QuicConnection::ProcessValidatedPacket doesn't need to be public because

net/quic/quic_connection.h

Index: net/quic/quic_connection.h
diff --git a/net/quic/quic_connection.h b/net/quic/quic_connection.h
index 8c6d2ca923a65271980d1b39916b15da329a26a2..5bed086017795f183c1a2824bc7c309eaa204d31 100644
--- a/net/quic/quic_connection.h
+++ b/net/quic/quic_connection.h
@@ -303,11 +303,6 @@ class NET_EXPORT_PRIVATE QuicConnection
   // If the socket is not blocked, writes queued packets.
   void WriteIfNotBlocked();
 
-  // Do any work which logically would be done in OnPacket but can not be
-  // safely done until the packet is validated.  Returns true if the packet
-  // can be handled, false otherwise.
-  virtual bool ProcessValidatedPacket();
-
   // The version of the protocol this connection is using.
   QuicVersion version() const { return framer_.version(); }
 
@@ -490,6 +485,11 @@ class NET_EXPORT_PRIVATE QuicConnection
   };
 
  protected:
+  // Do any work which logically would be done in OnPacket but can not be
+  // safely done until the packet is validated.  Returns true if the packet
+  // can be handled, false otherwise.
+  virtual bool ProcessValidatedPacket();
+
   // Send a packet to the peer using encryption |level|. If |sequence_number|
   // is present in the |retransmission_map_|, then contents of this packet will
   // be retransmitted with a new sequence number if it's not acked by the peer.