On Wed, Apr 24, 2019 at 10:05:30AM +0000, Guy Levi(SW) wrote: > Jason, > > Expect that the mailbox is corrupted there is a memory corruption in the > kernel which is worse (allocate DCT struct and then write to it as QP struct). It isn't memory corruption, it is just mail box command corruption: BUILD_BUG_ON(MLX5_BYTE_OFF(qpc, cs_res) <= MLX5_ST_SZ_BYTES(dctc)); Doesn't fail, so it doesn't reference out of bounds of the mailbox. Jason
