run the attached batch file.


The crash is reproducible - takes 5-10 minutes to reach failure.
With the following .hotspot_compiler file I have not been able to 
reproduce it:

  exclude EDU/oswego/cs/dl/util/concurrent/Task coInvoke

More information is shown below. The basic problem is that an oop
has been trashed when the vframearray is being filled. This happens
just before a return, so the debug info is probably be wrong?

Srdjan has seen the failure as well, you might want to talk to him too.

/Steffen


VM THREAD STACK:
================

HandleArea::allocate_handle(oopDesc * 0x00000011) line 25 + 70 bytes
Handle::Handle(oopDesc * 0x00000011) line 21 + 23 bytes
compiledVFrame::create_stack_value(ScopeValue * 0x00cf6e8c) line 298
compiledVFrame::locals() line 247 + 21 bytes
vframeArray::fill_in_locals(int 56, compiledVFrame * 0x00cf6d98) line 39 + 11 bytes
vframeArray::fill_in_vframe(int 50, compiledVFrame * 0x00cf6d98) line 199 + 19 bytes
vframeArray::fill_in(JavaThread * 0x0085e3f8, int 6, GrowableArray<compiledVFrame *> * 0x00cf6d24, const RegisterMap * 0x0e57fb6c) line 218 + 25 bytes
vframeArray::allocate(JavaThread * 0x0085e3f8, int 6, GrowableArray<compiledVFrame *> * 0x00cf6d24, RegisterMap * 0x0e57fb6c) line 28
Deoptimization::create_vframeArray(JavaThread * 0x0085e3f8, frame {...}, const RegisterMap * 0x0e57fd88) line 209 + 30 bytes
Deoptimization::deoptimize(JavaThread * 0x0085e3f8, frame {...}, const RegisterMap * 0x0e57fd88) line 231 + 35 bytes
JavaThread::deoptimize_one() line 909 + 56 bytes
JavaThread::deoptimize() line 925 + 8 bytes
VM_DeoptimizeAll::doit() line 269 + 8 bytes
VM_Operation::evaluate() line 31
VMThread::evaluate_operation(VM_Operation * 0x0ee7e288) line 436
VMThread::loop() line 526
VMThread::vm_thread_main(Monitor * 0x007d2738) line 325
_start(void * 0x00848838) line 196 + 19 bytes
_threadstartex(void * 0x00848890) line 212 + 13 bytes
KERNEL32! 77f04f2c()

THREAD INVOKING VM OPERATION:
=============================

VMThread::execute(VM_Operation * 0x0ee7e288) line 622
InterfaceSupport::deoptimizeAll() line 140 + 9 bytes
VMEntryWrapper::~VMEntryWrapper() line 175
OptoRuntime::resolve_opt_virtual_call_C(JavaThread * 0x0085e3f8) line 716 + 31 bytes

TRACE OF FRAMES (#6 IS BEING DEOPTIMIZED):
==========================================

  1. C frame (sp=0xee7e2f4, fp=0, pc=0xdc1123)
     RuntimeStub: _resolve_opt_virtual_call_Java

  2. Deoptimized frame (sp=0xee7e31c, fp=0, pc=0xdc25e0)
     DeoptimizationBlob

  3. Deoptimized frame (sp=0xee7e33c, fp=0, pc=0xdc25e0)
     DeoptimizationBlob

  4. Deoptimized frame (sp=0xee7e354, fp=0, pc=0xdc25e0)
     DeoptimizationBlob

  5. Deoptimized frame (sp=0xee7e3c4, fp=0, pc=0xdc25e0)
     DeoptimizationBlob

  6. Compiled frame (sp=0xee7e3e4, fp=0, pc=0xdffede)
     nmethod:{method} 'coInvoke' '(LEDU/oswego/cs/dl/util/concurrent/Task;LEDU/o
swego/cs/dl/util/concurrent/Task;)V' in 'EDU/oswego/cs/dl/util/concurrent/Task'

