openjdk team mailing list archive

Thread
Date
[Bug 2019176] [NEW] jdk11.0.18+10 crashes in sun.security.utilmath.intpoly.IntegerPloynonomial$MutableElement::setProduct

To: openjdk@xxxxxxxxxxxxxxxxxxx
From: "Olaf W." <2019176@xxxxxxxxxxxxxxxxxx>
Date: Thu, 11 May 2023 06:48:47 -0000
Reply-to: Bug 2019176 <2019176@xxxxxxxxxxxxxxxxxx>
Sender: noreply@xxxxxxxxxxxxx
Public bug reported:

#
# A fatal error has been detected by the Java Runtime Environment:
#
#  SIGSEGV (0xb) at pc=0x00007f817e800200, pid=3539, tid=5146
#
# JRE version: OpenJDK Runtime Environment (11.0.18+10) (build 11.0.18+10-post-Ubuntu-0ubuntu122.04)
# Java VM: OpenJDK 64-Bit Server VM (11.0.18+10-post-Ubuntu-0ubuntu122.04, mixed mode, sharing, tiered, compressed oops, g1 gc, linux-amd64)
# Problematic frame:
# C  0x00007f817e800200
#
# Core dump will be written. Default location: Core dumps may be processed with "/usr/share/apport/apport -p%p -s%s -c%c -d%d -P%P -u%u -g%g -- %E" (or dumping to /home/olaf/jd2/core.3539)
#
# If you would like to submit a bug report, please visit:
#   https://bugs.launchpad.net/ubuntu/+source/openjdk-lts
#

---------------  S U M M A R Y ------------

Command Line: -Xmx1500m JDownloader.jar

Host: Pentium(R) Dual-Core  CPU      E5400  @ 2.70GHz, 2 cores, 2G, Ubuntu 22.04.2 LTS
Time: Thu May 11 07:30:23 2023 CEST elapsed time: 1259.759078 seconds (0d 0h 20m 59s)

---------------  T H R E A D  ---------------

Current thread (0x00007f81a8115000):  JavaThread "Updater"
[_thread_in_Java, id=5146, stack(0x00007f817daf2000,0x00007f817dbf2000)]

Stack: [0x00007f817daf2000,0x00007f817dbf2000],  sp=0x00007f817dbeee88,  free space=1011k
Native frames: (J=compiled Java code, A=aot compiled Java code, j=interpreted, Vv=VM code, C=native code)
C  0x00007f817e800200


siginfo: si_signo: 11 (SIGSEGV), si_code: 2 (SEGV_ACCERR), si_addr: 0x00007f817e800200

Register to memory mapping:

