Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8290781

Segfault at PhaseIdealLoop::clone_loop_handle_data_uses

    XMLWordPrintable

Details

    • b26
    • 17
    • b13
    • generic
    • generic

    Backports

      Description

        ADDITIONAL SYSTEM INFORMATION :
        Arch: x86_64
        OS: Ubuntu 20.04.4 LTS
        HotSpot
        - openjdk version "11.0.17-internal" 2022-10-18
        - OpenJDK Runtime Environment (fastdebug build 11.0.17-internal+0-adhoc.congli.my-jdk11u)
        - OpenJDK 64-Bit Server VM (fastdebug build 11.0.17-internal+0-adhoc.congli.my-jdk11u, mixed mode)
        javac: javac 11.0.17-internal


        A DESCRIPTION OF THE PROBLEM :
        The problem was found in the repo https://github.com/openjdk/jdk11u-dev (commit 97a472ce), OpenJDK 11.0.17 internal.

        **Note**
        1. The given test may take **~1min** to make HotSpot crash. So please be patient.
        2. Sorry, we cannot reduce the test further otherwise it cannot be reproduced.

        The following is part of the log:
        ```
        #
        # A fatal error has been detected by the Java Runtime Environment:
        #
        # SIGSEGV (0xb) at pc=0x00007fcd302ff9fe, pid=900700, tid=900712
        #
        # JRE version: OpenJDK Runtime Environment (11.0.17) (build 11.0.17-internal+0-adhoc.congli.jdk11u-dev)
        # Java VM: OpenJDK 64-Bit Server VM (11.0.17-internal+0-adhoc.congli.jdk11u-dev, mixed mode, tiered, compressed oops, g1 gc, linux-amd64)
        # Problematic frame:
        # V [libjvm.so+0xabf9fe] PhaseIdealLoop::clone_loop_handle_data_uses(Node*, Node_List&, IdealLoopTree*, IdealLoopTree*, Node_List*&, Node_List*&, Node_List*&, Node_List&, unsigned int, PhaseIdealLoop::CloneLoopMode)+0x51e
        #
        # No core dump will be written. Core dumps have been disabled. To enable core dumping, try "ulimit -c unlimited" before starting Java again
        #
        # If you would like to submit a bug report, please visit:
        # https://bugreport.java.com/bugreport/crash.jsp
        #

        --------------- S U M M A R Y ------------

        Command Line: -Xmx1G -XX:-BackgroundCompilation -XX:-PrintWarnings --illegal-access=deny Test

        Host: Intel(R) Core(TM) i7-9700K CPU @ 3.60GHz, 8 cores, 15G, Ubuntu 20.04.4 LTS
        Time: Mon Jul 18 20:30:48 2022 CEST elapsed time: 1.335015 seconds (0d 0h 0m 1s)

        --------------- T H R E A D ---------------

        Current thread (0x00007fcd281d2000): JavaThread "C2 CompilerThread0" daemon [_thread_in_native, id=900712, stack(0x00007fcd100ae000,0x00007fcd101af000)]


        Current CompileTask:
        C2: 1335 84 % !b 4 Test::vMeth1 @ 178 (244 bytes)

