1 //===--- CGExpr.cpp - Emit LLVM Code from Expressions ---------------------===//
2 //
3 //                     The LLVM Compiler Infrastructure
4 //
5 // This file is distributed under the University of Illinois Open Source
6 // License. See LICENSE.TXT for details.
7 //
8 //===----------------------------------------------------------------------===//
9 //
10 // This contains code to emit Expr nodes as LLVM code.
11 //
12 //===----------------------------------------------------------------------===//
13 
14 #include "CodeGenFunction.h"
15 #include "CGCXXABI.h"
16 #include "CGCall.h"
17 #include "CGDebugInfo.h"
18 #include "CGObjCRuntime.h"
19 #include "CGOpenMPRuntime.h"
20 #include "CGRecordLayout.h"
21 #include "CodeGenModule.h"
22 #include "TargetInfo.h"
23 #include "clang/AST/ASTContext.h"
24 #include "clang/AST/Attr.h"
25 #include "clang/AST/DeclObjC.h"
26 #include "clang/Frontend/CodeGenOptions.h"
27 #include "llvm/ADT/Hashing.h"
28 #include "llvm/ADT/StringExtras.h"
29 #include "llvm/IR/DataLayout.h"
30 #include "llvm/IR/Intrinsics.h"
31 #include "llvm/IR/LLVMContext.h"
32 #include "llvm/IR/MDBuilder.h"
33 #include "llvm/Support/ConvertUTF.h"
34 #include "llvm/Support/MathExtras.h"
35 
36 using namespace clang;
37 using namespace CodeGen;
38 
39 //===--------------------------------------------------------------------===//
40 //                        Miscellaneous Helper Methods
41 //===--------------------------------------------------------------------===//
42 
43 llvm::Value *CodeGenFunction::EmitCastToVoidPtr(llvm::Value *value) {
44   unsigned addressSpace =
45     cast<llvm::PointerType>(value->getType())->getAddressSpace();
46 
47   llvm::PointerType *destType = Int8PtrTy;
48   if (addressSpace)
49     destType = llvm::Type::getInt8PtrTy(getLLVMContext(), addressSpace);
50 
51   if (value->getType() == destType) return value;
52   return Builder.CreateBitCast(value, destType);
53 }
54 
55 /// CreateTempAlloca - This creates a alloca and inserts it into the entry
56 /// block.
57 Address CodeGenFunction::CreateTempAlloca(llvm::Type *Ty, CharUnits Align,
58                                           const Twine &Name) {
59   auto Alloca = CreateTempAlloca(Ty, Name);
60   Alloca->setAlignment(Align.getQuantity());
61   return Address(Alloca, Align);
62 }
63 
64 /// CreateTempAlloca - This creates a alloca and inserts it into the entry
65 /// block.
66 llvm::AllocaInst *CodeGenFunction::CreateTempAlloca(llvm::Type *Ty,
67                                                     const Twine &Name) {
68   if (!Builder.isNamePreserving())
69     return new llvm::AllocaInst(Ty, nullptr, "", AllocaInsertPt);
70   return new llvm::AllocaInst(Ty, nullptr, Name, AllocaInsertPt);
71 }
72 
73 /// CreateDefaultAlignTempAlloca - This creates an alloca with the
74 /// default alignment of the corresponding LLVM type, which is *not*
75 /// guaranteed to be related in any way to the expected alignment of
76 /// an AST type that might have been lowered to Ty.
77 Address CodeGenFunction::CreateDefaultAlignTempAlloca(llvm::Type *Ty,
78                                                       const Twine &Name) {
79   CharUnits Align =
80     CharUnits::fromQuantity(CGM.getDataLayout().getABITypeAlignment(Ty));
81   return CreateTempAlloca(Ty, Align, Name);
82 }
83 
84 void CodeGenFunction::InitTempAlloca(Address Var, llvm::Value *Init) {
85   assert(isa<llvm::AllocaInst>(Var.getPointer()));
86   auto *Store = new llvm::StoreInst(Init, Var.getPointer());
87   Store->setAlignment(Var.getAlignment().getQuantity());
88   llvm::BasicBlock *Block = AllocaInsertPt->getParent();
89   Block->getInstList().insertAfter(AllocaInsertPt->getIterator(), Store);
90 }
91 
92 Address CodeGenFunction::CreateIRTemp(QualType Ty, const Twine &Name) {
93   CharUnits Align = getContext().getTypeAlignInChars(Ty);
94   return CreateTempAlloca(ConvertType(Ty), Align, Name);
95 }
96 
97 Address CodeGenFunction::CreateMemTemp(QualType Ty, const Twine &Name) {
98   // FIXME: Should we prefer the preferred type alignment here?
99   return CreateMemTemp(Ty, getContext().getTypeAlignInChars(Ty), Name);
100 }
101 
102 Address CodeGenFunction::CreateMemTemp(QualType Ty, CharUnits Align,
103                                        const Twine &Name) {
104   return CreateTempAlloca(ConvertTypeForMem(Ty), Align, Name);
105 }
106 
107 /// EvaluateExprAsBool - Perform the usual unary conversions on the specified
108 /// expression and compare the result against zero, returning an Int1Ty value.
109 llvm::Value *CodeGenFunction::EvaluateExprAsBool(const Expr *E) {
110   PGO.setCurrentStmt(E);
111   if (const MemberPointerType *MPT = E->getType()->getAs<MemberPointerType>()) {
112     llvm::Value *MemPtr = EmitScalarExpr(E);
113     return CGM.getCXXABI().EmitMemberPointerIsNotNull(*this, MemPtr, MPT);
114   }
115 
116   QualType BoolTy = getContext().BoolTy;
117   SourceLocation Loc = E->getExprLoc();
118   if (!E->getType()->isAnyComplexType())
119     return EmitScalarConversion(EmitScalarExpr(E), E->getType(), BoolTy, Loc);
120 
121   return EmitComplexToScalarConversion(EmitComplexExpr(E), E->getType(), BoolTy,
122                                        Loc);
123 }
124 
125 /// EmitIgnoredExpr - Emit code to compute the specified expression,
126 /// ignoring the result.
127 void CodeGenFunction::EmitIgnoredExpr(const Expr *E) {
128   if (E->isRValue())
129     return (void) EmitAnyExpr(E, AggValueSlot::ignored(), true);
130 
131   // Just emit it as an l-value and drop the result.
132   EmitLValue(E);
133 }
134 
135 /// EmitAnyExpr - Emit code to compute the specified expression which
136 /// can have any type.  The result is returned as an RValue struct.
137 /// If this is an aggregate expression, AggSlot indicates where the
138 /// result should be returned.
139 RValue CodeGenFunction::EmitAnyExpr(const Expr *E,
140                                     AggValueSlot aggSlot,
141                                     bool ignoreResult) {
142   switch (getEvaluationKind(E->getType())) {
143   case TEK_Scalar:
144     return RValue::get(EmitScalarExpr(E, ignoreResult));
145   case TEK_Complex:
146     return RValue::getComplex(EmitComplexExpr(E, ignoreResult, ignoreResult));
147   case TEK_Aggregate:
148     if (!ignoreResult && aggSlot.isIgnored())
149       aggSlot = CreateAggTemp(E->getType(), "agg-temp");
150     EmitAggExpr(E, aggSlot);
151     return aggSlot.asRValue();
152   }
153   llvm_unreachable("bad evaluation kind");
154 }
155 
156 /// EmitAnyExprToTemp - Similary to EmitAnyExpr(), however, the result will
157 /// always be accessible even if no aggregate location is provided.
158 RValue CodeGenFunction::EmitAnyExprToTemp(const Expr *E) {
159   AggValueSlot AggSlot = AggValueSlot::ignored();
160 
161   if (hasAggregateEvaluationKind(E->getType()))
162     AggSlot = CreateAggTemp(E->getType(), "agg.tmp");
163   return EmitAnyExpr(E, AggSlot);
164 }
165 
166 /// EmitAnyExprToMem - Evaluate an expression into a given memory
167 /// location.
168 void CodeGenFunction::EmitAnyExprToMem(const Expr *E,
169                                        Address Location,
170                                        Qualifiers Quals,
171                                        bool IsInit) {
172   // FIXME: This function should take an LValue as an argument.
173   switch (getEvaluationKind(E->getType())) {
174   case TEK_Complex:
175     EmitComplexExprIntoLValue(E, MakeAddrLValue(Location, E->getType()),
176                               /*isInit*/ false);
177     return;
178 
179   case TEK_Aggregate: {
180     EmitAggExpr(E, AggValueSlot::forAddr(Location, Quals,
181                                          AggValueSlot::IsDestructed_t(IsInit),
182                                          AggValueSlot::DoesNotNeedGCBarriers,
183                                          AggValueSlot::IsAliased_t(!IsInit)));
184     return;
185   }
186 
187   case TEK_Scalar: {
188     RValue RV = RValue::get(EmitScalarExpr(E, /*Ignore*/ false));
189     LValue LV = MakeAddrLValue(Location, E->getType());
190     EmitStoreThroughLValue(RV, LV);
191     return;
192   }
193   }
194   llvm_unreachable("bad evaluation kind");
195 }
196 
197 static void
198 pushTemporaryCleanup(CodeGenFunction &CGF, const MaterializeTemporaryExpr *M,
199                      const Expr *E, Address ReferenceTemporary) {
200   // Objective-C++ ARC:
201   //   If we are binding a reference to a temporary that has ownership, we
202   //   need to perform retain/release operations on the temporary.
203   //
204   // FIXME: This should be looking at E, not M.
205   if (auto Lifetime = M->getType().getObjCLifetime()) {
206     switch (Lifetime) {
207     case Qualifiers::OCL_None:
208     case Qualifiers::OCL_ExplicitNone:
209       // Carry on to normal cleanup handling.
210       break;
211 
212     case Qualifiers::OCL_Autoreleasing:
213       // Nothing to do; cleaned up by an autorelease pool.
214       return;
215 
216     case Qualifiers::OCL_Strong:
217     case Qualifiers::OCL_Weak:
218       switch (StorageDuration Duration = M->getStorageDuration()) {
219       case SD_Static:
220         // Note: we intentionally do not register a cleanup to release
221         // the object on program termination.
222         return;
223 
224       case SD_Thread:
225         // FIXME: We should probably register a cleanup in this case.
226         return;
227 
228       case SD_Automatic:
229       case SD_FullExpression:
230         CodeGenFunction::Destroyer *Destroy;
231         CleanupKind CleanupKind;
232         if (Lifetime == Qualifiers::OCL_Strong) {
233           const ValueDecl *VD = M->getExtendingDecl();
234           bool Precise =
235               VD && isa<VarDecl>(VD) && VD->hasAttr<ObjCPreciseLifetimeAttr>();
236           CleanupKind = CGF.getARCCleanupKind();
237           Destroy = Precise ? &CodeGenFunction::destroyARCStrongPrecise
238                             : &CodeGenFunction::destroyARCStrongImprecise;
239         } else {
240           // __weak objects always get EH cleanups; otherwise, exceptions
241           // could cause really nasty crashes instead of mere leaks.
242           CleanupKind = NormalAndEHCleanup;
243           Destroy = &CodeGenFunction::destroyARCWeak;
244         }
245         if (Duration == SD_FullExpression)
246           CGF.pushDestroy(CleanupKind, ReferenceTemporary,
247                           M->getType(), *Destroy,
248                           CleanupKind & EHCleanup);
249         else
250           CGF.pushLifetimeExtendedDestroy(CleanupKind, ReferenceTemporary,
251                                           M->getType(),
252                                           *Destroy, CleanupKind & EHCleanup);
253         return;
254 
255       case SD_Dynamic:
256         llvm_unreachable("temporary cannot have dynamic storage duration");
257       }
258       llvm_unreachable("unknown storage duration");
259     }
260   }
261 
262   CXXDestructorDecl *ReferenceTemporaryDtor = nullptr;
263   if (const RecordType *RT =
264           E->getType()->getBaseElementTypeUnsafe()->getAs<RecordType>()) {
265     // Get the destructor for the reference temporary.
266     auto *ClassDecl = cast<CXXRecordDecl>(RT->getDecl());
267     if (!ClassDecl->hasTrivialDestructor())
268       ReferenceTemporaryDtor = ClassDecl->getDestructor();
269   }
270 
271   if (!ReferenceTemporaryDtor)
272     return;
273 
274   // Call the destructor for the temporary.
275   switch (M->getStorageDuration()) {
276   case SD_Static:
277   case SD_Thread: {
278     llvm::Constant *CleanupFn;
279     llvm::Constant *CleanupArg;
280     if (E->getType()->isArrayType()) {
281       CleanupFn = CodeGenFunction(CGF.CGM).generateDestroyHelper(
282           ReferenceTemporary, E->getType(),
283           CodeGenFunction::destroyCXXObject, CGF.getLangOpts().Exceptions,
284           dyn_cast_or_null<VarDecl>(M->getExtendingDecl()));
285       CleanupArg = llvm::Constant::getNullValue(CGF.Int8PtrTy);
286     } else {
287       CleanupFn = CGF.CGM.getAddrOfCXXStructor(ReferenceTemporaryDtor,
288                                                StructorType::Complete);
289       CleanupArg = cast<llvm::Constant>(ReferenceTemporary.getPointer());
290     }
291     CGF.CGM.getCXXABI().registerGlobalDtor(
292         CGF, *cast<VarDecl>(M->getExtendingDecl()), CleanupFn, CleanupArg);
293     break;
294   }
295 
296   case SD_FullExpression:
297     CGF.pushDestroy(NormalAndEHCleanup, ReferenceTemporary, E->getType(),
298                     CodeGenFunction::destroyCXXObject,
299                     CGF.getLangOpts().Exceptions);
300     break;
301 
302   case SD_Automatic:
303     CGF.pushLifetimeExtendedDestroy(NormalAndEHCleanup,
304                                     ReferenceTemporary, E->getType(),
305                                     CodeGenFunction::destroyCXXObject,
306                                     CGF.getLangOpts().Exceptions);
307     break;
308 
309   case SD_Dynamic:
310     llvm_unreachable("temporary cannot have dynamic storage duration");
311   }
312 }
313 
314 static Address
315 createReferenceTemporary(CodeGenFunction &CGF,
316                          const MaterializeTemporaryExpr *M, const Expr *Inner) {
317   switch (M->getStorageDuration()) {
318   case SD_FullExpression:
319   case SD_Automatic: {
320     // If we have a constant temporary array or record try to promote it into a
321     // constant global under the same rules a normal constant would've been
322     // promoted. This is easier on the optimizer and generally emits fewer
323     // instructions.
324     QualType Ty = Inner->getType();
325     if (CGF.CGM.getCodeGenOpts().MergeAllConstants &&
326         (Ty->isArrayType() || Ty->isRecordType()) &&
327         CGF.CGM.isTypeConstant(Ty, true))
328       if (llvm::Constant *Init = CGF.CGM.EmitConstantExpr(Inner, Ty, &CGF)) {
329         auto *GV = new llvm::GlobalVariable(
330             CGF.CGM.getModule(), Init->getType(), /*isConstant=*/true,
331             llvm::GlobalValue::PrivateLinkage, Init, ".ref.tmp");
332         CharUnits alignment = CGF.getContext().getTypeAlignInChars(Ty);
333         GV->setAlignment(alignment.getQuantity());
334         // FIXME: Should we put the new global into a COMDAT?
335         return Address(GV, alignment);
336       }
337     return CGF.CreateMemTemp(Ty, "ref.tmp");
338   }
339   case SD_Thread:
340   case SD_Static:
341     return CGF.CGM.GetAddrOfGlobalTemporary(M, Inner);
342 
343   case SD_Dynamic:
344     llvm_unreachable("temporary can't have dynamic storage duration");
345   }
346   llvm_unreachable("unknown storage duration");
347 }
348 
349 LValue CodeGenFunction::
350 EmitMaterializeTemporaryExpr(const MaterializeTemporaryExpr *M) {
351   const Expr *E = M->GetTemporaryExpr();
352 
353     // FIXME: ideally this would use EmitAnyExprToMem, however, we cannot do so
354     // as that will cause the lifetime adjustment to be lost for ARC
355   auto ownership = M->getType().getObjCLifetime();
356   if (ownership != Qualifiers::OCL_None &&
357       ownership != Qualifiers::OCL_ExplicitNone) {
358     Address Object = createReferenceTemporary(*this, M, E);
359     if (auto *Var = dyn_cast<llvm::GlobalVariable>(Object.getPointer())) {
360       Object = Address(llvm::ConstantExpr::getBitCast(Var,
361                            ConvertTypeForMem(E->getType())
362                              ->getPointerTo(Object.getAddressSpace())),
363                        Object.getAlignment());
364       // We should not have emitted the initializer for this temporary as a
365       // constant.
