Update NEWS file for bug 2938

bk: 5695e9ddir5c7RLX4IqOnf1mOvk2CA

Merge psp-deb1.ntp.org:/home/stenn/ntp-stable-p6
into  psp-deb1.ntp.org:/home/perlinger/ntp-stable-2938

bk: 5695e6e4reqdzXibv16Yc9dj_FX8pg

Update NEWS file for bug 2935

bk: 5695d152VKb4HkaC5bKwggx_ByvIdg

Merge psp-deb1.ntp.org:/home/stenn/ntp-stable-p6
into  psp-deb1.ntp.org:/home/stenn/ntp-stable-2935

bk: 5695cdfdVXJE3_8Czs7mFoVEgFwLEg

[Sec 2935] use L_SUB instead of L_ISGT.  Juergen Perlinger

bk: 5694cd02avDkTElfVb45RwCgT1Q3Rg

[Sec 2935] Deja Vu: Replay attack on authenticated broadcast mode.

bk: 56938bddZ082rJR2isSc8bTl_6L3Mw

make leapsec_query messages less verbose.

bk: 56938789fJCwKXnrlhIDOCS44I24dQ

[Bug 2985] bogus calculation in authkeys.c
 - implement 'auth_log2()' using integer bithack instead of float calculation

bk: 56937534dDSoJL__JyykImzIwQa0AQ

Add timelastrec to the peer structure

bk: 5690d86cctRfyb96e_gnglKnrqg-lg

4.2.8p5 merge cleanup

bk: 568f88a3gWqKKxS8cYtz54zGIKF-NQ

Merge bk://bk.ntp.org/ntp-stable
into  psp-at1.ntp.org:/a/local/amd/amd.stage/thump2-g3/export/ntp/home/stenn/ntp-stable-p6

bk: 568f48c8Q0L0UAuvJ-iE0PgehMXa1A

Update copyright year

bk: 568f0221doPWfWwA_7jYw-wK8PJ5Ew

NTP_4_2_8P5

bk: 568ef5b7qWYuTdSLfa9vCsoGKrS9Mw

ntp-4.2.8p5

bk: 568eec28YRMSc6TBtLF6oP98L_dx9Q

cleanup

bk: 568ee495q7WXcAAotqXgcijN3E3e_w

typo in ntp_proto.c - leap smear.  Reported by Martin Burnicki

bk: 568e30d7GkRWV3PJ3I69Rf2tW2T1_w

Merge psp-at1.ntp.org:/home/stenn/ntp-stable-p5
into  psp-at1.ntp.org:/a/local/amd/amd.stage/thump2-g3/export/ntp/home/stenn/ntp-stable-p6

bk: 568e074aUEXJyP1Fm1uQoqjKgqoDPg

Update scripts/calc_tickadj/Makefile.am.  Harlan Stenn.

bk: 568e06a4FUN5nEsVa4Xk6HC__HWsYQ

Merge psp-at1.ntp.org:/home/stenn/ntp-stable-p5
into  psp-at1.ntp.org:/a/local/amd/amd.stage/thump2-g3/export/ntp/home/stenn/ntp-stable-p6

bk: 568bb8a8YcT4J8VYQOzk6G0sTtnKmA

ntp-4.2.8p6

bk: 568bb870xu7Hsl1FTCPVlkFbx2aUjA

Merge psp-at1.ntp.org:/home/stenn/ntp-stable-p5
into  psp-at1.ntp.org:/a/local/amd/amd.stage/thump2-g3/export/ntp/home/stenn/ntp-stable-2952-collapse

bk: 568ba2c3bs8_963p-Xoa6jebOmP0xw

Bug 2952 fixes

bk: 568ba1a9jp_4VcGi56JnPE6Qbzs3jg

ntp-4.2.8p5 prep

bk: 568b934fECAp44A_vF9voiDeJzgXqQ

Merge bk://bk.ntp.org/ntp-stable
into  hydra.localnet:/home/jnperlin/Projects/Packages/NTP-DEV/src/ntp-stable-2905

bk: 566fbca1QEV2qqk9gcvguFRggeeQRQ

[Bug 2892] Several test cases assume IPv6 capabilities even when IPv6 is disabled in the build
  Found this already fixed, but validation lead to further cleanup:
   - source code formatting
   - inline variable definitions moved to start of block
   - made some pure input data pointers 'const void*' instead of 'char*'; avoids casts and warnings

bk: 566d6600ngUL7LNVobjeoQ7cAD3CeQ

[Bug 2879] Improve NTP security against timing attacks.
 - use timing-safe memcmp() for digest tests

bk: 566bf5d3dZ5HASyXGnVlxig-qUuvqw

[Bug 2882] Look at ntp_request.c:list_peers_sum()

bk: 566b06c0PrkN19Zve4qAi9m73pT5zA

[Bug 2891] Deadlock in deferred DNS lookup framework.

