This is to avoid calling WriteProperty with an index to a directory entry
that has not yet been reserved in the file. We reserve the entry by writing
the new data to it.

The meaning of the "index" argument in Read/WriteProperty will likely
change in the future, but getFreeProperty must work with real indexes
into the file's real directory stream.

The logic is unchanged from the original version.

Most of the work is the same regardless of relation type, so bring
those parts out of the relation type test.

Found by valgrind.

Perhaps IDirectDraw7_CreateSurface() should also always set "pSurface7" to
NULL on failure, but at least for our internal functions that's a silly thing
to rely on.

crypt32: Allow the caller of checkChainPolicyStatus to specify the date to test with and additional policy parameters.

crypt32: Accept either the subject alt name 2 or subject alt name extensions, and prefer the former when both are present.