366       assert(!Var->hasInitializer());
367       Var->setInitializer(CGM.EmitNullConstant(E->getType()));
368     }
369     LValue RefTempDst = MakeAddrLValue(Object, M->getType(),
370                                        AlignmentSource::Decl);
371 
372     switch (getEvaluationKind(E->getType())) {
373     default: llvm_unreachable("expected scalar or aggregate expression");
374     case TEK_Scalar:
375       EmitScalarInit(E, M->getExtendingDecl(), RefTempDst, false);
376       break;
377     case TEK_Aggregate: {
378       EmitAggExpr(E, AggValueSlot::forAddr(Object,
379                                            E->getType().getQualifiers(),
380                                            AggValueSlot::IsDestructed,
381                                            AggValueSlot::DoesNotNeedGCBarriers,
382                                            AggValueSlot::IsNotAliased));
383       break;
384     }
385     }
386 
387     pushTemporaryCleanup(*this, M, E, Object);
388     return RefTempDst;
389   }
390 
391   SmallVector<const Expr *, 2> CommaLHSs;
392   SmallVector<SubobjectAdjustment, 2> Adjustments;
393   E = E->skipRValueSubobjectAdjustments(CommaLHSs, Adjustments);
394 
395   for (const auto &Ignored : CommaLHSs)
396     EmitIgnoredExpr(Ignored);
397 
398   if (const auto *opaque = dyn_cast<OpaqueValueExpr>(E)) {
399     if (opaque->getType()->isRecordType()) {
400       assert(Adjustments.empty());
401       return EmitOpaqueValueLValue(opaque);
402     }
403   }
404 
405   // Create and initialize the reference temporary.
406   Address Object = createReferenceTemporary(*this, M, E);
407   if (auto *Var = dyn_cast<llvm::GlobalVariable>(Object.getPointer())) {
408     Object = Address(llvm::ConstantExpr::getBitCast(
409         Var, ConvertTypeForMem(E->getType())->getPointerTo()),
410                      Object.getAlignment());
411     // If the temporary is a global and has a constant initializer or is a
412     // constant temporary that we promoted to a global, we may have already
413     // initialized it.
414     if (!Var->hasInitializer()) {
415       Var->setInitializer(CGM.EmitNullConstant(E->getType()));
416       EmitAnyExprToMem(E, Object, Qualifiers(), /*IsInit*/true);
417     }
418   } else {
419     EmitAnyExprToMem(E, Object, Qualifiers(), /*IsInit*/true);
420   }
421   pushTemporaryCleanup(*this, M, E, Object);
422 
423   // Perform derived-to-base casts and/or field accesses, to get from the
424   // temporary object we created (and, potentially, for which we extended
425   // the lifetime) to the subobject we're binding the reference to.
426   for (unsigned I = Adjustments.size(); I != 0; --I) {
427     SubobjectAdjustment &Adjustment = Adjustments[I-1];
428     switch (Adjustment.Kind) {
429     case SubobjectAdjustment::DerivedToBaseAdjustment:
430       Object =
431           GetAddressOfBaseClass(Object, Adjustment.DerivedToBase.DerivedClass,
432                                 Adjustment.DerivedToBase.BasePath->path_begin(),
433                                 Adjustment.DerivedToBase.BasePath->path_end(),
434                                 /*NullCheckValue=*/ false, E->getExprLoc());
435       break;
436 
437     case SubobjectAdjustment::FieldAdjustment: {
438       LValue LV = MakeAddrLValue(Object, E->getType(),
439                                  AlignmentSource::Decl);
440       LV = EmitLValueForField(LV, Adjustment.Field);
441       assert(LV.isSimple() &&
442              "materialized temporary field is not a simple lvalue");
443       Object = LV.getAddress();
444       break;
445     }
446 
447     case SubobjectAdjustment::MemberPointerAdjustment: {
448       llvm::Value *Ptr = EmitScalarExpr(Adjustment.Ptr.RHS);
449       Object = EmitCXXMemberDataPointerAddress(E, Object, Ptr,
450                                                Adjustment.Ptr.MPT);
451       break;
452     }
453     }
454   }
455 
456   return MakeAddrLValue(Object, M->getType(), AlignmentSource::Decl);
457 }
458 
459 RValue
460 CodeGenFunction::EmitReferenceBindingToExpr(const Expr *E) {
461   // Emit the expression as an lvalue.
462   LValue LV = EmitLValue(E);
463   assert(LV.isSimple());
464   llvm::Value *Value = LV.getPointer();
465 
466   if (sanitizePerformTypeCheck() && !E->getType()->isFunctionType()) {
467     // C++11 [dcl.ref]p5 (as amended by core issue 453):
468     //   If a glvalue to which a reference is directly bound designates neither
469     //   an existing object or function of an appropriate type nor a region of
470     //   storage of suitable size and alignment to contain an object of the
471     //   reference's type, the behavior is undefined.
472     QualType Ty = E->getType();
473     EmitTypeCheck(TCK_ReferenceBinding, E->getExprLoc(), Value, Ty);
474   }
475 
476   return RValue::get(Value);
477 }
478 
479 
480 /// getAccessedFieldNo - Given an encoded value and a result number, return the
481 /// input field number being accessed.
482 unsigned CodeGenFunction::getAccessedFieldNo(unsigned Idx,
483                                              const llvm::Constant *Elts) {
484   return cast<llvm::ConstantInt>(Elts->getAggregateElement(Idx))
485       ->getZExtValue();
486 }
487 
488 /// Emit the hash_16_bytes function from include/llvm/ADT/Hashing.h.
489 static llvm::Value *emitHash16Bytes(CGBuilderTy &Builder, llvm::Value *Low,
490                                     llvm::Value *High) {
491   llvm::Value *KMul = Builder.getInt64(0x9ddfea08eb382d69ULL);
492   llvm::Value *K47 = Builder.getInt64(47);
493   llvm::Value *A0 = Builder.CreateMul(Builder.CreateXor(Low, High), KMul);
494   llvm::Value *A1 = Builder.CreateXor(Builder.CreateLShr(A0, K47), A0);
495   llvm::Value *B0 = Builder.CreateMul(Builder.CreateXor(High, A1), KMul);
496   llvm::Value *B1 = Builder.CreateXor(Builder.CreateLShr(B0, K47), B0);
497   return Builder.CreateMul(B1, KMul);
498 }
499 
500 bool CodeGenFunction::sanitizePerformTypeCheck() const {
501   return SanOpts.has(SanitizerKind::Null) |
502          SanOpts.has(SanitizerKind::Alignment) |
503          SanOpts.has(SanitizerKind::ObjectSize) |
504          SanOpts.has(SanitizerKind::Vptr);
505 }
506 
507 void CodeGenFunction::EmitTypeCheck(TypeCheckKind TCK, SourceLocation Loc,
508                                     llvm::Value *Ptr, QualType Ty,
509                                     CharUnits Alignment, bool SkipNullCheck) {
510   if (!sanitizePerformTypeCheck())
511     return;
512 
513   // Don't check pointers outside the default address space. The null check
514   // isn't correct, the object-size check isn't supported by LLVM, and we can't
515   // communicate the addresses to the runtime handler for the vptr check.
516   if (Ptr->getType()->getPointerAddressSpace())
517     return;
518 
519   SanitizerScope SanScope(this);
520 
521   SmallVector<std::pair<llvm::Value *, SanitizerMask>, 3> Checks;
522   llvm::BasicBlock *Done = nullptr;
523 
524   bool AllowNullPointers = TCK == TCK_DowncastPointer || TCK == TCK_Upcast ||
525                            TCK == TCK_UpcastToVirtualBase;
526   if ((SanOpts.has(SanitizerKind::Null) || AllowNullPointers) &&
527       !SkipNullCheck) {
528     // The glvalue must not be an empty glvalue.
529     llvm::Value *IsNonNull = Builder.CreateIsNotNull(Ptr);
530 
531     if (AllowNullPointers) {
532       // When performing pointer casts, it's OK if the value is null.
533       // Skip the remaining checks in that case.
534       Done = createBasicBlock("null");
535       llvm::BasicBlock *Rest = createBasicBlock("not.null");
536       Builder.CreateCondBr(IsNonNull, Rest, Done);
537       EmitBlock(Rest);
538     } else {
539       Checks.push_back(std::make_pair(IsNonNull, SanitizerKind::Null));
540     }
541   }
542 
543   if (SanOpts.has(SanitizerKind::ObjectSize) && !Ty->isIncompleteType()) {
544     uint64_t Size = getContext().getTypeSizeInChars(Ty).getQuantity();
545 
546     // The glvalue must refer to a large enough storage region.
547     // FIXME: If Address Sanitizer is enabled, insert dynamic instrumentation
548     //        to check this.
549     // FIXME: Get object address space
550     llvm::Type *Tys[2] = { IntPtrTy, Int8PtrTy };
551     llvm::Value *F = CGM.getIntrinsic(llvm::Intrinsic::objectsize, Tys);
552     llvm::Value *Min = Builder.getFalse();
553     llvm::Value *CastAddr = Builder.CreateBitCast(Ptr, Int8PtrTy);
554     llvm::Value *LargeEnough =
555         Builder.CreateICmpUGE(Builder.CreateCall(F, {CastAddr, Min}),
556                               llvm::ConstantInt::get(IntPtrTy, Size));
557     Checks.push_back(std::make_pair(LargeEnough, SanitizerKind::ObjectSize));
558   }
559 
560   uint64_t AlignVal = 0;
561 
562   if (SanOpts.has(SanitizerKind::Alignment)) {
563     AlignVal = Alignment.getQuantity();
564     if (!Ty->isIncompleteType() && !AlignVal)
565       AlignVal = getContext().getTypeAlignInChars(Ty).getQuantity();
566 
567     // The glvalue must be suitably aligned.
568     if (AlignVal) {
569       llvm::Value *Align =
570           Builder.CreateAnd(Builder.CreatePtrToInt(Ptr, IntPtrTy),
571                             llvm::ConstantInt::get(IntPtrTy, AlignVal - 1));
572       llvm::Value *Aligned =
573         Builder.CreateICmpEQ(Align, llvm::ConstantInt::get(IntPtrTy, 0));
574       Checks.push_back(std::make_pair(Aligned, SanitizerKind::Alignment));
575     }
576   }
577 
578   if (Checks.size() > 0) {
579     llvm::Constant *StaticData[] = {
580       EmitCheckSourceLocation(Loc),
581       EmitCheckTypeDescriptor(Ty),
582       llvm::ConstantInt::get(SizeTy, AlignVal),
583       llvm::ConstantInt::get(Int8Ty, TCK)
584     };
585     EmitCheck(Checks, "type_mismatch", StaticData, Ptr);
586   }
587 
588   // If possible, check that the vptr indicates that there is a subobject of
589   // type Ty at offset zero within this object.
590   //
591   // C++11 [basic.life]p5,6:
592   //   [For storage which does not refer to an object within its lifetime]
593   //   The program has undefined behavior if:
594   //    -- the [pointer or glvalue] is used to access a non-static data member
595   //       or call a non-static member function
596   CXXRecordDecl *RD = Ty->getAsCXXRecordDecl();
597   if (SanOpts.has(SanitizerKind::Vptr) &&
598       (TCK == TCK_MemberAccess || TCK == TCK_MemberCall ||
599        TCK == TCK_DowncastPointer || TCK == TCK_DowncastReference ||
600        TCK == TCK_UpcastToVirtualBase) &&
601       RD && RD->hasDefinition() && RD->isDynamicClass()) {
602     // Compute a hash of the mangled name of the type.
603     //
604     // FIXME: This is not guaranteed to be deterministic! Move to a
605     //        fingerprinting mechanism once LLVM provides one. For the time
606     //        being the implementation happens to be deterministic.
607     SmallString<64> MangledName;
608     llvm::raw_svector_ostream Out(MangledName);
609     CGM.getCXXABI().getMangleContext().mangleCXXRTTI(Ty.getUnqualifiedType(),
610                                                      Out);
611 
612     // Blacklist based on the mangled type.
613     if (!CGM.getContext().getSanitizerBlacklist().isBlacklistedType(
614             Out.str())) {
615       llvm::hash_code TypeHash = hash_value(Out.str());
616 
617       // Load the vptr, and compute hash_16_bytes(TypeHash, vptr).
618       llvm::Value *Low = llvm::ConstantInt::get(Int64Ty, TypeHash);
619       llvm::Type *VPtrTy = llvm::PointerType::get(IntPtrTy, 0);
620       Address VPtrAddr(Builder.CreateBitCast(Ptr, VPtrTy), getPointerAlign());
621       llvm::Value *VPtrVal = Builder.CreateLoad(VPtrAddr);
622       llvm::Value *High = Builder.CreateZExt(VPtrVal, Int64Ty);
623 
624       llvm::Value *Hash = emitHash16Bytes(Builder, Low, High);
625       Hash = Builder.CreateTrunc(Hash, IntPtrTy);
626 
627       // Look the hash up in our cache.
628       const int CacheSize = 128;
629       llvm::Type *HashTable = llvm::ArrayType::get(IntPtrTy, CacheSize);
630       llvm::Value *Cache = CGM.CreateRuntimeVariable(HashTable,
631                                                      "__ubsan_vptr_type_cache");
632       llvm::Value *Slot = Builder.CreateAnd(Hash,
633                                             llvm::ConstantInt::get(IntPtrTy,
634                                                                    CacheSize-1));
635       llvm::Value *Indices[] = { Builder.getInt32(0), Slot };
636       llvm::Value *CacheVal =
637         Builder.CreateAlignedLoad(Builder.CreateInBoundsGEP(Cache, Indices),
638                                   getPointerAlign());
639 
640       // If the hash isn't in the cache, call a runtime handler to perform the
641       // hard work of checking whether the vptr is for an object of the right
642       // type. This will either fill in the cache and return, or produce a
643       // diagnostic.
644       llvm::Value *EqualHash = Builder.CreateICmpEQ(CacheVal, Hash);
645       llvm::Constant *StaticData[] = {
646         EmitCheckSourceLocation(Loc),
647         EmitCheckTypeDescriptor(Ty),
648         CGM.GetAddrOfRTTIDescriptor(Ty.getUnqualifiedType()),
649         llvm::ConstantInt::get(Int8Ty, TCK)
650       };
651       llvm::Value *DynamicData[] = { Ptr, Hash };
652       EmitCheck(std::make_pair(EqualHash, SanitizerKind::Vptr),
653                 "dynamic_type_cache_miss", StaticData, DynamicData);
654     }
655   }
656 
657   if (Done) {
658     Builder.CreateBr(Done);
659     EmitBlock(Done);
660   }
661 }
662 
663 /// Determine whether this expression refers to a flexible array member in a
664 /// struct. We disable array bounds checks for such members.
665 static bool isFlexibleArrayMemberExpr(const Expr *E) {
666   // For compatibility with existing code, we treat arrays of length 0 or
667   // 1 as flexible array members.
668   const ArrayType *AT = E->getType()->castAsArrayTypeUnsafe();
669   if (const auto *CAT = dyn_cast<ConstantArrayType>(AT)) {
670     if (CAT->getSize().ugt(1))
671       return false;
672   } else if (!isa<IncompleteArrayType>(AT))
673     return false;
674 
675   E = E->IgnoreParens();
676 
677   // A flexible array member must be the last member in the class.
678   if (const auto *ME = dyn_cast<MemberExpr>(E)) {
679     // FIXME: If the base type of the member expr is not FD->getParent(),
680     // this should not be treated as a flexible array member access.
681     if (const auto *FD = dyn_cast<FieldDecl>(ME->getMemberDecl())) {
682       RecordDecl::field_iterator FI(
683           DeclContext::decl_iterator(const_cast<FieldDecl *>(FD)));
684       return ++FI == FD->getParent()->field_end();
685     }
686   }
687 
688   return false;
689 }
690 
691 /// If Base is known to point to the start of an array, return the length of
692 /// that array. Return 0 if the length cannot be determined.
693 static llvm::Value *getArrayIndexingBound(
694     CodeGenFunction &CGF, const Expr *Base, QualType &IndexedType) {
695   // For the vector indexing extension, the bound is the number of elements.
