Added wrap-around behavior for ip policy offset + length