Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8287223

C1: Inlining attempt through MH::invokeBasic() with null receiver

XMLWordPrintable

    • b25

        Running the attached test case on JDK 19 b23 as follows:

        $ java -XX:TieredStopAtLevel=1 Test.java

        leads to a segmentation fault in product builds:

        # SIGSEGV (0xb) at pc=0x00007f65fd5e6c40, pid=21145, tid=21158
        #
        # JRE version: Java(TM) SE Runtime Environment (19.0+23) (build 19-ea+23-1706)
        # Java VM: Java HotSpot(TM) 64-Bit Server VM (19-ea+23-1706, mixed mode, emulated-client, sharing, tiered, compressed oops, compressed class ptrs, g1 gc, linux-amd64)
        # Problematic frame:
        # V [libjvm.so+0x28dc40] AccessInternal::PostRuntimeDispatch<G1BarrierSet::AccessBarrier<548964ul, G1BarrierSet>, (AccessInternal::BarrierType)2, 548964ul>::oop_access_barrier(void*)+0x0

        and to an assertion failure in debug builds (log and replay files *_pid21435.log attached):

        # To suppress the following error report, specify this argument
        # after -XX: or in .hotspotrc: SuppressErrorAt=/ciObject.hpp:144
        #
        # A fatal error has been detected by the Java Runtime Environment:
        #
        # Internal Error[thread 21183 also had an error] (open/src/hotspot/share/ci/ciObject.hpp:144)
        , pid=21182, tid=21195
        # assert(is_method_handle()) failed: bad cast
        #
        # JRE version: Java(TM) SE Runtime Environment (19.0+23) (fastdebug build 19-ea+23-1706)
        # Java VM: Java HotSpot(TM) 64-Bit Server VM (fastdebug 19-ea+23-1706, mixed mode, emulated-client, sharing, tiered, compressed oops, compressed class ptrs, g1 gc, linux-amd64)
        # Problematic frame:
        # V [libjvm.so+0x7b7214] GraphBuilder::try_method_handle_inline(ciMethod*, bool)+0x454


        ORIGINAL REPORT:

        ADDITIONAL SYSTEM INFORMATION :
        Arch: x86_64
        OS: Ubuntu 20.04.4 LTS
        HotSpot
        - openjdk version "11.0.15" 2022-04-19
        - OpenJDK Runtime Environment (build 11.0.15+10-Ubuntu-0ubuntu0.20.04.1)
        - OpenJDK 64-Bit Server VM (build 11.0.15+10-Ubuntu-0ubuntu0.20.04.1, mixed mode, sharing)
        javac: javac 11.0.15

        A DESCRIPTION OF THE PROBLEM :
        The problem was firstly found in the repo https://github.com/openjdk/jdk11u-dev (commit 9cb3797f). Unfortunately, it can still be reproduced on openjdk 11.0.15 with the following log:
        #
        # A fatal error has been detected by the Java Runtime Environment:
        #
        # SIGSEGV (0xb) at pc=0x00007f1e92c6d944, pid=3242972, tid=3242987
        #
        # JRE version: OpenJDK Runtime Environment (11.0.15+10) (build 11.0.15+10-Ubuntu-0ubuntu0.20.04.1)
        # Java VM: OpenJDK 64-Bit Server VM (11.0.15+10-Ubuntu-0ubuntu0.20.04.1, mixed mode, sharing, tiered, compressed oops, g1 gc, linux-amd64)
        # Problematic frame:
        # V [libjvm.so+0x573944]
        #
        # No core dump will be written. Core dumps have been disabled. To enable core dumping, try "ulimit -c unlimited" before starting Java again
        #
        # An error report file with more information is saved as:
        # /tmp/hs_err_pid3242972.log
        #
        # Compiler replay data is saved as:
        # /tmp/replay_pid3242972.log
        #
        # If you would like to submit a bug report, please visit:
        # Unknown
        #
        Aborted

        STEPS TO FOLLOW TO REPRODUCE THE PROBLEM :
        1. type: javac Test.java
        2. type: java -Xbatch Test

        EXPECTED VERSUS ACTUAL BEHAVIOR :
        EXPECTED -
        HotSpot does NOT crash
        ACTUAL -
        HotSpot DID crash

        ---------- BEGIN SOURCE ----------
        class Test {
          boolean bFld;

          void mainTest(String[] strArr1) {
            double d = 2.61331;
            int i, i30, i32;
            for (i30 = 830; i30 > 51; --i30) bFld = bFld;
            i32 = 1;
            while (++i32 < 908)
              for (int ax$2 = -3230; ax$2 < 9840; ax$2 += 2)
                try {
                  java.lang.invoke.MethodHandle ax$0 = null;
                  ax$0.invokeExact();
                } catch (Throwable ax$1) {
                } finally {
                }
            System.out.println("d i i30 = " + d);
          }

          public static void main(String[] strArr) {
            Test _instance = new Test();
            for (; ; ) _instance.mainTest(strArr);
          }
        }
        ---------- END SOURCE ----------

        FREQUENCY : always


          1. hs_err_pid16500.log
            60 kB
          2. hs_err_pid21435.log
            77 kB
          3. replay_pid21435.log
            236 kB
          4. Test.java
            0.6 kB

              vlivanov Vladimir Ivanov
              webbuggrp Webbug Group
              Votes:
              0 Vote for this issue
              Watchers:
              10 Start watching this issue

                Created:
                Updated:
                Resolved: