jdk11.0.18+10 crashes in sun.security.utilmath.intpoly.IntegerPloynonomial$MutableElement::setProduct

Bug #2019176 reported by Olaf W.
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
openjdk-lts (Ubuntu)
Expired
Undecided
Unassigned

Bug Description

#
# A fatal error has been detected by the Java Runtime Environment:
#
# SIGSEGV (0xb) at pc=0x00007f817e800200, pid=3539, tid=5146
#
# JRE version: OpenJDK Runtime Environment (11.0.18+10) (build 11.0.18+10-post-Ubuntu-0ubuntu122.04)
# Java VM: OpenJDK 64-Bit Server VM (11.0.18+10-post-Ubuntu-0ubuntu122.04, mixed mode, sharing, tiered, compressed oops, g1 gc, linux-amd64)
# Problematic frame:
# C 0x00007f817e800200
#
# Core dump will be written. Default location: Core dumps may be processed with "/usr/share/apport/apport -p%p -s%s -c%c -d%d -P%P -u%u -g%g -- %E" (or dumping to /home/olaf/jd2/core.3539)
#
# If you would like to submit a bug report, please visit:
# https://bugs.launchpad.net/ubuntu/+source/openjdk-lts
#

--------------- S U M M A R Y ------------

Command Line: -Xmx1500m JDownloader.jar

Host: Pentium(R) Dual-Core CPU E5400 @ 2.70GHz, 2 cores, 2G, Ubuntu 22.04.2 LTS
Time: Thu May 11 07:30:23 2023 CEST elapsed time: 1259.759078 seconds (0d 0h 20m 59s)

--------------- T H R E A D ---------------

Current thread (0x00007f81a8115000): JavaThread "Updater" [_thread_in_Java, id=5146, stack(0x00007f817daf2000,0x00007f817dbf2000)]

Stack: [0x00007f817daf2000,0x00007f817dbf2000], sp=0x00007f817dbeee88, free space=1011k
Native frames: (J=compiled Java code, A=aot compiled Java code, j=interpreted, Vv=VM code, C=native code)
C 0x00007f817e800200

siginfo: si_signo: 11 (SIGSEGV), si_code: 2 (SEGV_ACCERR), si_addr: 0x00007f817e800200

Register to memory mapping:

RAX=0x0000000840b3f3f8 is a pointer to class:
sun.security.util.math.intpoly.IntegerPolynomialP521 {0x0000000840b3f3f8}
 - instance size: 4
 - klass size: 109
 - access: public synchronized
 - state: fully_initialized
 - name: 'sun/security/util/math/intpoly/IntegerPolynomialP521'
 - super: 'sun/security/util/math/intpoly/IntegerPolynomial'
 - sub:
 - arrays: NULL
 - methods: Array<T>(0x00007f8176cd67c0)
 - method ordering: Array<T>(0x0000000800a23a58)
 - default_methods: Array<T>(0x00007f8176cd9840)
 - default vtable indices: Array<T>(0x00007f8176cd9c50)
 - local interfaces: Array<T>(0x0000000800521d68)
 - trans. interfaces: Array<T>(0x00007f8176ccfa68)
 - constants: constant pool [122] {0x00007f8176cd6340} for 'sun/security/util/math/intpoly/IntegerPolynomialP521' cache=0x00007f8176cd9b08
 - class loader data: loader data: 0x00007f81d40d7450 of 'bootstrap'
 - host class: NULL
 - source file: 'IntegerPolynomialP521.java'
 - class annotations: Array<T>(0x0000000000000000)
 - class type annotations: Array<T>(0x0000000000000000)
 - field annotations: Array<T>(0x0000000000000000)
 - field type annotations: Array<T>(0x0000000000000000)
 - inner classes: Array<T>(0x0000000800522338)
 - nest members: Array<T>(0x0000000800522338)
 - java mirror: a 'java/lang/Class'{0x00000000a5231468} = 'sun/security/util/math/intpoly/IntegerPolynomialP521'
 - vtable length 39 (start addr: 0x0000000840b3f5c8)
 - itable length 11 (start addr: 0x0000000840b3f700)
 - ---- static fields (4 words):
 - private static final 'BITS_PER_LIMB' 'I' @128
 - private static final 'NUM_LIMBS' 'I' @132
 - private static final 'MAX_ADDS' 'I' @136
 - public static final 'MODULUS' 'Ljava/math/BigInteger;' @112
 - private static final 'CARRY_ADD' 'J' @120
 - private static final 'LIMB_MASK' 'I' @140
 - ---- non-static fields (5 words):
 - protected final 'numLimbs' 'I' @12
 - protected final 'bitsPerLimb' 'I' @16
 - private final 'maxAdds' 'I' @20
 - private final 'modulus' 'Ljava/math/BigInteger;' @24
 - private final 'posModLimbs' '[J' @28
 - non-static oop maps: 24-28
RBX=0x0000000000000002 is an unknown value
RCX=0x00000000f17eac60 points into unknown readable memory: 0x0000000000000001 | 01 00 00 00 00 00 00 00
RDX=0x00000000f17eac60 points into unknown readable memory: 0x0000000000000001 | 01 00 00 00 00 00 00 00
RSP=0x00007f817dbeee88 is pointing into the stack for thread: 0x00007f81a8115000
RBP=0x0000000000000013 is an unknown value
RSI=0x00000000a522b380 is an oop: sun.security.util.math.intpoly.IntegerPolynomialP521
{0x00000000a522b380} - klass: 'sun/security/util/math/intpoly/IntegerPolynomialP521'
 - ---- fields (total size 4 words):
 - protected final 'numLimbs' 'I' @12 19 (13)
 - protected final 'bitsPerLimb' 'I' @16 28 (1c)
 - private final 'maxAdds' 'I' @20 2
 - private final 'modulus' 'Ljava/math/BigInteger;' @24 a 'java/math/BigInteger'{0x00000000a522b3a0} (a522b3a0)
 - private final 'posModLimbs' '[J' @28 [J{0x00000000a522b420} (a522b420)
RDI=0x00000000f17e6930 is an oop: sun.security.ec.ECOperations
{0x00000000f17e6930} - klass: 'sun/security/ec/ECOperations'
 - ---- fields (total size 5 words):
 - final 'b' 'Lsun/security/util/math/ImmutableIntegerModuloP;' @12 a 'sun/security/util/math/intpoly/IntegerPolynomial$ImmutableElement'{0x00000000f17e4ff8} (f17e4ff8)
 - final 'one' 'Lsun/security/util/math/SmallValue;' @16 a 'sun/security/util/math/intpoly/IntegerPolynomial$Limb'{0x00000000f17e6958} (f17e6958)
 - final 'two' 'Lsun/security/util/math/SmallValue;' @20 a 'sun/security/util/math/intpoly/IntegerPolynomial$Limb'{0x00000000f17e6970} (f17e6970)
 - final 'three' 'Lsun/security/util/math/SmallValue;' @24 a 'sun/security/util/math/intpoly/IntegerPolynomial$Limb'{0x00000000f17e6988} (f17e6988)
 - final 'four' 'Lsun/security/util/math/SmallValue;' @28 a 'sun/security/util/math/intpoly/IntegerPolynomial$Limb'{0x00000000f17e69a0} (f17e69a0)
 - final 'neutral' 'Lsun/security/ec/point/ProjectivePoint$Immutable;' @32 a 'sun/security/ec/point/ProjectivePoint$Immutable'{0x00000000f17e69b8} (f17e69b8)
 - private final 'orderField' 'Lsun/security/util/math/IntegerFieldModuloP;' @36 a 'sun/security/util/math/intpoly/P521OrderField'{0x00000000a522aef0} (a522aef0)
R8 =0xfffffffffa5d1e3e is an unknown value
R9 =0x0000000000000fa0 is an unknown value
R10=0x0000000840b3f3f8 is a pointer to class:
sun.security.util.math.intpoly.IntegerPolynomialP521 {0x0000000840b3f3f8}
 - instance size: 4
 - klass size: 109
 - access: public synchronized
 - state: fully_initialized
 - name: 'sun/security/util/math/intpoly/IntegerPolynomialP521'
 - super: 'sun/security/util/math/intpoly/IntegerPolynomial'
 - sub:
 - arrays: NULL
 - methods: Array<T>(0x00007f8176cd67c0)
 - method ordering: Array<T>(0x0000000800a23a58)
 - default_methods: Array<T>(0x00007f8176cd9840)
 - default vtable indices: Array<T>(0x00007f8176cd9c50)
 - local interfaces: Array<T>(0x0000000800521d68)
 - trans. interfaces: Array<T>(0x00007f8176ccfa68)
 - constants: constant pool [122] {0x00007f8176cd6340} for 'sun/security/util/math/intpoly/IntegerPolynomialP521' cache=0x00007f8176cd9b08
 - class loader data: loader data: 0x00007f81d40d7450 of 'bootstrap'
 - host class: NULL
 - source file: 'IntegerPolynomialP521.java'
 - class annotations: Array<T>(0x0000000000000000)
 - class type annotations: Array<T>(0x0000000000000000)
 - field annotations: Array<T>(0x0000000000000000)
 - field type annotations: Array<T>(0x0000000000000000)
 - inner classes: Array<T>(0x0000000800522338)
 - nest members: Array<T>(0x0000000800522338)
 - java mirror: a 'java/lang/Class'{0x00000000a5231468} = 'sun/security/util/math/intpoly/IntegerPolynomialP521'
 - vtable length 39 (start addr: 0x0000000840b3f5c8)
 - itable length 11 (start addr: 0x0000000840b3f700)
 - ---- static fields (4 words):
 - private static final 'BITS_PER_LIMB' 'I' @128
 - private static final 'NUM_LIMBS' 'I' @132
 - private static final 'MAX_ADDS' 'I' @136
 - public static final 'MODULUS' 'Ljava/math/BigInteger;' @112
 - private static final 'CARRY_ADD' 'J' @120
 - private static final 'LIMB_MASK' 'I' @140
 - ---- non-static fields (5 words):
 - protected final 'numLimbs' 'I' @12
 - protected final 'bitsPerLimb' 'I' @16
 - private final 'maxAdds' 'I' @20
 - private final 'modulus' 'Ljava/math/BigInteger;' @24
 - private final 'posModLimbs' '[J' @28
 - non-static oop maps: 24-28
R11=0x0000000000000013 is an unknown value
R12=0x0 is NULL
R13=0x0000000000e6c22c is an unknown value
R14=0xffea65c5cee6b085 is an unknown value
R15=0x00007f81a8115000 is a thread