  7. Compiled frame (sp=0xee7e3fc, fp=0, pc=0xdec57a)
     nmethod:{method} 'run' '()V' in 'Fib'

STACK DUMP:
===========

0EE7E3C8  084202D8  
0EE7E3CC  00000000  
0EE7E3D0  084202E8  
0EE7E3D4  00000010  
0EE7E3D8  084202E8  
0EE7E3DC  00000010  
0EE7E3E0  00DFFEDE  
0EE7E3E4  00000011   <<<<< trashed oop (value_addr in compiledVFrame::create_stack_value)
0EE7E3E8  084DA088  
0EE7E3EC  084202D8  
0EE7E3F0  00000010  
0EE7E3F4  0EE7E40C  
0EE7E3F8  00DEC57A  
0EE7E3FC  08420000  
0EE7E400  084202D8  
0EE7E404  00000010  
0EE7E408  00000011  
0EE7E40C  0EE7E420  
0EE7E410  0810409C  
0EE7E414  00000006  
0EE7E418  00000008  
0EE7E41C  0EE7E454  
0EE7E420  0EE7E45C  
0EE7E424  0822EF22  
0EE7E428  08420000  
0EE7E42C  00000000  
0EE7E430  00000010  
0EE7E434  0854DB90  
0EE7E438  00000010  
0EE7E43C  00000012  
0EE7E440  0085E3F8  
0EE7E444  082B4048  
0EE7E448  00DEB285  
0EE7E44C  08420000  
0EE7E450  00C94E10  
0EE7E454  00000010  
0EE7E458  0854DB90  
0EE7E45C  00000010  
0EE7E460  00DC1123  
0EE7E464  00DEAB09  
0EE7E468  00DEABB9  
0EE7E46C  084A00C0  
0EE7E470  084A00C0  
0EE7E474  00000000  
0EE7E478  08420000  
0EE7E47C  0000000F  
0EE7E480  0085E3F8  
0EE7E484  084A00C0  
0EE7E488  00DFFEDE  
0EE7E48C  08420000  
0EE7E490  084DA088  
0EE7E494  084A00C0  
0EE7E498  0085E3F8  
0EE7E49C  0EE7E4F8  
0EE7E4A0  00DEC57A  
0EE7E4A4  084A00B0  
0EE7E4A8  084A00C0  
0EE7E4AC  00000012  
0EE7E4B0  00000013  
0EE7E4B4  0EE7E500  
0EE7E4B8  08192C8C  
0EE7E4BC  0085E3F8  
0EE7E4C0  0C43D098  
0EE7E4C4  0C43D040  
0EE7E4C8  00000001  
0EE7E4CC  008577CC  
0EE7E4D0  082B5D80  
0EE7E4D4  0EE7E4D4  
0EE7E4D8  0000000F  
0EE7E4DC  0854DB90  
0EE7E4E0  0000000F  
0EE7E4E4  00000014  
0EE7E4E8  082B4048  
0EE7E4EC  0085E8F8  
0EE7E4F0  00DEB285  
0EE7E4F4  0849FFD8  
0EE7E4F8  082B5BD0  
0EE7E4FC  0000000F  


NMETHOD BEING DEOPTIMIZED:
==========================

Compiled {method} 'coInvoke' '(LEDU/oswego/cs/dl/util/concurrent/Task;LEDU/osweg
o/cs/dl/util/concurrent/Task;)V' in 'EDU/oswego/cs/dl/util/concurrent/Task'[2,2]
 ((nmethod*)0xdffe10)
((nmethod*)0xdffe10)  for method 0xc4e0490  { in_use }:
 main code      [0xdffec0..0xdffef9] = 57
 exception code [0xdffef9..0xdffefe] = 5
 stub code      [0xdffefe..0xdfff18] = 26
 relocation     [0xdffe94..0xdffeb4] = 32
 oops           [0xdfff64..0xdfff74] = 16
 scopes data    [0xdfff18..0xdfff30] = 24
 scopes pcs     [0xdfff30..0xdfff40] = 16
 handler table  [0xdfff40..0xdfff60] = 32
 nul chk table  [0xdfff60..0xdfff64] = 4
total size = 356
Decoding CodeBlob 0xdffe10
0xdffec0: subl   20,%esp
0xdffec3: movl   %ecx,8(%esp,1)
0xdffec7: movl   %edx,(%esp,1)
0xdffeca: call   0xdffefe
0xdffecf: testl  %eax,%eax
0xdffed1: je     0xdffeec
0xdffed3: movl   %eax,%ecx
0xdffed5: movl   8(%esp,1),%edx
0xdffed9: call   0xdeab09           
0xdffede: addl   20,%esp            <<<<<<<<<< pc in frame being deoptimized
0xdffee1: ret
0xdffee2: nop
0xdffee3: nop
0xdffee4: movl   %eax,%ecx
0xdffee6: jmp    0xdffef1
0xdffee8: movl   %eax,%ecx
0xdffeea: jmp    0xdffef1
0xdffeec: movl   0xc4581e0,%ecx
0xdffef1: addl   20,%esp
0xdffef4: jmp    0xdc21e0
0xdffef9: jmp    0xdc0060
0xdffefe: movl   0xc4e0580,%eax
0xdfff03: jmp    0xe001cf
0xdfff08: movl   0x0,%eax
0xdfff0d: jmp    -0x1
0xdfff12: stosl  %eax,%es:(%edi)
0xdfff13: stosl  %eax,%es:(%edi)
0xdfff14: stosl  %eax,%es:(%edi)
0xdfff15: stosl  %eax,%es:(%edi)
0xdfff16: stosl  %eax,%es:(%edi)
0xdfff17: stosl  %eax,%es:(%edi)



