NPF_RULE_MAXKEYLEN
if (len == 0 || len > NPF_RULE_MAXKEYLEN) {
for (unsigned i = 0; i < NPF_RULE_MAXKEYLEN; i++)
uint8_t r_key[NPF_RULE_MAXKEYLEN];
KASSERT(len && len <= NPF_RULE_MAXKEYLEN);
if (len > NPF_RULE_MAXKEYLEN) {
nvlist_add_binary(rule, "key", rl->r_key, NPF_RULE_MAXKEYLEN);
uint8_t key[NPF_RULE_MAXKEYLEN];
__CTASSERT(NPF_RULE_MAXKEYLEN >= SHA_DIGEST_LENGTH);
memset(key, 0, NPF_RULE_MAXKEYLEN);