netfilter: nf_ct_sip: don't drop packets with offsets pointing outsid.

.e the packet

Some Cisco phones create huge messages that are spread over multiple packets.
After calculating the offset of the SIP body, it is validated to be within
the packet and the packet is dropped otherwise. This breaks operation of
these phones. Since connection tracking is supposed to be passive, just let
those packets pass unmodified and untracked.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

Conflicts:
	net/netfilter/nf_conntrack_sip.c

This commit appears in the 3.8 and 3.9 branches of the Linux kernel
and according to feanor3 on xda-developers:

The "Cisco Jabber" app lets you use your cell phone as a SIP
endpoint with your work number on a Cisco phone system. The
registration packets that Cisco uses are apparently larger
than normal. With your kernel, the registration does not complete.
With your kernel and line 1421 changed to NF_ACCEPT, the registration
complete

Change-Id: If0c4eff68fa10af43767ad49808394910cae4309

https://github.com/temasek/android_kernel_samsung_smdk4412/commit/e4aa1603851e0270d7a1abfd81351c00a3adc372
Merged drivers/gpu/ion/ changes from Update 12
gpu: ion: exynos: add phys() operation for user_heap

This adds phys function for user_heap that returns the first address
of collected physical memory information if it is a single contiguous
memory.

Change-Id: I78fc4d41ae746357b0124febd6b20eea9b72767c
Signed-off-by: KyongHo Cho <pullip.cho@samsung.com>
gpu: ion: exynos: fix "error: double free of pages"

This patch fixes double free of 'pages' array when pfnmap_digger()
fails.

Change-Id: I25518b3bc758fee13143d67457b3d682b526d1e8
Reported-by: Jonghwan Choi <jhbird.choi@samsung.com>
Signed-off-by: KyongHo Cho <pullip.cho@samsung.com>
gpu: ion: exynos: Comment out MSYNC code

Signed-off-by: Rebecca Schultz Zavin <rebecca@android.com>
ion: exynos: Modify to reflect changes to ion api

Signed-off-by: Rebecca Schultz Zavin <rebecca@android.com>
ion: Add reserve function to ion

Rather than requiring each platform call memblock_remove or reserve
from the board file, add this to ion

Change-Id: Ie418a692c13e9e0cfe93ecc83d253d3ce860fc83
Signed-off-by: Rebecca Schultz Zavin <rebecca@android.com>
ion: Switch map/unmap dma api to sg_tables

Switch these api's from scatterlists to sg_tables

Change-Id: I8b99e39633df009d472ce24704fa26af7bb50fa2
Signed-off-by: Rebecca Schultz Zavin <rebecca@android.com>
ION + MALI fixes.
ARM: EXYNOS: Add new heap for DRM solution

This patch adds new ION memory heap for DRM solution.
ION memory heap consists of several heaps to support DRM.

Change-Id: I636fce5e53547b0d0a26df7144d5ed521a5a4b74
Signed-off-by: Sanghyun Lee <sanghyun75.lee@samsung.com>
Signed-off-by: Jaeryul Oh <jaeryul.oh@samsung.com>
gpu: ion: exynos: fix map_dma() for EXYNOS_CONTIG heap

sg_init_one() expects a virtual address

Change-Id: I2f95c99c090666ec65aea0cdf2a389d8642c6533
Signed-off-by: Greg Hackmann <ghackmann@google.com>
gpu: ion: Take exynos specific information out of ion.h

Change-Id: I92d679d26b16b0e12690ddf12d928dd8497c09ba
Signed-off-by: Rebecca Schultz Zavin <rebecca@android.com>
gpu: ion: Add new heaps to support DRM region

This patch adds new heaps to allocate memory from
reserved region for DRM.

Change-Id: I17a6050b6a756f985004de59b1673ac5a21ed3b7
Signed-off-by: Sanghyun Lee <sanghyun75.lee@samsung.com>
gpu: ion: Use alloc_pages instead of vmalloc from the system heap

With this change the ion_system_heap will only use kernel address
space when the memory is mapped into the kernel (rare case).

Change-Id: I8702cf89ffec0bd5c337bd88d7444013d4d94bc8
Signed-off-by: Rebecca Schultz Zavin <rebecca@android.com>
gpu: ion: ion_system_heap: Change allocations to GFP_HIGHUSER

Previously the ion_system_heap was using GFP_KERNEL, forcing all allocations
to be in lowmem.  This quickly causes us to run out of lowmem.

Change-Id: I6d502a5f1c20c8a8e44fb5903fcb228f8435a564
Signed-off-by: Rebecca Schultz Zavin <rebecca@android.com>