Hi Pablo,
Please pull the next patches for the nf tree:
- Decrease refcount synchronously on deletion and replace by
Stefano Brivio, which fixes the reference counter shown in
userspace.
- Allow CIDR 0 in hash:net,port,net, which is documented but
was unnecessarily disabled, from Eric Westbrook.
- Fix allocation failure when memory is fragmented, from Andrey Ryabinin.
- Correct rcu_dereference() call in ip_set_put_comment().
- Also, correct ip_set() macro calling at dumping with respect of held
mutex or lock.
Best regards,
Jozsef
The following changes since commit a3fb3698cadf27dc142b24394c401625e14d80d0:
netfilter: nf_flow_table: do not remove offload when other netns's interface is down (2018-10-19 13:30:48 +0200)
are available in the git repository at:
git://blackhole.kfki.hu/nf ccf966c9418db9
for you to fetch changes up to ccf966c9418db93579b7fec4e1e7cfdd3a57a05c:
netfilter: ipset: Fix calling ip_set() macro at dumping (2018-10-22 23:33:57 +0200)
----------------------------------------------------------------
Andrey Ryabinin (1):
netfilter: ipset: fix ip_set_list allocation failure
Eric Westbrook (1):
netfilter: ipset: actually allow allowable CIDR 0 in hash:net,port,net
Jozsef Kadlecsik (2):
netfilter: ipset: Correct rcu_dereference() call in ip_set_put_comment()
netfilter: ipset: Fix calling ip_set() macro at dumping
Stefano Brivio (1):
netfilter: ipset: list:set: Decrease refcount synchronously on deletion and replace
include/linux/netfilter/ipset/ip_set.h | 2 +-
include/linux/netfilter/ipset/ip_set_comment.h | 4 +-
net/netfilter/ipset/ip_set_core.c | 54 ++++++++++++++++----------
net/netfilter/ipset/ip_set_hash_netportnet.c | 8 ++--
net/netfilter/ipset/ip_set_list_set.c | 17 +++++---
5 files changed, 52 insertions(+), 33 deletions(-)
