Hi David, The following patchset contains Netfilter fixes for you net tree, they are: * Fix ICMPv6 NAT due to wrong comparison, code instead of type, from Phil Oester. * Fix RCU race in conntrack extensions release path, from Michal Kubecek. * Fix missing inversion in the userspace ipset test command match if the nomatch option is specified, from Jozsef Kadlecsik. * Skip layer 4 protocol matching in ipset in case of IPv6 fragments, also from Jozsef Kadlecsik. * Fix sequence adjustment in nfnetlink_queue due to using the netlink skb instead of the network skb, from Gao feng. * Make sure we cannot swap of sets with different layer 3 family in ipset, from Jozsef Kadlecsik. * Fix possible bogus matching in ipset if hash sets with net elements are used, from Oliver Smith. Gao feng (1): netfilter: nfnetlink_queue: use network skb for sequence adjustment Jozsef Kadlecsik (3): netfilter: ipset: Skip really non-first fragments for IPv6 when getting port/protocol netfilter: ipset: Consistent userspace testing with nomatch flag netfilter: ipset: Validate the set family and not the set type family at swapping Michal Kubeček (1): netfilter: nf_conntrack: use RCU safe kfree for conntrack extensions Oliver Smith (1): netfilter: ipset: Fix serious failure in CIDR tracking Phil Oester (1): netfilter: nf_nat_proto_icmpv6:: fix wrong comparison in icmpv6_manip_pkt include/linux/netfilter/ipset/ip_set.h | 6 ++++-- include/net/netfilter/nf_conntrack_extend.h | 2 +- net/ipv6/netfilter/nf_nat_proto_icmpv6.c | 4 ++-- net/netfilter/ipset/ip_set_core.c | 5 ++--- net/netfilter/ipset/ip_set_getport.c | 4 ++-- net/netfilter/ipset/ip_set_hash_gen.h | 28 +++++++++++++++------------ net/netfilter/ipset/ip_set_hash_ipportnet.c | 4 ++-- net/netfilter/ipset/ip_set_hash_net.c | 4 ++-- net/netfilter/ipset/ip_set_hash_netiface.c | 4 ++-- net/netfilter/ipset/ip_set_hash_netport.c | 4 ++-- net/netfilter/nfnetlink_queue_core.c | 2 +- 11 files changed, 36 insertions(+), 31 deletions(-) -- 1.7.10.4 -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
