wild fits inside 32 elements, like UsmUserEntry objects.
OK rob@, claudio@

ok deraadt

ober_add_string.3 and as it was before the ber -> ober rename.

so move our BER API to the unused ober_* prefix to avoid some
breakage in ports.
Problem diagnosed by jmatthew with ber_free() in samba, but
there are many others as pointed out by sthen.
tests & ok rob
ok sthen (who had an almost identical diff for libutil)
"go head hit it" deraadt

(more unclear is if anything in ports uses this, as our base no longer does)

missed during code scan.

OK claudio@

current ber element.
OK claudio@
Seems sensible to deraadt@

Right now all consumers use 'e' at the end of the list, so no regressions
should be introduced.
OK claudio@
Seems sensible to deraadt@

where ber is utilized. This also allows us to remove the ber->be_next
check, which can cause weird behaviour, because a NULL be_next would result
in parsing the last element twice.
OK claudio@ on previous version
OK rob@

OIDS. This can result in false equality matches.
OK claudio@

OK claudio@
"Good find" deraadt@

on error, so tweak previous to test "atexit(...) != 0" for portability.
"OK ok ok sorry backwards" deraadt@

value < 0.  errno is only updated in this case.  Change all (most?)
callers of syscalls to follow this better, and let's see if this strictness
helps us in the future.

Problem noticed by bluhm@. Discussed on hackers.
ok claudio@

ok jmc@, schwarze@

and remove the lie that these functions would set errno;
tweaks and OK jmc@; OK rob@ on the previous version

Discussed with schwarze and jmc. ok schwarze

OK rob@

Discussed with and ok jmc@, schwarze@, claudio@

ok claudio@

ok claudio@

Discussed with claudio@ and tedu@.

boolean has a contents length other than 1.
ok claudio@

"sure" claudio@

which is reserved for future use.
ok claudio@

snmpctl. Separate copies of ber.[ch] have existed and been maintained in sync
in ldap, ldapd, ypldap and snmpd.
This commit moves the BER API into /usr/lib/libutil. All current consumers
already link libutil. ldapd and snmpd regress passes, and release builds.
With help from tb@ and guenther@.
ok deraadt@, tb@

reported by Fabio Scotoni <fabio at esse dot ch>;
also garbage collect one .Tn while here

ok deraadt@ claudio@

work with our old code.  In fmt_scaled() move the check before
calling llabs().
found by regress/lib/libutil/fmt_scaled; OK deraadt@ millert@ tedu@

ok nicm

This variable is only used in the parent context so there is no issue.
ok kettenis

to control which symbols are exported from the shared library.
ok guenther@, deraadt@, jca@

to separate the open(/dev/ptm) from the ioctl(PTMGET) for privilege
separation or pledge().
Based on a diff from reyk@.
ok deraadt millert