696   if (const VectorType *VT = Base->getType()->getAs<VectorType>()) {
697     IndexedType = Base->getType();
698     return CGF.Builder.getInt32(VT->getNumElements());
699   }
700 
701   Base = Base->IgnoreParens();
702 
703   if (const auto *CE = dyn_cast<CastExpr>(Base)) {
704     if (CE->getCastKind() == CK_ArrayToPointerDecay &&
705         !isFlexibleArrayMemberExpr(CE->getSubExpr())) {
706       IndexedType = CE->getSubExpr()->getType();
707       const ArrayType *AT = IndexedType->castAsArrayTypeUnsafe();
708       if (const auto *CAT = dyn_cast<ConstantArrayType>(AT))
709         return CGF.Builder.getInt(CAT->getSize());
710       else if (const auto *VAT = dyn_cast<VariableArrayType>(AT))
711         return CGF.getVLASize(VAT).first;
712     }
713   }
714 
715   return nullptr;
716 }
717 
718 void CodeGenFunction::EmitBoundsCheck(const Expr *E, const Expr *Base,
719                                       llvm::Value *Index, QualType IndexType,
720                                       bool Accessed) {
721   assert(SanOpts.has(SanitizerKind::ArrayBounds) &&
722          "should not be called unless adding bounds checks");
723   SanitizerScope SanScope(this);
724 
725   QualType IndexedType;
726   llvm::Value *Bound = getArrayIndexingBound(*this, Base, IndexedType);
727   if (!Bound)
728     return;
729 
730   bool IndexSigned = IndexType->isSignedIntegerOrEnumerationType();
731   llvm::Value *IndexVal = Builder.CreateIntCast(Index, SizeTy, IndexSigned);
732   llvm::Value *BoundVal = Builder.CreateIntCast(Bound, SizeTy, false);
733 
734   llvm::Constant *StaticData[] = {
735     EmitCheckSourceLocation(E->getExprLoc()),
736     EmitCheckTypeDescriptor(IndexedType),
737     EmitCheckTypeDescriptor(IndexType)
738   };
739   llvm::Value *Check = Accessed ? Builder.CreateICmpULT(IndexVal, BoundVal)
740                                 : Builder.CreateICmpULE(IndexVal, BoundVal);
741   EmitCheck(std::make_pair(Check, SanitizerKind::ArrayBounds), "out_of_bounds",
742             StaticData, Index);
743 }
744 
745 
746 CodeGenFunction::ComplexPairTy CodeGenFunction::
747 EmitComplexPrePostIncDec(const UnaryOperator *E, LValue LV,
748                          bool isInc, bool isPre) {
749   ComplexPairTy InVal = EmitLoadOfComplex(LV, E->getExprLoc());
750 
751   llvm::Value *NextVal;
752   if (isa<llvm::IntegerType>(InVal.first->getType())) {
753     uint64_t AmountVal = isInc ? 1 : -1;
754     NextVal = llvm::ConstantInt::get(InVal.first->getType(), AmountVal, true);
755 
756     // Add the inc/dec to the real part.
757     NextVal = Builder.CreateAdd(InVal.first, NextVal, isInc ? "inc" : "dec");
758   } else {
759     QualType ElemTy = E->getType()->getAs<ComplexType>()->getElementType();
760     llvm::APFloat FVal(getContext().getFloatTypeSemantics(ElemTy), 1);
761     if (!isInc)
762       FVal.changeSign();
763     NextVal = llvm::ConstantFP::get(getLLVMContext(), FVal);
764 
765     // Add the inc/dec to the real part.
766     NextVal = Builder.CreateFAdd(InVal.first, NextVal, isInc ? "inc" : "dec");
767   }
768 
769   ComplexPairTy IncVal(NextVal, InVal.second);
770 
771   // Store the updated result through the lvalue.
772   EmitStoreOfComplex(IncVal, LV, /*init*/ false);
773 
774   // If this is a postinc, return the value read from memory, otherwise use the
775   // updated value.
776   return isPre ? IncVal : InVal;
777 }
778 
779 void CodeGenModule::EmitExplicitCastExprType(const ExplicitCastExpr *E,
780                                              CodeGenFunction *CGF) {
781   // Bind VLAs in the cast type.
782   if (CGF && E->getType()->isVariablyModifiedType())
783     CGF->EmitVariablyModifiedType(E->getType());
784 
785   if (CGDebugInfo *DI = getModuleDebugInfo())
786     DI->EmitExplicitCastType(E->getType());
787 }
788 
789 //===----------------------------------------------------------------------===//
790 //                         LValue Expression Emission
791 //===----------------------------------------------------------------------===//
792 
793 /// EmitPointerWithAlignment - Given an expression of pointer type, try to
794 /// derive a more accurate bound on the alignment of the pointer.
795 Address CodeGenFunction::EmitPointerWithAlignment(const Expr *E,
796                                                   AlignmentSource  *Source) {
797   // We allow this with ObjC object pointers because of fragile ABIs.
798   assert(E->getType()->isPointerType() ||
799          E->getType()->isObjCObjectPointerType());
800   E = E->IgnoreParens();
801 
802   // Casts:
803   if (const CastExpr *CE = dyn_cast<CastExpr>(E)) {
804     if (const auto *ECE = dyn_cast<ExplicitCastExpr>(CE))
805       CGM.EmitExplicitCastExprType(ECE, this);
806 
807     switch (CE->getCastKind()) {
808     // Non-converting casts (but not C's implicit conversion from void*).
809     case CK_BitCast:
810     case CK_NoOp:
811       if (auto PtrTy = CE->getSubExpr()->getType()->getAs<PointerType>()) {
812         if (PtrTy->getPointeeType()->isVoidType())
813           break;
814 
815         AlignmentSource InnerSource;
816         Address Addr = EmitPointerWithAlignment(CE->getSubExpr(), &InnerSource);
817         if (Source) *Source = InnerSource;
818 
819         // If this is an explicit bitcast, and the source l-value is
820         // opaque, honor the alignment of the casted-to type.
821         if (isa<ExplicitCastExpr>(CE) &&
822             InnerSource != AlignmentSource::Decl) {
823           Addr = Address(Addr.getPointer(),
824                          getNaturalPointeeTypeAlignment(E->getType(), Source));
825         }
826 
827         if (SanOpts.has(SanitizerKind::CFIUnrelatedCast) &&
828             CE->getCastKind() == CK_BitCast) {
829           if (auto PT = E->getType()->getAs<PointerType>())
830             EmitVTablePtrCheckForCast(PT->getPointeeType(), Addr.getPointer(),
831                                       /*MayBeNull=*/true,
832                                       CodeGenFunction::CFITCK_UnrelatedCast,
833                                       CE->getLocStart());
834         }
835 
836         return Builder.CreateBitCast(Addr, ConvertType(E->getType()));
837       }
838       break;
839 
840     // Array-to-pointer decay.
841     case CK_ArrayToPointerDecay:
842       return EmitArrayToPointerDecay(CE->getSubExpr(), Source);
843 
844     // Derived-to-base conversions.
845     case CK_UncheckedDerivedToBase:
846     case CK_DerivedToBase: {
847       Address Addr = EmitPointerWithAlignment(CE->getSubExpr(), Source);
848       auto Derived = CE->getSubExpr()->getType()->getPointeeCXXRecordDecl();
849       return GetAddressOfBaseClass(Addr, Derived,
850                                    CE->path_begin(), CE->path_end(),
851                                    ShouldNullCheckClassCastValue(CE),
852                                    CE->getExprLoc());
853     }
854 
855     // TODO: Is there any reason to treat base-to-derived conversions
856     // specially?
857     default:
858       break;
859     }
860   }
861 
862   // Unary &.
863   if (const UnaryOperator *UO = dyn_cast<UnaryOperator>(E)) {
864     if (UO->getOpcode() == UO_AddrOf) {
865       LValue LV = EmitLValue(UO->getSubExpr());
866       if (Source) *Source = LV.getAlignmentSource();
867       return LV.getAddress();
868     }
869   }
870 
871   // TODO: conditional operators, comma.
872 
873   // Otherwise, use the alignment of the type.
874   CharUnits Align = getNaturalPointeeTypeAlignment(E->getType(), Source);
875   return Address(EmitScalarExpr(E), Align);
876 }
877 
878 RValue CodeGenFunction::GetUndefRValue(QualType Ty) {
879   if (Ty->isVoidType())
880     return RValue::get(nullptr);
881 
882   switch (getEvaluationKind(Ty)) {
883   case TEK_Complex: {
884     llvm::Type *EltTy =
885       ConvertType(Ty->castAs<ComplexType>()->getElementType());
886     llvm::Value *U = llvm::UndefValue::get(EltTy);
887     return RValue::getComplex(std::make_pair(U, U));
888   }
889 
890   // If this is a use of an undefined aggregate type, the aggregate must have an
891   // identifiable address.  Just because the contents of the value are undefined
892   // doesn't mean that the address can't be taken and compared.
893   case TEK_Aggregate: {
894     Address DestPtr = CreateMemTemp(Ty, "undef.agg.tmp");
895     return RValue::getAggregate(DestPtr);
896   }
897 
898   case TEK_Scalar:
899     return RValue::get(llvm::UndefValue::get(ConvertType(Ty)));
900   }
901   llvm_unreachable("bad evaluation kind");
902 }
903 
904 RValue CodeGenFunction::EmitUnsupportedRValue(const Expr *E,
905                                               const char *Name) {
906   ErrorUnsupported(E, Name);
907   return GetUndefRValue(E->getType());
908 }
909 
910 LValue CodeGenFunction::EmitUnsupportedLValue(const Expr *E,
911                                               const char *Name) {
912   ErrorUnsupported(E, Name);
913   llvm::Type *Ty = llvm::PointerType::getUnqual(ConvertType(E->getType()));
914   return MakeAddrLValue(Address(llvm::UndefValue::get(Ty), CharUnits::One()),
915                         E->getType());
916 }
917 
918 LValue CodeGenFunction::EmitCheckedLValue(const Expr *E, TypeCheckKind TCK) {
919   LValue LV;
920   if (SanOpts.has(SanitizerKind::ArrayBounds) && isa<ArraySubscriptExpr>(E))
921     LV = EmitArraySubscriptExpr(cast<ArraySubscriptExpr>(E), /*Accessed*/true);
922   else
923     LV = EmitLValue(E);
924   if (!isa<DeclRefExpr>(E) && !LV.isBitField() && LV.isSimple())
925     EmitTypeCheck(TCK, E->getExprLoc(), LV.getPointer(),
926                   E->getType(), LV.getAlignment());
927   return LV;
928 }
929 
930 /// EmitLValue - Emit code to compute a designator that specifies the location
931 /// of the expression.
932 ///
933 /// This can return one of two things: a simple address or a bitfield reference.
934 /// In either case, the LLVM Value* in the LValue structure is guaranteed to be
935 /// an LLVM pointer type.
936 ///
937 /// If this returns a bitfield reference, nothing about the pointee type of the
938 /// LLVM value is known: For example, it may not be a pointer to an integer.
939 ///
940 /// If this returns a normal address, and if the lvalue's C type is fixed size,
941 /// this method guarantees that the returned pointer type will point to an LLVM
942 /// type of the same size of the lvalue's type.  If the lvalue has a variable
943 /// length type, this is not possible.
944 ///
945 LValue CodeGenFunction::EmitLValue(const Expr *E) {
946   ApplyDebugLocation DL(*this, E);
947   switch (E->getStmtClass()) {
948   default: return EmitUnsupportedLValue(E, "l-value expression");
949 
950   case Expr::ObjCPropertyRefExprClass:
951     llvm_unreachable("cannot emit a property reference directly");
952 
953   case Expr::ObjCSelectorExprClass:
954     return EmitObjCSelectorLValue(cast<ObjCSelectorExpr>(E));
955   case Expr::ObjCIsaExprClass:
956     return EmitObjCIsaExpr(cast<ObjCIsaExpr>(E));
957   case Expr::BinaryOperatorClass:
958     return EmitBinaryOperatorLValue(cast<BinaryOperator>(E));
959   case Expr::CompoundAssignOperatorClass: {
960     QualType Ty = E->getType();
961     if (const AtomicType *AT = Ty->getAs<AtomicType>())
962       Ty = AT->getValueType();
963     if (!Ty->isAnyComplexType())
964       return EmitCompoundAssignmentLValue(cast<CompoundAssignOperator>(E));
965     return EmitComplexCompoundAssignmentLValue(cast<CompoundAssignOperator>(E));
966   }
967   case Expr::CallExprClass:
968   case Expr::CXXMemberCallExprClass:
969   case Expr::CXXOperatorCallExprClass:
970   case Expr::UserDefinedLiteralClass:
971     return EmitCallExprLValue(cast<CallExpr>(E));
972   case Expr::VAArgExprClass:
973     return EmitVAArgExprLValue(cast<VAArgExpr>(E));
974   case Expr::DeclRefExprClass:
975     return EmitDeclRefLValue(cast<DeclRefExpr>(E));
976   case Expr::ParenExprClass:
977     return EmitLValue(cast<ParenExpr>(E)->getSubExpr());
978   case Expr::GenericSelectionExprClass:
979     return EmitLValue(cast<GenericSelectionExpr>(E)->getResultExpr());
980   case Expr::PredefinedExprClass:
981     return EmitPredefinedLValue(cast<PredefinedExpr>(E));
982   case Expr::StringLiteralClass:
983     return EmitStringLiteralLValue(cast<StringLiteral>(E));
984   case Expr::ObjCEncodeExprClass:
985     return EmitObjCEncodeExprLValue(cast<ObjCEncodeExpr>(E));
986   case Expr::PseudoObjectExprClass:
987     return EmitPseudoObjectLValue(cast<PseudoObjectExpr>(E));
988   case Expr::InitListExprClass:
989     return EmitInitListLValue(cast<InitListExpr>(E));
990   case Expr::CXXTemporaryObjectExprClass:
991   case Expr::CXXConstructExprClass:
992     return EmitCXXConstructLValue(cast<CXXConstructExpr>(E));
993   case Expr::CXXBindTemporaryExprClass:
994     return EmitCXXBindTemporaryLValue(cast<CXXBindTemporaryExpr>(E));
995   case Expr::CXXUuidofExprClass:
996     return EmitCXXUuidofLValue(cast<CXXUuidofExpr>(E));
997   case Expr::LambdaExprClass:
998     return EmitLambdaLValue(cast<LambdaExpr>(E));
999 
1000   case Expr::ExprWithCleanupsClass: {
1001     const auto *cleanups = cast<ExprWithCleanups>(E);
1002     enterFullExpression(cleanups);
1003     RunCleanupsScope Scope(*this);
1004     return EmitLValue(cleanups->getSubExpr());
1005   }
1006 
1007   case Expr::CXXDefaultArgExprClass:
1008     return EmitLValue(cast<CXXDefaultArgExpr>(E)->getExpr());
1009   case Expr::CXXDefaultInitExprClass: {
1010     CXXDefaultInitExprScope Scope(*this);
1011     return EmitLValue(cast<CXXDefaultInitExpr>(E)->getExpr());
1012   }
1013   case Expr::CXXTypeidExprClass:
1014     return EmitCXXTypeidLValue(cast<CXXTypeidExpr>(E));
1015 
1016   case Expr::ObjCMessageExprClass:
1017     return EmitObjCMessageExprLValue(cast<ObjCMessageExpr>(E));
1018   case Expr::ObjCIvarRefExprClass:
1019     return EmitObjCIvarRefLValue(cast<ObjCIvarRefExpr>(E));
1020   case Expr::StmtExprClass:
1021     return EmitStmtExprLValue(cast<StmtExpr>(E));
1022   case Expr::UnaryOperatorClass:
1023     return EmitUnaryOpLValue(cast<UnaryOperator>(E));
1024   case Expr::ArraySubscriptExprClass:
1025     return EmitArraySubscriptExpr(cast<ArraySubscriptExpr>(E));
1026   case Expr::OMPArraySectionExprClass:
1027     return EmitOMPArraySectionExpr(cast<OMPArraySectionExpr>(E));
1028   case Expr::ExtVectorElementExprClass:
1029     return EmitExtVectorElementExpr(cast<ExtVectorElementExpr>(E));
1030   case Expr::MemberExprClass:
1031     return EmitMemberExpr(cast<MemberExpr>(E));
1032   case Expr::CompoundLiteralExprClass:
1033     return EmitCompoundLiteralLValue(cast<CompoundLiteralExpr>(E));
1034   case Expr::ConditionalOperatorClass:
1035     return EmitConditionalOperatorLValue(cast<ConditionalOperator>(E));
1036   case Expr::BinaryConditionalOperatorClass:
1037     return EmitConditionalOperatorLValue(cast<BinaryConditionalOperator>(E));
1038   case Expr::ChooseExprClass:
1039     return EmitLValue(cast<ChooseExpr>(E)->getChosenSubExpr());
1040   case Expr::OpaqueValueExprClass:
1041     return EmitOpaqueValueLValue(cast<OpaqueValueExpr>(E));
1042   case Expr::SubstNonTypeTemplateParmExprClass:
1043     return EmitLValue(cast<SubstNonTypeTemplateParmExpr>(E)->getReplacement());
1044   case Expr::ImplicitCastExprClass:
1045   case Expr::CStyleCastExprClass:
1046   case Expr::CXXFunctionalCastExprClass:
1047   case Expr::CXXStaticCastExprClass:
1048   case Expr::CXXDynamicCastExprClass:
1049   case Expr::CXXReinterpretCastExprClass:
1050   case Expr::CXXConstCastExprClass:
1051   case Expr::ObjCBridgedCastExprClass:
1052     return EmitCastLValue(cast<CastExpr>(E));
1053 
1054   case Expr::MaterializeTemporaryExprClass:
1055     return EmitMaterializeTemporaryExpr(cast<MaterializeTemporaryExpr>(E));
1056   }
1057 }
1058 
1059 /// Given an object of the given canonical type, can we safely copy a
1060 /// value out of it based on its initializer?
1061 static bool isConstantEmittableObjectType(QualType type) {
1062   assert(type.isCanonical());
1063   assert(!type->isReferenceType());
1064 
1065   // Must be const-qualified but non-volatile.
1066   Qualifiers qs = type.getLocalQualifiers();
1067   if (!qs.hasConst() || qs.hasVolatile()) return false;
1068 
1069   // Otherwise, all object types satisfy this except C++ classes with
1070   // mutable subobjects or non-trivial copy/destroy behavior.
1071   if (const auto *RT = dyn_cast<RecordType>(type))
1072     if (const auto *RD = dyn_cast<CXXRecordDecl>(RT->getDecl()))
1073       if (RD->hasMutableFields() || !RD->isTrivial())
1074         return false;
1075 
1076   return true;
1077 }
1078 
1079 /// Can we constant-emit a load of a reference to a variable of the
1080 /// given type?  This is different from predicates like
1081 /// Decl::isUsableInConstantExpressions because we do want it to apply
1082 /// in situations that don't necessarily satisfy the language's rules
1083 /// for this (e.g. C++'s ODR-use rules).  For example, we want to able
1084 /// to do this with const float variables even if those variables
1085 /// aren't marked 'constexpr'.
1086 enum ConstantEmissionKind {
1087   CEK_None,
1088   CEK_AsReferenceOnly,
1089   CEK_AsValueOrReference,
1090   CEK_AsValueOnly
1091 };
1092 static ConstantEmissionKind checkVarTypeForConstantEmission(QualType type) {
1093   type = type.getCanonicalType();
1094   if (const auto *ref = dyn_cast<ReferenceType>(type)) {
1095     if (isConstantEmittableObjectType(ref->getPointeeType()))
1096       return CEK_AsValueOrReference;
1097     return CEK_AsReferenceOnly;
1098   }
1099   if (isConstantEmittableObjectType(type))
1100     return CEK_AsValueOnly;
1101   return CEK_None;
1102 }
1103 
1104 /// Try to emit a reference to the given value without producing it as
1105 /// an l-value.  This is actually more than an optimization: we can't
1106 /// produce an l-value for variables that we never actually captured
1107 /// in a block or lambda, which means const int variables or constexpr
1108 /// literals or similar.
1109 CodeGenFunction::ConstantEmission
1110 CodeGenFunction::tryEmitAsConstant(DeclRefExpr *refExpr) {
1111   ValueDecl *value = refExpr->getDecl();
1112 
1113   // The value needs to be an enum constant or a constant variable.
1114   ConstantEmissionKind CEK;
1115   if (isa<ParmVarDecl>(value)) {
1116     CEK = CEK_None;
1117   } else if (auto *var = dyn_cast<VarDecl>(value)) {
1118     CEK = checkVarTypeForConstantEmission(var->getType());
1119   } else if (isa<EnumConstantDecl>(value)) {
1120     CEK = CEK_AsValueOnly;
1121   } else {
1122     CEK = CEK_None;
1123   }
1124   if (CEK == CEK_None) return ConstantEmission();
1125 
1126   Expr::EvalResult result;
1127   bool resultIsReference;
1128   QualType resultType;
1129 
1130   // It's best to evaluate all the way as an r-value if that's permitted.
1131   if (CEK != CEK_AsReferenceOnly &&
1132       refExpr->EvaluateAsRValue(result, getContext())) {
1133     resultIsReference = false;
1134     resultType = refExpr->getType();
1135 
1136   // Otherwise, try to evaluate as an l-value.
1137   } else if (CEK != CEK_AsValueOnly &&
1138              refExpr->EvaluateAsLValue(result, getContext())) {
1139     resultIsReference = true;
1140     resultType = value->getType();
1141 
1142   // Failure.
1143   } else {
1144     return ConstantEmission();
1145   }
1146 
1147   // In any case, if the initializer has side-effects, abandon ship.
1148   if (result.HasSideEffects)
1149     return ConstantEmission();
1150 
1151   // Emit as a constant.
1152   llvm::Constant *C = CGM.EmitConstantValue(result.Val, resultType, this);
1153 
1154   // Make sure we emit a debug reference to the global variable.
1155   // This should probably fire even for
1156   if (isa<VarDecl>(value)) {
1157     if (!getContext().DeclMustBeEmitted(cast<VarDecl>(value)))
1158       EmitDeclRefExprDbgValue(refExpr, C);
1159   } else {
1160     assert(isa<EnumConstantDecl>(value));
1161     EmitDeclRefExprDbgValue(refExpr, C);
1162   }
1163 
1164   // If we emitted a reference constant, we need to dereference that.
1165   if (resultIsReference)
1166     return ConstantEmission::forReference(C);
1167 
1168   return ConstantEmission::forValue(C);
1169 }
1170 
1171 llvm::Value *CodeGenFunction::EmitLoadOfScalar(LValue lvalue,
1172                                                SourceLocation Loc) {
1173   return EmitLoadOfScalar(lvalue.getAddress(), lvalue.isVolatile(),
1174                           lvalue.getType(), Loc, lvalue.getAlignmentSource(),
1175                           lvalue.getTBAAInfo(),
1176                           lvalue.getTBAABaseType(), lvalue.getTBAAOffset(),
1177                           lvalue.isNontemporal());
1178 }
1179 
1180 static bool hasBooleanRepresentation(QualType Ty) {
1181   if (Ty->isBooleanType())
1182     return true;
1183 
1184   if (const EnumType *ET = Ty->getAs<EnumType>())
1185     return ET->getDecl()->getIntegerType()->isBooleanType();
1186 
1187   if (const AtomicType *AT = Ty->getAs<AtomicType>())
1188     return hasBooleanRepresentation(AT->getValueType());
1189 
1190   return false;
1191 }
1192 
1193 static bool getRangeForType(CodeGenFunction &CGF, QualType Ty,
1194                             llvm::APInt &Min, llvm::APInt &End,
1195                             bool StrictEnums) {
1196   const EnumType *ET = Ty->getAs<EnumType>();
1197   bool IsRegularCPlusPlusEnum = CGF.getLangOpts().CPlusPlus && StrictEnums &&
1198                                 ET && !ET->getDecl()->isFixed();
1199   bool IsBool = hasBooleanRepresentation(Ty);
1200   if (!IsBool && !IsRegularCPlusPlusEnum)
1201     return false;
1202 
1203   if (IsBool) {
1204     Min = llvm::APInt(CGF.getContext().getTypeSize(Ty), 0);
1205     End = llvm::APInt(CGF.getContext().getTypeSize(Ty), 2);
1206   } else {
1207     const EnumDecl *ED = ET->getDecl();
1208     llvm::Type *LTy = CGF.ConvertTypeForMem(ED->getIntegerType());
1209     unsigned Bitwidth = LTy->getScalarSizeInBits();
1210     unsigned NumNegativeBits = ED->getNumNegativeBits();
1211     unsigned NumPositiveBits = ED->getNumPositiveBits();
1212 
1213     if (NumNegativeBits) {
1214       unsigned NumBits = std::max(NumNegativeBits, NumPositiveBits + 1);
1215       assert(NumBits <= Bitwidth);
1216       End = llvm::APInt(Bitwidth, 1) << (NumBits - 1);
1217       Min = -End;
1218     } else {
1219       assert(NumPositiveBits <= Bitwidth);
1220       End = llvm::APInt(Bitwidth, 1) << NumPositiveBits;
1221       Min = llvm::APInt(Bitwidth, 0);
1222     }
1223   }
1224   return true;
1225 }
1226 
1227 llvm::MDNode *CodeGenFunction::getRangeForLoadFromType(QualType Ty) {
1228   llvm::APInt Min, End;
1229   if (!getRangeForType(*this, Ty, Min, End,
1230                        CGM.getCodeGenOpts().StrictEnums))
1231     return nullptr;
1232 
1233   llvm::MDBuilder MDHelper(getLLVMContext());
1234   return MDHelper.createRange(Min, End);
1235 }
1236 
1237 llvm::Value *CodeGenFunction::EmitLoadOfScalar(Address Addr, bool Volatile,
1238                                                QualType Ty,
1239                                                SourceLocation Loc,
1240                                                AlignmentSource AlignSource,
1241                                                llvm::MDNode *TBAAInfo,
1242                                                QualType TBAABaseType,
1243                                                uint64_t TBAAOffset,
1244                                                bool isNontemporal) {
1245   // For better performance, handle vector loads differently.
1246   if (Ty->isVectorType()) {
1247     const llvm::Type *EltTy = Addr.getElementType();
1248 
1249     const auto *VTy = cast<llvm::VectorType>(EltTy);
1250 
1251     // Handle vectors of size 3 like size 4 for better performance.
1252     if (VTy->getNumElements() == 3) {
1253 
1254       // Bitcast to vec4 type.
1255       llvm::VectorType *vec4Ty = llvm::VectorType::get(VTy->getElementType(),
1256                                                          4);
1257       Address Cast = Builder.CreateElementBitCast(Addr, vec4Ty, "castToVec4");
1258       // Now load value.
1259       llvm::Value *V = Builder.CreateLoad(Cast, Volatile, "loadVec4");
1260 
1261       // Shuffle vector to get vec3.
1262       V = Builder.CreateShuffleVector(V, llvm::UndefValue::get(vec4Ty),
1263                                       {0, 1, 2}, "extractVec");
1264       return EmitFromMemory(V, Ty);
1265     }
1266   }
1267 
1268   // Atomic operations have to be done on integral types.
1269   if (Ty->isAtomicType() || typeIsSuitableForInlineAtomic(Ty, Volatile)) {
1270     LValue lvalue =
1271       LValue::MakeAddr(Addr, Ty, getContext(), AlignSource, TBAAInfo);
1272     return EmitAtomicLoad(lvalue, Loc).getScalarVal();
1273   }
1274 
1275   llvm::LoadInst *Load = Builder.CreateLoad(Addr, Volatile);
1276   if (isNontemporal) {
1277     llvm::MDNode *Node = llvm::MDNode::get(
1278         Load->getContext(), llvm::ConstantAsMetadata::get(Builder.getInt32(1)));
1279     Load->setMetadata(CGM.getModule().getMDKindID("nontemporal"), Node);
1280   }
1281   if (TBAAInfo) {
1282     llvm::MDNode *TBAAPath = CGM.getTBAAStructTagInfo(TBAABaseType, TBAAInfo,
1283                                                       TBAAOffset);
1284     if (TBAAPath)
1285       CGM.DecorateInstructionWithTBAA(Load, TBAAPath,
1286                                       false /*ConvertTypeToTag*/);
1287   }
1288 
1289   bool NeedsBoolCheck =
1290       SanOpts.has(SanitizerKind::Bool) && hasBooleanRepresentation(Ty);
1291   bool NeedsEnumCheck =
1292       SanOpts.has(SanitizerKind::Enum) && Ty->getAs<EnumType>();
1293   if (NeedsBoolCheck || NeedsEnumCheck) {
1294     SanitizerScope SanScope(this);
1295     llvm::APInt Min, End;
1296     if (getRangeForType(*this, Ty, Min, End, true)) {
1297       --End;
1298       llvm::Value *Check;
1299       if (!Min)
1300         Check = Builder.CreateICmpULE(
1301           Load, llvm::ConstantInt::get(getLLVMContext(), End));
1302       else {
1303         llvm::Value *Upper = Builder.CreateICmpSLE(
1304           Load, llvm::ConstantInt::get(getLLVMContext(), End));
1305         llvm::Value *Lower = Builder.CreateICmpSGE(
1306           Load, llvm::ConstantInt::get(getLLVMContext(), Min));
1307         Check = Builder.CreateAnd(Upper, Lower);
1308       }
1309       llvm::Constant *StaticArgs[] = {
1310         EmitCheckSourceLocation(Loc),
1311         EmitCheckTypeDescriptor(Ty)
1312       };
1313       SanitizerMask Kind = NeedsEnumCheck ? SanitizerKind::Enum : SanitizerKind::Bool;
1314       EmitCheck(std::make_pair(Check, Kind), "load_invalid_value", StaticArgs,
1315                 EmitCheckValue(Load));
1316     }
1317   } else if (CGM.getCodeGenOpts().OptimizationLevel > 0)
1318     if (llvm::MDNode *RangeInfo = getRangeForLoadFromType(Ty))
1319       Load->setMetadata(llvm::LLVMContext::MD_range, RangeInfo);
1320 
1321   return EmitFromMemory(Load, Ty);
1322 }
1323 
1324 llvm::Value *CodeGenFunction::EmitToMemory(llvm::Value *Value, QualType Ty) {
1325   // Bool has a different representation in memory than in registers.
1326   if (hasBooleanRepresentation(Ty)) {
1327     // This should really always be an i1, but sometimes it's already
1328     // an i8, and it's awkward to track those cases down.
1329     if (Value->getType()->isIntegerTy(1))
1330       return Builder.CreateZExt(Value, ConvertTypeForMem(Ty), "frombool");
1331     assert(Value->getType()->isIntegerTy(getContext().getTypeSize(Ty)) &&
1332            "wrong value rep of bool");
1333   }
1334 
1335   return Value;
1336 }
1337 
1338 llvm::Value *CodeGenFunction::EmitFromMemory(llvm::Value *Value, QualType Ty) {
1339   // Bool has a different representation in memory than in registers.
1340   if (hasBooleanRepresentation(Ty)) {
1341     assert(Value->getType()->isIntegerTy(getContext().getTypeSize(Ty)) &&
1342            "wrong value rep of bool");
1343     return Builder.CreateTrunc(Value, Builder.getInt1Ty(), "tobool");
1344   }
1345 
1346   return Value;
1347 }
1348 
1349 void CodeGenFunction::EmitStoreOfScalar(llvm::Value *Value, Address Addr,
1350                                         bool Volatile, QualType Ty,
1351                                         AlignmentSource AlignSource,
1352                                         llvm::MDNode *TBAAInfo,
1353                                         bool isInit, QualType TBAABaseType,
1354                                         uint64_t TBAAOffset,
1355                                         bool isNontemporal) {
1356 
1357   // Handle vectors differently to get better performance.
1358   if (Ty->isVectorType()) {
1359     llvm::Type *SrcTy = Value->getType();
1360     auto *VecTy = cast<llvm::VectorType>(SrcTy);
1361     // Handle vec3 special.
1362     if (VecTy->getNumElements() == 3) {
1363       // Our source is a vec3, do a shuffle vector to make it a vec4.
1364       llvm::Constant *Mask[] = {Builder.getInt32(0), Builder.getInt32(1),
1365                                 Builder.getInt32(2),
1366                                 llvm::UndefValue::get(Builder.getInt32Ty())};
1367       llvm::Value *MaskV = llvm::ConstantVector::get(Mask);
1368       Value = Builder.CreateShuffleVector(Value,
1369                                           llvm::UndefValue::get(VecTy),
1370                                           MaskV, "extractVec");
1371       SrcTy = llvm::VectorType::get(VecTy->getElementType(), 4);
1372     }
1373     if (Addr.getElementType() != SrcTy) {
1374       Addr = Builder.CreateElementBitCast(Addr, SrcTy, "storetmp");
1375     }
1376   }
1377 
1378   Value = EmitToMemory(Value, Ty);
1379 
1380   if (Ty->isAtomicType() ||
1381       (!isInit && typeIsSuitableForInlineAtomic(Ty, Volatile))) {
1382     EmitAtomicStore(RValue::get(Value),
1383                     LValue::MakeAddr(Addr, Ty, getContext(),
1384                                      AlignSource, TBAAInfo),
1385                     isInit);
1386     return;
1387   }
1388 
1389   llvm::StoreInst *Store = Builder.CreateStore(Value, Addr, Volatile);
1390   if (isNontemporal) {
1391     llvm::MDNode *Node =
1392         llvm::MDNode::get(Store->getContext(),
1393                           llvm::ConstantAsMetadata::get(Builder.getInt32(1)));
1394     Store->setMetadata(CGM.getModule().getMDKindID("nontemporal"), Node);
1395   }
1396   if (TBAAInfo) {
1397     llvm::MDNode *TBAAPath = CGM.getTBAAStructTagInfo(TBAABaseType, TBAAInfo,
1398                                                       TBAAOffset);
1399     if (TBAAPath)
1400       CGM.DecorateInstructionWithTBAA(Store, TBAAPath,
1401                                       false /*ConvertTypeToTag*/);
1402   }
1403 }
1404 
1405 void CodeGenFunction::EmitStoreOfScalar(llvm::Value *value, LValue lvalue,
1406                                         bool isInit) {
1407   EmitStoreOfScalar(value, lvalue.getAddress(), lvalue.isVolatile(),
1408                     lvalue.getType(), lvalue.getAlignmentSource(),
1409                     lvalue.getTBAAInfo(), isInit, lvalue.getTBAABaseType(),
1410                     lvalue.getTBAAOffset(), lvalue.isNontemporal());
1411 }
1412 
1413 /// EmitLoadOfLValue - Given an expression that represents a value lvalue, this
1414 /// method emits the address of the lvalue, then loads the result as an rvalue,
1415 /// returning the rvalue.
1416 RValue CodeGenFunction::EmitLoadOfLValue(LValue LV, SourceLocation Loc) {
1417   if (LV.isObjCWeak()) {
1418     // load of a __weak object.
1419     Address AddrWeakObj = LV.getAddress();
1420     return RValue::get(CGM.getObjCRuntime().EmitObjCWeakRead(*this,
1421                                                              AddrWeakObj));
1422   }
1423   if (LV.getQuals().getObjCLifetime() == Qualifiers::OCL_Weak) {
1424     // In MRC mode, we do a load+autorelease.
1425     if (!getLangOpts().ObjCAutoRefCount) {
1426       return RValue::get(EmitARCLoadWeak(LV.getAddress()));
1427     }
1428 
1429     // In ARC mode, we load retained and then consume the value.
1430     llvm::Value *Object = EmitARCLoadWeakRetained(LV.getAddress());
1431     Object = EmitObjCConsumeObject(LV.getType(), Object);
1432     return RValue::get(Object);
1433   }
1434 
1435   if (LV.isSimple()) {
1436     assert(!LV.getType()->isFunctionType());
1437 
1438     // Everything needs a load.
1439     return RValue::get(EmitLoadOfScalar(LV, Loc));
1440   }
1441 
1442   if (LV.isVectorElt()) {
1443     llvm::LoadInst *Load = Builder.CreateLoad(LV.getVectorAddress(),
1444                                               LV.isVolatileQualified());
1445     return RValue::get(Builder.CreateExtractElement(Load, LV.getVectorIdx(),
1446                                                     "vecext"));
1447   }
1448 
1449   // If this is a reference to a subset of the elements of a vector, either
1450   // shuffle the input or extract/insert them as appropriate.
1451   if (LV.isExtVectorElt())
1452     return EmitLoadOfExtVectorElementLValue(LV);
1453 
1454   // Global Register variables always invoke intrinsics
1455   if (LV.isGlobalReg())
1456     return EmitLoadOfGlobalRegLValue(LV);
1457 
1458   assert(LV.isBitField() && "Unknown LValue type!");
1459   return EmitLoadOfBitfieldLValue(LV);
1460 }
1461 
1462 RValue CodeGenFunction::EmitLoadOfBitfieldLValue(LValue LV) {
1463   const CGBitFieldInfo &Info = LV.getBitFieldInfo();
1464 
1465   // Get the output type.
1466   llvm::Type *ResLTy = ConvertType(LV.getType());
1467 
1468   Address Ptr = LV.getBitFieldAddress();
1469   llvm::Value *Val = Builder.CreateLoad(Ptr, LV.isVolatileQualified(), "bf.load");
1470 
1471   if (Info.IsSigned) {
1472     assert(static_cast<unsigned>(Info.Offset + Info.Size) <= Info.StorageSize);
1473     unsigned HighBits = Info.StorageSize - Info.Offset - Info.Size;
1474     if (HighBits)
1475       Val = Builder.CreateShl(Val, HighBits, "bf.shl");
1476     if (Info.Offset + HighBits)
1477       Val = Builder.CreateAShr(Val, Info.Offset + HighBits, "bf.ashr");
1478   } else {
1479     if (Info.Offset)
1480       Val = Builder.CreateLShr(Val, Info.Offset, "bf.lshr");
1481     if (static_cast<unsigned>(Info.Offset) + Info.Size < Info.StorageSize)
1482       Val = Builder.CreateAnd(Val, llvm::APInt::getLowBitsSet(Info.StorageSize,
1483                                                               Info.Size),
1484                               "bf.clear");
1485   }
1486   Val = Builder.CreateIntCast(Val, ResLTy, Info.IsSigned, "bf.cast");
1487 
1488   return RValue::get(Val);
1489 }
1490 
1491 // If this is a reference to a subset of the elements of a vector, create an
1492 // appropriate shufflevector.
1493 RValue CodeGenFunction::EmitLoadOfExtVectorElementLValue(LValue LV) {
1494   llvm::Value *Vec = Builder.CreateLoad(LV.getExtVectorAddress(),
1495                                         LV.isVolatileQualified());
1496 
1497   const llvm::Constant *Elts = LV.getExtVectorElts();
1498 
1499   // If the result of the expression is a non-vector type, we must be extracting
1500   // a single element.  Just codegen as an extractelement.
1501   const VectorType *ExprVT = LV.getType()->getAs<VectorType>();
1502   if (!ExprVT) {
1503     unsigned InIdx = getAccessedFieldNo(0, Elts);
1504     llvm::Value *Elt = llvm::ConstantInt::get(SizeTy, InIdx);
1505     return RValue::get(Builder.CreateExtractElement(Vec, Elt));
1506   }
1507 
1508   // Always use shuffle vector to try to retain the original program structure
1509   unsigned NumResultElts = ExprVT->getNumElements();
1510 
1511   SmallVector<llvm::Constant*, 4> Mask;
1512   for (unsigned i = 0; i != NumResultElts; ++i)
1513     Mask.push_back(Builder.getInt32(getAccessedFieldNo(i, Elts)));
1514 
1515   llvm::Value *MaskV = llvm::ConstantVector::get(Mask);
1516   Vec = Builder.CreateShuffleVector(Vec, llvm::UndefValue::get(Vec->getType()),
1517                                     MaskV);
1518   return RValue::get(Vec);
1519 }
1520 
1521 /// @brief Generates lvalue for partial ext_vector access.
1522 Address CodeGenFunction::EmitExtVectorElementLValue(LValue LV) {
1523   Address VectorAddress = LV.getExtVectorAddress();
1524   const VectorType *ExprVT = LV.getType()->getAs<VectorType>();
1525   QualType EQT = ExprVT->getElementType();
1526   llvm::Type *VectorElementTy = CGM.getTypes().ConvertType(EQT);
1527 
1528   Address CastToPointerElement =
1529     Builder.CreateElementBitCast(VectorAddress, VectorElementTy,
1530                                  "conv.ptr.element");
1531 
1532   const llvm::Constant *Elts = LV.getExtVectorElts();
1533   unsigned ix = getAccessedFieldNo(0, Elts);
1534 
1535   Address VectorBasePtrPlusIx =
1536     Builder.CreateConstInBoundsGEP(CastToPointerElement, ix,
1537                                    getContext().getTypeSizeInChars(EQT),
1538                                    "vector.elt");
1539 
1540   return VectorBasePtrPlusIx;
1541 }
1542 
1543 /// @brief Load of global gamed gegisters are always calls to intrinsics.
1544 RValue CodeGenFunction::EmitLoadOfGlobalRegLValue(LValue LV) {
1545   assert((LV.getType()->isIntegerType() || LV.getType()->isPointerType()) &&
1546          "Bad type for register variable");
1547   llvm::MDNode *RegName = cast<llvm::MDNode>(
1548       cast<llvm::MetadataAsValue>(LV.getGlobalReg())->getMetadata());
1549 
1550   // We accept integer and pointer types only
1551   llvm::Type *OrigTy = CGM.getTypes().ConvertType(LV.getType());
1552   llvm::Type *Ty = OrigTy;
1553   if (OrigTy->isPointerTy())
1554     Ty = CGM.getTypes().getDataLayout().getIntPtrType(OrigTy);
1555   llvm::Type *Types[] = { Ty };
1556 
1557   llvm::Value *F = CGM.getIntrinsic(llvm::Intrinsic::read_register, Types);
1558   llvm::Value *Call = Builder.CreateCall(
1559       F, llvm::MetadataAsValue::get(Ty->getContext(), RegName));
1560   if (OrigTy->isPointerTy())
1561     Call = Builder.CreateIntToPtr(Call, OrigTy);
1562   return RValue::get(Call);
1563 }
1564 
1565 
1566 /// EmitStoreThroughLValue - Store the specified rvalue into the specified
1567 /// lvalue, where both are guaranteed to the have the same type, and that type
1568 /// is 'Ty'.
1569 void CodeGenFunction::EmitStoreThroughLValue(RValue Src, LValue Dst,
1570                                              bool isInit) {
1571   if (!Dst.isSimple()) {
1572     if (Dst.isVectorElt()) {
1573       // Read/modify/write the vector, inserting the new element.
1574       llvm::Value *Vec = Builder.CreateLoad(Dst.getVectorAddress(),
1575                                             Dst.isVolatileQualified());
1576       Vec = Builder.CreateInsertElement(Vec, Src.getScalarVal(),
1577                                         Dst.getVectorIdx(), "vecins");
1578       Builder.CreateStore(Vec, Dst.getVectorAddress(),
1579                           Dst.isVolatileQualified());
1580       return;
1581     }
1582 
1583     // If this is an update of extended vector elements, insert them as
1584     // appropriate.
1585     if (Dst.isExtVectorElt())
1586       return EmitStoreThroughExtVectorComponentLValue(Src, Dst);
1587 
1588     if (Dst.isGlobalReg())
1589       return EmitStoreThroughGlobalRegLValue(Src, Dst);
1590 
1591     assert(Dst.isBitField() && "Unknown LValue type");
1592     return EmitStoreThroughBitfieldLValue(Src, Dst);
1593   }
1594 
1595   // There's special magic for assigning into an ARC-qualified l-value.
1596   if (Qualifiers::ObjCLifetime Lifetime = Dst.getQuals().getObjCLifetime()) {
1597     switch (Lifetime) {
1598     case Qualifiers::OCL_None:
1599       llvm_unreachable("present but none");
1600 
1601     case Qualifiers::OCL_ExplicitNone:
1602       // nothing special
1603       break;
1604 
1605     case Qualifiers::OCL_Strong:
1606       EmitARCStoreStrong(Dst, Src.getScalarVal(), /*ignore*/ true);
1607       return;
1608 
1609     case Qualifiers::OCL_Weak:
1610       EmitARCStoreWeak(Dst.getAddress(), Src.getScalarVal(), /*ignore*/ true);
1611       return;
1612 
1613     case Qualifiers::OCL_Autoreleasing:
1614       Src = RValue::get(EmitObjCExtendObjectLifetime(Dst.getType(),
1615                                                      Src.getScalarVal()));
1616       // fall into the normal path
1617       break;
1618     }
1619   }
1620 
1621   if (Dst.isObjCWeak() && !Dst.isNonGC()) {
1622     // load of a __weak object.
1623     Address LvalueDst = Dst.getAddress();
1624     llvm::Value *src = Src.getScalarVal();
1625      CGM.getObjCRuntime().EmitObjCWeakAssign(*this, src, LvalueDst);
1626     return;
1627   }
1628 
1629   if (Dst.isObjCStrong() && !Dst.isNonGC()) {
1630     // load of a __strong object.
1631     Address LvalueDst = Dst.getAddress();
1632     llvm::Value *src = Src.getScalarVal();
1633     if (Dst.isObjCIvar()) {
1634       assert(Dst.getBaseIvarExp() && "BaseIvarExp is NULL");
1635       llvm::Type *ResultType = IntPtrTy;
1636       Address dst = EmitPointerWithAlignment(Dst.getBaseIvarExp());
1637       llvm::Value *RHS = dst.getPointer();
1638       RHS = Builder.CreatePtrToInt(RHS, ResultType, "sub.ptr.rhs.cast");
1639       llvm::Value *LHS =
1640         Builder.CreatePtrToInt(LvalueDst.getPointer(), ResultType,
1641                                "sub.ptr.lhs.cast");
1642       llvm::Value *BytesBetween = Builder.CreateSub(LHS, RHS, "ivar.offset");
1643       CGM.getObjCRuntime().EmitObjCIvarAssign(*this, src, dst,
1644                                               BytesBetween);
1645     } else if (Dst.isGlobalObjCRef()) {
1646       CGM.getObjCRuntime().EmitObjCGlobalAssign(*this, src, LvalueDst,
1647                                                 Dst.isThreadLocalRef());
1648     }
1649     else
1650       CGM.getObjCRuntime().EmitObjCStrongCastAssign(*this, src, LvalueDst);
1651     return;
1652   }
1653 
1654   assert(Src.isScalar() && "Can't emit an agg store with this method");
1655   EmitStoreOfScalar(Src.getScalarVal(), Dst, isInit);
1656 }
1657 
1658 void CodeGenFunction::EmitStoreThroughBitfieldLValue(RValue Src, LValue Dst,
1659                                                      llvm::Value **Result) {
1660   const CGBitFieldInfo &Info = Dst.getBitFieldInfo();
1661   llvm::Type *ResLTy = ConvertTypeForMem(Dst.getType());
1662   Address Ptr = Dst.getBitFieldAddress();
1663 
1664   // Get the source value, truncated to the width of the bit-field.
1665   llvm::Value *SrcVal = Src.getScalarVal();
1666 
1667   // Cast the source to the storage type and shift it into place.
1668   SrcVal = Builder.CreateIntCast(SrcVal, Ptr.getElementType(),
1669                                  /*IsSigned=*/false);
1670   llvm::Value *MaskedVal = SrcVal;
1671 
1672   // See if there are other bits in the bitfield's storage we'll need to load
1673   // and mask together with source before storing.
1674   if (Info.StorageSize != Info.Size) {
1675     assert(Info.StorageSize > Info.Size && "Invalid bitfield size.");
1676     llvm::Value *Val =
1677       Builder.CreateLoad(Ptr, Dst.isVolatileQualified(), "bf.load");
1678 
1679     // Mask the source value as needed.
1680     if (!hasBooleanRepresentation(Dst.getType()))
1681       SrcVal = Builder.CreateAnd(SrcVal,
1682                                  llvm::APInt::getLowBitsSet(Info.StorageSize,
1683                                                             Info.Size),
1684                                  "bf.value");
1685     MaskedVal = SrcVal;
1686     if (Info.Offset)
1687       SrcVal = Builder.CreateShl(SrcVal, Info.Offset, "bf.shl");
1688 
1689     // Mask out the original value.
1690     Val = Builder.CreateAnd(Val,
1691                             ~llvm::APInt::getBitsSet(Info.StorageSize,
1692                                                      Info.Offset,
1693                                                      Info.Offset + Info.Size),
1694                             "bf.clear");
1695 
1696     // Or together the unchanged values and the source value.
1697     SrcVal = Builder.CreateOr(Val, SrcVal, "bf.set");
1698   } else {
1699     assert(Info.Offset == 0);
1700   }
1701 
1702   // Write the new value back out.
1703   Builder.CreateStore(SrcVal, Ptr, Dst.isVolatileQualified());
1704 
1705   // Return the new value of the bit-field, if requested.
1706   if (Result) {
1707     llvm::Value *ResultVal = MaskedVal;
1708 
1709     // Sign extend the value if needed.
1710     if (Info.IsSigned) {
1711       assert(Info.Size <= Info.StorageSize);
1712       unsigned HighBits = Info.StorageSize - Info.Size;
1713       if (HighBits) {
1714         ResultVal = Builder.CreateShl(ResultVal, HighBits, "bf.result.shl");
1715         ResultVal = Builder.CreateAShr(ResultVal, HighBits, "bf.result.ashr");
1716       }
1717     }
1718 
1719     ResultVal = Builder.CreateIntCast(ResultVal, ResLTy, Info.IsSigned,
1720                                       "bf.result.cast");
1721     *Result = EmitFromMemory(ResultVal, Dst.getType());
1722   }
1723 }
1724 
1725 void CodeGenFunction::EmitStoreThroughExtVectorComponentLValue(RValue Src,
1726                                                                LValue Dst) {
1727   // This access turns into a read/modify/write of the vector.  Load the input
1728   // value now.
1729   llvm::Value *Vec = Builder.CreateLoad(Dst.getExtVectorAddress(),
1730                                         Dst.isVolatileQualified());
1731   const llvm::Constant *Elts = Dst.getExtVectorElts();
1732 
1733   llvm::Value *SrcVal = Src.getScalarVal();
1734 
1735   if (const VectorType *VTy = Dst.getType()->getAs<VectorType>()) {
1736     unsigned NumSrcElts = VTy->getNumElements();
1737     unsigned NumDstElts =
1738        cast<llvm::VectorType>(Vec->getType())->getNumElements();
1739     if (NumDstElts == NumSrcElts) {
1740       // Use shuffle vector is the src and destination are the same number of
1741       // elements and restore the vector mask since it is on the side it will be
1742       // stored.
1743       SmallVector<llvm::Constant*, 4> Mask(NumDstElts);
1744       for (unsigned i = 0; i != NumSrcElts; ++i)
1745         Mask[getAccessedFieldNo(i, Elts)] = Builder.getInt32(i);
1746 
1747       llvm::Value *MaskV = llvm::ConstantVector::get(Mask);
1748       Vec = Builder.CreateShuffleVector(SrcVal,
1749                                         llvm::UndefValue::get(Vec->getType()),
1750                                         MaskV);
1751     } else if (NumDstElts > NumSrcElts) {
1752       // Extended the source vector to the same length and then shuffle it
1753       // into the destination.
1754       // FIXME: since we're shuffling with undef, can we just use the indices
1755       //        into that?  This could be simpler.
