EVALUATION

http://hg.openjdk.java.net/jdk7/hotspot-rt/hotspot/rev/3275a6560cf7
                                     

EVALUATION

http://hg.openjdk.java.net/hsx/hotspot-rt/hotspot/rev/c8f2186acf6d
                                     

EVALUATION

Fix is to code generated for invokedynamic, which is why the CR is flagged as JSR292-related.
                                     

EVALUATION

http://hg.openjdk.java.net/jdk7/hotspot/hotspot/rev/3275a6560cf7
                                     

EVALUATION

http://hg.openjdk.java.net/hsx/hotspot-comp/hotspot/rev/c8f2186acf6d
                                     

SUGGESTED FIX

diff -r 642c68c75db9 src/share/vm/c1/c1_LIRGenerator.cpp
--- a/src/share/vm/c1/c1_LIRGenerator.cpp
+++ b/src/share/vm/c1/c1_LIRGenerator.cpp
@@ -2799,7 +2799,7 @@ void LIRGenerator::do_Invoke(Invoke* x) 
 
       // Load CallSite object from constant pool cache.
       __ oop2reg(cpcache->constant_encoding(), tmp);
-      __ load(new LIR_Address(tmp, call_site_offset, T_OBJECT), tmp);
+      __ move_wide(new LIR_Address(tmp, call_site_offset, T_OBJECT), tmp);
 
       // Load target MethodHandle from CallSite object.
       __ load(new LIR_Address(tmp, java_lang_invoke_CallSite::target_offset_in_bytes(), T_OBJECT), receiver);
                                     

EVALUATION

We are trying to decode the address of the CallSite object stored in constant pool cache as if it were an oop but it's a raw pointer which results in crashes.  The fix is to replace the load instruction with move_wide.