POLICY_COOKIE_OFFSET
if (dev->policy_sz < POLICY_COOKIE_OFFSET + sizeof(*header))
header = (struct cookie_header *)(dev->policy_buf + POLICY_COOKIE_OFFSET);