Fix iptables abuse of kernel header files. Use exported headers instead.

[openwrt/openwrt.git] / target / linux / generic / patches-3.3 / 600-netfilter_layer7_2.22.patch

diff --git a/target/linux/generic/patches-3.3/600-netfilter_layer7_2.22.patch b/target/linux/generic/patches-3.3/600-netfilter_layer7_2.22.patch
index 92de1cc1bace246be72b2464f195e07304a4393e..f3055590abb6d8fd2528c1ae31dec5a25009433b 100644 (file)
--- a/target/linux/generic/patches-3.3/600-netfilter_layer7_2.22.patch
+++ b/target/linux/generic/patches-3.3/600-netfilter_layer7_2.22.patch
@@ -118,7 +118,7 @@
 +      acct = nf_conn_acct_find(ct);
 +      if (!acct)
 +              return 0;
-+      return (atomic64_read(acct[IP_CT_DIR_ORIGINAL].packets) + atomic64_read(acct[IP_CT_DIR_REPLY].packets));
++      return (atomic64_read(&acct[IP_CT_DIR_ORIGINAL].packets) + atomic64_read(&acct[IP_CT_DIR_REPLY].packets));
 +#endif
 +}
 +
@@ -2130,3 +2130,13 @@
 +};
 +
 +#endif /* _XT_LAYER7_H */
+--- a/include/linux/netfilter/Kbuild
++++ b/include/linux/netfilter/Kbuild
+@@ -49,6 +49,7 @@ header-y += xt_hashlimit.h
+ header-y += xt_helper.h
+ header-y += xt_iprange.h
+ header-y += xt_ipvs.h
++header-y += xt_layer7.h
+ header-y += xt_length.h
+ header-y += xt_limit.h
+ header-y += xt_mac.h