code.  We now user the simple userland wrapper on top of __realpath(2).
The non-POSIX behaviour still remains, that is the next component to fix.
From a diff by beck, but I managed to chainsaw it a bit further.  Tested
in snaps for a couple of days.
ok beck

engine does not know if we're in startup mode, so use a small interval
the first few times there.

it is a thin wrapper over the syscall __readlink(2).  Improve the list
of possible errors.
ok millert beck jmc

ok benno@

for anything other than a regular old mouse, X needs to be able to
directly talk to the device and newer machines can have all kinds of
touchscreens, pen devices, touchpads, etc.
ok deraadt

(booting, constraint(s) defined) set the time but only if the clock
should be moved forward by more than a minute, based on ntp replies
that satisfied the constraints. Tested by many; ok deraadt@

on 32bit platforms which cause incorrect results when adding a block
>=512M in size.  sha1 patch from ante84 at gmail.com via openssh github,
sha2 with djm@, ok tedu@

_csu_finish() to _libc_preinit(), which is an .init_array function
in shared libc (and mark it INITFIRST) or a .preinit_array function
in static libc, grabbing the _dl_cb callback there from ld.so.  Then
in _csu_finish(), invoke the dl_clean_boot() callback to free ld.so's
startup bits before main() gets control.
Other cleanups this permits:
- move various startup structures into .data.rel.ro
- the dl* stubs in libc can be strong and call the callbacks provided
via _dl_cb
- no longer need to conditionalize dlctl() calls on presence of _DYNAMIC
original concept and full diff ok kettenis@
ok deraadt@

Problem noticed by bluhm@. Discussed on hackers.
ok claudio@

an absolute value and fix poll loop to first generate messages and
then compute poll flags the write cases. This makes the timeout
workaround for constraints unneeded.  ok reyk@ tb@

checks userland-parsing vs kernel parsing, we are hoping to spot another
bug..

with once the clock is synced. ok deraadt@ florian@

calling it until those are fixed.

For now, this also still uses the existing realpath implmentation
and emits a syslog if we see differening results. Once we have run
with that for a little while we will remove the old code
ok deraadt@

Will get us rid of pointless patches in the ports tree.  ok guenther@

If the time is wrong, we cannot validate dnssec, leading to failed
DNS lookups, so we cannot adjust or set the time.  Work around this
by repeating a failed DNS lookup with a lookup with the DC (check
disabled) bit set. ok florian@

Fixes malloc_conceal...freezero with malloc options C and/or G.

ok jmc@, schwarze@

triggered by a question from Jan Stary <hans at stare dot cz> on misc@;
OK otto@

and remove the lie that these functions would set errno;
tweaks and OK jmc@; OK rob@ on the previous version

Discussed with schwarze and jmc. ok schwarze

i.e. those other than LC_CTYPE, into the CAVEATS section, and
standardize wording somewhat.
OK jmc@

OK rob@

Discussed with and ok jmc@, schwarze@, claudio@

ok claudio@

ok claudio@

Discussed with claudio@ and tedu@.

switched to using a local control socket by default.
OK florian@ sthen@

boolean has a contents length other than 1.
ok claudio@

"sure" claudio@

which is reserved for future use.
ok claudio@

on ttyC0.  While here add drm0 to loongson and add the complete set of
wscons and drm devices to arm64.
ok kettenis@

snmpctl. Separate copies of ber.[ch] have existed and been maintained in sync
in ldap, ldapd, ypldap and snmpd.
This commit moves the BER API into /usr/lib/libutil. All current consumers
already link libutil. ldapd and snmpd regress passes, and release builds.
With help from tb@ and guenther@.
ok deraadt@, tb@

ok kettenis

ok deraadt@

counterparts but return memory in pages marked MAP_CONCEAL and on
free() freezero() is actually called.

- put functions and data which are only used before calling the executable's
start function into their own page-aligned segments for unmapping
(only done on amd64, arm64, armv7, powerpc, and sparc64 so far)
- pass .init_array and .preinit_array functions an addition argument which
is a callback to get a structure which includes a function that frees
the boot text and data
- sometimes delay doing RELRO processing: for a shared-object marked
DF_1_INITFIRST do it after the object's .init_array, for the executable
do it after the .preinit_array
- improve test-ld.so to link against libpthread and trigger its initialization
late
libc changes to use this will come later
ok kettenis@