RAX=0x0000000840b3f3f8 is a pointer to class: 
sun.security.util.math.intpoly.IntegerPolynomialP521 {0x0000000840b3f3f8}
 - instance size:     4
 - klass size:        109
 - access:            public synchronized 
 - state:             fully_initialized
 - name:              'sun/security/util/math/intpoly/IntegerPolynomialP521'
 - super:             'sun/security/util/math/intpoly/IntegerPolynomial'
 - sub:               
 - arrays:            NULL
 - methods:           Array<T>(0x00007f8176cd67c0)
 - method ordering:   Array<T>(0x0000000800a23a58)
 - default_methods:   Array<T>(0x00007f8176cd9840)
 - default vtable indices:   Array<T>(0x00007f8176cd9c50)
 - local interfaces:  Array<T>(0x0000000800521d68)
 - trans. interfaces: Array<T>(0x00007f8176ccfa68)
 - constants:         constant pool [122] {0x00007f8176cd6340} for 'sun/security/util/math/intpoly/IntegerPolynomialP521' cache=0x00007f8176cd9b08
 - class loader data:  loader data: 0x00007f81d40d7450 of 'bootstrap'
 - host class:        NULL
 - source file:       'IntegerPolynomialP521.java'
 - class annotations:       Array<T>(0x0000000000000000)
 - class type annotations:  Array<T>(0x0000000000000000)
 - field annotations:       Array<T>(0x0000000000000000)
 - field type annotations:  Array<T>(0x0000000000000000)
 - inner classes:     Array<T>(0x0000000800522338)
 - nest members:     Array<T>(0x0000000800522338)
 - java mirror:       a 'java/lang/Class'{0x00000000a5231468} = 'sun/security/util/math/intpoly/IntegerPolynomialP521'
 - vtable length      39  (start addr: 0x0000000840b3f5c8)
 - itable length      11 (start addr: 0x0000000840b3f700)
 - ---- static fields (4 words):
 - private static final 'BITS_PER_LIMB' 'I' @128 
 - private static final 'NUM_LIMBS' 'I' @132 
 - private static final 'MAX_ADDS' 'I' @136 
 - public static final 'MODULUS' 'Ljava/math/BigInteger;' @112 
 - private static final 'CARRY_ADD' 'J' @120 
 - private static final 'LIMB_MASK' 'I' @140 
 - ---- non-static fields (5 words):
 - protected final 'numLimbs' 'I' @12 
 - protected final 'bitsPerLimb' 'I' @16 
 - private final 'maxAdds' 'I' @20 
 - private final 'modulus' 'Ljava/math/BigInteger;' @24 
 - private final 'posModLimbs' '[J' @28 
 - non-static oop maps: 24-28 
RBX=0x0000000000000002 is an unknown value
RCX=0x00000000f17eac60 points into unknown readable memory: 0x0000000000000001 | 01 00 00 00 00 00 00 00
RDX=0x00000000f17eac60 points into unknown readable memory: 0x0000000000000001 | 01 00 00 00 00 00 00 00
RSP=0x00007f817dbeee88 is pointing into the stack for thread: 0x00007f81a8115000
RBP=0x0000000000000013 is an unknown value
RSI=0x00000000a522b380 is an oop: sun.security.util.math.intpoly.IntegerPolynomialP521 
{0x00000000a522b380} - klass: 'sun/security/util/math/intpoly/IntegerPolynomialP521'
 - ---- fields (total size 4 words):
 - protected final 'numLimbs' 'I' @12  19 (13)
 - protected final 'bitsPerLimb' 'I' @16  28 (1c)
 - private final 'maxAdds' 'I' @20  2
 - private final 'modulus' 'Ljava/math/BigInteger;' @24  a 'java/math/BigInteger'{0x00000000a522b3a0} (a522b3a0)
 - private final 'posModLimbs' '[J' @28  [J{0x00000000a522b420} (a522b420)
RDI=0x00000000f17e6930 is an oop: sun.security.ec.ECOperations 
{0x00000000f17e6930} - klass: 'sun/security/ec/ECOperations'
 - ---- fields (total size 5 words):
 - final 'b' 'Lsun/security/util/math/ImmutableIntegerModuloP;' @12  a 'sun/security/util/math/intpoly/IntegerPolynomial$ImmutableElement'{0x00000000f17e4ff8} (f17e4ff8)
 - final 'one' 'Lsun/security/util/math/SmallValue;' @16  a 'sun/security/util/math/intpoly/IntegerPolynomial$Limb'{0x00000000f17e6958} (f17e6958)
 - final 'two' 'Lsun/security/util/math/SmallValue;' @20  a 'sun/security/util/math/intpoly/IntegerPolynomial$Limb'{0x00000000f17e6970} (f17e6970)
 - final 'three' 'Lsun/security/util/math/SmallValue;' @24  a 'sun/security/util/math/intpoly/IntegerPolynomial$Limb'{0x00000000f17e6988} (f17e6988)
 - final 'four' 'Lsun/security/util/math/SmallValue;' @28  a 'sun/security/util/math/intpoly/IntegerPolynomial$Limb'{0x00000000f17e69a0} (f17e69a0)
 - final 'neutral' 'Lsun/security/ec/point/ProjectivePoint$Immutable;' @32  a 'sun/security/ec/point/ProjectivePoint$Immutable'{0x00000000f17e69b8} (f17e69b8)
 - private final 'orderField' 'Lsun/security/util/math/IntegerFieldModuloP;' @36  a 'sun/security/util/math/intpoly/P521OrderField'{0x00000000a522aef0} (a522aef0)
R8 =0xfffffffffa5d1e3e is an unknown value
R9 =0x0000000000000fa0 is an unknown value
R10=0x0000000840b3f3f8 is a pointer to class: 
sun.security.util.math.intpoly.IntegerPolynomialP521 {0x0000000840b3f3f8}
 - instance size:     4
 - klass size:        109
 - access:            public synchronized 
 - state:             fully_initialized
 - name:              'sun/security/util/math/intpoly/IntegerPolynomialP521'
 - super:             'sun/security/util/math/intpoly/IntegerPolynomial'
 - sub:               
 - arrays:            NULL
 - methods:           Array<T>(0x00007f8176cd67c0)
 - method ordering:   Array<T>(0x0000000800a23a58)
 - default_methods:   Array<T>(0x00007f8176cd9840)
 - default vtable indices:   Array<T>(0x00007f8176cd9c50)
 - local interfaces:  Array<T>(0x0000000800521d68)
 - trans. interfaces: Array<T>(0x00007f8176ccfa68)
 - constants:         constant pool [122] {0x00007f8176cd6340} for 'sun/security/util/math/intpoly/IntegerPolynomialP521' cache=0x00007f8176cd9b08
 - class loader data:  loader data: 0x00007f81d40d7450 of 'bootstrap'
 - host class:        NULL
 - source file:       'IntegerPolynomialP521.java'
 - class annotations:       Array<T>(0x0000000000000000)
 - class type annotations:  Array<T>(0x0000000000000000)
 - field annotations:       Array<T>(0x0000000000000000)
 - field type annotations:  Array<T>(0x0000000000000000)
 - inner classes:     Array<T>(0x0000000800522338)
 - nest members:     Array<T>(0x0000000800522338)
 - java mirror:       a 'java/lang/Class'{0x00000000a5231468} = 'sun/security/util/math/intpoly/IntegerPolynomialP521'
 - vtable length      39  (start addr: 0x0000000840b3f5c8)
 - itable length      11 (start addr: 0x0000000840b3f700)
 - ---- static fields (4 words):
 - private static final 'BITS_PER_LIMB' 'I' @128 
 - private static final 'NUM_LIMBS' 'I' @132 
 - private static final 'MAX_ADDS' 'I' @136 
 - public static final 'MODULUS' 'Ljava/math/BigInteger;' @112 
 - private static final 'CARRY_ADD' 'J' @120 
 - private static final 'LIMB_MASK' 'I' @140 
 - ---- non-static fields (5 words):
 - protected final 'numLimbs' 'I' @12 
 - protected final 'bitsPerLimb' 'I' @16 
 - private final 'maxAdds' 'I' @20 
 - private final 'modulus' 'Ljava/math/BigInteger;' @24 
 - private final 'posModLimbs' '[J' @28 
 - non-static oop maps: 24-28 
R11=0x0000000000000013 is an unknown value
R12=0x0 is NULL
R13=0x0000000000e6c22c is an unknown value
R14=0xffea65c5cee6b085 is an unknown value
R15=0x00007f81a8115000 is a thread


