RFR: 8351468: C2: array fill optimization assigns wrong type to intrinsic call [v3]

[Roberto Castañeda Lozano]

> The [array fill optimization](https://github.com/openjdk/jdk/blob/1d147ccb4cfcb1da23664ac941e56ac542a7ac61/src/hotspot/share/opto/loopTransform.cpp#L3533) replaces simple innermost loops that fill an array with copies of the same primitive value:
> 
> 
> for (int i = 0; i < array.length; i++) {
>     array[i] = 0;
> }
> 
> with a call to an [array filling intrinsic](https://github.com/openjdk/jdk/blob/1d147ccb4cfcb1da23664ac941e56ac542a7ac61/src/hotspot/cpu/x86/stubGenerator_x86_64_arraycopy.cpp#L1665) that is specialized for the array element type:
> 
> 
> arrayof_jint_fill(array, 0, array.length)
> 
> 
> The optimization retrieves the (basic) array element type from calling `MemNode::memory_type()` on the original filling store. This is incorrect for stores of `short` values, since these are represented by `StoreC` nodes [whose `memory_type()` is `T_CHAR`](https://github.com/openjdk/jdk/blob/1fe45265e446eeca5dc496085928ce20863a3172/src/hotspot/share/opto/memnode.hpp#L680). As a result, the optimization wrongly assigns the address type `char[]` to `short` array fill loops. This can cause miscompilations due to missing anti-dependences, see the [issue description for further detail](https://bugs.openjdk.org/projects/JDK/issues/JDK-8351468).
> 
> This changeset proposes retrieving the (basic) array element type from the store address type instead. This ensures that the accurate address type is assigned to the intrinsic call, preventing missed anti-dependences and other potential issues caused by mismatching types. A more general solution to this issue, and a way to prevent similar bugs in the future, would be to define a `StoreS` node returning the appropriate `memory_type()`. I propose to investigate this in a separate RFE and keep this fix as minimal and non-intrusive as possible for backportability.
> 
> **Testing:** tier1-5, stress testing (linux-x64, windows-x64, macosx-x64, linux-aarch64, macosx-aarch64).

Roberto Castañeda Lozano has updated the pull request incrementally with one additional commit since the last revision:

  Explicitly disable optimization for mismatching stores; add positive and negative tests

-------------

Changes:
  - all: https://git.openjdk.org/jdk/pull/24005/files
  - new: https://git.openjdk.org/jdk/pull/24005/files/90fd7660..38c9b475

Webrevs:
 - full: https://webrevs.openjdk.org/?repo=jdk&pr=24005&range=02
 - incr: https://webrevs.openjdk.org/?repo=jdk&pr=24005&range=01-02

  Stats: 261 lines in 2 files changed: 259 ins; 0 del; 2 mod
  Patch: https://git.openjdk.org/jdk/pull/24005.diff
  Fetch: git fetch https://git.openjdk.org/jdk.git pull/24005/head:pull/24005

PR: https://git.openjdk.org/jdk/pull/24005