netfilter 00/03: netfilter -stable update

[Patrick McHardy <kaber@trash.net>]

[ Sorry for the resend, I forgot to CC netfilter-devel ]

Following are three netfilter patches for -stable, fixing

- a NULL argument to kmem_cache_destroy() in a conntrack error
  path (would cause a BUG_ON)

- incorrect accounting of closed connections in the iptables connlimit match

- incorrect locking in IPv6 connection tracking defragmentation

Please apply, thanks.


 net/ipv6/netfilter/nf_conntrack_reasm.c |    8 +++++---
 net/netfilter/nf_conntrack_expect.c     |    4 ++--
 net/netfilter/xt_connlimit.c            |    3 ++-
 3 files changed, 9 insertions(+), 6 deletions(-)

Alexey Dobriyan (1):
      netfilter: nf_conntrack_expect: fix error path unwind in nf_conntrack_expect_init()

Dong Wei (1):
      netfilter: xt_connlimit: fix accouning when receive RST packet in ESTABLISHED state

Jarek Poplawski (1):
      netfilter: nf_conntrack_ipv6: fix inconsistent lock state in nf_ct_frag6_gather()