twice.

--HG--
extra : convert_revision : eac2a177021cfa0cbf365d5821fe6c8a0a5dc758

--HG--
extra : convert_revision : 9c39c3f447a47f61606df5d4bee364a449f12e18

cli-authpubkey.c:
    fix leak of keybuf

cli-kex.c:
    fix leak of fingerprint fp

cli-service.c:
    remove commented out code

dropbearkey.c:
    don't attepmt to free NULL key on failure

common-kex.c:
    only free key if it is initialised

keyimport.c:
    remove dead encrypted-key code
    don't leak a FILE* loading OpenSSH keys

rsa.c, dss.c:
    check return values for some libtommath functions

svr-kex.c:
    check return value retrieving DH kex mpint

svr-tcpfwd.c:
    fix null-dereference if remote tcp forward request fails

tcp-accept.c:
    don't incorrectly free the tcpinfo var

--HG--
extra : convert_revision : 640a55bc710cbaa6d212453c750026c770e19193

--HG--
extra : convert_revision : 838e354daf3ae9a1dce710526c37fec9859ee6d1

--HG--
extra : convert_revision : d928bc851e32be7bd429bf7504b148c0e4bf7e2f

--HG--
extra : convert_revision : 75c02f80c4ed25bd4697e7f17ffac6eded54c148

--HG--
extra : convert_revision : 149ce7a9a9cc5fe670994d6789b40be49895c595

--HG--
extra : convert_revision : fbbf404290f3fea3dfa9f6f53eba9389057e9044

- rearrange the runopts code for client and server (hostkey reading is needed
  by both (if the client is doing pubkey auth. otherwise....))

--HG--
extra : convert_revision : 5420858803bfff1e27dfe7fa877ba6fdd747e0c5

remote hostkey verification though.

--HG--
extra : convert_revision : 8635abe49e499e16d44a8ee79d474dc35257e9cc