RFR: JDK-8275854: C2: assert(stride_con != 0) failed: missed some peephole opt

王超 duke at openjdk.java.net
Mon Oct 25 08:16:13 UTC 2021


`If subsume` optimization will eliminate `LongCountedLoopEndNode` node by mistake, which will lead to `PhaseIdealLoop` optimization crash.

For example, the test of node 538 and node 553 will become the same after the first `PhaseIdealLoop` optimization. Node 555 is the back edge to the loop, and node 553 will be replaced by a `LongCountedLoopEndNode` node.
<img width="592" alt="image" src="https://user-images.githubusercontent.com/25214855/138656330-9f825c85-0468-40a5-9eb9-b576130648db.png">


 In the next `PhaseIdealLoop` optimization, node 538 find node 553 is redundant, and will subsume node 553. Then the `PhaseIdealLoop` optimization will crash, because there is no loop end node.
<img width="603" alt="image" src="https://user-images.githubusercontent.com/25214855/138656951-53685723-92c2-42d6-91ae-445107dcb01d.png">

There are two way to fix the crash, the first is like the way in this pr, just exit `IFNode subsume` optimization when it's a `LongCountedLoopEndNode` node. The second possible fix is that exchange the dominating `IF` node with the `LongCountedLoopEndNode` node:

diff --git a/src/hotspot/share/opto/ifnode.cpp b/src/hotspot/share/opto/ifnode.cpp
index 38b40a6..31ff172 100644
--- a/src/hotspot/share/opto/ifnode.cpp
+++ b/src/hotspot/share/opto/ifnode.cpp
@@ -1674,6 +1674,21 @@ Node* IfNode::simple_subsuming(PhaseIterGVN* igvn) {
     }
   }
 
+  if (is_LongCountedLoopEnd()) {
+    set_req(0, dom->in(0));
+    set_req(1, dom->in(1));
+    dom->set_req(0, pre);
+    dom->set_req(1, igvn->intcon(is_always_true ? 1 : 0));
+    Node* proj0 = raw_out(0);
+    Node* proj1 = raw_out(1);
+    Node* dom_proj0 = dom->raw_out(0);
+    Node* dom_proj1 = dom->raw_out(1);
+    dom_proj0->set_req(0, this);
+    dom_proj1->set_req(0, this);
+    proj0->set_req(0, dom);
+    proj1->set_req(0, dom);
+  }
+
   if (bol->outcnt() == 0) {
     igvn->remove_dead_node(bol);    // Kill the BoolNode.
   }
diff --git a/src/hotspot/share/opto/loopnode.cpp b/src/hotspot/share/opto/loopnode.cpp
index 6f7e34d..7955722 100644
--- a/src/hotspot/share/opto/loopnode.cpp
+++ b/src/hotspot/share/opto/loopnode.cpp
@@ -802,7 +802,7 @@ bool PhaseIdealLoop::transform_long_counted_loop(IdealLoopTree* loop, Node_List
   Node* back_control = head->in(LoopNode::LoopBackControl);
 
   // data nodes on back branch not supported
-  if (back_control->outcnt() > 1) {
+  if (back_control->outcnt() > 1 || back_control->Opcode() != Op_IfTrue) {
     return false;
   }

-------------

Commit messages:
 - Fix

Changes: https://git.openjdk.java.net/jdk/pull/6099/files
 Webrev: https://webrevs.openjdk.java.net/?repo=jdk&pr=6099&range=00
  Issue: https://bugs.openjdk.java.net/browse/JDK-8275854
  Stats: 3 lines in 1 file changed: 3 ins; 0 del; 0 mod
  Patch: https://git.openjdk.java.net/jdk/pull/6099.diff
  Fetch: git fetch https://git.openjdk.java.net/jdk pull/6099/head:pull/6099

PR: https://git.openjdk.java.net/jdk/pull/6099


More information about the hotspot-compiler-dev mailing list