bk: 56686393KVt4rfwBfppWg12zhqEE1A

Merge psp-at1.ntp.org:/home/perlinger/ntp-stable-2937
into  psp-at1.ntp.org:/a/local/amd/amd.stage/thump2-g3/export/ntp/home/stenn/ntp-stable-p6

bk: 5664ce16RwyIRxI0Fko7VTZVO0Lc-Q

[Bug 2814] msyslog deadlock when signaled. perlinger@ntp.org
 - applied patch by shenpeng11@huawei.com with minor adjustments

bk: 56649b96kijAcKTVg2Gwvt6ZgHtmEA

[Bug 2772] adj_systime overflows tv_usec

bk: 56648a44QuJ_xltpef9gRwTLhqD5aA

Quiet a warning from clang.  Harlan Stenn.

bk: 566419e2DaFuVlyy4wFSkUUcYi4fPg

[Bug 2980] reduce number of warnings
 - string formatting(arguments should be literals)
 - applying constness where necessary
 - removing bad consts that are superfluous
 - avoid signed/unsigned clashes in conditionals (either by cast or type change)
 - signed/unsigned and promotion conflicts
 - add prototypes for function pointer tables
 - force unsigned argument promotion in calls to 'ctype' functions (is{digit,cntrl,...})

bk: 566348e3T9RaQjcLAr5jZOzeEyQN1A

[Bug 2971] ntpq bails on ^C: select fails: Interrupted system call
  - make CTRL-C work for retrieval and printing od MRU list.

bk: 5662e6a6H9DCWzmnJ6NP1atiKUlRVA

[Bug 2905] DNS lookups broken.
  - added limits to stack consumption, fixed some return code handling

bk: 5662dc49tnEwGqj3N24AXOtpduPGbw

CID 1341677: Nits in sntp/tests/keyFile.c.  HStenn.

bk: 5662bf6fYtZe7PAeiJoxB5TE6gLesQ

CID 1341678: Nits in sntp/tests/keyFile.c.  HStenn.

bk: 5662bea4DjIJowd8d0HwKagEP5FWOw

CID 1341679: Nits in sntp/tests/keyFile.c.  HStenn.

bk: 5662bd0bhu_SJ1RIc3LHOTku5wuSEw

CID 1341680: Nits in sntp/tests/keyFile.c.  HStenn.

bk: 5662bc1cpi5BDcs2iyNGH8m6fp69WA

CID 1341681: Nits in sntp/tests/keyFile.c.  HStenn.

bk: 5662ba93RkfYVTeInrSZuSqCbd-ygg

sntp/tests/keyFile.c lint

bk: 5662b9efPLcdAKcmR6BbjFAU5NhLoA

CID 1341682: Nit in libntp/authreadkeys.c.  HStenn.

bk: 5662b60bRrhmXVYfYG8w9OhEYo50-g

CID 1341684: Nit in tests/ntpd/t-ntp_signd.c.  HStenn.

bk: 5662b11csHWHbg93r9HMCxLwzF1P0A

Update some test runners

bk: 56603082xlrDXM3oJEOZfyUXDNbJOg

Header cleanup in tests/libntp/sfptostr.c.  Harlan Stenn.

bk: 5660274fO8H7v2oGxZCySuIn6NzTHw

Header cleanup in tests/sandbox/uglydate.c.  Harlan Stenn.

bk: 566026faHwoZmM8xT59qlO8ZeKRPyQ

CID 1341527: Quiet a CHECKED_RETURN in sntp/tests/t-log.c.  HStenn.

bk: 56601662YirjhF_fh67pyRTUQlyfLQ

CID 1341533: Missing assertion in sntp/tests/t-log.c.  HStenn.

bk: 566012dajEfgn2nXTA0GsbIrs6d-4g

CID 134534-134537: Resource leaks in tests/ntpd/t-ntp_signd.c.  HStenn.

bk: 56601053R3D-_WYlnVV4n1TWrWSJfg

CID 1341538: Memory leak in tests/ntpd/ntp_prio_q.c:262.  HStenn.