Registers:
RAX=0x0000000840b3f3f8, RBX=0x0000000000000002, RCX=0x00000000f17eac60, RDX=0x00000000f17eac60
RSP=0x00007f817dbeee88, RBP=0x0000000000000013, RSI=0x00000000a522b380, RDI=0x00000000f17e6930
R8 =0xfffffffffa5d1e3e, R9 =0x0000000000000fa0, R10=0x0000000840b3f3f8, R11=0x0000000000000013
R12=0x0000000000000000, R13=0x0000000000e6c22c, R14=0xffea65c5cee6b085, R15=0x00007f81a8115000
RIP=0x00007f817e800200, EFLAGS=0x0000000000010246, CSGSFS=0x002b000000000033, ERR=0x0000000000000015
  TRAPNO=0x000000000000000e

Top of Stack: (sp=0x00007f817dbeee88)
0x00007f817dbeee88:   00007f81c473ae80 00000000f17eac40
0x00007f817dbeee98:   00000000f17eac60 00000000f17eac40
0x00007f817dbeeea8:   00007f81c444bdb4 005a261d8ddf30b2
0x00007f817dbeeeb8:   0085951e5e51630f 00007f817dbef068

** Affects: openjdk-lts (Ubuntu)
     Importance: Undecided
         Status: New

** Attachment added: "hs_err_pid3539.log"
   https://bugs.launchpad.net/bugs/2019176/+attachment/5672391/+files/hs_err_pid3539.log

