RFR: 8262295: C2: Out-of-Bounds Array Load from Clone Source [v2]

Richard Reingruber rrich at openjdk.java.net
Thu Mar 18 09:49:10 UTC 2021


> This c2 fix makes the optimization of loads from the result array of a
> Object.clone() call dependent on a compile time range check in order to prevent
> out-of-bounds array loads described in JDK-8262295.
> 
> Testing: The included reproducer test. The fix passed also our CI testing: JCK
> and JTREG, also in Xcomp mode, SPECjvm2008, SPECjbb2015, SAP specific tests with
> fastdebug and release builds on all platforms.
> 
> Alternatively the transformed load could be made dependent on a range check at
> runtime. Based on our automated benchmarking it wouldn't be worth
> it. Our benchmark results include quite a bit of noise though.

Richard Reingruber has updated the pull request incrementally with one additional commit since the last revision:

  Changes based on feedback from Vladimir K.

-------------

Changes:
  - all: https://git.openjdk.java.net/jdk/pull/2708/files
  - new: https://git.openjdk.java.net/jdk/pull/2708/files/a56f8d29..f7339066

Webrevs:
 - full: https://webrevs.openjdk.java.net/?repo=jdk&pr=2708&range=01
 - incr: https://webrevs.openjdk.java.net/?repo=jdk&pr=2708&range=00-01

  Stats: 11 lines in 2 files changed: 9 ins; 1 del; 1 mod
  Patch: https://git.openjdk.java.net/jdk/pull/2708.diff
  Fetch: git fetch https://git.openjdk.java.net/jdk pull/2708/head:pull/2708

PR: https://git.openjdk.java.net/jdk/pull/2708


More information about the hotspot-compiler-dev mailing list