1 files changed, 553 insertions, 181 deletions

diff --git a/configure b/configure
index d2465270a..57b261503 100755
--- a/configure
+++ b/configure
@@ -1,5 +1,4 @@
 #! /bin/sh
-# From configure.ac Revision: 1.583 .
 # Guess values for system-dependent variables and create Makefiles.
 # Generated by GNU Autoconf 2.69 for OpenSSH Portable.
 #
@@ -643,7 +642,6 @@ K5LIBS
 GSSLIBS
 KRB5CONF
 SSHDLIBS
-SSHLIBS
 SSH_PRIVSEP_USER
 LIBFIDO2
 SK_DUMMY_LIBRARY
@@ -667,7 +665,6 @@ NROFF
 GROFF
 SH
 TEST_MINUS_S_SH
-ENT
 SED
 KILL
 CAT
@@ -716,6 +713,7 @@ infodir
 docdir
 oldincludedir
 includedir
+runstatedir
 localstatedir
 sharedstatedir
 sysconfdir
@@ -845,6 +843,7 @@ datadir='${datarootdir}'
 sysconfdir='${prefix}/etc'
 sharedstatedir='${prefix}/com'
 localstatedir='${prefix}/var'
+runstatedir='${localstatedir}/run'
 includedir='${prefix}/include'
 oldincludedir='/usr/include'
 docdir='${datarootdir}/doc/${PACKAGE_TARNAME}'
@@ -1097,6 +1096,15 @@ do
   | -silent | --silent | --silen | --sile | --sil)
     silent=yes ;;
 
+  -runstatedir | --runstatedir | --runstatedi | --runstated \
+  | --runstate | --runstat | --runsta | --runst | --runs \
+  | --run | --ru | --r)
+    ac_prev=runstatedir ;;
+  -runstatedir=* | --runstatedir=* | --runstatedi=* | --runstated=* \
+  | --runstate=* | --runstat=* | --runsta=* | --runst=* | --runs=* \
+  | --run=* | --ru=* | --r=*)
+    runstatedir=$ac_optarg ;;
+
   -sbindir | --sbindir | --sbindi | --sbind | --sbin | --sbi | --sb)
     ac_prev=sbindir ;;
   -sbindir=* | --sbindir=* | --sbindi=* | --sbind=* | --sbin=* \
@@ -1234,7 +1242,7 @@ fi
 for ac_var in   exec_prefix prefix bindir sbindir libexecdir datarootdir \
                 datadir sysconfdir sharedstatedir localstatedir includedir \
                 oldincludedir docdir infodir htmldir dvidir pdfdir psdir \
-                libdir localedir mandir
+                libdir localedir mandir runstatedir
 do
   eval ac_val=\$$ac_var
   # Remove trailing slashes.
@@ -1387,6 +1395,7 @@ Fine tuning of the installation directories:
   --sysconfdir=DIR        read-only single-machine data [PREFIX/etc]
   --sharedstatedir=DIR    modifiable architecture-independent data [PREFIX/com]
   --localstatedir=DIR     modifiable single-machine data [PREFIX/var]
+  --runstatedir=DIR       modifiable per-process data [LOCALSTATEDIR/run]
   --libdir=DIR            object code libraries [EPREFIX/lib]
   --includedir=DIR        C header files [PREFIX/include]
   --oldincludedir=DIR     C header files for non-gcc [/usr/include]
@@ -1905,127 +1914,6 @@ fi
 
 } # ac_fn_c_check_header_mongrel
 
-# ac_fn_c_check_func LINENO FUNC VAR
-# ----------------------------------
-# Tests whether FUNC exists, setting the cache variable VAR accordingly
-ac_fn_c_check_func ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $2" >&5
-$as_echo_n "checking for $2... " >&6; }
-if eval \${$3+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-/* Define $2 to an innocuous variant, in case <limits.h> declares $2.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define $2 innocuous_$2
-
-/* System header to define __stub macros and hopefully few prototypes,
-    which can conflict with char $2 (); below.
-    Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
-    <limits.h> exists even on freestanding compilers.  */
-
-#ifdef __STDC__
-# include <limits.h>
-#else
-# include <assert.h>
-#endif
-
-#undef $2
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char $2 ();
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_$2 || defined __stub___$2
-choke me
-#endif
-
-int
-main ()
-{
-return $2 ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
-  eval "$3=yes"
-else
-  eval "$3=no"
-fi
-rm -f core conftest.err conftest.$ac_objext \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-eval ac_res=\$$3
-               { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-$as_echo "$ac_res" >&6; }
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-
-} # ac_fn_c_check_func
-
-# ac_fn_c_check_type LINENO TYPE VAR INCLUDES
-# -------------------------------------------
-# Tests whether TYPE exists after having included INCLUDES, setting cache
-# variable VAR accordingly.
-ac_fn_c_check_type ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $2" >&5
-$as_echo_n "checking for $2... " >&6; }
-if eval \${$3+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  eval "$3=no"
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$4
-int
-main ()
-{
-if (sizeof ($2))
-         return 0;
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$4
-int
-main ()
-{
-if (sizeof (($2)))
-            return 0;
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-
-else
-  eval "$3=yes"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-eval ac_res=\$$3
-               { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-$as_echo "$ac_res" >&6; }
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-
-} # ac_fn_c_check_type
-
 # ac_fn_c_compute_int LINENO EXPR VAR INCLUDES
 # --------------------------------------------
 # Tries to find the compile-time value of EXPR in a program that includes
@@ -2209,6 +2097,127 @@ rm -f conftest.val
 
