Linux Kernel https://git.stealer.net/cgit.cgi/user/sven/linux.git/atom?h=v3.2-rc7 2011-12-24T05:51:06Z 2011-12-24T05:51:06Z Linus Torvalds torvalds@linux-foundation.org 2011-12-24T05:51:06Z urn:sha1:5f0a6e2d503896062f641639dacfe5055c2f593b 2011-12-24T05:47:28Z Linus Torvalds torvalds@linux-foundation.org 2011-12-24T05:47:28Z urn:sha1:a22681fabb1564d00d54e804ec95ba9330d857ed * 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs: VFS: Fix race between CPU hotplug and lglocks 2011-12-24T04:25:36Z Linus Torvalds torvalds@linux-foundation.org 2011-12-24T04:25:36Z urn:sha1:6d451c578c7222c7e9305c2e776a654dc6ec06c3 for linus: writeback reason binary tracing format fix * tag 'writeback' of git://git.kernel.org/pub/scm/linux/kernel/git/wfg/linux: writeback: show writeback reason with __print_symbolic 2011-12-23T23:01:24Z Linus Torvalds torvalds@linux-foundation.org 2011-12-23T23:01:24Z urn:sha1:71448c1f4fd7c1b2bab766b3bf2b675cfe71b9ff * 'rc-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/mmarek/kbuild: kconfig: adapt update-po-config to new UML layout 2011-12-23T22:59:08Z Linus Torvalds torvalds@linux-foundation.org 2011-12-23T22:59:08Z urn:sha1:4d18de944954b973fede3259d206022f90549269 * 'v4l_for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media: [media] omap3isp: Fix crash caused by subdevs now having a pointer to devnodes 2011-12-23T22:58:39Z Linus Torvalds torvalds@linux-foundation.org 2011-12-23T22:58:39Z urn:sha1:827fa4c762fa81fbfcd262505588feeeae7a3b66 * 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mason/linux-btrfs: Btrfs: call d_instantiate after all ops are setup Btrfs: fix worker lock misuse in find_worker 2011-12-23T22:58:14Z Linus Torvalds torvalds@linux-foundation.org 2011-12-23T22:58:14Z urn:sha1:5d219c6b9fa28b990b22e8e3b08a1a1f34400b4f * git://git.kernel.org/pub/scm/linux/kernel/git/davem/sparc: sparc64: Fix MSIQ HV call ordering in pci_sun4v_msiq_build_irq(). 2011-12-23T22:57:55Z Linus Torvalds torvalds@linux-foundation.org 2011-12-23T22:57:55Z urn:sha1:155d4551bd0ab04367f4ca4e0a229774497da4d8 * git://git.kernel.org/pub/scm/linux/kernel/git/davem/net: netfilter: xt_connbytes: handle negation correctly net: relax rcvbuf limits rps: fix insufficient bounds checking in store_rps_dev_flow_table_cnt() net: introduce DST_NOPEER dst flag mqprio: Avoid panic if no options are provided bridge: provide a mtu() method for fake_dst_ops 2011-12-23T19:29:20Z David S. Miller davem@davemloft.net 2011-12-23T19:29:20Z urn:sha1:6350323ad8def2ac00d77cdee3b79c9b9fba75c4 2011-12-23T13:50:19Z Florian Westphal fw@strlen.de 2011-12-16T17:35:15Z urn:sha1:0354b48f633ae435acbc01b470a1ce8cfeff3e9f "! --connbytes 23:42" should match if the packet/byte count is not in range. As there is no explict "invert match" toggle in the match structure, userspace swaps the from and to arguments (i.e., as if "--connbytes 42:23" were given). However, "what <= 23 && what >= 42" will always be false. Change things so we use "||" in case "from" is larger than "to". This change may look like it breaks backwards compatibility when "to" is 0. However, older iptables binaries will refuse "connbytes 42:0", and current releases treat it to mean "! --connbytes 0:42", so we should be fine. Signed-off-by: Florian Westphal <fw@strlen.de> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>