RFR: 8262295: C2: Out-of-Bounds Array Load from Clone Source [v2]
Richard Reingruber
rrich at openjdk.java.net
Thu Mar 18 09:49:10 UTC 2021
> This c2 fix makes the optimization of loads from the result array of a
> Object.clone() call dependent on a compile time range check in order to prevent
> out-of-bounds array loads described in JDK-8262295.
>
> Testing: The included reproducer test. The fix passed also our CI testing: JCK
> and JTREG, also in Xcomp mode, SPECjvm2008, SPECjbb2015, SAP specific tests with
> fastdebug and release builds on all platforms.
>
> Alternatively the transformed load could be made dependent on a range check at
> runtime. Based on our automated benchmarking it wouldn't be worth
> it. Our benchmark results include quite a bit of noise though.
Richard Reingruber has updated the pull request incrementally with one additional commit since the last revision:
Changes based on feedback from Vladimir K.
-------------
Changes:
- all: https://git.openjdk.java.net/jdk/pull/2708/files
- new: https://git.openjdk.java.net/jdk/pull/2708/files/a56f8d29..f7339066
Webrevs:
- full: https://webrevs.openjdk.java.net/?repo=jdk&pr=2708&range=01
- incr: https://webrevs.openjdk.java.net/?repo=jdk&pr=2708&range=00-01
Stats: 11 lines in 2 files changed: 9 ins; 1 del; 1 mod
Patch: https://git.openjdk.java.net/jdk/pull/2708.diff
Fetch: git fetch https://git.openjdk.java.net/jdk pull/2708/head:pull/2708
PR: https://git.openjdk.java.net/jdk/pull/2708
More information about the hotspot-compiler-dev
mailing list