From: Eric Dumazet <eric.duma...@gmail.com> Date: Thu, 02 Jun 2016 14:52:43 -0700
> From: Eric Dumazet <eduma...@google.com> > > Paul Moore tracked a regression caused by a recent commit, which > mistakenly assumed that sk_filter() could be avoided if socket > had no current BPF filter. > > The intent was to avoid udp_lib_checksum_complete() overhead. > > But sk_filter() also checks skb_pfmemalloc() and > security_sock_rcv_skb(), so better call it. > > Fixes: e6afc8ace6dd ("udp: remove headers from UDP packets before queueing") > Signed-off-by: Eric Dumazet <eduma...@google.com> > Reported-by: Paul Moore <p...@paul-moore.com> > Tested-by: Paul Moore <p...@paul-moore.com> > Tested-by: Stephen Smalley <s...@tycho.nsa.gov> > Cc: samanthakumar <samanthaku...@google.com> Applied, thanks Eric.