NMETHOD JUST CALLED:
====================

Compiled {method} 'coInvoke' '(LEDU/oswego/cs/dl/util/concurrent/Task;LEDU/osweg
o/cs/dl/util/concurrent/Task;)V' in 'EDU/oswego/cs/dl/util/concurrent/TaskRunner
'[3,5] ((nmethod*)0xdea9d0)
((nmethod*)0xdea9d0)  for method 0xc4f6ed8  { in_use }:
 main code      [0xdeab00..0xdeacef] = 495
 exception code [0xdeacef..0xdeacf4] = 5
 stub code      [0xdeacf4..0xdead70] = 124
 relocation     [0xdeaa54..0xdeaaf8] = 164
 oops           [0xdeb020..0xdeb0c4] = 164
 scopes data    [0xdead70..0xdeaedc] = 364
 scopes pcs     [0xdeaedc..0xdeaf4c] = 112
 handler table  [0xdeaf4c..0xdeb00c] = 192
 nul chk table  [0xdeb00c..0xdeb020] = 20
total size = 1780
Decoding CodeBlob 0xdea9d0
0xdeab00: cmpl   4(%ecx),%eax
0xdeab03: jne    0xdc0220
0xdeab09: subl   28,%esp
0xdeab0c: movl   %ebp,16(%esp,1)
0xdeab10: movl   %edi,12(%esp,1)
0xdeab14: movl   %esi,8(%esp,1)
0xdeab18: movl   %edx,(%esp,1)
0xdeab1b: movl   %ecx,36(%esp,1)
0xdeab1f: movl   %edx,%ebx
0xdeab21: movl   %ebx,4(%esp,1)
0xdeab25: movl   %ecx,%ebx
0xdeab27: movl   72(%ebx),%esi
0xdeab2a: movl   64(%ebx),%edi
0xdeab2d: movl   76(%ebx),%ebx
0xdeab30: movl   8(%edi),%ecx
0xdeab33: movl   %ecx,%ebp
0xdeab35: decl   %ebp
0xdeab36: andl   %ebp,%ebx
0xdeab38: addl   %ecx,%ebx
0xdeab3a: cmpl   %ebx,%esi
0xdeab3c: jnl    0xdeab53
0xdeab3e: andl   %esi,%ebp
0xdeab40: cmpl   %ecx,%ebp
0xdeab42: jae    0xdeacd0
0xdeab48: movl   12(%edi,%ebp,4),%ebx
0xdeab4c: movl   %edx,%ecx
0xdeab4e: movl   %ecx,8(%ebx)
0xdeab51: jmp    0xdeab77
0xdeab53: movl   36(%esp,1),%ecx
0xdeab57: call   0xdc10e0
0xdeab5c: movl   32(%esp,1),%ecx
0xdeab60: call   0xdc0e60
0xdeab65: movl   36(%esp,1),%ecx
0xdeab69: movl   4(%esp,1),%edx
0xdeab6d: call   0xdc10e0
0xdeab72: jmp    0xdeac7c
0xdeab77: shrl   0x9,%ebx
0xdeab7a: movb   0x0,239132416(%ebx)
0xdeab81: movl   %esi,%ebx
0xdeab83: incl   %ebx
0xdeab84: movl   36(%esp,1),%ecx
0xdeab88: movl   %ebx,72(%ecx)
0xdeab8b: movl   32(%esp,1),%ebx
0xdeab8f: testl  %ebx,%ebx
0xdeab91: je     0xdeacc1
0xdeab97: movl   32(%esp,1),%ecx
0xdeab9b: call   0xdead12
0xdeaba0: testl  %eax,%eax
0xdeaba2: jne    0xdeabc2
