var/db/sysmerge/etcsum is created after the cksum calls and etcsum is
part of the etc set).
"sure" deraadt@

This way, the first time sysmerge is run on a new box, it will already
have reference sums needed for automatic processing.
Original idea from and discussed with deraadt@
"commit it" deraadt@, tweaks and ok millert

arc4random() is slow, but it induces getpid() calls; also saves a
bit on stirring efforts

doesn't test it, so factor out the two places that test it into a
routine and do the refreshing there.  With this, arch4random_buf()
doesn't trigger superfluous calls to getpid() when filling large
buffers.
ok deraadt@, "looks nicer indeed" otto@

ok krw@

o only stop processing if inet or inet6 lines are malformed
o everything not a specially handled bit is passed to ifconfig unmangled
noticed by several after the move from bridgename.bridge0 -> hostname.bridge0
prodded by deraadt@, tested by and feedback from several
man page bits 'look fine' jmc@

actual kernel page size.

from trhodes@freebsd, r200095;

macros for them. Avoids walking the lists and greatly enhances speed
of freeing chunks in reverse or random order at the cost of a little
space. Suggested by Fabien Romano and Jonathan Armani; ok djm@

from Fabien Romano and Jonathan Armani

Armani

of the network daemons so that it can be used if another daemon stops
in its tracks.
ok claudio markus sthen

files.  To cope with this change, read about the mv command.
ok claudio todd

route already so don't add an additional rule for that. Instead add a commented
allow rule. Idea from Mitja Muzenic (mitja at muzenic dot net)

internally when and where required.  Macros in <stdio.h> are updated
to automatically call the underlying functions when the process is
threaded to obtain the necessary locking.  A private mutex is added
to protect __sglue, the internal list of FILE handles, and another
to protect the one-time initialization.  Some routines in libc that
use getc() change to use getc_unlocked() as they're either protected
by their own lock or aren't thread-safe routines anyway.
committing on behalf of and okay guenther@ now that we have install
media space available.

ok matthieu@

name of the map to use for resolution

use pkill(1) in /etc/newsyslog.conf instead
together with otto and suggestions from tedu

noticed by Jonathan Armani & Fabien Romano
ugh+ok otto@

unmaintainable).  these days, people use source.  these id's do not provide
any benefit, and do hurt the small install media
(the 33,000 line diff is essentially mechanical)
ok with the idea millert, ok dms

media to fit

internally when and where required.  Macros in <stdio.h> are updated
to automatically call the underlying functions when the process is
threaded to obtain the necessary locking.  A private mutex is added
to protect __sglue, the internal list of FILE handles, and another
to protect the one-time initialization.  Some routines in libc that
use getc() change to use getc_unlocked() as they're either protected
by their own lock or aren't thread-safe routines anyway.
ok kurt@, earlier version tested by sthen@ and jj@

Okay deraadt@, otto@.

ok deraadt

ecvt, fcvt, gcvt, *printf, strtof, strtod, strtold act per ieee
1003.1.  after these massive changes, remove unused files which
would not work now.  reported by Maksymilian Arciemowicz;  ok theo

- queue packets from pf(4) to a userspace application
- reinject packets from the application into the kernel stack.
The divert socket can be bound to a special "divert port" and will
receive every packet diverted to that port by pf(4).
The pf syntax is pretty simple, e.g.:
pass on em0 inet proto tcp from any to any port 80 divert-packet port 1
A lot of discussion have happened since my last commit that resulted
in many changes and improvements.
I would *really* like to thank everyone who took part in the discussion
especially canacar@ who spotted out which are the limitations of this approach.
OpenBSD divert(4) is meant to be compatible with software running on
top of FreeBSD's divert sockets even though they are pretty different and will
become even more with time.
discusses with many, but mainly reyk@ canacar@ deraadt@ dlg@ claudio@ beck@
tested by reyk@ and myself
ok reyk@ claudio@ beck@
manpage help and ok by jmc@

Update the BSD.x11.dist version to the one in xenocara.

friends' names unbreaking at least enblend-enfuse & inkscape on
macppc & alpha
reported, tested: ajacoutot@, sthen@
ok: millert@, otto@

`wsmouse' and `wskbd' without suffixes match the wsmux rule.
Reported by Vadim Zhukov (persgray on gmail)

This is required as gcc grows ever more pedantic with old age
and cavorts with standards bodies that like to create paradoxes.
ok kettenis@ miod@ millert@ espie@

with the rest of the file.  no functional change.
feedback from sthen@, ok krw@

function, which is additionally exported for use by others.
It will be needed by smtpd's SSL module when the SMTP client code
is changed to replace libevent's evbuffers with our msgbuf_* API.
ok gilles@ henning@ guenther@ eric@

and filter rules, because we no longer have translation rules.
Pointed out by Mitja Muzenic, ok henning@