SIGSEGV in size_given_klass() called from G1BlockOffsetArray::forward_to_block_containing_addr_slow

Issue

• JVM crashed with following backtrace.

  (gdb) bt
  #0  0x0000003d734328a5 in raise (sig=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
  #1  0x0000003d73434085 in abort () at abort.c:92
  #2  0x00002b7377897f95 in os::abort (dump_core=true) at /usr/src/debug/java-1.7.0-openjdk/openjdk/hotspot/src/os/linux/vm/os_linux.cpp:1593
  #3  0x00002b73779eac3f in VMError::report_and_die (this=0x2b737fb1bbb0) at /usr/src/debug/java-1.7.0-openjdk/openjdk/hotspot/src/share/vm/utilities/vmError.cpp:1018
  #4  0x00002b73779eb2eb in crash_handler (sig=11, info=0x2b737fb1bd70, ucVoid=0x2b737fb1bc40) at /usr/src/debug/java-1.7.0-openjdk/openjdk/hotspot/src/os/linux/vm/vmError_linux.cpp:106
  #5  
  #6  0x00002b73775ea3cc in size_given_klass (this=0x2b73780e8990, q=, n=, addr=0xf34909d8) at /usr/src/debug/java-1.7.0-openjdk/openjdk/hotspot/src/share/vm/oops/oop.inline.hpp:487
  #7  size (this=0x2b73780e8990, q=, n=, addr=0xf34909d8) at /usr/src/debug/java-1.7.0-openjdk/openjdk/hotspot/src/share/vm/oops/oop.inline.hpp:498
  #8  forward_to_block_containing_addr_const (this=0x2b73780e8990, q=, n=, addr=0xf34909d8) at /usr/src/debug/java-1.7.0-openjdk/openjdk/hotspot/src/share/vm/gc_implementation/g1/g1BlockOffsetTable.inline.hpp:106
  #9  G1BlockOffsetArray::forward_to_block_containing_addr_slow (this=0x2b73780e8990, q=, n=, addr=0xf34909d8) at /usr/src/debug/java-1.7.0-openjdk/openjdk/hotspot/src/share/vm/gc_implementation/g1/g1BlockOffsetTable.cpp:409
  #10
   0x00002b73778903b0 in os::print_location (st=0x2b737fb1c3e0, x=4081650136, verbose=false) at /usr/src/debug/java-1.7.0-openjdk/openjdk/hotspot/src/share/vm/runtime/os.cpp:868
  #11 0x00002b737789baa2 in os::print_register_info (st=0x2b737fb1c3e0, context=0x2b737fb1c600) at /usr/src/debug/java-1.7.0-openjdk/openjdk/hotspot/src/os_cpu/linux_x86/vm/os_linux_x86.cpp:829
  #12 0x00002b73779e9b52 in VMError::report (this=0x2b737fb1c560, st=0x2b737fb1c3e0) at /usr/src/debug/java-1.7.0-openjdk/openjdk/hotspot/src/share/vm/utilities/vmError.cpp:538
  #13 0x00002b73779ea7b3 in VMError::report_and_die (this=0x2b737fb1c560) at /usr/src/debug/java-1.7.0-openjdk/openjdk/hotspot/src/share/vm/utilities/vmError.cpp:952
  #14 0x00002b737789c1f7 in JVM_handle_linux_signal (sig=11, info=0x2b737fb1c730, ucVoid=0x2b737fb1c600, abort_if_unrecognized=2142356704) at /usr/src/debug/java-1.7.0-openjdk/openjdk/hotspot/src/os_cpu/linux_x86/vm/os_linux_x86.cpp:528
  #15 
  #16 0x00002b73775ea106 in size_given_klass (this=0x2b73780e8990, q=0xf34909d8, n=0xf34909d8, addr=0xf3491800) at /usr/src/debug/java-1.7.0-openjdk/openjdk/hotspot/src/share/vm/oops/oop.inline.hpp:487
  #17 size (this=0x2b73780e8990, q=0xf34909d8, n=0xf34909d8, addr=0xf3491800) at /usr/src/debug/java-1.7.0-openjdk/openjdk/hotspot/src/share/vm/oops/oop.inline.hpp:498
  #18 G1BlockOffsetArray::forward_to_block_containing_addr_slow (this=0x2b73780e8990, q=0xf34909d8, n=0xf34909d8, addr=0xf3491800) at /usr/src/debug/java-1.7.0-openjdk/openjdk/hotspot/src/share/vm/gc_implementation/g1/g1BlockOffsetTable.cpp:390
  #19 0x00002b73779376d5 in DirtyCardToOopClosure::do_MemRegion (this=0x2b737fb1cca0, mr=...) at /usr/src/debug/java-1.7.0-openjdk/openjdk/hotspot/src/share/vm/memory/space.cpp:137
  #20 0x00002b7377610ed5 in scanCard (this=0x2b737fb1cdc0, r=) at /usr/src/debug/java-1.7.0-openjdk/openjdk/hotspot/src/share/vm/gc_implementation/g1/g1RemSet.cpp:143
  #21 ScanRSClosure::doHeapRegion (this=0x2b737fb1cdc0, r=) at /usr/src/debug/java-1.7.0-openjdk/openjdk/hotspot/src/share/vm/gc_implementation/g1/g1RemSet.cpp:200
  #22 0x00002b73775eb7b0 in G1CollectedHeap::collection_set_iterate_from (this=, r=0x2b73780e0220, cl=0x2b737fb1cdc0) at /usr/src/debug/java-1.7.0-openjdk/openjdk/hotspot/src/share/vm/gc_implementation/g1/g1CollectedHeap.cpp:2869
  #23 0x00002b73776101a0 in G1RemSet::scanRS (this=0x2b73780407e0, oc=, worker_i=) at /usr/src/debug/java-1.7.0-openjdk/openjdk/hotspot/src/share/vm/gc_implementation/g1/g1RemSet.cpp:220
  #24 0x00002b7377610590 in G1RemSet::oops_into_collection_set_do (this=0x2b73780407e0, oc=0x2b737fb219a0, worker_i=4) at /usr/src/debug/java-1.7.0-openjdk/openjdk/hotspot/src/share/vm/gc_implementation/g1/g1RemSet.cpp:397
  #25 0x00002b73775edebf in G1CollectedHeap::g1_process_strong_roots (this=0x2b7378015730, scan_non_heap_roots=0x2b737fb21630, scan_rs=0x2b737fb219a0, scan_perm=, worker_i=4, so=SharedHeap::SO_AllClasses, collecting_perm_gen=false)
      at /usr/src/debug/java-1.7.0-openjdk/openjdk/hotspot/src/share/vm/gc_implementation/g1/g1CollectedHeap.cpp:4813
  #26 0x00002b7377601140 in G1ParTask::work (this=0x2b73b8c1f440, worker_id=4) at /usr/src/debug/java-1.7.0-openjdk/openjdk/hotspot/src/share/vm/gc_implementation/g1/g1CollectedHeap.cpp:4715
  #27 0x00002b73779fa357 in GangWorker::loop (this=0x2b737801a800) at /usr/src/debug/java-1.7.0-openjdk/openjdk/hotspot/src/share/vm/utilities/workgroup.cpp:325
  #28 0x00002b7377899842 in java_start (thread=0x2b737801a800) at /usr/src/debug/java-1.7.0-openjdk/openjdk/hotspot/src/os/linux/vm/os_linux.cpp:891
  #29 0x0000003d73c07851 in start_thread (arg=0x2b737fb22700) at pthread_create.c:301
  #30 0x0000003d734e890d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115