 } # ac_fn_c_compute_int
 
+# ac_fn_c_check_func LINENO FUNC VAR
+# ----------------------------------
+# Tests whether FUNC exists, setting the cache variable VAR accordingly
+ac_fn_c_check_func ()
+{
+  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
+  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $2" >&5
+$as_echo_n "checking for $2... " >&6; }
+if eval \${$3+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+/* Define $2 to an innocuous variant, in case <limits.h> declares $2.
+   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
+#define $2 innocuous_$2
+
+/* System header to define __stub macros and hopefully few prototypes,
+    which can conflict with char $2 (); below.
+    Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
+    <limits.h> exists even on freestanding compilers.  */
+
+#ifdef __STDC__
+# include <limits.h>
+#else
+# include <assert.h>
+#endif
+
+#undef $2
+
+/* Override any GCC internal prototype to avoid an error.
+   Use char because int might match the return type of a GCC
+   builtin and then its argument prototype would still apply.  */
+#ifdef __cplusplus
+extern "C"
+#endif
+char $2 ();
+/* The GNU C library defines this for functions which it implements
+    to always fail with ENOSYS.  Some functions are actually named
+    something starting with __ and the normal name is an alias.  */
+#if defined __stub_$2 || defined __stub___$2
+choke me
+#endif
+
+int
+main ()
+{
+return $2 ();
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_link "$LINENO"; then :
+  eval "$3=yes"
+else
+  eval "$3=no"
+fi
+rm -f core conftest.err conftest.$ac_objext \
+    conftest$ac_exeext conftest.$ac_ext
+fi
+eval ac_res=\$$3
+               { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
+$as_echo "$ac_res" >&6; }
+  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
+
+} # ac_fn_c_check_func
+
+# ac_fn_c_check_type LINENO TYPE VAR INCLUDES
+# -------------------------------------------
+# Tests whether TYPE exists after having included INCLUDES, setting cache
+# variable VAR accordingly.
+ac_fn_c_check_type ()
+{
+  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
+  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $2" >&5
+$as_echo_n "checking for $2... " >&6; }
+if eval \${$3+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  eval "$3=no"
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+$4
+int
+main ()
+{
+if (sizeof ($2))
+         return 0;
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+$4
+int
+main ()
+{
+if (sizeof (($2)))
+            return 0;
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+
+else
+  eval "$3=yes"
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+fi
+eval ac_res=\$$3
+               { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
+$as_echo "$ac_res" >&6; }
+  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
+
+} # ac_fn_c_check_type
+
 # ac_fn_c_check_member LINENO AGGR MEMBER VAR INCLUDES
 # ----------------------------------------------------
 # Tries to find if the field MEMBER exists in type AGGR, after including
@@ -4642,47 +4651,6 @@ $as_echo "no" >&6; }
 fi
 
 
-# Extract the first word of "ent", so it can be a program name with args.
-set dummy ent; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_path_ENT+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  case $ENT in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_ENT="$ENT" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
-    ac_cv_path_ENT="$as_dir/$ac_word$ac_exec_ext"
-    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac
-fi
-ENT=$ac_cv_path_ENT
-if test -n "$ENT"; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ENT" >&5
-$as_echo "$ENT" >&6; }
-else
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
-
 # Extract the first word of "bash", so it can be a program name with args.
 set dummy bash; ac_word=$2
 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
@@ -5534,12 +5502,23 @@ $as_echo_n "checking if $CC supports compile flag -pipe... " >&6; }
 #include <stdlib.h>
 #include <stdio.h>
 int main(int argc, char **argv) {
+        (void)argv;
         /* Some math to catch -ftrapv problems in the toolchain */
         int i = 123 * argc, j = 456 + argc, k = 789 - argc;
         float l = i * 2.1;
         double m = l / 0.5;
         long long int n = argc * 12345LL, o = 12345LL * (long long int)argc;
         printf("%d %d %d %f %f %lld %lld\n", i, j, k, l, m, n, o);
+        /*
+         * Test fallthrough behaviour.  clang 10's -Wimplicit-fallthrough does
+         * not understand comments and we don't use the "fallthrough" attribute
+         * that it's looking for.
+         */
+        switch(i){
+        case 0: j += i;
+                /* FALLTHROUGH */
+        default: j += k;
+        }
         exit(0);
 }
 
@@ -5577,12 +5556,23 @@ $as_echo_n "checking if $CC supports compile flag -Wunknown-warning-option... "
 #include <stdlib.h>
 #include <stdio.h>
 int main(int argc, char **argv) {
+        (void)argv;
         /* Some math to catch -ftrapv problems in the toolchain */
         int i = 123 * argc, j = 456 + argc, k = 789 - argc;
         float l = i * 2.1;
         double m = l / 0.5;
         long long int n = argc * 12345LL, o = 12345LL * (long long int)argc;
         printf("%d %d %d %f %f %lld %lld\n", i, j, k, l, m, n, o);
+        /*
+         * Test fallthrough behaviour.  clang 10's -Wimplicit-fallthrough does
+         * not understand comments and we don't use the "fallthrough" attribute
+         * that it's looking for.
+         */
+        switch(i){
+        case 0: j += i;
+                /* FALLTHROUGH */
+        default: j += k;
+        }
         exit(0);
 }
 
@@ -5620,12 +5610,23 @@ $as_echo_n "checking if $CC supports compile flag -Wno-error=format-truncation..
 #include <stdlib.h>
 #include <stdio.h>
 int main(int argc, char **argv) {
+        (void)argv;
         /* Some math to catch -ftrapv problems in the toolchain */
         int i = 123 * argc, j = 456 + argc, k = 789 - argc;
         float l = i * 2.1;
         double m = l / 0.5;
         long long int n = argc * 12345LL, o = 12345LL * (long long int)argc;
         printf("%d %d %d %f %f %lld %lld\n", i, j, k, l, m, n, o);
+        /*
+         * Test fallthrough behaviour.  clang 10's -Wimplicit-fallthrough does
+         * not understand comments and we don't use the "fallthrough" attribute
+         * that it's looking for.
+         */
+        switch(i){
+        case 0: j += i;
+                /* FALLTHROUGH */
+        default: j += k;
+        }
         exit(0);
 }
 