1756       SmallVector<llvm::Constant*, 4> ExtMask;
1757       for (unsigned i = 0; i != NumSrcElts; ++i)
1758         ExtMask.push_back(Builder.getInt32(i));
1759       ExtMask.resize(NumDstElts, llvm::UndefValue::get(Int32Ty));
1760       llvm::Value *ExtMaskV = llvm::ConstantVector::get(ExtMask);
1761       llvm::Value *ExtSrcVal =
1762         Builder.CreateShuffleVector(SrcVal,
1763                                     llvm::UndefValue::get(SrcVal->getType()),
1764                                     ExtMaskV);
1765       // build identity
1766       SmallVector<llvm::Constant*, 4> Mask;
1767       for (unsigned i = 0; i != NumDstElts; ++i)
1768         Mask.push_back(Builder.getInt32(i));
1769 
1770       // When the vector size is odd and .odd or .hi is used, the last element
1771       // of the Elts constant array will be one past the size of the vector.
1772       // Ignore the last element here, if it is greater than the mask size.
1773       if (getAccessedFieldNo(NumSrcElts - 1, Elts) == Mask.size())
1774         NumSrcElts--;
1775 
1776       // modify when what gets shuffled in
1777       for (unsigned i = 0; i != NumSrcElts; ++i)
1778         Mask[getAccessedFieldNo(i, Elts)] = Builder.getInt32(i+NumDstElts);
1779       llvm::Value *MaskV = llvm::ConstantVector::get(Mask);
1780       Vec = Builder.CreateShuffleVector(Vec, ExtSrcVal, MaskV);
1781     } else {
1782       // We should never shorten the vector
1783       llvm_unreachable("unexpected shorten vector length");
1784     }
1785   } else {
1786     // If the Src is a scalar (not a vector) it must be updating one element.
1787     unsigned InIdx = getAccessedFieldNo(0, Elts);
1788     llvm::Value *Elt = llvm::ConstantInt::get(SizeTy, InIdx);
1789     Vec = Builder.CreateInsertElement(Vec, SrcVal, Elt);
1790   }
1791 
1792   Builder.CreateStore(Vec, Dst.getExtVectorAddress(),
1793                       Dst.isVolatileQualified());
1794 }
1795 
1796 /// @brief Store of global named registers are always calls to intrinsics.
1797 void CodeGenFunction::EmitStoreThroughGlobalRegLValue(RValue Src, LValue Dst) {
1798   assert((Dst.getType()->isIntegerType() || Dst.getType()->isPointerType()) &&
1799          "Bad type for register variable");
1800   llvm::MDNode *RegName = cast<llvm::MDNode>(
1801       cast<llvm::MetadataAsValue>(Dst.getGlobalReg())->getMetadata());
1802   assert(RegName && "Register LValue is not metadata");
1803 
1804   // We accept integer and pointer types only
1805   llvm::Type *OrigTy = CGM.getTypes().ConvertType(Dst.getType());
1806   llvm::Type *Ty = OrigTy;
1807   if (OrigTy->isPointerTy())
1808     Ty = CGM.getTypes().getDataLayout().getIntPtrType(OrigTy);
1809   llvm::Type *Types[] = { Ty };
1810 
1811   llvm::Value *F = CGM.getIntrinsic(llvm::Intrinsic::write_register, Types);
1812   llvm::Value *Value = Src.getScalarVal();
1813   if (OrigTy->isPointerTy())
1814     Value = Builder.CreatePtrToInt(Value, Ty);
1815   Builder.CreateCall(
1816       F, {llvm::MetadataAsValue::get(Ty->getContext(), RegName), Value});
1817 }
1818 
1819 // setObjCGCLValueClass - sets class of the lvalue for the purpose of
1820 // generating write-barries API. It is currently a global, ivar,
1821 // or neither.
1822 static void setObjCGCLValueClass(const ASTContext &Ctx, const Expr *E,
1823                                  LValue &LV,
1824                                  bool IsMemberAccess=false) {
1825   if (Ctx.getLangOpts().getGC() == LangOptions::NonGC)
1826     return;
1827 
1828   if (isa<ObjCIvarRefExpr>(E)) {
1829     QualType ExpTy = E->getType();
1830     if (IsMemberAccess && ExpTy->isPointerType()) {
1831       // If ivar is a structure pointer, assigning to field of
1832       // this struct follows gcc's behavior and makes it a non-ivar
1833       // writer-barrier conservatively.
1834       ExpTy = ExpTy->getAs<PointerType>()->getPointeeType();
1835       if (ExpTy->isRecordType()) {
1836         LV.setObjCIvar(false);
1837         return;
1838       }
1839     }
1840     LV.setObjCIvar(true);
1841     auto *Exp = cast<ObjCIvarRefExpr>(const_cast<Expr *>(E));
1842     LV.setBaseIvarExp(Exp->getBase());
1843     LV.setObjCArray(E->getType()->isArrayType());
1844     return;
1845   }
1846 
1847   if (const auto *Exp = dyn_cast<DeclRefExpr>(E)) {
1848     if (const auto *VD = dyn_cast<VarDecl>(Exp->getDecl())) {
1849       if (VD->hasGlobalStorage()) {
1850         LV.setGlobalObjCRef(true);
1851         LV.setThreadLocalRef(VD->getTLSKind() != VarDecl::TLS_None);
1852       }
1853     }
1854     LV.setObjCArray(E->getType()->isArrayType());
1855     return;
1856   }
1857 
1858   if (const auto *Exp = dyn_cast<UnaryOperator>(E)) {
1859     setObjCGCLValueClass(Ctx, Exp->getSubExpr(), LV, IsMemberAccess);
1860     return;
1861   }
1862 
1863   if (const auto *Exp = dyn_cast<ParenExpr>(E)) {
1864     setObjCGCLValueClass(Ctx, Exp->getSubExpr(), LV, IsMemberAccess);
1865     if (LV.isObjCIvar()) {
1866       // If cast is to a structure pointer, follow gcc's behavior and make it
1867       // a non-ivar write-barrier.
1868       QualType ExpTy = E->getType();
1869       if (ExpTy->isPointerType())
1870         ExpTy = ExpTy->getAs<PointerType>()->getPointeeType();
1871       if (ExpTy->isRecordType())
1872         LV.setObjCIvar(false);
1873     }
1874     return;
1875   }
1876 
1877   if (const auto *Exp = dyn_cast<GenericSelectionExpr>(E)) {
1878     setObjCGCLValueClass(Ctx, Exp->getResultExpr(), LV);
1879     return;
1880   }
1881 
1882   if (const auto *Exp = dyn_cast<ImplicitCastExpr>(E)) {
1883     setObjCGCLValueClass(Ctx, Exp->getSubExpr(), LV, IsMemberAccess);
1884     return;
1885   }
1886 
1887   if (const auto *Exp = dyn_cast<CStyleCastExpr>(E)) {
1888     setObjCGCLValueClass(Ctx, Exp->getSubExpr(), LV, IsMemberAccess);
1889     return;
1890   }
1891 
1892   if (const auto *Exp = dyn_cast<ObjCBridgedCastExpr>(E)) {
1893     setObjCGCLValueClass(Ctx, Exp->getSubExpr(), LV, IsMemberAccess);
1894     return;
1895   }
1896 
1897   if (const auto *Exp = dyn_cast<ArraySubscriptExpr>(E)) {
1898     setObjCGCLValueClass(Ctx, Exp->getBase(), LV);
1899     if (LV.isObjCIvar() && !LV.isObjCArray())
1900       // Using array syntax to assigning to what an ivar points to is not
1901       // same as assigning to the ivar itself. {id *Names;} Names[i] = 0;
1902       LV.setObjCIvar(false);
1903     else if (LV.isGlobalObjCRef() && !LV.isObjCArray())
1904       // Using array syntax to assigning to what global points to is not
1905       // same as assigning to the global itself. {id *G;} G[i] = 0;
1906       LV.setGlobalObjCRef(false);
1907     return;
1908   }
1909 
1910   if (const auto *Exp = dyn_cast<MemberExpr>(E)) {
1911     setObjCGCLValueClass(Ctx, Exp->getBase(), LV, true);
1912     // We don't know if member is an 'ivar', but this flag is looked at
1913     // only in the context of LV.isObjCIvar().
1914     LV.setObjCArray(E->getType()->isArrayType());
1915     return;
1916   }
1917 }
1918 
1919 static llvm::Value *
1920 EmitBitCastOfLValueToProperType(CodeGenFunction &CGF,
1921                                 llvm::Value *V, llvm::Type *IRType,
1922                                 StringRef Name = StringRef()) {
1923   unsigned AS = cast<llvm::PointerType>(V->getType())->getAddressSpace();
1924   return CGF.Builder.CreateBitCast(V, IRType->getPointerTo(AS), Name);
1925 }
1926 
1927 static LValue EmitThreadPrivateVarDeclLValue(
1928     CodeGenFunction &CGF, const VarDecl *VD, QualType T, Address Addr,
1929     llvm::Type *RealVarTy, SourceLocation Loc) {
1930   Addr = CGF.CGM.getOpenMPRuntime().getAddrOfThreadPrivate(CGF, VD, Addr, Loc);
1931   Addr = CGF.Builder.CreateElementBitCast(Addr, RealVarTy);
1932   return CGF.MakeAddrLValue(Addr, T, AlignmentSource::Decl);
1933 }
1934 
1935 Address CodeGenFunction::EmitLoadOfReference(Address Addr,
1936                                              const ReferenceType *RefTy,
1937                                              AlignmentSource *Source) {
1938   llvm::Value *Ptr = Builder.CreateLoad(Addr);
1939   return Address(Ptr, getNaturalTypeAlignment(RefTy->getPointeeType(),
1940                                               Source, /*forPointee*/ true));
1941 
1942 }
1943 
1944 LValue CodeGenFunction::EmitLoadOfReferenceLValue(Address RefAddr,
1945                                                   const ReferenceType *RefTy) {
1946   AlignmentSource Source;
1947   Address Addr = EmitLoadOfReference(RefAddr, RefTy, &Source);
1948   return MakeAddrLValue(Addr, RefTy->getPointeeType(), Source);
1949 }
1950 
1951 static LValue EmitGlobalVarDeclLValue(CodeGenFunction &CGF,
1952                                       const Expr *E, const VarDecl *VD) {
1953   QualType T = E->getType();
1954 
1955   // If it's thread_local, emit a call to its wrapper function instead.
1956   if (VD->getTLSKind() == VarDecl::TLS_Dynamic &&
1957       CGF.CGM.getCXXABI().usesThreadWrapperFunction())
1958     return CGF.CGM.getCXXABI().EmitThreadLocalVarDeclLValue(CGF, VD, T);
1959 
1960   llvm::Value *V = CGF.CGM.GetAddrOfGlobalVar(VD);
1961   llvm::Type *RealVarTy = CGF.getTypes().ConvertTypeForMem(VD->getType());
1962   V = EmitBitCastOfLValueToProperType(CGF, V, RealVarTy);
1963   CharUnits Alignment = CGF.getContext().getDeclAlign(VD);
1964   Address Addr(V, Alignment);
1965   LValue LV;
1966   // Emit reference to the private copy of the variable if it is an OpenMP
1967   // threadprivate variable.
1968   if (CGF.getLangOpts().OpenMP && VD->hasAttr<OMPThreadPrivateDeclAttr>())
1969     return EmitThreadPrivateVarDeclLValue(CGF, VD, T, Addr, RealVarTy,
1970                                           E->getExprLoc());
1971   if (auto RefTy = VD->getType()->getAs<ReferenceType>()) {
1972     LV = CGF.EmitLoadOfReferenceLValue(Addr, RefTy);
1973   } else {
1974     LV = CGF.MakeAddrLValue(Addr, T, AlignmentSource::Decl);
1975   }
1976   setObjCGCLValueClass(CGF.getContext(), E, LV);
1977   return LV;
1978 }
1979 
1980 static LValue EmitFunctionDeclLValue(CodeGenFunction &CGF,
1981                                      const Expr *E, const FunctionDecl *FD) {
1982   llvm::Value *V = CGF.CGM.GetAddrOfFunction(FD);
1983   if (!FD->hasPrototype()) {
1984     if (const FunctionProtoType *Proto =
1985             FD->getType()->getAs<FunctionProtoType>()) {
1986       // Ugly case: for a K&R-style definition, the type of the definition
1987       // isn't the same as the type of a use.  Correct for this with a
1988       // bitcast.
1989       QualType NoProtoType =
1990           CGF.getContext().getFunctionNoProtoType(Proto->getReturnType());
1991       NoProtoType = CGF.getContext().getPointerType(NoProtoType);
1992       V = CGF.Builder.CreateBitCast(V, CGF.ConvertType(NoProtoType));
1993     }
1994   }
1995   CharUnits Alignment = CGF.getContext().getDeclAlign(FD);
1996   return CGF.MakeAddrLValue(V, E->getType(), Alignment, AlignmentSource::Decl);
1997 }
1998 
1999 static LValue EmitCapturedFieldLValue(CodeGenFunction &CGF, const FieldDecl *FD,
2000                                       llvm::Value *ThisValue) {
2001   QualType TagType = CGF.getContext().getTagDeclType(FD->getParent());
2002   LValue LV = CGF.MakeNaturalAlignAddrLValue(ThisValue, TagType);
2003   return CGF.EmitLValueForField(LV, FD);
2004 }
2005 
2006 /// Named Registers are named metadata pointing to the register name
2007 /// which will be read from/written to as an argument to the intrinsic
2008 /// @llvm.read/write_register.
2009 /// So far, only the name is being passed down, but other options such as
2010 /// register type, allocation type or even optimization options could be
2011 /// passed down via the metadata node.
2012 static LValue EmitGlobalNamedRegister(const VarDecl *VD, CodeGenModule &CGM) {
2013   SmallString<64> Name("llvm.named.register.");
2014   AsmLabelAttr *Asm = VD->getAttr<AsmLabelAttr>();
2015   assert(Asm->getLabel().size() < 64-Name.size() &&
2016       "Register name too big");
2017   Name.append(Asm->getLabel());
2018   llvm::NamedMDNode *M =
2019     CGM.getModule().getOrInsertNamedMetadata(Name);
2020   if (M->getNumOperands() == 0) {
2021     llvm::MDString *Str = llvm::MDString::get(CGM.getLLVMContext(),
2022                                               Asm->getLabel());
2023     llvm::Metadata *Ops[] = {Str};
2024     M->addOperand(llvm::MDNode::get(CGM.getLLVMContext(), Ops));
2025   }
2026 
2027   CharUnits Alignment = CGM.getContext().getDeclAlign(VD);
2028 
2029   llvm::Value *Ptr =
2030     llvm::MetadataAsValue::get(CGM.getLLVMContext(), M->getOperand(0));
2031   return LValue::MakeGlobalReg(Address(Ptr, Alignment), VD->getType());
2032 }
2033 
2034 LValue CodeGenFunction::EmitDeclRefLValue(const DeclRefExpr *E) {
2035   const NamedDecl *ND = E->getDecl();
2036   QualType T = E->getType();
2037 
2038   if (const auto *VD = dyn_cast<VarDecl>(ND)) {
2039     // Global Named registers access via intrinsics only
2040     if (VD->getStorageClass() == SC_Register &&
2041         VD->hasAttr<AsmLabelAttr>() && !VD->isLocalVarDecl())
2042       return EmitGlobalNamedRegister(VD, CGM);
2043 
2044     // A DeclRefExpr for a reference initialized by a constant expression can
2045     // appear without being odr-used. Directly emit the constant initializer.
2046     const Expr *Init = VD->getAnyInitializer(VD);
2047     if (Init && !isa<ParmVarDecl>(VD) && VD->getType()->isReferenceType() &&
2048         VD->isUsableInConstantExpressions(getContext()) &&
2049         VD->checkInitIsICE() &&
2050         // Do not emit if it is private OpenMP variable.
2051         !(E->refersToEnclosingVariableOrCapture() && CapturedStmtInfo &&
2052           LocalDeclMap.count(VD))) {
2053       llvm::Constant *Val =
2054         CGM.EmitConstantValue(*VD->evaluateValue(), VD->getType(), this);
2055       assert(Val && "failed to emit reference constant expression");
2056       // FIXME: Eventually we will want to emit vector element references.
2057 
2058       // Should we be using the alignment of the constant pointer we emitted?
2059       CharUnits Alignment = getNaturalTypeAlignment(E->getType(), nullptr,
2060                                                     /*pointee*/ true);
2061 
2062       return MakeAddrLValue(Address(Val, Alignment), T, AlignmentSource::Decl);
2063     }
2064 
2065     // Check for captured variables.
