Toss all emergency packets not for a SOCK_MEMALLOC socket. This ensures our precious memory reserve doesn't get stuck waiting for user-space. The correctness of this approach relies on the fact that networks must be assumed lossy. Signed-off-by: Peter Zijlstra --- net/core/filter.c | 3 +++ 1 file changed, 3 insertions(+) Index: linux-2.6/net/core/filter.c =================================================================== --- linux-2.6.orig/net/core/filter.c +++ linux-2.6/net/core/filter.c @@ -81,6 +81,9 @@ int sk_filter(struct sock *sk, struct sk int err; struct sk_filter *filter; + if (skb_emergency(skb) && !sk_has_memalloc(sk)) + return -ENOMEM; + err = security_sock_rcv_skb(sk, skb); if (err) return err; -- -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html