RFR: 8339163: ZGC: Race in clearing of remembered sets
Stefan Karlsson
stefank at openjdk.org
Mon Sep 2 13:31:17 UTC 2024
On Mon, 2 Sep 2024 13:09:09 GMT, Joel Sikström <duke at openjdk.org> wrote:
> When a young collection is in the "concurrent mark" phase and is scanning remembered sets (remsets) to find roots into the young gen it "consumes" the remset when it is finished by clearing it (using memset).
>
> At the same time, an old collection might find a completely empty/garbage page that it will insert into the page cache. Before inserting into the page cache, the page's remset is cleared (using memset).
>
> These two operations might interfere, resulting in both threads clearing the memory simultaneously.
>
> This race was found in connection to https://bugs.openjdk.org/browse/JDK-8339161 where I experimented replacing some clears of remsets with free's and got a crash on Windows from memset when operating on free'd memory.
>
> This patch makes sure that remsets are only cleared in the "concurrent mark" phase if not already handled by an old collection.
>
> Tested with tiers 1-3 and with a local test that crashes if both threads handle the remset.
Looks good. Great that you found this!
-------------
Marked as reviewed by stefank (Reviewer).
PR Review: https://git.openjdk.org/jdk/pull/20821#pullrequestreview-2275671530
More information about the hotspot-gc-dev
mailing list