Merge branch 'debian-merge-0.2.9' into debian

* debian-merge-0.2.9:
  New upstream version: 0.2.9.4-alpha
  release-notes for 0.2.8.9
  bump to 0.2.8.9
  Fold 20384 into changelog
  Update the buffer sentinel fix to work with our #20081 fix.
  Add a one-word sentinel value of 0x0 at the end of each buf_t chunk
  changelog typo fixes from Rubiate
  Bump version to 0.2.9.4-alpha.
  edits to changelog from kate and david
  Wrap the changelog, add a blurb
  Start on an 0.2.9.4-alpha changelog
  Fix a syntax problem
  changes file for module docs
  Write a bunch of module documentation.
  Add a logic-consistency test when parsing unix socket configs
  Whitespace cleaning
  adding instructions how to include new test files
  Make the FreeBSD ersatz_socketpair test even more skippable.
  Extract ExitPolicy-and-IPv6Exit check into a new function
  ersatz socketpair tests: work around freebsd jails.
  Tweak patch for 18529.
  Remove duplicate code that checks for default authorities
  Fix a bug in displaying IPv6 addrs in test_op_ipv6_ with --verbose
  Switch from "AF_UNIX is always equal" to "always unequal" to avoid wacky bugs. See discussion on 20261
  Fix a new compilation warning with broken-mulodi i386 clang builds. :(
  Fix spurious compiler warning in do_getpass().
  torrc parsing b0rks on carriage-return
  Bug 20261: Treat AF_UNIX addresses as equal when comparing them.
  Fix non-triggerable heap corruption at do_getpass().
  Stop implying that we support openssl 1.0.0; we don't.
  comment tweak. Fixes 20271. patch from pastly.
  Only use -levent when checking functions if we will use it to link.
  dircollate: Use correct tor_calloc args.
  Clean up and fix exit policy check in connection_exit_connect().
  Update geoip and geoip6 to the October 6 2016 database.
  Allow a unix: address to contain a C-style quoted string.
  Add TAGS to gitignore.
  Teach 'make tags' about MOCK_IMPL.
  Avoid reordering IPv6 interface addresses
  Fix parse_virtual_addr_network minimum network size
  remove whitespace accidentally added in 4f1a04ff
  remove confusing comment about conditional consensus download
  Bug 20261: Disable IsolateClientAddr on AF_LOCAL SocksPorts.
  Fix memory leak from prop264 branch. CID 1373401
  fix a warning in protover.
  protovers: during voting, assert that we are not voting to shut down.
  Remove version_known, and subtly change the meaning of protocols_known
  Rename "proto " to "pr " in consensuses
  Update prop264 implementation to split HSMid->HS{Intro,Rend}
  prop264: sometimes check client _and_ server versions.
  Rename get_supported_protocols to protover_get_supported_protocols
  Rename compute_protover_vote to protover_compute_vote
  Changes file for prop264 / ticket 19958.
  Update authority votes to match updated proposal.
  Clean whitespace, add missing documentation
  Remove DoS vector in protover.c voting code
  Use protocols to see when EXTEND2 support exists.
  Vote on 'proto' lines and include them after 'v' lines.
  Include protocol versions in votes.
  Workaround a test bug
  Implement voting on the protocol-version options
  Include protocol version lines in votes.
  Remove a little duplicated code before it becomes a lot
  Add code to infer protocol versions for old Tor versions.
  Cover the error cases of parsing protocol versions
  Unit tests for protover_all_supported
  Basic backend for the protocol-versions voting algorithm.
  Actually check for missing protocols and exit as appropriate.
  Add necessary code to parse and handle required/recommended protocols
  Emit and parse protocol lists in router descriptors
  checkpoint basic protover backend
  changes file for osx sierra fixes
  Fix pthread_cond_timedwait() on OSX Sierra
  Fix compilation on OSX Sierra (10.12)
  Bump to 0.2.9.3-alpha-dev
  Bump to 0.2.8.8-dev.
  Simplify a few functions that dont need to call get_latest_consensus() so much
  fix wide lines
  Remove current_consensus macro.
  Unit tests for proposal 271 client-side implementation
  prop272: Believe that all routers are Valid and Running.