src/hotspot/share/gc/g1/g1SharedClosures.hpp

rev 57716 : 8235305: Corrupted oops embedded in nmethods due to parallel modification during optional evacuation
Summary: During optional evacuation it is possible that G1 modifies oops embedded in nmethods in parallel. One source are oop* gathered by a previous evacuation phase in the optional roots, the other the region's strong code roots list. Since these oops may be unaligned on x64, this can result in them being corrupted. The fix is to not gather embedded oops in the optional roots list as the strong code roots list contains them already.
Contributed-by: erik.osterlund@oracle.com, stefan.johansson@oracle.com, stefan.karlsson@oracle.com, thomas.schatzl@oracle.com
Reviewed-by:

*** 38,52 ****
      return Mark == G1MarkFromRoot;
    }
  public:
    G1ParCopyClosure<G1BarrierNone, Mark> _oops;
    G1ParCopyClosure<G1BarrierCLD,  Mark> _oops_in_cld;
  
    G1CLDScanClosure                _clds;
    G1CodeBlobClosure               _codeblobs;
  
    G1SharedClosures(G1CollectedHeap* g1h, G1ParScanThreadState* pss, bool process_only_dirty) :
      _oops(g1h, pss),
      _oops_in_cld(g1h, pss),
      _clds(&_oops_in_cld, process_only_dirty),
!     _codeblobs(pss->worker_id(), &_oops, needs_strong_processing()) {}
  };
--- 38,61 ----
      return Mark == G1MarkFromRoot;
    }
  public:
    G1ParCopyClosure<G1BarrierNone, Mark> _oops;
    G1ParCopyClosure<G1BarrierCLD,  Mark> _oops_in_cld;
+   // We do not need (and actually should not) collect oops from nmethods into the
+   // optional collection set as we already automatically collect the corresponding
+   // nmethods in the region's strong code roots set. So set G1BarrierNoOptRoots in
+   // this closure.
+   // If these were present there would be opportunity for multiple threads to try
+   // to change this oop* at the same time. Since embedded oops are not necessarily
+   // word-aligned, this could lead to word tearing during update and crashes.
+   G1ParCopyClosure<G1BarrierNoOptRoots, Mark> _oops_in_nmethod;
  
    G1CLDScanClosure                _clds;
    G1CodeBlobClosure               _codeblobs;
  
    G1SharedClosures(G1CollectedHeap* g1h, G1ParScanThreadState* pss, bool process_only_dirty) :
      _oops(g1h, pss),
      _oops_in_cld(g1h, pss),
+     _oops_in_nmethod(g1h, pss),
      _clds(&_oops_in_cld, process_only_dirty),
!     _codeblobs(pss->worker_id(), &_oops_in_nmethod, needs_strong_processing()) {}
  };