        Stack: [0x00007fcd100ae000,0x00007fcd101af000], sp=0x00007fcd101a9830, free space=1006k
        Native frames: (J=compiled Java code, A=aot compiled Java code, j=interpreted, Vv=VM code, C=native code)
        V [libjvm.so+0xabf9fe] PhaseIdealLoop::clone_loop_handle_data_uses(Node*, Node_List&, IdealLoopTree*, IdealLoopTree*, Node_List*&, Node_List*&, Node_List*&, Node_List&, unsigned int, PhaseIdealLoop::CloneLoopMode)+0x51e
        V [libjvm.so+0xac0f0b] PhaseIdealLoop::clone_loop(IdealLoopTree*, Node_List&, int, PhaseIdealLoop::CloneLoopMode, Node*)+0x100b
        V [libjvm.so+0xa9bfee] PhaseIdealLoop::do_unroll(IdealLoopTree*, Node_List&, bool)+0x20e
        V [libjvm.so+0xaa1a44] IdealLoopTree::iteration_split_impl(PhaseIdealLoop*, Node_List&)+0x514
        V [libjvm.so+0xaa1cd6] IdealLoopTree::iteration_split(PhaseIdealLoop*, Node_List&)+0x1d6
        V [libjvm.so+0xaa1b33] IdealLoopTree::iteration_split(PhaseIdealLoop*, Node_List&)+0x33
        V [libjvm.so+0xaa1b33] IdealLoopTree::iteration_split(PhaseIdealLoop*, Node_List&)+0x33
        V [libjvm.so+0xab6332] PhaseIdealLoop::build_and_optimize()+0x922
        V [libjvm.so+0x634215] Compile::optimize_loops(int&, PhaseIterGVN&, LoopOptsMode) [clone .part.0]+0x1d5
        V [libjvm.so+0x636849] Compile::Optimize()+0xc79
        V [libjvm.so+0x638112] Compile::Compile(ciEnv*, C2Compiler*, ciMethod*, int, bool, bool, bool, bool, DirectiveSet*)+0xf92
        V [libjvm.so+0x55f93f] C2Compiler::compile_method(ciEnv*, ciMethod*, int, DirectiveSet*)+0x15f
        V [libjvm.so+0x6414b5] CompileBroker::invoke_compiler_on_method(CompileTask*)+0x3b5
        V [libjvm.so+0x642658] CompileBroker::compiler_thread_loop()+0x428
        V [libjvm.so+0xd963cf] JavaThread::thread_main_inner()+0x10f
        V [libjvm.so+0xd92dd0] Thread::call_run()+0x140
        V [libjvm.so+0xc009ae] thread_native_entry(Thread*)+0xee
        ```

        STEPS TO FOLLOW TO REPRODUCE THE PROBLEM :
        1. javac Test.java
        2. java -Xmx1G -XX:-BackgroundCompilation -XX:-PrintWarnings --illegal-access=deny Test


        EXPECTED VERSUS ACTUAL BEHAVIOR :
        EXPECTED -
        No segfault
        ACTUAL -
        Segfault

        ---------- BEGIN SOURCE ----------
        class Test {
          int N = 256;
          long instanceCount;
          int iFld;

          void vMeth1() {
            int i3, i4, i5 = 9020, i6, i7 = 4, i8, i10, i11 = 2, iArr1[] = new int[N];
            float[] fArr = new float[N];
            long[] lArr = new long[N];
            for (i4 = 3; ; ) {
              try {
                i5 = i5 % iArr1[i4];
              } catch (ArithmeticException a_e) {
              }
              for (i6 = 1; i6 < 5; i6++)
                for (i8 = 1; 2 > i8; i8 += 2) {
                  iArr1[i8 - 1] = i6;
                  fArr[i6] += i6;
                  lArr[i4] <<= i5;
                  try {
                    iArr1[i8] = 467471596 / iArr1[i8 - 1];
                    i7 = iArr1[i4 + 1] % i6;
                  } catch (ArithmeticException a_e) {
                  }
                }
              for (i10 = 1; i10 < 5; i10++) {
                iArr1[i4 + 1] >>= i7;
                iArr1[i10] = (int) instanceCount;
              }
              for (int ax$13 = 2362; ax$13 < 7036; ax$13 += 1)
                try {
                  boolean[][] ax$7 = new boolean[2329][1];
                  for (int ax$9 = 0; ; ax$9++) ax$7[i11][ax$9] = ax$9 == '.';
                } catch (Throwable ax$12) {
                } finally {
                }
            }
          }

          int iMeth(long l) {
            float fArr1[] = new float[N];
            vMeth1();
            long meth_res = Double.doubleToLongBits(checkSum(fArr1));
            return (int) meth_res;
          }

          void vMeth(int i2) {
            i2 = iMeth(instanceCount);
          }

          void mainTest(String[] strArr1) {
            vMeth(iFld);
          }

          public static void main(String[] strArr) {
            Test _instance = new Test();
            _instance.mainTest(strArr);
          }

          public static double checkSum(float[] a) {
            double sum = 0;
            for (int j = 0; j < a.length; j++) {
              sum += (a[j] / (j + 1) + a[j] % (j + 1));
            }
            return sum;
          }
        }
        ---------- END SOURCE ----------

        FREQUENCY : always


        Attachments

          1. hs_err_pid1012.log
            61 kB
            swati sharma
          2. replay_pid1012.log
            94 kB
            swati sharma
          3. Test.java
            2 kB
            swati sharma
          4. TestLSMBadControlOverride.java
            1.0 kB
            Roland Westrelin

          Issue Links

            Activity

              People

                roland Roland Westrelin
                webbuggrp Webbug Group
                Votes:
                0 Vote for this issue
                Watchers:
                9 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved: