Signed-off-by: Kevin Albertson <kevin.albertson@mongodb.com>

also make generation of uninstall optional with default to ON

And warn when ENABLE_SASL=GSSAPI. This is left for backwards
compatibility.

Permits reproducible build of the release tarball.

- set latest tested version to 4.0
- do not change download version on ubuntu 12.04
- apply openssl fix through a patch
- fix ASAN tasks

Signed-off-by: Kevin Albertson <kevin.albertson@10gen.com>

As reported here: https://jira.mongodb.org/browse/CDRIVER-2819,
a heap overread occurs due a failure to correctly verify data
bounds.

In the original check, len - o returns the data left including the
sizeof(l) we just read. Instead, the comparison should check
against the data left NOT including the binary int32, i.e. just
subtype (byte*) instead of int32 subtype (byte*).

Added in test for corrupted BSON example.

This reverts commit 80486f66.

This reverts commit d061b310.

It uses the "create" command, not "createDatabase".

Always set BSON_MEMCHECK for valgrind and ASAN tests, and add replica
set auth tests to the valgrind, ASAN, and code-coverage matrixes. Reduce
the number of special rules and exceptions in the matrix.