On Thu, 2016-06-02 at 18:31 -0400, David Miller wrote:
> From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
> Date: Thu, 02 Jun 2016 14:52:43 -0700
>
> > From: Eric Dumazet <edumazet@xxxxxxxxxx>
> >
> > Paul Moore tracked a regression caused by a recent commit, which
> > mistakenly assumed that sk_filter() could be avoided if socket
> > had no current BPF filter.
> >
> > The intent was to avoid udp_lib_checksum_complete() overhead.
> >
> > But sk_filter() also checks skb_pfmemalloc() and
> > security_sock_rcv_skb(), so better call it.
> >
> > Fixes: e6afc8ace6dd ("udp: remove headers from UDP packets before queueing")
> > Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
> > Reported-by: Paul Moore <paul@xxxxxxxxxxxxxx>
> > Tested-by: Paul Moore <paul@xxxxxxxxxxxxxx>
> > Tested-by: Stephen Smalley <sds@xxxxxxxxxxxxx>
> > Cc: samanthakumar <samanthakumar@xxxxxxxxxx>
>
> Applied, thanks Eric.
Arg, I totally messed up the patch title :(
_______________________________________________
Selinux mailing list
Selinux@xxxxxxxxxxxxx
To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx.
To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.
