On Mon, Jul 25, 2016 at 12:06 PM, Daniel Borkmann <dan...@iogearbox.net> wrote:
> After a612769774a3 ("udp: prevent bugcheck if filter truncates packet
> too much"), there followed various other fixes for similar cases such
> as f4979fcea7fd ("rose: limit sk_filter trim to payload").
>
> Latter introduced a new helper sk_filter_trim_cap(), where we can pass
> the trim limit directly to the socket filter handling. Make use of it
> here as well with sizeof(struct udphdr) as lower cap limit and drop the
> extra skb->len test in UDP's input path.
>
> Signed-off-by: Daniel Borkmann <dan...@iogearbox.net>Acked-by: Willem de Bruijn <will...@google.com>
