ctnetlink updates take #2

Hi Harald,

Here follows another set of patches for ctnetlink (one for nfnetlink included):

Pablo Neira:
ctnetlink:
[PATCH 1/8] Fix return value at nfattr_bad_size [PATCH 2/8] Propagate error to userspace at getting [PATCH 3/8] Identify expect by its ID [PATCH 4/8] Fix racy counters zeroing nfnetlink:
[PATCH 7/8] Skip sizechecking if it's zero [PATCH 8/8] Add missing sizecheckings

Krzysztof Oledzki:
ctnetlink:
[PATCH 5/8] Check for ICMP_ID in icmp_nfattr_to_tuple [PATCH 6/8] Fix ICMP id type

cheers,
Pablo

The dawn of the fourth age of Linux firewalling is coming; a time of
great struggle and heroic deeds -- J.Kadlecsik got inspired by J.Morris