2066     if (E->refersToEnclosingVariableOrCapture()) {
2067       if (auto *FD = LambdaCaptureFields.lookup(VD))
2068         return EmitCapturedFieldLValue(*this, FD, CXXABIThisValue);
2069       else if (CapturedStmtInfo) {
2070         auto it = LocalDeclMap.find(VD);
2071         if (it != LocalDeclMap.end()) {
2072           if (auto RefTy = VD->getType()->getAs<ReferenceType>()) {
2073             return EmitLoadOfReferenceLValue(it->second, RefTy);
2074           }
2075           return MakeAddrLValue(it->second, T);
2076         }
2077         LValue CapLVal =
2078             EmitCapturedFieldLValue(*this, CapturedStmtInfo->lookup(VD),
2079                                     CapturedStmtInfo->getContextValue());
2080         return MakeAddrLValue(
2081             Address(CapLVal.getPointer(), getContext().getDeclAlign(VD)),
2082             CapLVal.getType(), AlignmentSource::Decl);
2083       }
2084 
2085       assert(isa<BlockDecl>(CurCodeDecl));
2086       Address addr = GetAddrOfBlockDecl(VD, VD->hasAttr<BlocksAttr>());
2087       return MakeAddrLValue(addr, T, AlignmentSource::Decl);
2088     }
2089   }
2090 
2091   // FIXME: We should be able to assert this for FunctionDecls as well!
2092   // FIXME: We should be able to assert this for all DeclRefExprs, not just
2093   // those with a valid source location.
2094   assert((ND->isUsed(false) || !isa<VarDecl>(ND) ||
2095           !E->getLocation().isValid()) &&
2096          "Should not use decl without marking it used!");
2097 
2098   if (ND->hasAttr<WeakRefAttr>()) {
2099     const auto *VD = cast<ValueDecl>(ND);
2100     ConstantAddress Aliasee = CGM.GetWeakRefReference(VD);
2101     return MakeAddrLValue(Aliasee, T, AlignmentSource::Decl);
2102   }
2103 
2104   if (const auto *VD = dyn_cast<VarDecl>(ND)) {
2105     // Check if this is a global variable.
2106     if (VD->hasLinkage() || VD->isStaticDataMember())
2107       return EmitGlobalVarDeclLValue(*this, E, VD);
2108 
2109     Address addr = Address::invalid();
2110 
2111     // The variable should generally be present in the local decl map.
2112     auto iter = LocalDeclMap.find(VD);
2113     if (iter != LocalDeclMap.end()) {
2114       addr = iter->second;
2115 
2116     // Otherwise, it might be static local we haven't emitted yet for
2117     // some reason; most likely, because it's in an outer function.
2118     } else if (VD->isStaticLocal()) {
2119       addr = Address(CGM.getOrCreateStaticVarDecl(
2120           *VD, CGM.getLLVMLinkageVarDefinition(VD, /*isConstant=*/false)),
2121                      getContext().getDeclAlign(VD));
2122 
2123     // No other cases for now.
2124     } else {
2125       llvm_unreachable("DeclRefExpr for Decl not entered in LocalDeclMap?");
2126     }
2127 
2128 
2129     // Check for OpenMP threadprivate variables.
2130     if (getLangOpts().OpenMP && VD->hasAttr<OMPThreadPrivateDeclAttr>()) {
2131       return EmitThreadPrivateVarDeclLValue(
2132           *this, VD, T, addr, getTypes().ConvertTypeForMem(VD->getType()),
2133           E->getExprLoc());
2134     }
2135 
2136     // Drill into block byref variables.
2137     bool isBlockByref = VD->hasAttr<BlocksAttr>();
2138     if (isBlockByref) {
2139       addr = emitBlockByrefAddress(addr, VD);
2140     }
2141 
2142     // Drill into reference types.
2143     LValue LV;
2144     if (auto RefTy = VD->getType()->getAs<ReferenceType>()) {
2145       LV = EmitLoadOfReferenceLValue(addr, RefTy);
2146     } else {
2147       LV = MakeAddrLValue(addr, T, AlignmentSource::Decl);
2148     }
2149 
2150     bool isLocalStorage = VD->hasLocalStorage();
2151 
2152     bool NonGCable = isLocalStorage &&
2153                      !VD->getType()->isReferenceType() &&
2154                      !isBlockByref;
2155     if (NonGCable) {
2156       LV.getQuals().removeObjCGCAttr();
2157       LV.setNonGC(true);
2158     }
2159 
2160     bool isImpreciseLifetime =
2161       (isLocalStorage && !VD->hasAttr<ObjCPreciseLifetimeAttr>());
2162     if (isImpreciseLifetime)
2163       LV.setARCPreciseLifetime(ARCImpreciseLifetime);
2164     setObjCGCLValueClass(getContext(), E, LV);
2165     return LV;
2166   }
2167 
2168   if (const auto *FD = dyn_cast<FunctionDecl>(ND))
2169     return EmitFunctionDeclLValue(*this, E, FD);
2170 
2171   llvm_unreachable("Unhandled DeclRefExpr");
2172 }
2173 
2174 LValue CodeGenFunction::EmitUnaryOpLValue(const UnaryOperator *E) {
2175   // __extension__ doesn't affect lvalue-ness.
2176   if (E->getOpcode() == UO_Extension)
2177     return EmitLValue(E->getSubExpr());
2178 
2179   QualType ExprTy = getContext().getCanonicalType(E->getSubExpr()->getType());
2180   switch (E->getOpcode()) {
2181   default: llvm_unreachable("Unknown unary operator lvalue!");
2182   case UO_Deref: {
2183     QualType T = E->getSubExpr()->getType()->getPointeeType();
2184     assert(!T.isNull() && "CodeGenFunction::EmitUnaryOpLValue: Illegal type");
2185 
2186     AlignmentSource AlignSource;
2187     Address Addr = EmitPointerWithAlignment(E->getSubExpr(), &AlignSource);
2188     LValue LV = MakeAddrLValue(Addr, T, AlignSource);
2189     LV.getQuals().setAddressSpace(ExprTy.getAddressSpace());
2190 
2191     // We should not generate __weak write barrier on indirect reference
2192     // of a pointer to object; as in void foo (__weak id *param); *param = 0;
2193     // But, we continue to generate __strong write barrier on indirect write
2194     // into a pointer to object.
2195     if (getLangOpts().ObjC1 &&
2196         getLangOpts().getGC() != LangOptions::NonGC &&
2197         LV.isObjCWeak())
2198       LV.setNonGC(!E->isOBJCGCCandidate(getContext()));
2199     return LV;
2200   }
2201   case UO_Real:
2202   case UO_Imag: {
2203     LValue LV = EmitLValue(E->getSubExpr());
2204     assert(LV.isSimple() && "real/imag on non-ordinary l-value");
2205 
2206     // __real is valid on scalars.  This is a faster way of testing that.
2207     // __imag can only produce an rvalue on scalars.
2208     if (E->getOpcode() == UO_Real &&
2209         !LV.getAddress().getElementType()->isStructTy()) {
2210       assert(E->getSubExpr()->getType()->isArithmeticType());
2211       return LV;
2212     }
2213 
2214     assert(E->getSubExpr()->getType()->isAnyComplexType());
2215 
2216     Address Component =
2217       (E->getOpcode() == UO_Real
2218          ? emitAddrOfRealComponent(LV.getAddress(), LV.getType())
2219          : emitAddrOfImagComponent(LV.getAddress(), LV.getType()));
2220     return MakeAddrLValue(Component, ExprTy, LV.getAlignmentSource());
2221   }
2222   case UO_PreInc:
2223   case UO_PreDec: {
2224     LValue LV = EmitLValue(E->getSubExpr());
2225     bool isInc = E->getOpcode() == UO_PreInc;
2226 
2227     if (E->getType()->isAnyComplexType())
2228       EmitComplexPrePostIncDec(E, LV, isInc, true/*isPre*/);
2229     else
2230       EmitScalarPrePostIncDec(E, LV, isInc, true/*isPre*/);
2231     return LV;
2232   }
2233   }
2234 }
2235 
2236 LValue CodeGenFunction::EmitStringLiteralLValue(const StringLiteral *E) {
2237   return MakeAddrLValue(CGM.GetAddrOfConstantStringFromLiteral(E),
2238                         E->getType(), AlignmentSource::Decl);
2239 }
2240 
2241 LValue CodeGenFunction::EmitObjCEncodeExprLValue(const ObjCEncodeExpr *E) {
2242   return MakeAddrLValue(CGM.GetAddrOfConstantStringFromObjCEncode(E),
2243                         E->getType(), AlignmentSource::Decl);
2244 }
2245 
2246 LValue CodeGenFunction::EmitPredefinedLValue(const PredefinedExpr *E) {
2247   auto SL = E->getFunctionName();
2248   assert(SL != nullptr && "No StringLiteral name in PredefinedExpr");
2249   StringRef FnName = CurFn->getName();
2250   if (FnName.startswith("\01"))
2251     FnName = FnName.substr(1);
2252   StringRef NameItems[] = {
2253       PredefinedExpr::getIdentTypeName(E->getIdentType()), FnName};
2254   std::string GVName = llvm::join(NameItems, NameItems + 2, ".");
2255   if (CurCodeDecl && isa<BlockDecl>(CurCodeDecl)) {
2256     auto C = CGM.GetAddrOfConstantCString(FnName, GVName.c_str());
2257     return MakeAddrLValue(C, E->getType(), AlignmentSource::Decl);
2258   }
2259   auto C = CGM.GetAddrOfConstantStringFromLiteral(SL, GVName);
2260   return MakeAddrLValue(C, E->getType(), AlignmentSource::Decl);
2261 }
2262 
2263 /// Emit a type description suitable for use by a runtime sanitizer library. The
2264 /// format of a type descriptor is
2265 ///
2266 /// \code
2267 ///   { i16 TypeKind, i16 TypeInfo }
2268 /// \endcode
2269 ///
2270 /// followed by an array of i8 containing the type name. TypeKind is 0 for an
2271 /// integer, 1 for a floating point value, and -1 for anything else.
2272 llvm::Constant *CodeGenFunction::EmitCheckTypeDescriptor(QualType T) {
2273   // Only emit each type's descriptor once.
2274   if (llvm::Constant *C = CGM.getTypeDescriptorFromMap(T))
2275     return C;
2276 
2277   uint16_t TypeKind = -1;
2278   uint16_t TypeInfo = 0;
2279 
2280   if (T->isIntegerType()) {
2281     TypeKind = 0;
2282     TypeInfo = (llvm::Log2_32(getContext().getTypeSize(T)) << 1) |
2283                (T->isSignedIntegerType() ? 1 : 0);
2284   } else if (T->isFloatingType()) {
2285     TypeKind = 1;
2286     TypeInfo = getContext().getTypeSize(T);
2287   }
2288 
2289   // Format the type name as if for a diagnostic, including quotes and
2290   // optionally an 'aka'.
2291   SmallString<32> Buffer;
2292   CGM.getDiags().ConvertArgToString(DiagnosticsEngine::ak_qualtype,
2293                                     (intptr_t)T.getAsOpaquePtr(),
2294                                     StringRef(), StringRef(), None, Buffer,
2295                                     None);
2296 
2297   llvm::Constant *Components[] = {
2298     Builder.getInt16(TypeKind), Builder.getInt16(TypeInfo),
2299     llvm::ConstantDataArray::getString(getLLVMContext(), Buffer)
2300   };
2301   llvm::Constant *Descriptor = llvm::ConstantStruct::getAnon(Components);
2302 
2303   auto *GV = new llvm::GlobalVariable(
2304       CGM.getModule(), Descriptor->getType(),
2305       /*isConstant=*/true, llvm::GlobalVariable::PrivateLinkage, Descriptor);
2306   GV->setUnnamedAddr(true);
2307   CGM.getSanitizerMetadata()->disableSanitizerForGlobal(GV);
2308 
2309   // Remember the descriptor for this type.
2310   CGM.setTypeDescriptorInMap(T, GV);
2311 
2312   return GV;
2313 }
2314 
2315 llvm::Value *CodeGenFunction::EmitCheckValue(llvm::Value *V) {
2316   llvm::Type *TargetTy = IntPtrTy;
2317 
2318   // Floating-point types which fit into intptr_t are bitcast to integers
2319   // and then passed directly (after zero-extension, if necessary).
2320   if (V->getType()->isFloatingPointTy()) {
2321     unsigned Bits = V->getType()->getPrimitiveSizeInBits();
2322     if (Bits <= TargetTy->getIntegerBitWidth())
2323       V = Builder.CreateBitCast(V, llvm::Type::getIntNTy(getLLVMContext(),
2324                                                          Bits));
2325   }
2326 
2327   // Integers which fit in intptr_t are zero-extended and passed directly.
2328   if (V->getType()->isIntegerTy() &&
2329       V->getType()->getIntegerBitWidth() <= TargetTy->getIntegerBitWidth())
2330     return Builder.CreateZExt(V, TargetTy);
2331 
2332   // Pointers are passed directly, everything else is passed by address.
2333   if (!V->getType()->isPointerTy()) {
2334     Address Ptr = CreateDefaultAlignTempAlloca(V->getType());
2335     Builder.CreateStore(V, Ptr);
2336     V = Ptr.getPointer();
2337   }
2338   return Builder.CreatePtrToInt(V, TargetTy);
2339 }
2340 
2341 /// \brief Emit a representation of a SourceLocation for passing to a handler
2342 /// in a sanitizer runtime library. The format for this data is:
2343 /// \code
2344 ///   struct SourceLocation {
2345 ///     const char *Filename;
2346 ///     int32_t Line, Column;
2347 ///   };
2348 /// \endcode
2349 /// For an invalid SourceLocation, the Filename pointer is null.
2350 llvm::Constant *CodeGenFunction::EmitCheckSourceLocation(SourceLocation Loc) {
2351   llvm::Constant *Filename;
2352   int Line, Column;
2353 
2354   PresumedLoc PLoc = getContext().getSourceManager().getPresumedLoc(Loc);
2355   if (PLoc.isValid()) {
2356     auto FilenameGV = CGM.GetAddrOfConstantCString(PLoc.getFilename(), ".src");
2357     CGM.getSanitizerMetadata()->disableSanitizerForGlobal(
2358                           cast<llvm::GlobalVariable>(FilenameGV.getPointer()));
2359     Filename = FilenameGV.getPointer();
2360     Line = PLoc.getLine();
2361     Column = PLoc.getColumn();
2362   } else {
2363     Filename = llvm::Constant::getNullValue(Int8PtrTy);
2364     Line = Column = 0;
2365   }
2366 
2367   llvm::Constant *Data[] = {Filename, Builder.getInt32(Line),
2368                             Builder.getInt32(Column)};
2369 
2370   return llvm::ConstantStruct::getAnon(Data);
2371 }
2372 
2373 namespace {
2374 /// \brief Specify under what conditions this check can be recovered
2375 enum class CheckRecoverableKind {
2376   /// Always terminate program execution if this check fails.
2377   Unrecoverable,
2378   /// Check supports recovering, runtime has both fatal (noreturn) and
2379   /// non-fatal handlers for this check.
2380   Recoverable,
2381   /// Runtime conditionally aborts, always need to support recovery.
2382   AlwaysRecoverable
2383 };
2384 }
2385 
2386 static CheckRecoverableKind getRecoverableKind(SanitizerMask Kind) {
2387   assert(llvm::countPopulation(Kind) == 1);
2388   switch (Kind) {
2389   case SanitizerKind::Vptr:
2390     return CheckRecoverableKind::AlwaysRecoverable;
2391   case SanitizerKind::Return:
2392   case SanitizerKind::Unreachable:
2393     return CheckRecoverableKind::Unrecoverable;
2394   default:
2395     return CheckRecoverableKind::Recoverable;
2396   }
2397 }
2398 
2399 static void emitCheckHandlerCall(CodeGenFunction &CGF,
2400                                  llvm::FunctionType *FnType,
2401                                  ArrayRef<llvm::Value *> FnArgs,
2402                                  StringRef CheckName,
2403                                  CheckRecoverableKind RecoverKind, bool IsFatal,
2404                                  llvm::BasicBlock *ContBB) {
2405   assert(IsFatal || RecoverKind != CheckRecoverableKind::Unrecoverable);
2406   bool NeedsAbortSuffix =
2407       IsFatal && RecoverKind != CheckRecoverableKind::Unrecoverable;
2408   std::string FnName = ("__ubsan_handle_" + CheckName +
2409                         (NeedsAbortSuffix ? "_abort" : "")).str();
2410   bool MayReturn =
2411       !IsFatal || RecoverKind == CheckRecoverableKind::AlwaysRecoverable;
2412 
2413   llvm::AttrBuilder B;
2414   if (!MayReturn) {
2415     B.addAttribute(llvm::Attribute::NoReturn)
2416         .addAttribute(llvm::Attribute::NoUnwind);
2417   }
2418   B.addAttribute(llvm::Attribute::UWTable);
2419 
2420   llvm::Value *Fn = CGF.CGM.CreateRuntimeFunction(
2421       FnType, FnName,
2422       llvm::AttributeSet::get(CGF.getLLVMContext(),
2423                               llvm::AttributeSet::FunctionIndex, B));
2424   llvm::CallInst *HandlerCall = CGF.EmitNounwindRuntimeCall(Fn, FnArgs);
2425   if (!MayReturn) {
2426     HandlerCall->setDoesNotReturn();
2427     CGF.Builder.CreateUnreachable();
2428   } else {
2429     CGF.Builder.CreateBr(ContBB);
2430   }
2431 }
2432 
2433 void CodeGenFunction::EmitCheck(
2434     ArrayRef<std::pair<llvm::Value *, SanitizerMask>> Checked,
2435     StringRef CheckName, ArrayRef<llvm::Constant *> StaticArgs,
2436     ArrayRef<llvm::Value *> DynamicArgs) {
2437   assert(IsSanitizerScope);
2438   assert(Checked.size() > 0);
2439 
2440   llvm::Value *FatalCond = nullptr;
2441   llvm::Value *RecoverableCond = nullptr;
2442   llvm::Value *TrapCond = nullptr;
2443   for (int i = 0, n = Checked.size(); i < n; ++i) {
2444     llvm::Value *Check = Checked[i].first;
2445     // -fsanitize-trap= overrides -fsanitize-recover=.
