The following three patches for -stable fix some netfilter issues:
- a regression in the iprange match, causing mismatches with inversion
- a memory leak in the SNMP NAT helper
- a lost #ifdef, allowing user-triggerable WARN_ONs with NETFILTER_DEBUG
(and some minor runtime misbehaviour)
Please apply, thanks.
net/ipv4/netfilter/nf_conntrack_l3proto_ipv4.c | 2 ++
net/ipv4/netfilter/nf_nat_snmp_basic.c | 1 +
net/netfilter/xt_iprange.c | 8 ++++----
3 files changed, 7 insertions(+), 4 deletions(-)
Patrick McHardy (3):
netfilter: xt_iprange: fix range inversion match
netfilter: snmp nat leaks memory in case of failure
netfilter: restore lost #ifdef guarding defrag exception
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