@@ -5663,12 +5664,23 @@ $as_echo_n "checking if $CC supports compile flag -Qunused-arguments... " >&6; }
 #include <stdlib.h>
 #include <stdio.h>
 int main(int argc, char **argv) {
+        (void)argv;
         /* Some math to catch -ftrapv problems in the toolchain */
         int i = 123 * argc, j = 456 + argc, k = 789 - argc;
         float l = i * 2.1;
         double m = l / 0.5;
         long long int n = argc * 12345LL, o = 12345LL * (long long int)argc;
         printf("%d %d %d %f %f %lld %lld\n", i, j, k, l, m, n, o);
+        /*
+         * Test fallthrough behaviour.  clang 10's -Wimplicit-fallthrough does
+         * not understand comments and we don't use the "fallthrough" attribute
+         * that it's looking for.
+         */
+        switch(i){
+        case 0: j += i;
+                /* FALLTHROUGH */
+        default: j += k;
+        }
         exit(0);
 }
 
@@ -5706,12 +5718,23 @@ $as_echo_n "checking if $CC supports compile flag -Wall... " >&6; }
 #include <stdlib.h>
 #include <stdio.h>
 int main(int argc, char **argv) {
+        (void)argv;
         /* Some math to catch -ftrapv problems in the toolchain */
         int i = 123 * argc, j = 456 + argc, k = 789 - argc;
         float l = i * 2.1;
         double m = l / 0.5;
         long long int n = argc * 12345LL, o = 12345LL * (long long int)argc;
         printf("%d %d %d %f %f %lld %lld\n", i, j, k, l, m, n, o);
+        /*
+         * Test fallthrough behaviour.  clang 10's -Wimplicit-fallthrough does
+         * not understand comments and we don't use the "fallthrough" attribute
+         * that it's looking for.
+         */
+        switch(i){
+        case 0: j += i;
+                /* FALLTHROUGH */
+        default: j += k;
+        }
         exit(0);
 }
 
@@ -5749,12 +5772,23 @@ $as_echo_n "checking if $CC supports compile flag -Wextra... " >&6; }
 #include <stdlib.h>
 #include <stdio.h>
 int main(int argc, char **argv) {
+        (void)argv;
         /* Some math to catch -ftrapv problems in the toolchain */
         int i = 123 * argc, j = 456 + argc, k = 789 - argc;
         float l = i * 2.1;
         double m = l / 0.5;
         long long int n = argc * 12345LL, o = 12345LL * (long long int)argc;
         printf("%d %d %d %f %f %lld %lld\n", i, j, k, l, m, n, o);
+        /*
+         * Test fallthrough behaviour.  clang 10's -Wimplicit-fallthrough does
+         * not understand comments and we don't use the "fallthrough" attribute
+         * that it's looking for.
+         */
+        switch(i){
+        case 0: j += i;
+                /* FALLTHROUGH */
+        default: j += k;
+        }
         exit(0);
 }
 
@@ -5792,12 +5826,23 @@ $as_echo_n "checking if $CC supports compile flag -Wpointer-arith... " >&6; }
 #include <stdlib.h>
 #include <stdio.h>
 int main(int argc, char **argv) {
+        (void)argv;
         /* Some math to catch -ftrapv problems in the toolchain */
         int i = 123 * argc, j = 456 + argc, k = 789 - argc;
         float l = i * 2.1;
         double m = l / 0.5;
         long long int n = argc * 12345LL, o = 12345LL * (long long int)argc;
         printf("%d %d %d %f %f %lld %lld\n", i, j, k, l, m, n, o);
+        /*
+         * Test fallthrough behaviour.  clang 10's -Wimplicit-fallthrough does
+         * not understand comments and we don't use the "fallthrough" attribute
+         * that it's looking for.
+         */
+        switch(i){
+        case 0: j += i;
+                /* FALLTHROUGH */
+        default: j += k;
+        }
         exit(0);
 }
 
@@ -5835,12 +5880,23 @@ $as_echo_n "checking if $CC supports compile flag -Wuninitialized... " >&6; }
 #include <stdlib.h>
 #include <stdio.h>
 int main(int argc, char **argv) {
+        (void)argv;
         /* Some math to catch -ftrapv problems in the toolchain */
         int i = 123 * argc, j = 456 + argc, k = 789 - argc;
         float l = i * 2.1;
         double m = l / 0.5;
         long long int n = argc * 12345LL, o = 12345LL * (long long int)argc;
         printf("%d %d %d %f %f %lld %lld\n", i, j, k, l, m, n, o);
+        /*
+         * Test fallthrough behaviour.  clang 10's -Wimplicit-fallthrough does
+         * not understand comments and we don't use the "fallthrough" attribute
+         * that it's looking for.
+         */
+        switch(i){
+        case 0: j += i;
+                /* FALLTHROUGH */
+        default: j += k;
+        }
         exit(0);
 }
 
@@ -5878,12 +5934,23 @@ $as_echo_n "checking if $CC supports compile flag -Wsign-compare... " >&6; }
 #include <stdlib.h>
 #include <stdio.h>
 int main(int argc, char **argv) {
+        (void)argv;
         /* Some math to catch -ftrapv problems in the toolchain */
         int i = 123 * argc, j = 456 + argc, k = 789 - argc;
         float l = i * 2.1;
         double m = l / 0.5;
         long long int n = argc * 12345LL, o = 12345LL * (long long int)argc;
         printf("%d %d %d %f %f %lld %lld\n", i, j, k, l, m, n, o);
+        /*
+         * Test fallthrough behaviour.  clang 10's -Wimplicit-fallthrough does
+         * not understand comments and we don't use the "fallthrough" attribute
+         * that it's looking for.
+         */
+        switch(i){
+        case 0: j += i;
+                /* FALLTHROUGH */
+        default: j += k;
+        }
         exit(0);
 }
 
