)]}'
{
  "commit": "0e35161b84327d12e0b639397442a1dff915fb91",
  "tree": "25230428e38086bcbbc5cfabda118c146a8089e9",
  "parents": [
    "ff839870c29b7ff5c895bc74e6dc1c6d4fe57e77"
  ],
  "author": {
    "name": "Maher Sanalla",
    "email": "msanalla@nvidia.com",
    "time": "Thu Aug 13 16:12:10 2026 +0300"
  },
  "committer": {
    "name": "Nicolas Morey",
    "email": "nmorey@suse.com",
    "time": "Mon Sep 07 19:40:47 2026 +0200"
  },
  "message": "mlx5: Fix dbrec alloc returning garbage pointer on failure\n\n[ Upstream commit d73d3288c5e5aa65b7a8ca5b1593745aedeb5723 ]\n\nWhen mlx5_alloc_dbrec() falls back from the custom allocator to the\ndefault one, db is not cleared before jumping to default_alloc. If the\ndefault allocator also fails, the function returns db still holding a\nnon-NULL garbage value instead of NULL.\n\ncreate_qp() checks the return value for NULL to detect failure. Since it\nis not NULL, create_qp() proceeds and crashes dereferencing\nqp-\u003edb[MLX5_RCV_DBR].\n\nClear db before entering the default_alloc path so any failure there\nreturns NULL.\n\nFixes: acee8f6e64b3 (\"mlx5: Add custom allocation support for DBR\")\nSigned-off-by: Maher Sanalla \u003cmsanalla@nvidia.com\u003e\nSigned-off-by: Yishai Hadas \u003cyishaih@nvidia.com\u003e\nSigned-off-by: Nicolas Morey \u003cnmorey@suse.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "e35183f1f55a7cc9ca8f33efa0d4bf4e7ed9dda9",
      "old_mode": 33188,
      "old_path": "providers/mlx5/dbrec.c",
      "new_id": "d1764131778eea0b3d6d12c3ba8d30f197a1fba9",
      "new_mode": 33188,
      "new_path": "providers/mlx5/dbrec.c"
    }
  ]
}