Verification error with packet sizes that are greater than 65535

[xfoukas]

The verifier currently assumes that the max packet size is 65535:

ebpf-verifier/src/crab/ebpf_domain.cpp

Line 26 in 80ada1c

constexpr int MAX_PACKET_SIZE = 0xffff;

As a result, if it is being used in a domain where packet sizes can exceed this value, verification will fail.

Would it make sense to refactor the code, to allow domains to specify the max packet sizes or are there fundamental reasons, as to why the size has to be set to 65535?

[dthaler]

Looking at the verifier code, I don't see anything special about the number 65535 so I think it would be ok to increase it. IPv6 Jumbograms support payloads up to 2^32-1 (not including the headers).