@@ -5921,12 +5988,23 @@ $as_echo_n "checking if $CC supports compile flag -Wformat-security... " >&6; }
 #include <stdlib.h>
 #include <stdio.h>
 int main(int argc, char **argv) {
+        (void)argv;
         /* Some math to catch -ftrapv problems in the toolchain */
         int i = 123 * argc, j = 456 + argc, k = 789 - argc;
         float l = i * 2.1;
         double m = l / 0.5;
         long long int n = argc * 12345LL, o = 12345LL * (long long int)argc;
         printf("%d %d %d %f %f %lld %lld\n", i, j, k, l, m, n, o);
+        /*
+         * Test fallthrough behaviour.  clang 10's -Wimplicit-fallthrough does
+         * not understand comments and we don't use the "fallthrough" attribute
+         * that it's looking for.
+         */
+        switch(i){
+        case 0: j += i;
+                /* FALLTHROUGH */
+        default: j += k;
+        }
         exit(0);
 }
 
@@ -5964,12 +6042,23 @@ $as_echo_n "checking if $CC supports compile flag -Wsizeof-pointer-memaccess...
 #include <stdlib.h>
 #include <stdio.h>
 int main(int argc, char **argv) {
+        (void)argv;
         /* Some math to catch -ftrapv problems in the toolchain */
         int i = 123 * argc, j = 456 + argc, k = 789 - argc;
         float l = i * 2.1;
         double m = l / 0.5;
         long long int n = argc * 12345LL, o = 12345LL * (long long int)argc;
         printf("%d %d %d %f %f %lld %lld\n", i, j, k, l, m, n, o);
+        /*
+         * Test fallthrough behaviour.  clang 10's -Wimplicit-fallthrough does
+         * not understand comments and we don't use the "fallthrough" attribute
+         * that it's looking for.
+         */
+        switch(i){
+        case 0: j += i;
+                /* FALLTHROUGH */
+        default: j += k;
+        }
         exit(0);
 }
 
@@ -6007,12 +6096,77 @@ $as_echo_n "checking if $CC supports compile flag -Wpointer-sign... " >&6; }
 #include <stdlib.h>
 #include <stdio.h>
 int main(int argc, char **argv) {
+        (void)argv;
+        /* Some math to catch -ftrapv problems in the toolchain */
+        int i = 123 * argc, j = 456 + argc, k = 789 - argc;
+        float l = i * 2.1;
+        double m = l / 0.5;
+        long long int n = argc * 12345LL, o = 12345LL * (long long int)argc;
+        printf("%d %d %d %f %f %lld %lld\n", i, j, k, l, m, n, o);
+        /*
+         * Test fallthrough behaviour.  clang 10's -Wimplicit-fallthrough does
+         * not understand comments and we don't use the "fallthrough" attribute
+         * that it's looking for.
+         */
+        switch(i){
+        case 0: j += i;
+                /* FALLTHROUGH */
+        default: j += k;
+        }
+        exit(0);
+}
+
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+
+if $ac_cv_path_EGREP -i "unrecognized option|warning.*ignored" conftest.err >/dev/null
+then
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+                CFLAGS="$saved_CFLAGS"
+else
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
+                 CFLAGS="$saved_CFLAGS $_define_flag"
+fi
+else
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+                  CFLAGS="$saved_CFLAGS"
+
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+}
+        {
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking if $CC supports compile flag -Wunused-parameter" >&5
+$as_echo_n "checking if $CC supports compile flag -Wunused-parameter... " >&6; }
+        saved_CFLAGS="$CFLAGS"
+        CFLAGS="$CFLAGS $WERROR -Wunused-parameter"
+        _define_flag="-Wno-unused-parameter"
+        test "x$_define_flag" = "x" && _define_flag="-Wunused-parameter"
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+#include <stdlib.h>
+#include <stdio.h>
+int main(int argc, char **argv) {
+        (void)argv;
         /* Some math to catch -ftrapv problems in the toolchain */
         int i = 123 * argc, j = 456 + argc, k = 789 - argc;
         float l = i * 2.1;
         double m = l / 0.5;
         long long int n = argc * 12345LL, o = 12345LL * (long long int)argc;
         printf("%d %d %d %f %f %lld %lld\n", i, j, k, l, m, n, o);
+        /*
+         * Test fallthrough behaviour.  clang 10's -Wimplicit-fallthrough does
+         * not understand comments and we don't use the "fallthrough" attribute
+         * that it's looking for.
+         */
+        switch(i){
+        case 0: j += i;
+                /* FALLTHROUGH */
+        default: j += k;
+        }
         exit(0);
 }
 
@@ -6050,12 +6204,23 @@ $as_echo_n "checking if $CC supports compile flag -Wunused-result... " >&6; }
 #include <stdlib.h>
 #include <stdio.h>
 int main(int argc, char **argv) {
+        (void)argv;
         /* Some math to catch -ftrapv problems in the toolchain */
         int i = 123 * argc, j = 456 + argc, k = 789 - argc;
         float l = i * 2.1;
         double m = l / 0.5;
         long long int n = argc * 12345LL, o = 12345LL * (long long int)argc;
         printf("%d %d %d %f %f %lld %lld\n", i, j, k, l, m, n, o);
+        /*
+         * Test fallthrough behaviour.  clang 10's -Wimplicit-fallthrough does
+         * not understand comments and we don't use the "fallthrough" attribute
+         * that it's looking for.
+         */
+        switch(i){
+        case 0: j += i;
+                /* FALLTHROUGH */
+        default: j += k;
+        }
         exit(0);
 }
 
@@ -6093,12 +6258,23 @@ $as_echo_n "checking if $CC supports compile flag -Wimplicit-fallthrough... " >&
 #include <stdlib.h>
 #include <stdio.h>
 int main(int argc, char **argv) {
+        (void)argv;
         /* Some math to catch -ftrapv problems in the toolchain */
         int i = 123 * argc, j = 456 + argc, k = 789 - argc;
         float l = i * 2.1;
         double m = l / 0.5;
         long long int n = argc * 12345LL, o = 12345LL * (long long int)argc;
         printf("%d %d %d %f %f %lld %lld\n", i, j, k, l, m, n, o);
+        /*
+         * Test fallthrough behaviour.  clang 10's -Wimplicit-fallthrough does
+         * not understand comments and we don't use the "fallthrough" attribute
+         * that it's looking for.
+         */
+        switch(i){
+        case 0: j += i;
+                /* FALLTHROUGH */
+        default: j += k;
+        }
         exit(0);
 }
 
@@ -6136,12 +6312,23 @@ $as_echo_n "checking if $CC supports compile flag -fno-strict-aliasing... " >&6;
 #include <stdlib.h>
 #include <stdio.h>
 int main(int argc, char **argv) {
+        (void)argv;
         /* Some math to catch -ftrapv problems in the toolchain */
         int i = 123 * argc, j = 456 + argc, k = 789 - argc;
         float l = i * 2.1;
         double m = l / 0.5;
         long long int n = argc * 12345LL, o = 12345LL * (long long int)argc;
         printf("%d %d %d %f %f %lld %lld\n", i, j, k, l, m, n, o);
+        /*
+         * Test fallthrough behaviour.  clang 10's -Wimplicit-fallthrough does
+         * not understand comments and we don't use the "fallthrough" attribute
+         * that it's looking for.
+         */
+        switch(i){
+        case 0: j += i;
+                /* FALLTHROUGH */
+        default: j += k;
+        }
         exit(0);
 }
 
@@ -6180,12 +6367,23 @@ $as_echo_n "checking if $CC supports compile flag -mretpoline... " >&6; }
 #include <stdlib.h>
 #include <stdio.h>
 int main(int argc, char **argv) {
+        (void)argv;
         /* Some math to catch -ftrapv problems in the toolchain */
         int i = 123 * argc, j = 456 + argc, k = 789 - argc;
         float l = i * 2.1;
         double m = l / 0.5;
         long long int n = argc * 12345LL, o = 12345LL * (long long int)argc;
         printf("%d %d %d %f %f %lld %lld\n", i, j, k, l, m, n, o);
+        /*
+         * Test fallthrough behaviour.  clang 10's -Wimplicit-fallthrough does
+         * not understand comments and we don't use the "fallthrough" attribute
+         * that it's looking for.
+         */
+        switch(i){
+        case 0: j += i;
+                /* FALLTHROUGH */
+        default: j += k;
+        }
         exit(0);
 }
 
@@ -6223,6 +6421,7 @@ $as_echo_n "checking if $LD supports link flag -Wl,-z,retpolineplt... " >&6; }
 #include <stdlib.h>
 #include <stdio.h>
 int main(int argc, char **argv) {
+        (void)argv;
         /* Some math to catch -ftrapv problems in the toolchain */
         int i = 123 * argc, j = 456 + argc, k = 789 - argc;
         float l = i * 2.1;
@@ -6268,12 +6467,23 @@ $as_echo_n "checking if $CC supports compile flag -D_FORTIFY_SOURCE=2... " >&6;
 #include <stdlib.h>
 #include <stdio.h>
 int main(int argc, char **argv) {
+        (void)argv;
         /* Some math to catch -ftrapv problems in the toolchain */
         int i = 123 * argc, j = 456 + argc, k = 789 - argc;
         float l = i * 2.1;
         double m = l / 0.5;
         long long int n = argc * 12345LL, o = 12345LL * (long long int)argc;
         printf("%d %d %d %f %f %lld %lld\n", i, j, k, l, m, n, o);
+        /*
+         * Test fallthrough behaviour.  clang 10's -Wimplicit-fallthrough does
+         * not understand comments and we don't use the "fallthrough" attribute
+         * that it's looking for.
+         */
+        switch(i){
+        case 0: j += i;
+                /* FALLTHROUGH */
+        default: j += k;
+        }
         exit(0);
 }
 
@@ -6311,6 +6521,7 @@ $as_echo_n "checking if $LD supports link flag -Wl,-z,relro... " >&6; }
 #include <stdlib.h>
 #include <stdio.h>
 int main(int argc, char **argv) {
+        (void)argv;
         /* Some math to catch -ftrapv problems in the toolchain */
         int i = 123 * argc, j = 456 + argc, k = 789 - argc;
         float l = i * 2.1;
@@ -6356,6 +6567,7 @@ $as_echo_n "checking if $LD supports link flag -Wl,-z,now... " >&6; }
 #include <stdlib.h>
 #include <stdio.h>
 int main(int argc, char **argv) {
+        (void)argv;
         /* Some math to catch -ftrapv problems in the toolchain */
         int i = 123 * argc, j = 456 + argc, k = 789 - argc;
         float l = i * 2.1;
@@ -6401,6 +6613,7 @@ $as_echo_n "checking if $LD supports link flag -Wl,-z,noexecstack... " >&6; }
 #include <stdlib.h>
 #include <stdio.h>
 int main(int argc, char **argv) {
+        (void)argv;
         /* Some math to catch -ftrapv problems in the toolchain */
         int i = 123 * argc, j = 456 + argc, k = 789 - argc;
         float l = i * 2.1;
@@ -6451,6 +6664,7 @@ $as_echo_n "checking if $CC supports compile flag -ftrapv and linking succeeds..
 #include <stdlib.h>
 #include <stdio.h>
 int main(int argc, char **argv) {
+        (void)argv;
         /* Some math to catch -ftrapv problems in the toolchain */
         int i = 123 * argc, j = 456 + argc, k = 789 - argc;
         float l = i * 2.1;
@@ -7052,6 +7266,40 @@ SPP_MSG="no"
 # the --with-solaris-privs option and --with-sandbox=solaris).
 SOLARIS_PRIVS="no"
 
