RFR: JDK-8289748: C2 compiled code crashes with SIGFPE with -XX:+StressLCM and -XX:+StressGCM
Tobias Holenstein
tholenstein at openjdk.org
Mon Jan 16 16:52:06 UTC 2023
# Problem
We have an outer strip-mined loop `207`/`205` with inner strip-mined loop `283`/`203`. `262` is the zero-trip guard and `157 ModI` has the trip count `284 Phi` in the divisor. The corresponding zero guard of `157 ModI` was removed because the divisor is guaranteed to always be non-zero.
`PhaseIdealLoop::cast_incr_before_loop(..)` inserts a CastII to pin `284 Phi` to `262 if` but the following `igvn` phase removes the CastII again because it becomes a constant. Therefore, `284 Phi` loses its pin to `262 if`.

`IdealLoopTree::do_remove_empty_loop(..)` removes the loop `283`/`203` and replaces `284 Phi` with the final value of the last iteration. The problem is that the computation of final value (exact_limit - stride) floats above `262 if` - so now `157 ModI` is not guarded by `262 if` anymore: in our attached test case we get an `SIGFPE` because the modulo divides by zero at runtime.

# Solution
The solution is to insert a `CastII` in `IdealLoopTree::do_remove_empty_loop(..)` to prevent final_iv (exact_limit - stride) to float above the zero trip guard.

-------------
Commit messages:
- added -XX:+UnlockDiagnosticVMOptions
- JDK-8289748: C2 compiled code crashes with SIGFPE with -XX:+StressLCM and -XX:+StressGCM
Changes: https://git.openjdk.org/jdk/pull/11990/files
Webrev: https://webrevs.openjdk.org/?repo=jdk&pr=11990&range=00
Issue: https://bugs.openjdk.org/browse/JDK-8289748
Stats: 77 lines in 2 files changed: 77 ins; 0 del; 0 mod
Patch: https://git.openjdk.org/jdk/pull/11990.diff
Fetch: git fetch https://git.openjdk.org/jdk pull/11990/head:pull/11990
PR: https://git.openjdk.org/jdk/pull/11990
More information about the hotspot-compiler-dev
mailing list