-- 
You received this bug notification because you are a member of OpenJDK,
which is subscribed to openjdk-lts in Ubuntu.
https://bugs.launchpad.net/bugs/2019176

Title:
  jdk11.0.18+10 crashes in
  sun.security.utilmath.intpoly.IntegerPloynonomial$MutableElement::setProduct

Status in openjdk-lts package in Ubuntu:
  New

Bug description:
  #
  # A fatal error has been detected by the Java Runtime Environment:
  #
  #  SIGSEGV (0xb) at pc=0x00007f817e800200, pid=3539, tid=5146
  #
  # JRE version: OpenJDK Runtime Environment (11.0.18+10) (build 11.0.18+10-post-Ubuntu-0ubuntu122.04)
  # Java VM: OpenJDK 64-Bit Server VM (11.0.18+10-post-Ubuntu-0ubuntu122.04, mixed mode, sharing, tiered, compressed oops, g1 gc, linux-amd64)
  # Problematic frame:
  # C  0x00007f817e800200
  #
  # Core dump will be written. Default location: Core dumps may be processed with "/usr/share/apport/apport -p%p -s%s -c%c -d%d -P%P -u%u -g%g -- %E" (or dumping to /home/olaf/jd2/core.3539)
  #
  # If you would like to submit a bug report, please visit:
  #   https://bugs.launchpad.net/ubuntu/+source/openjdk-lts
  #

  ---------------  S U M M A R Y ------------

  Command Line: -Xmx1500m JDownloader.jar

  Host: Pentium(R) Dual-Core  CPU      E5400  @ 2.70GHz, 2 cores, 2G, Ubuntu 22.04.2 LTS
  Time: Thu May 11 07:30:23 2023 CEST elapsed time: 1259.759078 seconds (0d 0h 20m 59s)

  ---------------  T H R E A D  ---------------

  Current thread (0x00007f81a8115000):  JavaThread "Updater"
  [_thread_in_Java, id=5146,
  stack(0x00007f817daf2000,0x00007f817dbf2000)]

  Stack: [0x00007f817daf2000,0x00007f817dbf2000],  sp=0x00007f817dbeee88,  free space=1011k
  Native frames: (J=compiled Java code, A=aot compiled Java code, j=interpreted, Vv=VM code, C=native code)
  C  0x00007f817e800200

  
  siginfo: si_signo: 11 (SIGSEGV), si_code: 2 (SEGV_ACCERR), si_addr: 0x00007f817e800200

  Register to memory mapping:

