linux-yocto/4.1: netfilter: x_tables: fix stable backport

linux-yocto/4.1: netfilter: x_tables: fix stable backport

There was an issue with a netfilter backport in 4.1.28-stable. To
address it, we backport the -stable fix:

    netfilter: x_tables: fix stable backport

    Stable-4.1 backport of mainline commit 364723410175 ("netfilter:
    x_tables: validate targets of jumps") doesn't handle correctly the fact
    that 4.1 kernel is missing commit 482cfc318559 ("netfilter: xtables:
    avoid percpu ruleset duplication") so that t->entries is still a per-cpu
    array in find_jump_target().

    Use the same fix as e.g. stable-3.14 backport.

    Fixes: 8163327a3a92 ("netfilter: x_tables: validate targets of jumps")
    Signed-off-by: Michal Kubecek <mkubecek@suse.cz>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>