On Wed, 29 Nov 2006, paul.moore@hp.com wrote:

+{
+	/* The constant '16' is not random, it is the maximum number of
+	 * high/low category range pairs as permitted by the CIPSO draft based
+	 * on a maximum IPv4 header length of 60 bytes - the BUG_ON() assertion
+	 * does a sanity check to make sure we don't overflow the array. */
+	int iter = -1;
+	u16 array[16];

Perhaps in a future update, make this a value a macro definition and 
document it in the header.



-- 
James Morris
[off-list ref]