[11] RFR(S): 8203196: C1 emits incorrect code due to integer overflow in _tableswitch keys
Vladimir Ivanov
vladimir.x.ivanov at oracle.com
Fri May 18 18:19:10 UTC 2018
Looks good.
Best regards,
Vladimir Ivanov
On 5/18/18 03:02, Tobias Hartmann wrote:
> Hi,
>
> please review the following patch:
> https://bugs.openjdk.java.net/browse/JDK-8203196
> http://cr.openjdk.java.net/~thartmann/8203196/webrev.00/
>
> C1 incorrectly compiles a _tableswitch instruction due to an integer overflow of x->hi_key() in
> Canonicalizer::do_TableSwitch():
> 0 0 i5 2147483647
> . 2 0 6 tableswitch i5
> case 2147483647: B1
> default : B2
> canonicalized to:
> . 2 0 7 goto B2
>
> We compute hi_key = _lo_key + length() - 1 = INT_MAX + (2 - 1) - 1 = INT_MAX + 1 - 1 which may
> overflow depending on how the C++ compiler translates it (fails with fastdebug, works with
> slowdebug). I've added parentheses and an assert for sanity checking.
>
> This problem was introduced by the fix for JDK-8200303. Before, we would use an if instead of a
> switch [1].
>
> Thanks,
> Tobias
>
> [1] http://hg.openjdk.java.net/jdk/jdk/rev/d84f06a0cae1#l3.8
>
More information about the hotspot-compiler-dev
mailing list