Subject: [PATCH] af_iucv: drop skbs rejected by filter
authorUrsula Braun <ubraun@linux.vnet.ibm.com>
Fri, 7 Oct 2016 13:51:48 +0000 (15:51 +0200)
committerDavid S. Miller <davem@davemloft.net>
Wed, 12 Oct 2016 05:56:04 +0000 (01:56 -0400)
commit8c68b1a0e9fa288015f1492e1b342db159734da9
treee4debe75e45f90af24e3cefe45bcf6435b5347a8
parent4e0ad32216910905d00a1228379163c6e5057dc4
Subject: [PATCH] af_iucv: drop skbs rejected by filter

A packet filter might be installed for instance with setsockopt
SO_ATTACH_FILTER. af_iucv currently queues skbs rejected by filter
into the backlog queue. This does not make sense, since packets
rejected by filter can be dropped immediately. This patch adds
separate sk_filter return code checking, and dropping of packets
if applicable.

Signed-off-by: Ursula Braun <ubraun@linux.vnet.ibm.com>
Reported-by: Daniel Borkmann <daniel@iogearbox.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/iucv/af_iucv.c