  RAX=0x0000000840b3f3f8 is a pointer to class: 
  sun.security.util.math.intpoly.IntegerPolynomialP521 {0x0000000840b3f3f8}
   - instance size:     4
   - klass size:        109
   - access:            public synchronized 
   - state:             fully_initialized
   - name:              'sun/security/util/math/intpoly/IntegerPolynomialP521'
   - super:             'sun/security/util/math/intpoly/IntegerPolynomial'
   - sub:               
   - arrays:            NULL
   - methods:           Array<T>(0x00007f8176cd67c0)
   - method ordering:   Array<T>(0x0000000800a23a58)
   - default_methods:   Array<T>(0x00007f8176cd9840)
   - default vtable indices:   Array<T>(0x00007f8176cd9c50)
   - local interfaces:  Array<T>(0x0000000800521d68)
   - trans. interfaces: Array<T>(0x00007f8176ccfa68)
   - constants:         constant pool [122] {0x00007f8176cd6340} for 'sun/security/util/math/intpoly/IntegerPolynomialP521' cache=0x00007f8176cd9b08
   - class loader data:  loader data: 0x00007f81d40d7450 of 'bootstrap'
   - host class:        NULL
   - source file:       'IntegerPolynomialP521.java'
   - class annotations:       Array<T>(0x0000000000000000)
   - class type annotations:  Array<T>(0x0000000000000000)
   - field annotations:       Array<T>(0x0000000000000000)
   - field type annotations:  Array<T>(0x0000000000000000)
   - inner classes:     Array<T>(0x0000000800522338)
   - nest members:     Array<T>(0x0000000800522338)
   - java mirror:       a 'java/lang/Class'{0x00000000a5231468} = 'sun/security/util/math/intpoly/IntegerPolynomialP521'
   - vtable length      39  (start addr: 0x0000000840b3f5c8)
   - itable length      11 (start addr: 0x0000000840b3f700)
   - ---- static fields (4 words):
   - private static final 'BITS_PER_LIMB' 'I' @128 
   - private static final 'NUM_LIMBS' 'I' @132 
   - private static final 'MAX_ADDS' 'I' @136 
   - public static final 'MODULUS' 'Ljava/math/BigInteger;' @112 
   - private static final 'CARRY_ADD' 'J' @120 
   - private static final 'LIMB_MASK' 'I' @140 
   - ---- non-static fields (5 words):
   - protected final 'numLimbs' 'I' @12 
   - protected final 'bitsPerLimb' 'I' @16 
   - private final 'maxAdds' 'I' @20 
   - private final 'modulus' 'Ljava/math/BigInteger;' @24 
   - private final 'posModLimbs' '[J' @28 
   - non-static oop maps: 24-28 
  RBX=0x0000000000000002 is an unknown value
  RCX=0x00000000f17eac60 points into unknown readable memory: 0x0000000000000001 | 01 00 00 00 00 00 00 00
  RDX=0x00000000f17eac60 points into unknown readable memory: 0x0000000000000001 | 01 00 00 00 00 00 00 00
  RSP=0x00007f817dbeee88 is pointing into the stack for thread: 0x00007f81a8115000
  RBP=0x0000000000000013 is an unknown value
  RSI=0x00000000a522b380 is an oop: sun.security.util.math.intpoly.IntegerPolynomialP521 
  {0x00000000a522b380} - klass: 'sun/security/util/math/intpoly/IntegerPolynomialP521'
   - ---- fields (total size 4 words):
   - protected final 'numLimbs' 'I' @12  19 (13)
   - protected final 'bitsPerLimb' 'I' @16  28 (1c)
   - private final 'maxAdds' 'I' @20  2
   - private final 'modulus' 'Ljava/math/BigInteger;' @24  a 'java/math/BigInteger'{0x00000000a522b3a0} (a522b3a0)
   - private final 'posModLimbs' '[J' @28  [J{0x00000000a522b420} (a522b420)
  RDI=0x00000000f17e6930 is an oop: sun.security.ec.ECOperations 
  {0x00000000f17e6930} - klass: 'sun/security/ec/ECOperations'
   - ---- fields (total size 5 words):
   - final 'b' 'Lsun/security/util/math/ImmutableIntegerModuloP;' @12  a 'sun/security/util/math/intpoly/IntegerPolynomial$ImmutableElement'{0x00000000f17e4ff8} (f17e4ff8)
   - final 'one' 'Lsun/security/util/math/SmallValue;' @16  a 'sun/security/util/math/intpoly/IntegerPolynomial$Limb'{0x00000000f17e6958} (f17e6958)
   - final 'two' 'Lsun/security/util/math/SmallValue;' @20  a 'sun/security/util/math/intpoly/IntegerPolynomial$Limb'{0x00000000f17e6970} (f17e6970)
   - final 'three' 'Lsun/security/util/math/SmallValue;' @24  a 'sun/security/util/math/intpoly/IntegerPolynomial$Limb'{0x00000000f17e6988} (f17e6988)
   - final 'four' 'Lsun/security/util/math/SmallValue;' @28  a 'sun/security/util/math/intpoly/IntegerPolynomial$Limb'{0x00000000f17e69a0} (f17e69a0)
   - final 'neutral' 'Lsun/security/ec/point/ProjectivePoint$Immutable;' @32  a 'sun/security/ec/point/ProjectivePoint$Immutable'{0x00000000f17e69b8} (f17e69b8)
   - private final 'orderField' 'Lsun/security/util/math/IntegerFieldModuloP;' @36  a 'sun/security/util/math/intpoly/P521OrderField'{0x00000000a522aef0} (a522aef0)
  R8 =0xfffffffffa5d1e3e is an unknown value
  R9 =0x0000000000000fa0 is an unknown value
  R10=0x0000000840b3f3f8 is a pointer to class: 
  sun.security.util.math.intpoly.IntegerPolynomialP521 {0x0000000840b3f3f8}
   - instance size:     4
   - klass size:        109
   - access:            public synchronized 
   - state:             fully_initialized
   - name:              'sun/security/util/math/intpoly/IntegerPolynomialP521'
   - super:             'sun/security/util/math/intpoly/IntegerPolynomial'
   - sub:               
   - arrays:            NULL
   - methods:           Array<T>(0x00007f8176cd67c0)
   - method ordering:   Array<T>(0x0000000800a23a58)
   - default_methods:   Array<T>(0x00007f8176cd9840)
   - default vtable indices:   Array<T>(0x00007f8176cd9c50)
   - local interfaces:  Array<T>(0x0000000800521d68)
   - trans. interfaces: Array<T>(0x00007f8176ccfa68)
   - constants:         constant pool [122] {0x00007f8176cd6340} for 'sun/security/util/math/intpoly/IntegerPolynomialP521' cache=0x00007f8176cd9b08
   - class loader data:  loader data: 0x00007f81d40d7450 of 'bootstrap'
   - host class:        NULL
   - source file:       'IntegerPolynomialP521.java'
   - class annotations:       Array<T>(0x0000000000000000)
   - class type annotations:  Array<T>(0x0000000000000000)
   - field annotations:       Array<T>(0x0000000000000000)
   - field type annotations:  Array<T>(0x0000000000000000)
   - inner classes:     Array<T>(0x0000000800522338)
   - nest members:     Array<T>(0x0000000800522338)
   - java mirror:       a 'java/lang/Class'{0x00000000a5231468} = 'sun/security/util/math/intpoly/IntegerPolynomialP521'
   - vtable length      39  (start addr: 0x0000000840b3f5c8)
   - itable length      11 (start addr: 0x0000000840b3f700)
   - ---- static fields (4 words):
   - private static final 'BITS_PER_LIMB' 'I' @128 
   - private static final 'NUM_LIMBS' 'I' @132 
   - private static final 'MAX_ADDS' 'I' @136 
   - public static final 'MODULUS' 'Ljava/math/BigInteger;' @112 
   - private static final 'CARRY_ADD' 'J' @120 
   - private static final 'LIMB_MASK' 'I' @140 
   - ---- non-static fields (5 words):
   - protected final 'numLimbs' 'I' @12 
   - protected final 'bitsPerLimb' 'I' @16 
   - private final 'maxAdds' 'I' @20 
   - private final 'modulus' 'Ljava/math/BigInteger;' @24 
   - private final 'posModLimbs' '[J' @28 
   - non-static oop maps: 24-28 
  R11=0x0000000000000013 is an unknown value
  R12=0x0 is NULL
  R13=0x0000000000e6c22c is an unknown value
  R14=0xffea65c5cee6b085 is an unknown value
  R15=0x00007f81a8115000 is a thread

