The following four patches have been sitting in my tree for a while, I need them as preconditions for following patches, but they also make sense on their own, so I'd like to get rid of them. The second patch adds a nfnl_dereference() helper, which is a wrapper around rcu_dereference_protected() that checks that the nfnetlink subsys mutex is actually held. This is similar to rtnl_dereference() except that we need to check subsys-specific mutexes. The first patch renamed a similar named ip_set function, the third patch introduces a nft_dereference() macro that is to be used in nftables. The fourth patch is unrelated to this, it changes verdict validation in nftables to accept flags to NF_QUEUE or errno codes to NF_DROP. Please apply. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
