Fix SIGSEGV in ddwaf_run from JIT-elided ArenaLease reference on JDK 21.0.8+/JDK 25#198

Merged

jandro996 merged 28 commits into

masterfrom

fix/reachability-fence-crash-jdk21-jdk25

Jul 13, 2026

Commits on Jun 6, 2026

Merge branch 'master' into fix/reachability-fence-crash-jdk21-jdk25
jandro996
authored
test: temporarily comment out reachabilityFence to verify CI regression
jandro996
committed

Commits on Jun 8, 2026

test: add JIT warmup to force C2 compilation before GC pressure
jandro996
committed
test: add testGCRace task without Jacoco instrumentation
jandro996
committed
test: force C2 compilation in testGCRace with -XX:-TieredCompilation
jandro996
committed
fix: restore reachabilityFence - confirmed crash on JDK 21.0.11 in production
jandro996
committed
test: add concurrent-thread stress test to maximise GC race surface
jandro996
committed
test: fix CatchThrowable CodeNarc violation and WafHandle UAF in concurrent test
jandro996
committed
fix(test): avoid DuplicateNumberLiteral/DuplicateStringLiteral in concurrent test
jandro996
committed
fix(test): fix spotless indentation and move private helper after public methods
jandro996
committed
fix(test): fix 3 CodeNarc violations and drain ArenaPool after concurrent test
jandro996
committed

Commits on Jun 10, 2026

Commits on Jun 15, 2026

fix(testGCRace): ensure WARN log level wins over withType(Test) DEBUG append
jandro996
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Fix SIGSEGV in ddwaf_run from JIT-elided ArenaLease reference on JDK 21.0.8+/JDK 25#198

Fix SIGSEGV in ddwaf_run from JIT-elided ArenaLease reference on JDK 21.0.8+/JDK 25#198
jandro996 merged 28 commits into
masterfrom
fix/reachability-fence-crash-jdk21-jdk25

Commits on May 25, 2026

fix: add reachabilityFence to prevent premature GC of Arena buffers

fix: move reachabilityFences into finally block to cover exception paths

fix: use volatile-write fence for Java-8 compatibility

test: fix CodeNarc violations and ASAN timeout in ReachabilityFenceTest

fix: remove non-ASCII em dash, reduce GC stress test iterations

Commits on Jun 6, 2026

Merge branch 'master' into fix/reachability-fence-crash-jdk21-jdk25

test: temporarily comment out reachabilityFence to verify CI regression

Commits on Jun 8, 2026

test: add JIT warmup to force C2 compilation before GC pressure

test: add testGCRace task without Jacoco instrumentation

test: force C2 compilation in testGCRace with -XX:-TieredCompilation

fix: restore reachabilityFence - confirmed crash on JDK 21.0.11 in production

test: add concurrent-thread stress test to maximise GC race surface

test: fix CatchThrowable CodeNarc violation and WafHandle UAF in concurrent test

fix(test): avoid DuplicateNumberLiteral/DuplicateStringLiteral in concurrent test

fix(test): fix spotless indentation and move private helper after public methods

fix(test): fix 3 CodeNarc violations and drain ArenaPool after concurrent test

Commits on Jun 9, 2026

fix(testGCRace): increase heap to 1g for ZGC+aggressive JIT test worker

build: increase Gradle daemon heap to 2g for test report generation

test: temporarily disable reachabilityFence to verify crash (revert me)

style: fix spotless for commented-out fence lines

fix: restore reachabilityFence (APPSEC-62784)

Commits on Jun 10, 2026

test: remove reachability fence to validate CI crash detection (APPSEC-62784)

test: increase GC pressure aggressiveness in ReachabilityFenceTest (APPSEC-62784)

fix: exclude ReachabilityFenceTest from standard :test task (APPSEC-62784)

fix: restore reachability fence (APPSEC-62784)

fix: suppress DEBUG logging in testGCRace to prevent OOM (APPSEC-62784)

fix: increase testGCRace heap to 2g to prevent OOM under JDK25 ZGC

Commits on Jun 15, 2026

fix(testGCRace): ensure WARN log level wins over withType(Test) DEBUG append