Re: [PATCH] acl: reject rules with inverted range

[Dmitry Kozlyuk]

I suggest moving the validation up, to the rte_acl_build() level.
Validation should happen at the input to avoid dealing with invalid data later.
acl_build_rules() can use category mask without checks because it is validated
in acl_check_bld_param() --- let's keep validation logic where it is now.
Also, acl_build_rules() may be called multiple times
and will thus repeat the validation unnecessarily.