IShellLink::GetIDList when it fails to generate a PIDL must set ppidl
to NULL or some applications think it contains valid data.

The dns_* functions expect the input buffer to have space for size 
characters plus the nul terminating character.

Don't return FALSE for a partial read. Fall through to SSL_read and use 
the logic for partial reads there instead of having separate logic and 
recursively calling NETCON_recv. Based on a patch by Michael Moss.

server: Add get_token_impersonation_level server call for retrieving the impersonation level from a token.

Add tests for GetTokenInformation(TokenImpersonationLevel).

Don't check object's security when duplicating a handle of the same or 
lower access rights. Based on a patch by Vitaliy Margolen.

(Reported by Huw Davies.)

The (x,y) should be relative to the XImage, not the drawable.  The (xOrg,yOrg)
is what should be relative to the drawable.  This fixes a crash when XGetPixel
tried to access memory outside the XImage's buffer.