+# The cast to long int works around a bug in the HP C Compiler
+# version HP92453-01 B.11.11.23709.GP, which incorrectly rejects
+# declarations like `int a3[[(sizeof (unsigned char)) >= 0]];'.
+# This bug is HP SR number 8606223364.
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking size of size_t" >&5
+$as_echo_n "checking size of size_t... " >&6; }
+if ${ac_cv_sizeof_size_t+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  if ac_fn_c_compute_int "$LINENO" "(long int) (sizeof (size_t))" "ac_cv_sizeof_size_t"        "$ac_includes_default"; then :
+
+else
+  if test "$ac_cv_type_size_t" = yes; then
+     { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
+$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
+as_fn_error 77 "cannot compute sizeof (size_t)
+See \`config.log' for more details" "$LINENO" 5; }
+   else
+     ac_cv_sizeof_size_t=0
+   fi
+fi
+
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_sizeof_size_t" >&5
+$as_echo "$ac_cv_sizeof_size_t" >&6; }
+
+
+
+cat >>confdefs.h <<_ACEOF
+#define SIZEOF_SIZE_T $ac_cv_sizeof_size_t
+_ACEOF
+
+
+
 # Check for some target-specific stuff
 case "$host" in
 *-*-aix*)
@@ -7385,12 +7633,23 @@ $as_echo_n "checking if $CC supports compile flag -Wno-attributes... " >&6; }
 #include <stdlib.h>
 #include <stdio.h>
 int main(int argc, char **argv) {
+        (void)argv;
         /* Some math to catch -ftrapv problems in the toolchain */
         int i = 123 * argc, j = 456 + argc, k = 789 - argc;
         float l = i * 2.1;
         double m = l / 0.5;
         long long int n = argc * 12345LL, o = 12345LL * (long long int)argc;
         printf("%d %d %d %f %f %lld %lld\n", i, j, k, l, m, n, o);
+        /*
+         * Test fallthrough behaviour.  clang 10's -Wimplicit-fallthrough does
+         * not understand comments and we don't use the "fallthrough" attribute
+         * that it's looking for.
+         */
+        switch(i){
+        case 0: j += i;
+                /* FALLTHROUGH */
+        default: j += k;
+        }
         exit(0);
 }
 
@@ -7437,7 +7696,9 @@ $as_echo "assume it is working" >&6; }
 else
   cat confdefs.h - <<_ACEOF >conftest.$ac_ext
 /* end confdefs.h.  */
- #include <mach-o/dyld.h>
+
+#include <mach-o/dyld.h>
+#include <stdlib.h>
 main() { if (NSVersionOfRunTimeLibrary("System") >= (60 << 16))
                 exit(0);
         else
@@ -7974,6 +8235,10 @@ $as_echo_n "checking for seccomp architecture... " >&6; }
         case "$host" in
         x86_64-*)
                 seccomp_audit_arch=AUDIT_ARCH_X86_64
+                # X32: AMD64 instructions in 32bit address space.
+                if test "x$ac_cv_sizeof_size_t" = "x4" ; then
+                        seccomp_audit_arch=AUDIT_ARCH_I386
+                fi
                 ;;
         i*86-*)
                 seccomp_audit_arch=AUDIT_ARCH_I386
@@ -8022,6 +8287,9 @@ $as_echo_n "checking for seccomp architecture... " >&6; }
                         ;;
                 esac
                 ;;
+        riscv64-*)
+                seccomp_audit_arch=AUDIT_ARCH_RISCV64
+                ;;
         esac
         if test "x$seccomp_audit_arch" != "x" ; then
                 { $as_echo "$as_me:${as_lineno-$LINENO}: result: \"$seccomp_audit_arch\"" >&5
@@ -8773,7 +9041,7 @@ $as_echo "$as_me: WARNING: cross compiling: not checking compiler sanity" >&2;}
 else
   cat confdefs.h - <<_ACEOF >conftest.$ac_ext
 /* end confdefs.h.  */
- #include <stdio.h>
+ #include <stdlib.h>
 int
 main ()
 {
@@ -8925,6 +9193,7 @@ else
 
 #include <libgen.h>
 #include <string.h>
+#include <stdlib.h>
 
 int main(int argc, char **argv) {
     char *s, buf[32];
@@ -10308,6 +10577,8 @@ else
 
 #include <sys/types.h>
 #include <dirent.h>
+#include <stdlib.h>
+
 int
 main ()
 {
@@ -10692,7 +10963,10 @@ fi
 $as_echo_n "checking if libedit version is compatible... " >&6; }
                 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
 /* end confdefs.h.  */
- #include <histedit.h>
+
+#include <histedit.h>
+#include <stdlib.h>
+
 int
 main ()
 {
@@ -10936,12 +11210,23 @@ $as_echo_n "checking if $CC supports compile flag -fPIE... " >&6; }
 #include <stdlib.h>
 #include <stdio.h>
 int main(int argc, char **argv) {
+        (void)argv;
         /* Some math to catch -ftrapv problems in the toolchain */
         int i = 123 * argc, j = 456 + argc, k = 789 - argc;
         float l = i * 2.1;
         double m = l / 0.5;
         long long int n = argc * 12345LL, o = 12345LL * (long long int)argc;
         printf("%d %d %d %f %f %lld %lld\n", i, j, k, l, m, n, o);
+        /*
+         * Test fallthrough behaviour.  clang 10's -Wimplicit-fallthrough does
+         * not understand comments and we don't use the "fallthrough" attribute
+         * that it's looking for.
+         */
+        switch(i){
+        case 0: j += i;
+                /* FALLTHROUGH */
+        default: j += k;
+        }
         exit(0);
 }
 
