: Netfilter fixes

Hi Dave,

the following five patches fix a stale proc entry, bogus module dependencies in ipfwadm.ko and multiple bugs in ip6tables matches.

You can pull all changes from bk://212.42.230.204/nf-2.6

Regards
Patrick

[email protected], 2004-10-14 01:06:10+02:00, [email protected]
[NETFILTER]: Fix multiple bugs in ip6t_frag.c

The first patch fixes following bugs in ip6t_frag.c,

- Wrong cast the pointer to extension header.
- header length of Fragment Header is statically 8 octets. Then the option "--frag-len" doesn't make sense.
- There are endian issues where using frag->info.
- Reserved fields are not 2 bit but 8bit + 2 bit. (see RFC2460)

[email protected], 2004-10-14 01:04:09+02:00, [email protected]
[NETFILTER]: Fix checks in ip6t_multiport.c

The first patch fixes following bugs in ip6t_multiport.c,

- missing check the size of the preference data.
- IP6T_INV_PROTO should check with not ip->flags but ip->invflags.

[email protected], 2004-10-14 01:00:37+02:00, [email protected]
[NETFILTER]: Fix multiple bugs in ip6rt.c

The first patch fixes the following bugs

- Wrong cast the pointer to extension header.
- "Segments Left" field in Routing Header isn't treated as 1 octet.

[email protected], 2004-10-14 00:57:06+02:00, [email protected]
[NETFILTER]: Don't export common symbols from ipfwadm.ko

Exported kernel symbols ip_conntrack_count and ip_conntrack_tcp_update
were
showing up both in ip_conntrack.ko and ipfwadm.ko, causing bogus
dependencies
in modules.dep.

[email protected], 2004-10-14 00:55:09+02:00, [email protected]
[NETFILTER]: Fix removing invalid proc file