This function returned an uninitialized return value in case no
sessions had been opened by the application.

libseccomp

Initialize seccomp again in dispatch threads, only requiring a
small subset of the syscalls required by the parent process.

Rewrite to use open() instead of fopen() to avoid having to
seccomp-allow the mmap() syscall.

The list of allowed syscalls is shrinked by postponing seccomp
initialization to after the PKCS#11 module is initialized and
the network socket is opened.

TLS-PSK

more stuff

Code to pass NULL strings was only used in C_InitToken, but since
the argument there was really space padded and not NULL terminated,
this code is no longer needed.

PKCS#11 v2.2 is very clear that the 'label' argument provided to
C_InitToken is *not* necessarily NULL-terminated, but rather of
fixed size (32 bytes) and whitespace-padded.

Two potential issues reported by clang.

Threads on pkcs11-proxy map to applications rather than threads in the
PKCS#11 (v2.2) specification. It is therefor important to not close
sessions opened by other threads in C_CloseAllSessions.

Since p11proxy is a threaded application, the underlying p11
module should do locking (the proxy does no locking).

New name : gck_rpc_parse_host_port().

Resolve host/service to listen on using getaddrinfo().

several bug fixes

I am a bit uncertain about this change, since both NULL and non-NULL
will make test cases fail within the SoftHSM test suite for example
(some SoftHSM C_ functions want the pointer to be NULL when there
are no attributes, and some allow (expect) it to be possible to pass a
non-NULL pointer with a zero count).

It seems that making it a NULL pointer when the count is 0 is the most
sensible thing though. How could the C_ function use the data pointed
to by the pointer, when the count says there is no data there? The
result would really be undefined.