calipso_validate
bool calipso_validate(const struct sk_buff *skb, const unsigned char *option);
if (!calipso_validate(skb, nh + optoff))