@@ -10979,6 +11264,7 @@ $as_echo_n "checking if $LD supports link flag -pie... " >&6; }
 #include <stdlib.h>
 #include <stdio.h>
 int main(int argc, char **argv) {
+        (void)argv;
         /* Some math to catch -ftrapv problems in the toolchain */
         int i = 123 * argc, j = 456 + argc, k = 789 - argc;
         float l = i * 2.1;
@@ -11955,7 +12241,10 @@ $as_echo "$as_me: WARNING: cross compiling: assuming working" >&2;}
 else
   cat confdefs.h - <<_ACEOF >conftest.$ac_ext
 /* end confdefs.h.  */
+
 #include <stdio.h>
+#include <stdlib.h>
+
 int
 main ()
 {
@@ -12163,7 +12452,10 @@ $as_echo "$as_me: WARNING: cross compiling: Assuming working snprintf()" >&2;}
 else
   cat confdefs.h - <<_ACEOF >conftest.$ac_ext
 /* end confdefs.h.  */
- #include <stdio.h>
+
+#include <stdio.h>
+#include <stdlib.h>
+
 int
 main ()
 {
@@ -12209,6 +12501,8 @@ else
 
 #include <sys/types.h>
 #include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
 
 int
 main ()
@@ -12389,6 +12683,7 @@ else
 /* end confdefs.h.  */
 
 #include <stdlib.h>
+#include <unistd.h>
 
 int
 main ()
@@ -12438,6 +12733,8 @@ else
 /* end confdefs.h.  */
 
 #include <stdio.h>
+#include <stdlib.h>
+#include <unistd.h>
 #include <sys/fcntl.h>
 #include <sys/types.h>
 #include <sys/wait.h>
@@ -12507,6 +12804,7 @@ else
 /* end confdefs.h.  */
 
 #include <stdio.h>
+#include <stdlib.h>
 #include <sys/socket.h>
 #include <netdb.h>
 #include <errno.h>
@@ -12598,6 +12896,7 @@ else
 /* end confdefs.h.  */
 
 #include <stdio.h>
+#include <stdlib.h>
 #include <sys/socket.h>
 #include <netdb.h>
 #include <errno.h>
@@ -12687,7 +12986,10 @@ if test "x$check_for_conflicting_getspnam" = "x1"; then
 $as_echo_n "checking for conflicting getspnam in shadow.h... " >&6; }
         cat confdefs.h - <<_ACEOF >conftest.$ac_ext
 /* end confdefs.h.  */
- #include <shadow.h>
+
+#include <shadow.h>
+#include <stdlib.h>
+
 int
 main ()
 {
@@ -12731,6 +13033,7 @@ else
 #include <signal.h>
 #include <stdlib.h>
 #include <string.h>
+#include <unistd.h>
 #include <vis.h>
 static void sighandler(int sig) { _exit(1); }
 
@@ -12782,6 +13085,7 @@ else
 #include <sys/time.h>
 #include <stdlib.h>
 #include <signal.h>
+#include <unistd.h>
 static void sighandler(int sig) { }
 
 int
@@ -13064,6 +13368,7 @@ else
 /* end confdefs.h.  */
 
         #include <stdio.h>
+        #include <stdlib.h>
         #include <string.h>
         #include <openssl/opensslv.h>
         #include <openssl/crypto.h>
@@ -13147,6 +13452,7 @@ else
   cat confdefs.h - <<_ACEOF >conftest.$ac_ext
 /* end confdefs.h.  */
 
+        #include <stdlib.h>
         #include <string.h>
         #include <openssl/opensslv.h>
         #include <openssl/crypto.h>
@@ -13387,6 +13693,7 @@ $as_echo_n "checking whether OpenSSL has crippled AES support... " >&6; }
         cat confdefs.h - <<_ACEOF >conftest.$ac_ext
 /* end confdefs.h.  */
 
+        #include <stdlib.h>
         #include <string.h>
         #include <openssl/evp.h>
 
@@ -13424,6 +13731,7 @@ $as_echo_n "checking whether OpenSSL has AES CTR via EVP... " >&6; }
         cat confdefs.h - <<_ACEOF >conftest.$ac_ext
 /* end confdefs.h.  */
 
+        #include <stdlib.h>
         #include <string.h>
         #include <openssl/evp.h>
 
@@ -13463,6 +13771,7 @@ $as_echo_n "checking whether OpenSSL has AES GCM via EVP... " >&6; }
         cat confdefs.h - <<_ACEOF >conftest.$ac_ext
 /* end confdefs.h.  */
 
+        #include <stdlib.h>
         #include <string.h>
         #include <openssl/evp.h>
 
@@ -13508,6 +13817,7 @@ $as_echo_n "checking if EVP_DigestUpdate returns an int... " >&6; }
         cat confdefs.h - <<_ACEOF >conftest.$ac_ext
 /* end confdefs.h.  */
 
+        #include <stdlib.h>
         #include <string.h>
         #include <openssl/evp.h>
 
@@ -13769,6 +14079,7 @@ else
   cat confdefs.h - <<_ACEOF >conftest.$ac_ext
 /* end confdefs.h.  */
 
