From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
Date: Thu, 02 Jun 2016 14:52:43 -0700
> From: Eric Dumazet <edumazet@xxxxxxxxxx>
>
> Paul Moore tracked a regression caused by a recent commit, which
> mistakenly assumed that sk_filter() could be avoided if socket
> had no current BPF filter.
>
> The intent was to avoid udp_lib_checksum_complete() overhead.
>
> But sk_filter() also checks skb_pfmemalloc() and
> security_sock_rcv_skb(), so better call it.
>
> Fixes: e6afc8ace6dd ("udp: remove headers from UDP packets before queueing")
> Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
> Reported-by: Paul Moore <paul@xxxxxxxxxxxxxx>
> Tested-by: Paul Moore <paul@xxxxxxxxxxxxxx>
> Tested-by: Stephen Smalley <sds@xxxxxxxxxxxxx>
> Cc: samanthakumar <samanthakumar@xxxxxxxxxx>
Applied, thanks Eric.
_______________________________________________
Selinux mailing list
Selinux@xxxxxxxxxxxxx
To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx.
To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.