0xdeaba4: movl   36(%esp,1),%ebx
0xdeaba8: incl   92(%ebx)
0xdeabab: movl   32(%esp,1),%ecx
0xdeabaf: movl   0xc4effd0,%eax
0xdeabb4: call   0xdec2c0
0xdeabb9: movl   32(%esp,1),%ecx
0xdeabbd: call   0xe000e9
0xdeabc2: movl   4(%esp,1),%ebx
0xdeabc6: testl  %ebx,%ebx
0xdeabc8: je     0xdeacc1
0xdeabce: movl   %ebx,%ecx
0xdeabd0: call   0xdead26
0xdeabd5: testl  %eax,%eax
0xdeabd7: jne    0xdeac7c
0xdeabdd: nop
0xdeabde: nop
0xdeabdf: nop
0xdeabe0: movl   36(%esp,1),%ebx
0xdeabe4: movl   72(%ebx),%ebx
0xdeabe7: decl   %ebx
0xdeabe8: movl   %ebx,32(%esp,1)    <<<<<<<< likely trashing of argument
0xdeabec: movl   36(%esp,1),%ebx
0xdeabf0: movl   32(%esp,1),%ecx
0xdeabf4: movl   %ecx,72(%ebx)
0xdeabf7: movl   76(%ebx),%ebx
0xdeabfa: cmpl   32(%esp,1),%ebx
0xdeabfe: jl     0xdeac11
0xdeac00: movl   36(%esp,1),%ecx
0xdeac04: movl   32(%esp,1),%edx
0xdeac08: call   0xdc10e0
0xdeac0d: movl   %eax,%esi
0xdeac0f: jmp    0xdeac38
0xdeac11: movl   36(%esp,1),%ebx
0xdeac15: movl   64(%ebx),%esi
0xdeac18: movl   8(%esi),%ebx
0xdeac1b: movl   %ebx,%edi
0xdeac1d: decl   %edi
0xdeac1e: andl   32(%esp,1),%edi
0xdeac22: cmpl   %ebx,%edi
0xdeac24: jae    0xdeac9a
0xdeac2a: movl   12(%esi,%edi,4),%ebx
0xdeac2e: movl   8(%ebx),%esi
0xdeac31: movl   0x0,8(%ebx)
0xdeac38: testl  %esi,%esi
0xdeac3a: je     0xdeacc1
0xdeac40: movl   %esi,%ecx
0xdeac42: call   0xdead3a
0xdeac47: testl  %eax,%eax
0xdeac49: jne    0xdeac6b
0xdeac4b: movl   36(%esp,1),%ebx
0xdeac4f: incl   92(%ebx)
0xdeac52: movl   %esi,%ecx
0xdeac54: movl   0xc4effd0,%eax
0xdeac59: call   0xdec2c0
0xdeac5e: movl   %esi,%ecx
0xdeac60: call   0xdead44
0xdeac65: cmpl   4(%esp,1),%esi
0xdeac69: je     0xdeac7c
0xdeac6b: movl   4(%esp,1),%ecx
0xdeac6f: call   0xdc10e0
0xdeac74: testl  %eax,%eax
0xdeac76: je     0xdeabe0
0xdeac7c: movl   8(%esp,1),%esi
0xdeac80: movl   12(%esp,1),%edi
0xdeac84: movl   16(%esp,1),%ebp
0xdeac88: addl   28,%esp
0xdeac8b: ret
0xdeac8c: nop
0xdeac8d: nop
0xdeac8e: movl   %eax,%ecx
0xdeac90: jmp    0xdeacdb
0xdeac92: movl   %eax,%ecx
0xdeac94: jmp    0xdeacdb
0xdeac96: movl   %eax,%ecx
0xdeac98: jmp    0xdeacdb
0xdeac9a: movl   0xfffffffb,%ecx
0xdeac9f: call   0xdc2760
