From: Pablo Neira Ayuso <pablo@netfilter.org>
Date: Wed, 20 Jan 2016 18:03:58 +0100
The following patchset contains Netfilter fixes for your net tree, they
are:
1) Fix accidental 3-times le/be conversion for 64-bits in nft_byteorder,
from Florian Westphal.
2) Get rid of defensive cidr = 0 check in the ipset hash:netiface set
type which doesn't allow valid 0.0.0.0/0 elements, also from Florian.
3) Relocate #endif in nft_ct counter support, this doesn't have any
relation with labels.
4) Fix TCPMSS target for IPv6 when skb has CHECKSUM_COMPLETE, from
Eric Dumazet.
5) Fix netdevice notifier leak from the error path of nf_tables_netdev.
6) Safe conntrack hashtable resizing by introducing a global lock and
synchronize all buckets to avoid going over the maximum number of
preemption levels, from Sasha Levin.
You can pull these changes from:
git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git
Pulled, thanks Pablo.