On 9/25/25 3:58 PM, Michael S. Tsirkin wrote: > On Tue, Sep 23, 2025 at 09:19:15AM -0500, Daniel Jurgens wrote: >> Filtering a flow requires a classifier to match the packets, and a rule >> to filter on the matches. >> >> + >> + cap = (struct ethhdr *)&sel_cap->mask; >> + mask = (struct ethhdr *)&sel->mask; > > do we know they are big enough? >
We know they are big enough, we allocate the memory for each based on the size of the headers for the type. We don't use sel_cap->len, which is the length provided by the controller.
