Re: b4 shazam applies unrelated patches due to dfblob collision (b4 0.14.3)

[B4 Bugbot <bugbot+b4@kernel.org>]

Konstantin Ryabitsev writes in commit 8a652aeaaa90be4c26d7c2fb5cf899840c737ebd:

Fix get_extra_series pulling in unrelated prerequisite series

When searching for newer revisions by change-id, the nq: query on
lore can match messages that reference our change-id in a
prerequisite-change-id trailer rather than as their own change-id.
This causes get_extra_series to pull in entirely unrelated series,
which b4 then treats as the "latest revision" and tries to apply.

After collecting candidate messages from the search, validate that
each revision actually belongs to the same series by checking that
at least one message per revision contains a standalone change-id
line matching ours. Revisions that only reference the change-id as
a prerequisite are rejected.

This affects b4 shazam, b4 review, and b4 diff, which all use
get_extra_series for revision discovery.

Reported-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Closes: https://lore.kernel.org/tools/DFUF52RW81LD.28YE20HG4P0L1@bootlin.com/ # b9c4cde
Signed-off-by: Konstantin Ryabitsev <konstantin@linuxfoundation.org>
Assisted-by: claude-opus-4-6

--
Deet-doot-dot, I am a bot.
b4 bug tracker (bugspray 0.1-dev)