bk: 566009ceDfWkKxlQ6ZEXWgmQdtaRfA

Merge psp-at1.ntp.org:/home/perlinger/ntp-stable-2971
into  psp-at1.ntp.org:/a/local/amd/amd.stage/thump2-g3/export/ntp/home/stenn/ntp-stable-2971

bk: 565ed266cUxatANu89XKVn3SUi5lvw

Merge psp-at1.ntp.org:/home/perlinger/ntp-stable-2967
into  psp-at1.ntp.org:/a/local/amd/amd.stage/thump2-g3/export/ntp/home/stenn/ntp-stable-2967

bk: 565ed07bkq-wcFDCu9yP-inEWIOZyg

Merge psp-at1.ntp.org:/home/perlinger/ntp-stable-2944
into  psp-at1.ntp.org:/a/local/amd/amd.stage/thump2-g3/export/ntp/home/stenn/ntp-stable-2944

bk: 565eca40bTvo8U3LpNZR5djvAbEHhw

Merge psp-at1.ntp.org:/home/perlinger/ntp-stable-2887/
into  psp-at1.ntp.org:/a/local/amd/amd.stage/thump2-g3/export/ntp/home/stenn/ntp-stable-2887

bk: 565ec502-5CVzGIlmuLX-4WDya7Y6g

[Bug 2829] Look at pipe_fds in ntpd.c (initial value issue)

bk: 565bd8b3r1LGsi7RSszdQpJJjJBPog

[Bug 2887] stratum -1 config results as showing value 99
 - fudge stratum only accepts values [0..16].

bk: 565ae9ae6t0deYfeWlojxdwvGc7qsA

[Bug 2944] errno is not preserved properly in ntpdate after sendto call.
 - applied patch by Christos Zoulas.

bk: 565a23cbU86DDMCJHHyPeYYB7hZ1Pg

Bug 2971 - ntpq bails on ^C: select fails: Interrupted system call
 - changed stacked/nested handling of CTRL-C.

bk: 5659edf14gdulYozwy2PmJ1TsnHQ_A

Libevent autoconf pthread fixes for FreeBSD-10.  Harlan Stenn.

bk: 5656a265oOO9h_OoPADpE_0QSv5nOg

Unity test cleanup.  Harlan Stenn.

bk: 5655a84c2EcEdGPmoM8TRfzkjAIyww

Unity test cleanup.  Harlan Stenn.

bk: 5655a09b3c9SURZi2MojEfe6xKQzNQ

[Bug 2967] ntpdate command suffers an assertion failure
  - fixed ntp_rfc2553.c to return proper address length.

bk: 56540c81drscYZOFbhk9iE2uioXa1w

ChangeLog, caljulian.c:
  * CID 1339955: Free allocated memory in caljulian test.  HStenn.
  * CID 1339962: Explicitly initialize variable in caljulian test.  HStenn.

bk: 5652f094XJpA7DubZuJ-wqt9efi_HA

Unity test cleanup.  Harlan Stenn.

bk: 564ff018xVr3-w16tjnpbKOGz0E1fg

Unity test cleanup.  Harlan Stenn.

bk: 564fe7dcvh1AAb7d9IXajTc0ULNblw

[Bug 2958] ntpq: fatal error messages need a final newline. Craig Leres.

bk: 564ece89n_o8u8QL03qtmxqaeGa-gw

Unity test cleanup.  Harlan Stenn.

bk: 564ecb5fCWb2w8ufbXtz8Mw17ErsOA

[Bug 2969] Seg fault from ntpq/mrulist when looking at server with lots of clients

bk: 564e7e11PQSPK2SaqU2EvAMnCD-B1Q

[Bug 2932] Update leapsecond file info in miscopt.html.  CWoodbury, HStenn.

bk: 564b0b82ObXQBhcSV2aOZRrA1AFwHQ

Merge psp-at1.ntp.org:/home/stenn/ntp-stable
into  psp-at1.ntp.org:/a/local/amd/amd.stage/thump2-g3/export/ntp/home/stenn/ntp-stable-2962

bk: 564ad9c4zrnEWMcjB89B4ktSXh82Dw

Merge psp-at1.ntp.org:/home/stenn/ntp-stable
into  psp-at1.ntp.org:/a/local/amd/amd.stage/thump2-g3/export/ntp/home/stenn/ntp-stable-2957

bk: 564ac097OR5gfBSwdGENQDLBe3ynPQ

Credit Martin for 2965

bk: 564ab4d2mDJn6OzUnsSV-WvUyo2aTQ

cleanup

bk: 564ab2d3Ufb2l1jj3VgO7Dyy4SHfTg

Merge psp-at1.ntp.org:/.stage/h-thump2/burnicki/ntp-stable-2965
into  psp-at1.ntp.org:/a/local/amd/amd.stage/thump2-g3/export/ntp/home/stenn/ntp-stable