Registers:
RAX=0x0000000840b3f3f8, RBX=0x0000000000000002, RCX=0x00000000f17eac60, RDX=0x00000000f17eac60
RSP=0x00007f817dbeee88, RBP=0x0000000000000013, RSI=0x00000000a522b380, RDI=0x00000000f17e6930
R8 =0xfffffffffa5d1e3e, R9 =0x0000000000000fa0, R10=0x0000000840b3f3f8, R11=0x0000000000000013
R12=0x0000000000000000, R13=0x0000000000e6c22c, R14=0xffea65c5cee6b085, R15=0x00007f81a8115000
RIP=0x00007f817e800200, EFLAGS=0x0000000000010246, CSGSFS=0x002b000000000033, ERR=0x0000000000000015
  TRAPNO=0x000000000000000e

Top of Stack: (sp=0x00007f817dbeee88)
0x00007f817dbeee88: 00007f81c473ae80 00000000f17eac40
0x00007f817dbeee98: 00000000f17eac60 00000000f17eac40
0x00007f817dbeeea8: 00007f81c444bdb4 005a261d8ddf30b2
0x00007f817dbeeeb8: 0085951e5e51630f 00007f817dbef068

Revision history for this message
Olaf W. (wendo) wrote :
Revision history for this message
Vladimir Petko (vpa1977) wrote :

Hi, would it be possible to provide details such as reproduction steps/application logs so that it would be possible to investigate the issue?

Changed in openjdk-lts (Ubuntu):
status: New → Incomplete
Revision history for this message
Launchpad Janitor (janitor) wrote :

[Expired for openjdk-lts (Ubuntu) because there has been no activity for 60 days.]

Changed in openjdk-lts (Ubuntu):
status: Incomplete → Expired
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.