extra safeguard (FGJ). Idea from deraadt@; ok deraadt@ dlg@

correctness. it's not 1992 any more, kids. ok mcbride dlg krw

"reads alright" oga@, ok matthieu@ todd@

OSPFv3 does not feature built-in authentication (it relies
on IPsec, see RFC4552) so the example was misleading.
ok claudio@ michele@

From Igor Zinovik; thanks!
ok millert@

root.  If anyone wants to use this in a siteXX.tgz file, please be sure to
*concatenate* to the file -- not replace it -- since the installer is going
to be using this file itself.
discussed with todd and halex

files.  If any information found in these documents is worthwhile and you
miss it, please make the time to work it into the manual pages (which people
actually do read).
ok guenther

yeah sure deraadt@

var/db/sysmerge/etcsum is created after the cksum calls and etcsum is
part of the etc set).
"sure" deraadt@

This way, the first time sysmerge is run on a new box, it will already
have reference sums needed for automatic processing.
Original idea from and discussed with deraadt@
"commit it" deraadt@, tweaks and ok millert

arc4random() is slow, but it induces getpid() calls; also saves a
bit on stirring efforts

doesn't test it, so factor out the two places that test it into a
routine and do the refreshing there.  With this, arch4random_buf()
doesn't trigger superfluous calls to getpid() when filling large
buffers.
ok deraadt@, "looks nicer indeed" otto@

ok krw@

o only stop processing if inet or inet6 lines are malformed
o everything not a specially handled bit is passed to ifconfig unmangled
noticed by several after the move from bridgename.bridge0 -> hostname.bridge0
prodded by deraadt@, tested by and feedback from several
man page bits 'look fine' jmc@

actual kernel page size.

from trhodes@freebsd, r200095;

macros for them. Avoids walking the lists and greatly enhances speed
of freeing chunks in reverse or random order at the cost of a little
space. Suggested by Fabien Romano and Jonathan Armani; ok djm@

from Fabien Romano and Jonathan Armani

Armani

of the network daemons so that it can be used if another daemon stops
in its tracks.
ok claudio markus sthen

files.  To cope with this change, read about the mv command.
ok claudio todd

route already so don't add an additional rule for that. Instead add a commented
allow rule. Idea from Mitja Muzenic (mitja at muzenic dot net)

internally when and where required.  Macros in <stdio.h> are updated
to automatically call the underlying functions when the process is
threaded to obtain the necessary locking.  A private mutex is added
to protect __sglue, the internal list of FILE handles, and another
to protect the one-time initialization.  Some routines in libc that
use getc() change to use getc_unlocked() as they're either protected
by their own lock or aren't thread-safe routines anyway.
committing on behalf of and okay guenther@ now that we have install
media space available.

ok matthieu@

name of the map to use for resolution

use pkill(1) in /etc/newsyslog.conf instead
together with otto and suggestions from tedu

noticed by Jonathan Armani & Fabien Romano
ugh+ok otto@

unmaintainable).  these days, people use source.  these id's do not provide
any benefit, and do hurt the small install media
(the 33,000 line diff is essentially mechanical)
ok with the idea millert, ok dms

media to fit

internally when and where required.  Macros in <stdio.h> are updated
to automatically call the underlying functions when the process is
threaded to obtain the necessary locking.  A private mutex is added
to protect __sglue, the internal list of FILE handles, and another
to protect the one-time initialization.  Some routines in libc that
use getc() change to use getc_unlocked() as they're either protected
by their own lock or aren't thread-safe routines anyway.
ok kurt@, earlier version tested by sthen@ and jj@

Okay deraadt@, otto@.

ok deraadt

ecvt, fcvt, gcvt, *printf, strtof, strtod, strtold act per ieee
1003.1.  after these massive changes, remove unused files which
would not work now.  reported by Maksymilian Arciemowicz;  ok theo

- queue packets from pf(4) to a userspace application
- reinject packets from the application into the kernel stack.
The divert socket can be bound to a special "divert port" and will
receive every packet diverted to that port by pf(4).
The pf syntax is pretty simple, e.g.:
pass on em0 inet proto tcp from any to any port 80 divert-packet port 1
A lot of discussion have happened since my last commit that resulted
in many changes and improvements.
I would *really* like to thank everyone who took part in the discussion
especially canacar@ who spotted out which are the limitations of this approach.
OpenBSD divert(4) is meant to be compatible with software running on
top of FreeBSD's divert sockets even though they are pretty different and will
become even more with time.
discusses with many, but mainly reyk@ canacar@ deraadt@ dlg@ claudio@ beck@
tested by reyk@ and myself
ok reyk@ claudio@ beck@
manpage help and ok by jmc@

Update the BSD.x11.dist version to the one in xenocara.