bk: 564ab280yRbsIYFqIoXFe3wpjcQIOA

[Bug 2965] Local clock didn't work since 4.2.8p4

bk: 5649b72bT4RP8ZCAf4PsxkONbIsJYw

[Bug 2962] truncation of size_t/ptrdiff_t on 64bit targets
 - fix warnings in test cases

bk: 564679c1K_wp1yrP36cryyqHSrl7ug

[Bug 2962] truncation of size_t/ptrdiff_t on 64bit targets
 - fixed several other warnings (cast-alignment, missing const, missing prorotypes)
 - promote use of 'size_t' for values that express a size
 - use ptr-to-const for read-only arguments
 - make sure SOCKET values are not truncated (win32-specific)
 - format string fixes

bk: 56465c1b-lmDibJs_Pk40_ECcAd_YQ

Unity test cleanup.  Harlan Stenn.

bk: 563e8d61X1vxO8Wtqdks_EWSvlQMUQ

Merge perlinger@psp-deb1.ntp.org:ntp-stable-2945
into  hydra.localnet:/home/jnperlin/Projects/Packages/NTP-DEV/src/ntp-stable-2945

bk: 563c5d31y3Be2MkRpaaahN4cI0Y1Eg

[Bug 2957] format specifies type 'unsigned int' but the argument has type 'size_t'
 - accept key file only if there are no parsing errors
 - fixed size_t/u_int format clash
 - restore pre-Bug1243 compatibility (revert 'strlcpy()' to 'strncpy()' as 'strlcpy()' is wrong here)

bk: 563c57c309lnETVruYn4ZaucSbQRiQ

Unity test cleanup.  Harlan Stenn.

bk: 563b41e6AwMn7s0FYEvuLKrDp0hbsA

Unity cleanup for FreeBSD-6.4.  Harlan Stenn.

bk: 563b3172bJfDMMOJzQQadSVeXBpsVg

Sec 2956 cleanup

bk: 563b291572qjlHsL3cXbCusWlasuBQ

[Bug 2934] tests/ntpd/t-ntp_scanner.c has a magic constant wired in.  HMurray

bk: 5639d7b1g5Jt6gycojBcDQgnRs0OHw

[Sec 2956] small-step/big-step.  Close the panic gate earlier.

bk: 5639c430o8N8--q31B35xMpgxjcwdg

[Bug 2954] Version 4.2.8p4 crashes on startup with sig fault
 - limit threading warm-up to linux; FreeBSD bombs on it. perlinger@ntp.org

bk: 5639225eI_gaHSFRVRx180afK5LkXA

[Bug 2954] Version 4.2.8p4 crashes on startup with sig fault
 - fixed race conditions between worker and main thread in DNS worker

bk: 563502a27rHB3d5_eb7CW5hDHEv3eQ

NTP_4_2_8P4

bk: 5627c05aeP3p-n5RG3iNpXdhYw_NoQ

4.2.8p4

bk: 5627b6223vDyf3RfYpvMhX_ZF5ntaw

Update severity information

bk: 5627b0c3QSxJvNRQ6wW5Qz-V9gU9Sg

Update CVEs

bk: 5625f4abDlY4FoaUbUEKy9gu1lYwoQ

[Bug 2945] Zero Origin Timestamp Bypass

bk: 5622bb7dRIhjq2EoFHGH3kfjeMY-Yw

[Bug 2948] Potential Infinite Loop in ntpq and ntpdc

bk: 56229e5bz1aus9e4pFM3A8U7NNpttQ

ntp-4.2.8p4-sec-RC2

bk: 5621eaa1sBf0oJ0pyDCLPBNtCVFpPQ

cleanup

bk: 5621bc09FCrpQ8NFsVNgTTQT0sXA1Q

[Sec 2941] NAK to the Future: Symmetric association authentication bypass via crypto-NAK

bk: 5621a6cak64N71lGJd7s3vwXJCyieQ

Merge psp-deb1.ntp.org:/home/stenn/ntp-stable-sec
into  psp-deb1.ntp.org:/home/stenn/ntp-stable-2941

bk: 5621a583cyrlT3YU44ceHeNRAivpIw

[Bug 2938] ntpq saveconfig command allows dangerous characters in filenames.
 - make sure the file does not exist (no overwrite allowed)
 - ensure text mode where applicable (windows)

bk: 561d7830p8KzhIhbAIMI44K_t0l7lQ

[Bug 2938] ntpq saveconfig command allows dangerous characters in filenames

bk: 561b50d0hrpYQvNfooro0sfYlEDd1w

[Bug 2939] reslist NULL pointer dereference
[Bug 2940] Stack exhaustion in recursive traversal of restriction list
  -- these two where fixed together --

bk: 561a522f17IeDpYe_tbKK8LZ58xQMw