+        #include <stdlib.h>
         #include <openssl/ec.h>
         #include <openssl/ecdh.h>
         #include <openssl/ecdsa.h>
@@ -14144,6 +14455,27 @@ else
    as_fn_error $? "no usable libfido2 found" "$LINENO" 5
 fi
 
+        saved_LIBS="$LIBS"
+        LIBS="$LIBS $LIBFIDO2"
+        for ac_func in  \
+                fido_cred_prot \
+                fido_cred_set_prot \
+                fido_dev_get_touch_begin \
+                fido_dev_get_touch_status \
+                fido_dev_supports_cred_prot \
+
+do :
+  as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
+ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
+if eval test \"x\$"$as_ac_var"\" = x"yes"; then :
+  cat >>confdefs.h <<_ACEOF
+#define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1
+_ACEOF
+
+fi
+done
+
+        LIBS="$saved_LIBS"
         ac_fn_c_check_header_mongrel "$LINENO" "fido.h" "ac_cv_header_fido_h" "$ac_includes_default"
 if test "x$ac_cv_header_fido_h" = xyes; then :
 
@@ -14261,6 +14593,7 @@ else
   cat confdefs.h - <<_ACEOF >conftest.$ac_ext
 /* end confdefs.h.  */
 
+        #include <stdlib.h>
         #include <string.h>
         #include <openssl/rand.h>
 
@@ -15145,6 +15478,7 @@ else
 /* end confdefs.h.  */
 
 #include <stdio.h>
+#include <stdlib.h>
 /* Why is this so damn hard? */
 #ifdef __GNUC__
 # undef __GNUC__
@@ -16500,6 +16834,7 @@ else
 /* end confdefs.h.  */
 
 #include <stdio.h>
+#include <stdlib.h>
 #include <string.h>
 #ifdef HAVE_SNPRINTF
 main()
@@ -17199,6 +17534,45 @@ $as_echo "no" >&6; }
         fi
 
 
+# look for field 'ut_ss' in header 'utmpx.h'
+                ossh_safe=`echo "utmpx.h" | sed 'y%./+-%__p_%'`
+                ossh_varname="ossh_cv_$ossh_safe""_has_"ut_ss
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ut_ss field in utmpx.h" >&5
+$as_echo_n "checking for ut_ss field in utmpx.h... " >&6; }
+        if eval \${$ossh_varname+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+
+                cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+#include <utmpx.h>
+
+_ACEOF
+if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
+  $EGREP "ut_ss" >/dev/null 2>&1; then :
+                        eval "$ossh_varname=yes"
+else
+                        eval "$ossh_varname=no"
+fi
+rm -f conftest*
+
+fi
+
+        ossh_result=`eval 'echo $'"$ossh_varname"`
+        if test -n "`echo $ossh_varname`"; then
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ossh_result" >&5
+$as_echo "$ossh_result" >&6; }
+                if test "x$ossh_result" = "xyes"; then
+
+$as_echo "#define HAVE_SS_IN_UTMPX 1" >>confdefs.h
+
+                fi
+        else
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+        fi
+
+
 ac_fn_c_check_member "$LINENO" "struct stat" "st_blksize" "ac_cv_member_struct_stat_st_blksize" "$ac_includes_default"
 if test "x$ac_cv_member_struct_stat_st_blksize" = xyes; then :
 
@@ -17387,6 +17761,7 @@ else
 #include <sys/types.h>
 #include <sys/socket.h>
 #include <sys/uio.h>
+#include <stdlib.h>
 
 int
 main ()
@@ -17524,6 +17899,7 @@ else
 #include <sys/types.h>
 #include <sys/socket.h>
 #include <sys/uio.h>
+#include <stdlib.h>
 
 int
 main ()
@@ -17566,7 +17942,7 @@ else
 
         cat confdefs.h - <<_ACEOF >conftest.$ac_ext
 /* end confdefs.h.  */
-
+ #include <stdio.h>
 int
 main ()
 {
@@ -17782,7 +18158,7 @@ else
 
         cat confdefs.h - <<_ACEOF >conftest.$ac_ext
 /* end confdefs.h.  */
-
+ #include <stdio.h>
 int
 main ()
 {
@@ -17818,7 +18194,7 @@ else
 
         cat confdefs.h - <<_ACEOF >conftest.$ac_ext
 /* end confdefs.h.  */
-
+ #include <stdio.h>
 int
 main ()
 {
@@ -18234,8 +18610,6 @@ else
   as_fn_error $? "SELinux support requires libselinux library" "$LINENO" 5
 fi
 
-                SSHLIBS="$SSHLIBS $LIBSELINUX"
-                SSHDLIBS="$SSHDLIBS $LIBSELINUX"
                 for ac_func in getseuserbyname get_default_context_with_level
 do :
   as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
@@ -18248,14 +18622,13 @@ _ACEOF
 fi
 done
 
-                LIBS="$save_LIBS"
+                LIBS="$save_LIBS $LIBSELINUX"
         fi
 
 fi
 
 
 
-
 # Check whether user wants Kerberos 5 support
 KRB5_MSG="no"
 
@@ -19058,6 +19431,7 @@ else
 /* end confdefs.h.  */
 
 #include <stdio.h>
+#include <stdlib.h>
 #include <string.h>
 #ifdef HAVE_PATHS_H
 #include <paths.h>
@@ -19442,6 +19816,7 @@ else
 
 /* find out what STDPATH is */
 #include <stdio.h>
+#include <stdlib.h>
 #ifdef HAVE_PATHS_H
 # include <paths.h>
 #endif
@@ -21426,9 +21801,6 @@ echo "         Libraries: ${LIBS}"
 if test ! -z "${SSHDLIBS}"; then
 echo "         +for sshd: ${SSHDLIBS}"
 fi
-if test ! -z "${SSHLIBS}"; then
-echo "          +for ssh: ${SSHLIBS}"
-fi
 
 echo ""