From 326ac23935b1d307d01590c6f1ad74abb9b6c6a9 Mon Sep 17 00:00:00 2001
From: drchase <unknown>
Date: Wed, 6 Feb 2013 11:33:49 -0800
Subject: [PATCH] 8006807: C2 crash due to out of bounds array access in
 Parse::do_multianewarray Summary: check ndimensions before accessing
 length[i] element Reviewed-by: kvn Contributed-by: volker.simonis@gmail.com

---
 src/share/vm/opto/parse3.cpp | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/src/share/vm/opto/parse3.cpp b/src/share/vm/opto/parse3.cpp
index ac6f4ec8f..9de92a2ae 100644
--- a/src/share/vm/opto/parse3.cpp
+++ b/src/share/vm/opto/parse3.cpp
@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 1998, 2012, Oracle and/or its affiliates. All rights reserved.
+ * Copyright (c) 1998, 2013, Oracle and/or its affiliates. All rights reserved.
  * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
  *
  * This code is free software; you can redistribute it and/or modify it
@@ -487,7 +487,8 @@ void Parse::do_multianewarray() {
                           fun, NULL, TypeRawPtr::BOTTOM,
                           makecon(TypeKlassPtr::make(array_klass)),
                           length[0], length[1], length[2],
-                          length[3], length[4]);
+                          (ndimensions > 2) ? length[3] : NULL,
+                          (ndimensions > 3) ? length[4] : NULL);
   } else {
     // Create a java array for dimension sizes
     Node* dims = NULL;
-- 
GitLab