On Wed, 4 Sep 2024 01:29:22 GMT, David Holmes <dhol...@openjdk.org> wrote:

>> As discussed in the JBS issue:
>> 
>> FFM upcall stubs embed a `Method*` of the target method in the stub. This 
>> `Method*` is read from the `LambdaForm::vmentry` field associated with the 
>> target method handle at the time when the upcall stub is generated. The MH 
>> instance itself is stashed in a global JNI ref. So, there should be a 
>> reachability chain to the holder class: `MH (receiver) -> LF (form) -> 
>> MemberName (vmentry) -> ResolvedMethodName (method) -> Class<?> (vmholder)`
>> 
>> However, it appears that, due to multiple threads racing to initialize the 
>> `vmentry` field of the `LambdaForm` of the target method handle of an upcall 
>> stub, it is possible that the `vmentry` is updated _after_ we embed the 
>> corresponding `Method`* into an upcall stub (or rather, the latest update is 
>> not visible to the thread generating the upcall stub). Technically, it is 
>> fine to keep using a 'stale' `vmentry`, but the problem is that now the 
>> reachability chain is broken, since the upcall stub only extracts the target 
>> `Method*`, and doesn't keep the stale `vmentry` reachable. The holder class 
>> can then be unloaded, resulting in a crash.
>> 
>> The fix I've chosen for this is to mimic what we already do in 
>> `MethodHandles::jump_to_lambda_form`, and re-load the `vmentry` field from 
>> the target method handle each time. Luckily, this does not really seem to 
>> impact performance.
>> 
>> <details>
>> <summary>Performance numbers</summary>
>> x64:
>> 
>> before:
>> 
>> Benchmark             Mode  Cnt   Score   Error  Units
>> Upcalls.panama_blank  avgt   30  69.216 ± 1.791  ns/op
>> 
>> 
>> after:
>> 
>> Benchmark             Mode  Cnt   Score   Error  Units
>> Upcalls.panama_blank  avgt   30  67.787 ± 0.684  ns/op
>> 
>> 
>> aarch64:
>> 
>> before:
>> 
>> Benchmark             Mode  Cnt   Score   Error  Units
>> Upcalls.panama_blank  avgt   30  61.574 ± 0.801  ns/op
>> 
>> 
>> after:
>> 
>> Benchmark             Mode  Cnt   Score   Error  Units
>> Upcalls.panama_blank  avgt   30  61.218 ± 0.554  ns/op
>> 
>> </details>
>> 
>> As for the added TestUpcallStress test, it takes about 800 seconds to run 
>> this test on the dev machine I'm using, so I've set the timeout quite high. 
>> Since it runs for so long, I've dropped it from the default `jdk_foreign` 
>> test suite, which runs in tier2. Instead the new test will run in tier4.
>> 
>> Testing: tier 1-4
>
> src/hotspot/share/prims/upcallLinker.cpp line 142:
> 
>> 140:   Handle exception_h(Thread::current(), exception);
>> 141:   java_lang_Throwable::print_stack_trace(exception_h, tty);
>> 142:   ShouldNotReachHere();
> 
> How does `print_stack_trace` not return here?

It does return. `ShouldNotReachHere` is used to crash the VM.

> test/jdk/java/foreign/TestUpcallStress.java line 27:
> 
>> 25:  * @test
>> 26:  * @requires jdk.foreign.linker != "FALLBACK"
>> 27:  * @requires os.arch == "aarch64" & os.name == "Linux"
> 
> Only for Linux-aarch64 ??

Yes. The test is very unstable, and the issue is only reproducible on 
Linux/aarch64 any way. See 
https://github.com/openjdk/jdk/pull/20479#issuecomment-2278175462

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/20479#discussion_r1743609798
PR Review Comment: https://git.openjdk.org/jdk/pull/20479#discussion_r1743607061

Reply via email to