This series of patches contains fixes to the current kernel upstream version of ipset. Sergey Popovich (6): netfilter: ipset: Properly calculate extensions offsets and total length netfilter: ipset: Use first timed out entry when no matching entry exists netfilter: ipset: Destroy extensions before moving non-last entry netfilter: ipset: Reset flags on private copy on set resize netfilter: ipset: Fix double free of comment string when adding element netfilter: ipset: Remove expired entries on set resize net/netfilter/ipset/ip_set_core.c | 18 ++++++++++++------ net/netfilter/ipset/ip_set_hash_gen.h | 32 +++++++++++++++----------------- 2 files changed, 27 insertions(+), 23 deletions(-) -- 1.7.10.4 -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html