt@