[NETFILTER 00/09]: Netfilter fixes

[Patrick McHardy <kaber@trash.net>]

Hi Dave,

these patches contain some netfilter fixes for 2.6.25, fixing undersized
skb allocation and incorrect EPERM errors in nfnetlink_queue and
nfnetlink_log, an xt_time bug that causes mismatches on Sundays, a
missing newline in a conntrack message and the "horrible hack" in
ct_extend.

Please apply, thanks.


 include/linux/netfilter/nfnetlink_compat.h  |    2 +-
 include/net/netfilter/nf_conntrack_extend.h |    1 -
 net/netfilter/nf_conntrack_expect.c         |    2 +-
 net/netfilter/nf_conntrack_extend.c         |   19 ++-------------
 net/netfilter/nf_queue.c                    |    2 +-
 net/netfilter/nfnetlink_log.c               |   32 ++++++++++++++------------
 net/netfilter/nfnetlink_queue.c             |   17 ++++----------
 net/netfilter/xt_time.c                     |    7 ++++-
 8 files changed, 33 insertions(+), 49 deletions(-)

Alexey Dobriyan (1):
      [NETFILTER]: nf_conntrack: add \n to "expectation table full" message

Andrew Schulman (1):
      [NETFILTER]: xt_time: fix failure to match on Sundays

Eric Leblond (2):
      [NETFILTER]: nfnetlink_queue: fix computation of allocated size for netlink skb.
      [NETFILTER]: nfnetlink_log: fix computation of netlink skb size

Patrick McHardy (4):
      [NETFILTER]: nfnetlink: fix ifdef in nfnetlink_compat.h
      [NETFILTER]; nfnetlink_log: fix EPERM when binding/unbinding and instance 0 exists
      [NETFILTER]: nfnetlink_queue: fix EPERM when binding/unbinding and instance 0 exists
      [NETFILTER]: nf_queue: don't return error when unregistering a non-existant handler

Pekka Enberg (1):
      [NETFILTER]: nf_conntrack: replace horrible hack with ksize()