[ Sorry for the resend, I forgot to CC netfilter-devel ]
Following are three netfilter patches for -stable, fixing
- a NULL argument to kmem_cache_destroy() in a conntrack error
path (would cause a BUG_ON)
- incorrect accounting of closed connections in the iptables connlimit match
- incorrect locking in IPv6 connection tracking defragmentation
Please apply, thanks.
net/ipv6/netfilter/nf_conntrack_reasm.c | 8 +++++---
net/netfilter/nf_conntrack_expect.c | 4 ++--
net/netfilter/xt_connlimit.c | 3 ++-
3 files changed, 9 insertions(+), 6 deletions(-)
Alexey Dobriyan (1):
netfilter: nf_conntrack_expect: fix error path unwind in nf_conntrack_expect_init()
Dong Wei (1):
netfilter: xt_connlimit: fix accouning when receive RST packet in ESTABLISHED state
Jarek Poplawski (1):
netfilter: nf_conntrack_ipv6: fix inconsistent lock state in nf_ct_frag6_gather()
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
