99% of the world calls it.
allow just "bcrypt" without params to mean auto-tune ("bcrypt,a").
default remains 8 rounds (for now)
ok deraadt

OK tedu@

ok deraadt jeremy

consistent with the behavior of the other libc sort functions.
OK deraadt@

when we can just make spanp const char * to match it.  OK deraadt@

part of the ISO C standard and have also been dropped from POSIX.
OK guenther@ kettenis@

of some undefined value.
OK tedu@

ok millert@ jmc@ schwarze@

separately to avoid false negatives.
ok miod@ millert@

unregistering callbacks if the DSO is unloaded.  Move the callback
handling from libpthread to libc, though libpthread still overrides the
inner call to handle locking and thread-library reinitialization.
Major version bump for both libc and libpthread.
verification that this fixes various ports ajacoutot@
asm assistance miod@; ok millert@ deraadt@

instead of simply zapping it. this can save many syscalls in a program
that repeatedly grows and shrinks a buffer, as observed in the wild.

for overflow. stop talking about old broken systems, there's little use
for such info.

Printing strerror() in that case will say result too large, even if rounds is
actually too small. invalid is less specific, but less incorrect.
ok millert

ok dlg

No actual change, but makes it easier to reuse the code elsewhere.
Suggested by Andre Smagin

to avoid swamping it;

ok tedu@

also fixing one typo in fts(3) while here

remove .Tn, and a few minor macro adjustments.
Patch from Kaspars at Bankovskis dot net.

friendlier for users. requested by deraadt

1. it's not a bug; it's a caveat.
2. "slightly unsafe" gives me the willies.
3. one .Xr to malloc should suffice
ok deraadt jmc

review by millert, binary checking process with doug, concept with guenther

ok tedu@

OK deraadt@ djm@

other systems to fit into the same mold, so add copyright

nor are they the same size.

remember to set EACCES in bcrypt_checkpass for hash differences.
the higher level crypt_checkpass function will reset errno to EACCES in
all cases, which is probably the right behavior, but this change gives code
working with the lower level functions the correct errno if they care.

what's going on.

guenther suggested using thread time, which actually may improve accuracy
if somebody puts this in a threaded program.

ok deraadt miod

use global data. The simplest fix is to only check blowfish passwords,
and implicitly lock out DES passwords.
crypt_checkpass is currently only used in one place, passwd, to verify
the local user's password, so this is probably acceptable.
Gives people a little more time to migrate away from DES before introduing
checkpass into more places.

ramdisk libc builds.  there has to be a better way without #ifdef's
in gross places, but I don't see it yet.

naddy found sparc64 gets a little slower when unrolled.
ok deraadt

update SYNOPSIS and DESCRIPTION and add STANDARDS

rewrite the function to be simpler as well. the compiler can unroll the
loop for us if necessary.
ok schwarze