On Wed, 2016-02-24 at 11:04 +0100, Arend Van Spriel wrote:

I actually do not see any NLA_NESTED attributes with an explicit
length. As you mentioned the nla_parse() of the nested attribute will
validate the length of the stream so no need to put that in the
policy.

Right, I think what you want can be achieved by just using NLA_NESTED
to make sure it's long enough for nesting anything, and then nla_parse.
I'm pretty sure we do the same in other places, no?

johannes