Paul Moore tracked a regression caused by a recent commit, which
mistakenly assumed that sk_filter() could be avoided if socket
had no current BPF filter.
The intent was to avoid udp_lib_checksum_complete() overhead.
But sk_filter() also checks skb_pfmemalloc() and
security_sock_rcv_skb(), so better call it.
Fixes: e6afc8ace6 ("udp: remove headers from UDP packets before queueing")
Signed-off-by: Eric Dumazet <[email protected]>
Reported-by: Paul Moore <[email protected]>
Tested-by: Paul Moore <[email protected]>
Tested-by: Stephen Smalley <[email protected]>
Cc: samanthakumar <[email protected]>
Signed-off-by: David S. Miller <[email protected]>
Eric Dumazet
ce25d66ad5