  
  Registers:
  RAX=0x0000000840b3f3f8, RBX=0x0000000000000002, RCX=0x00000000f17eac60, RDX=0x00000000f17eac60
  RSP=0x00007f817dbeee88, RBP=0x0000000000000013, RSI=0x00000000a522b380, RDI=0x00000000f17e6930
  R8 =0xfffffffffa5d1e3e, R9 =0x0000000000000fa0, R10=0x0000000840b3f3f8, R11=0x0000000000000013
  R12=0x0000000000000000, R13=0x0000000000e6c22c, R14=0xffea65c5cee6b085, R15=0x00007f81a8115000
  RIP=0x00007f817e800200, EFLAGS=0x0000000000010246, CSGSFS=0x002b000000000033, ERR=0x0000000000000015
    TRAPNO=0x000000000000000e

  Top of Stack: (sp=0x00007f817dbeee88)
  0x00007f817dbeee88:   00007f81c473ae80 00000000f17eac40
  0x00007f817dbeee98:   00000000f17eac60 00000000f17eac40
  0x00007f817dbeeea8:   00007f81c444bdb4 005a261d8ddf30b2
  0x00007f817dbeeeb8:   0085951e5e51630f 00007f817dbef068

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openjdk-lts/+bug/2019176/+subscriptions
Follow ups

[Bug 2019176] Re: jdk11.0.18+10 crashes in sun.security.utilmath.intpoly.IntegerPloynonomial$MutableElement::setProduct
From: Launchpad Bug Tracker, 2023-07-11