(CVE_2009_3560).

tokenizing step.

Thanks to Ivan Krstić for the patch.

Klocwork 341-342

- change the pyexpat wrapper to not be so sensitive to this detail of the
  Expat implementation (the ex-crasher test still passes)

handler would cause a segfault.  This merges in Expat's lib/xmlparse.c
revisions 1.154 and 1.155, which fix this and a closely related problem
(the later does not affect Python).

Moved the crasher test to the tests for xml.parsers.expat.

(http://python.org/sf/1295808)

The problem was that pyconfig.h was being included before some system headers
which caused redefinitions and other breakage.  This moves system headers
after expat_config.h which includes pyconfig.h.

add expat_config.h.

Closes SF bug #680797.

Martin's integration changes).

Update Windows command line.

This is already removed from Expat 1.95.4, so the problem will not
recur when we update.