RFR: 8365526: Crash with null Symbol passed to SystemDictionary::resolve_or_null [v5]
David Holmes
dholmes at openjdk.org
Wed Nov 26 06:39:57 UTC 2025
On Mon, 24 Nov 2025 18:40:22 GMT, Coleen Phillimore <coleenp at openjdk.org> wrote:
>> The vm was crashing because the constant pool couldn't find the resolution error in the ResolutionErrorEntry error field.
>>
>> There are two uses of ResolutionErrorEntry in the ResolutionErrorTable. The key to this table is {ConstantPool, cp-index}. In this crash, multiple threads were racing to record nest_host_errors in the case where resolution failed. In this case, there was already a ResolutionErrorEntry in the table for the constant pool resolution failure. In the 'if' case of add_nest_host_error we check to see if there's already a nest_host_error assuming it's the same error, then the 'else' case was unconditionally adding a ResolutionErrorEntry with just the nest host message. Calling HashTable::put() with this entry with just the nest host message, was overwriting the entry with the constant pool resolution error, ie. the other fields. The crash happened in ConstantPool::throw_resolution_error() because the error field was overwritten (and leaked too).
>>
>> Add a null check before calling ResolutionErrorEntry add entry. Also added an assert that we only add a resolution error for nest host errors in the case of success since in the case of failure there will always already be a ResolutionErrorEntry for the failing constant pool and cp index and we don't want to overwrite that again.
>>
>> Tested with submitted reproducer and tier1-4.
>
> Coleen Phillimore has updated the pull request incrementally with one additional commit since the last revision:
>
> Use put_when_absent and add an assert that the message is the same.
src/hotspot/share/classfile/resolutionErrors.cpp line 135:
> 133: }
> 134: _nest_host_error = message;
> 135: }
I don't see the need for this - just don't overwrite the message.
src/hotspot/share/classfile/systemDictionary.cpp line 1869:
> 1867: if (entry == nullptr) {
> 1868: // Only add a new resolution error if one hasn't been found for this constant pool index. In this case,
> 1869: // resolution succeeded but there's an error in this nest host.
Suggestion:
// Only add a new entry to the resolution error table if one hasn't been found for this
// constant pool index. In this case resolution succeeded but there's an error in this nest host
// that we use the table to record.
-------------
PR Review Comment: https://git.openjdk.org/jdk/pull/28438#discussion_r2563481656
PR Review Comment: https://git.openjdk.org/jdk/pull/28438#discussion_r2563487454
More information about the hotspot-runtime-dev
mailing list