0xdeaca4: int3
0xdeaca5: movl   %eax,%ecx
0xdeaca7: jmp    0xdeacdb
0xdeaca9: movl   %eax,%ecx
0xdeacab: jmp    0xdeacdb
0xdeacad: movl   %eax,%ecx
0xdeacaf: jmp    0xdeacdb
0xdeacb1: movl   %eax,%ecx
0xdeacb3: jmp    0xdeacdb
0xdeacb5: movl   %eax,%ecx
0xdeacb7: jmp    0xdeacdb
0xdeacb9: movl   %eax,%ecx
0xdeacbb: jmp    0xdeacdb
0xdeacbd: movl   %eax,%ecx
0xdeacbf: jmp    0xdeacdb
0xdeacc1: movl   0xc4581e0,%ecx
0xdeacc6: jmp    0xdeacdb
0xdeacc8: movl   %eax,%ecx
0xdeacca: jmp    0xdeacdb
0xdeaccc: movl   %eax,%ecx
0xdeacce: jmp    0xdeacdb
0xdeacd0: movl   0xfffffffb,%ecx
0xdeacd5: call   0xdc2760
0xdeacda: int3
0xdeacdb: movl   8(%esp,1),%esi
0xdeacdf: movl   12(%esp,1),%edi
0xdeace3: movl   16(%esp,1),%ebp
0xdeace7: addl   28,%esp
0xdeacea: jmp    0xdc21e0
0xdeacef: jmp    0xdc0060
0xdeacf4: movl   0x0,%eax
0xdeacf9: jmp    -0x1
0xdeacfe: movl   0x0,%eax
0xdead03: jmp    -0x1
0xdead08: movl   0x0,%eax
0xdead0d: jmp    -0x1
0xdead12: movl   0xc4e06e8,%eax
0xdead17: jmp    0xdeb24f
0xdead1c: movl   0xc4e0820,%eax
0xdead21: jmp    0xdffa8f
0xdead26: movl   0xc4e06e8,%eax
0xdead2b: jmp    0xdeb24f
0xdead30: movl   0x0,%eax
0xdead35: jmp    -0x1
0xdead3a: movl   0xc4e06e8,%eax
0xdead3f: jmp    0xdeb24f
0xdead44: movl   0xc4e0820,%eax
0xdead49: jmp    0xdffa8f
0xdead4e: movl   0x0,%eax
0xdead53: jmp    -0x1
0xdead58: stosl  %eax,%es:(%edi)
0xdead59: stosl  %eax,%es:(%edi)
0xdead5a: stosl  %eax,%es:(%edi)
0xdead5b: stosl  %eax,%es:(%edi)
0xdead5c: stosl  %eax,%es:(%edi)
0xdead5d: stosl  %eax,%es:(%edi)
0xdead5e: stosl  %eax,%es:(%edi)
0xdead5f: stosl  %eax,%es:(%edi)
0xdead60: stosl  %eax,%es:(%edi)
0xdead61: stosl  %eax,%es:(%edi)
0xdead62: stosl  %eax,%es:(%edi)
0xdead63: stosl  %eax,%es:(%edi)
0xdead64: stosl  %eax,%es:(%edi)
0xdead65: stosl  %eax,%es:(%edi)
0xdead66: stosl  %eax,%es:(%edi)
0xdead67: stosl  %eax,%es:(%edi)
0xdead68: stosl  %eax,%es:(%edi)
0xdead69: stosl  %eax,%es:(%edi)
0xdead6a: stosl  %eax,%es:(%edi)
0xdead6b: stosl  %eax,%es:(%edi)
0xdead6c: stosl  %eax,%es:(%edi)
0xdead6d: stosl  %eax,%es:(%edi)
0xdead6e: stosl  %eax,%es:(%edi)
0xdead6f: stosl  %eax,%es:(%edi)

steffen.grarup@eng 1999-02-10