2446     llvm::Value *&Cond =
2447         CGM.getCodeGenOpts().SanitizeTrap.has(Checked[i].second)
2448             ? TrapCond
2449             : CGM.getCodeGenOpts().SanitizeRecover.has(Checked[i].second)
2450                   ? RecoverableCond
2451                   : FatalCond;
2452     Cond = Cond ? Builder.CreateAnd(Cond, Check) : Check;
2453   }
2454 
2455   if (TrapCond)
2456     EmitTrapCheck(TrapCond);
2457   if (!FatalCond && !RecoverableCond)
2458     return;
2459 
2460   llvm::Value *JointCond;
2461   if (FatalCond && RecoverableCond)
2462     JointCond = Builder.CreateAnd(FatalCond, RecoverableCond);
2463   else
2464     JointCond = FatalCond ? FatalCond : RecoverableCond;
2465   assert(JointCond);
2466 
2467   CheckRecoverableKind RecoverKind = getRecoverableKind(Checked[0].second);
2468   assert(SanOpts.has(Checked[0].second));
2469 #ifndef NDEBUG
2470   for (int i = 1, n = Checked.size(); i < n; ++i) {
2471     assert(RecoverKind == getRecoverableKind(Checked[i].second) &&
2472            "All recoverable kinds in a single check must be same!");
2473     assert(SanOpts.has(Checked[i].second));
2474   }
2475 #endif
2476 
2477   llvm::BasicBlock *Cont = createBasicBlock("cont");
2478   llvm::BasicBlock *Handlers = createBasicBlock("handler." + CheckName);
2479   llvm::Instruction *Branch = Builder.CreateCondBr(JointCond, Cont, Handlers);
2480   // Give hint that we very much don't expect to execute the handler
2481   // Value chosen to match UR_NONTAKEN_WEIGHT, see BranchProbabilityInfo.cpp
2482   llvm::MDBuilder MDHelper(getLLVMContext());
2483   llvm::MDNode *Node = MDHelper.createBranchWeights((1U << 20) - 1, 1);
2484   Branch->setMetadata(llvm::LLVMContext::MD_prof, Node);
2485   EmitBlock(Handlers);
2486 
2487   // Emit handler arguments and create handler function type.
2488   llvm::Constant *Info = llvm::ConstantStruct::getAnon(StaticArgs);
2489   auto *InfoPtr =
2490       new llvm::GlobalVariable(CGM.getModule(), Info->getType(), false,
2491                                llvm::GlobalVariable::PrivateLinkage, Info);
2492   InfoPtr->setUnnamedAddr(true);
2493   CGM.getSanitizerMetadata()->disableSanitizerForGlobal(InfoPtr);
2494 
2495   SmallVector<llvm::Value *, 4> Args;
2496   SmallVector<llvm::Type *, 4> ArgTypes;
2497   Args.reserve(DynamicArgs.size() + 1);
2498   ArgTypes.reserve(DynamicArgs.size() + 1);
2499 
2500   // Handler functions take an i8* pointing to the (handler-specific) static
2501   // information block, followed by a sequence of intptr_t arguments
2502   // representing operand values.
2503   Args.push_back(Builder.CreateBitCast(InfoPtr, Int8PtrTy));
2504   ArgTypes.push_back(Int8PtrTy);
2505   for (size_t i = 0, n = DynamicArgs.size(); i != n; ++i) {
2506     Args.push_back(EmitCheckValue(DynamicArgs[i]));
2507     ArgTypes.push_back(IntPtrTy);
2508   }
2509 
2510   llvm::FunctionType *FnType =
2511     llvm::FunctionType::get(CGM.VoidTy, ArgTypes, false);
2512 
2513   if (!FatalCond || !RecoverableCond) {
2514     // Simple case: we need to generate a single handler call, either
2515     // fatal, or non-fatal.
2516     emitCheckHandlerCall(*this, FnType, Args, CheckName, RecoverKind,
2517                          (FatalCond != nullptr), Cont);
2518   } else {
2519     // Emit two handler calls: first one for set of unrecoverable checks,
2520     // another one for recoverable.
2521     llvm::BasicBlock *NonFatalHandlerBB =
2522         createBasicBlock("non_fatal." + CheckName);
2523     llvm::BasicBlock *FatalHandlerBB = createBasicBlock("fatal." + CheckName);
2524     Builder.CreateCondBr(FatalCond, NonFatalHandlerBB, FatalHandlerBB);
2525     EmitBlock(FatalHandlerBB);
2526     emitCheckHandlerCall(*this, FnType, Args, CheckName, RecoverKind, true,
2527                          NonFatalHandlerBB);
2528     EmitBlock(NonFatalHandlerBB);
2529     emitCheckHandlerCall(*this, FnType, Args, CheckName, RecoverKind, false,
2530                          Cont);
2531   }
2532 
2533   EmitBlock(Cont);
2534 }
2535 
2536 void CodeGenFunction::EmitCfiSlowPathCheck(llvm::Value *Cond,
2537                                            llvm::ConstantInt *TypeId,
2538                                            llvm::Value *Ptr) {
2539   auto &Ctx = getLLVMContext();
2540   llvm::BasicBlock *Cont = createBasicBlock("cfi.cont");
2541 
2542   llvm::BasicBlock *CheckBB = createBasicBlock("cfi.slowpath");
2543   llvm::BranchInst *BI = Builder.CreateCondBr(Cond, Cont, CheckBB);
2544 
2545   llvm::MDBuilder MDHelper(getLLVMContext());
2546   llvm::MDNode *Node = MDHelper.createBranchWeights((1U << 20) - 1, 1);
2547   BI->setMetadata(llvm::LLVMContext::MD_prof, Node);
2548 
2549   EmitBlock(CheckBB);
2550 
2551   llvm::Constant *SlowPathFn = CGM.getModule().getOrInsertFunction(
2552       "__cfi_slowpath",
2553       llvm::FunctionType::get(
2554           llvm::Type::getVoidTy(Ctx),
2555           {llvm::Type::getInt64Ty(Ctx),
2556            llvm::PointerType::getUnqual(llvm::Type::getInt8Ty(Ctx))},
2557           false));
2558   llvm::CallInst *CheckCall = Builder.CreateCall(SlowPathFn, {TypeId, Ptr});
2559   CheckCall->setDoesNotThrow();
2560 
2561   EmitBlock(Cont);
2562 }
2563 
2564 void CodeGenFunction::EmitTrapCheck(llvm::Value *Checked) {
2565   llvm::BasicBlock *Cont = createBasicBlock("cont");
2566 
2567   // If we're optimizing, collapse all calls to trap down to just one per
2568   // function to save on code size.
2569   if (!CGM.getCodeGenOpts().OptimizationLevel || !TrapBB) {
2570     TrapBB = createBasicBlock("trap");
2571     Builder.CreateCondBr(Checked, Cont, TrapBB);
2572     EmitBlock(TrapBB);
2573     llvm::CallInst *TrapCall = EmitTrapCall(llvm::Intrinsic::trap);
2574     TrapCall->setDoesNotReturn();
2575     TrapCall->setDoesNotThrow();
2576     Builder.CreateUnreachable();
2577   } else {
2578     Builder.CreateCondBr(Checked, Cont, TrapBB);
2579   }
2580 
2581   EmitBlock(Cont);
2582 }
2583 
2584 llvm::CallInst *CodeGenFunction::EmitTrapCall(llvm::Intrinsic::ID IntrID) {
2585   llvm::CallInst *TrapCall = Builder.CreateCall(CGM.getIntrinsic(IntrID));
2586 
2587   if (!CGM.getCodeGenOpts().TrapFuncName.empty())
2588     TrapCall->addAttribute(llvm::AttributeSet::FunctionIndex,
2589                            "trap-func-name",
2590                            CGM.getCodeGenOpts().TrapFuncName);
2591 
2592   return TrapCall;
2593 }
2594 
2595 Address CodeGenFunction::EmitArrayToPointerDecay(const Expr *E,
2596                                                  AlignmentSource *AlignSource) {
2597   assert(E->getType()->isArrayType() &&
2598          "Array to pointer decay must have array source type!");
2599 
2600   // Expressions of array type can't be bitfields or vector elements.
2601   LValue LV = EmitLValue(E);
2602   Address Addr = LV.getAddress();
2603   if (AlignSource) *AlignSource = LV.getAlignmentSource();
2604 
2605   // If the array type was an incomplete type, we need to make sure
2606   // the decay ends up being the right type.
2607   llvm::Type *NewTy = ConvertType(E->getType());
2608   Addr = Builder.CreateElementBitCast(Addr, NewTy);
2609 
2610   // Note that VLA pointers are always decayed, so we don't need to do
2611   // anything here.
2612   if (!E->getType()->isVariableArrayType()) {
2613     assert(isa<llvm::ArrayType>(Addr.getElementType()) &&
2614            "Expected pointer to array");
2615     Addr = Builder.CreateStructGEP(Addr, 0, CharUnits::Zero(), "arraydecay");
2616   }
2617 
2618   QualType EltType = E->getType()->castAsArrayTypeUnsafe()->getElementType();
2619   return Builder.CreateElementBitCast(Addr, ConvertTypeForMem(EltType));
2620 }
2621 
2622 /// isSimpleArrayDecayOperand - If the specified expr is a simple decay from an
2623 /// array to pointer, return the array subexpression.
2624 static const Expr *isSimpleArrayDecayOperand(const Expr *E) {
2625   // If this isn't just an array->pointer decay, bail out.
2626   const auto *CE = dyn_cast<CastExpr>(E);
2627   if (!CE || CE->getCastKind() != CK_ArrayToPointerDecay)
2628     return nullptr;
2629 
2630   // If this is a decay from variable width array, bail out.
2631   const Expr *SubExpr = CE->getSubExpr();
2632   if (SubExpr->getType()->isVariableArrayType())
2633     return nullptr;
2634 
2635   return SubExpr;
2636 }
2637 
2638 static llvm::Value *emitArraySubscriptGEP(CodeGenFunction &CGF,
2639                                           llvm::Value *ptr,
2640                                           ArrayRef<llvm::Value*> indices,
2641                                           bool inbounds,
2642                                     const llvm::Twine &name = "arrayidx") {
2643   if (inbounds) {
2644     return CGF.Builder.CreateInBoundsGEP(ptr, indices, name);
2645   } else {
2646     return CGF.Builder.CreateGEP(ptr, indices, name);
2647   }
2648 }
2649 
2650 static CharUnits getArrayElementAlign(CharUnits arrayAlign,
2651                                       llvm::Value *idx,
2652                                       CharUnits eltSize) {
2653   // If we have a constant index, we can use the exact offset of the
2654   // element we're accessing.
2655   if (auto constantIdx = dyn_cast<llvm::ConstantInt>(idx)) {
2656     CharUnits offset = constantIdx->getZExtValue() * eltSize;
2657     return arrayAlign.alignmentAtOffset(offset);
2658 
2659   // Otherwise, use the worst-case alignment for any element.
2660   } else {
2661     return arrayAlign.alignmentOfArrayElement(eltSize);
2662   }
2663 }
2664 
2665 static QualType getFixedSizeElementType(const ASTContext &ctx,
2666                                         const VariableArrayType *vla) {
2667   QualType eltType;
2668   do {
2669     eltType = vla->getElementType();
2670   } while ((vla = ctx.getAsVariableArrayType(eltType)));
2671   return eltType;
2672 }
2673 
2674 static Address emitArraySubscriptGEP(CodeGenFunction &CGF, Address addr,
2675                                      ArrayRef<llvm::Value*> indices,
2676                                      QualType eltType, bool inbounds,
2677                                      const llvm::Twine &name = "arrayidx") {
2678   // All the indices except that last must be zero.
2679 #ifndef NDEBUG
2680   for (auto idx : indices.drop_back())
2681     assert(isa<llvm::ConstantInt>(idx) &&
2682            cast<llvm::ConstantInt>(idx)->isZero());
2683 #endif
2684 
2685   // Determine the element size of the statically-sized base.  This is
2686   // the thing that the indices are expressed in terms of.
2687   if (auto vla = CGF.getContext().getAsVariableArrayType(eltType)) {
2688     eltType = getFixedSizeElementType(CGF.getContext(), vla);
2689   }
2690 
2691   // We can use that to compute the best alignment of the element.
2692   CharUnits eltSize = CGF.getContext().getTypeSizeInChars(eltType);
2693   CharUnits eltAlign =
2694     getArrayElementAlign(addr.getAlignment(), indices.back(), eltSize);
2695 
2696   llvm::Value *eltPtr =
2697     emitArraySubscriptGEP(CGF, addr.getPointer(), indices, inbounds, name);
2698   return Address(eltPtr, eltAlign);
2699 }
2700 
2701 LValue CodeGenFunction::EmitArraySubscriptExpr(const ArraySubscriptExpr *E,
2702                                                bool Accessed) {
2703   // The index must always be an integer, which is not an aggregate.  Emit it.
2704   llvm::Value *Idx = EmitScalarExpr(E->getIdx());
2705   QualType IdxTy  = E->getIdx()->getType();
2706   bool IdxSigned = IdxTy->isSignedIntegerOrEnumerationType();
2707 
2708   if (SanOpts.has(SanitizerKind::ArrayBounds))
2709     EmitBoundsCheck(E, E->getBase(), Idx, IdxTy, Accessed);
2710 
2711   // If the base is a vector type, then we are forming a vector element lvalue
2712   // with this subscript.
2713   if (E->getBase()->getType()->isVectorType() &&
2714       !isa<ExtVectorElementExpr>(E->getBase())) {
2715     // Emit the vector as an lvalue to get its address.
2716     LValue LHS = EmitLValue(E->getBase());
2717     assert(LHS.isSimple() && "Can only subscript lvalue vectors here!");
2718     return LValue::MakeVectorElt(LHS.getAddress(), Idx,
2719                                  E->getBase()->getType(),
2720                                  LHS.getAlignmentSource());
2721   }
2722 
2723   // All the other cases basically behave like simple offsetting.
2724 
2725   // Extend or truncate the index type to 32 or 64-bits.
2726   if (Idx->getType() != IntPtrTy)
2727     Idx = Builder.CreateIntCast(Idx, IntPtrTy, IdxSigned, "idxprom");
2728 
2729   // Handle the extvector case we ignored above.
2730   if (isa<ExtVectorElementExpr>(E->getBase())) {
2731     LValue LV = EmitLValue(E->getBase());
2732     Address Addr = EmitExtVectorElementLValue(LV);
2733 
2734     QualType EltType = LV.getType()->castAs<VectorType>()->getElementType();
2735     Addr = emitArraySubscriptGEP(*this, Addr, Idx, EltType, /*inbounds*/ true);
2736     return MakeAddrLValue(Addr, EltType, LV.getAlignmentSource());
2737   }
2738 
2739   AlignmentSource AlignSource;
2740   Address Addr = Address::invalid();
2741   if (const VariableArrayType *vla =
2742            getContext().getAsVariableArrayType(E->getType())) {
2743     // The base must be a pointer, which is not an aggregate.  Emit
2744     // it.  It needs to be emitted first in case it's what captures
2745     // the VLA bounds.
2746     Addr = EmitPointerWithAlignment(E->getBase(), &AlignSource);
2747 
2748     // The element count here is the total number of non-VLA elements.
2749     llvm::Value *numElements = getVLASize(vla).first;
2750 
2751     // Effectively, the multiply by the VLA size is part of the GEP.
2752     // GEP indexes are signed, and scaling an index isn't permitted to
2753     // signed-overflow, so we use the same semantics for our explicit
2754     // multiply.  We suppress this if overflow is not undefined behavior.
2755     if (getLangOpts().isSignedOverflowDefined()) {
2756       Idx = Builder.CreateMul(Idx, numElements);
2757     } else {
2758       Idx = Builder.CreateNSWMul(Idx, numElements);
2759     }
2760 
2761     Addr = emitArraySubscriptGEP(*this, Addr, Idx, vla->getElementType(),
2762                                  !getLangOpts().isSignedOverflowDefined());
2763 
2764   } else if (const ObjCObjectType *OIT = E->getType()->getAs<ObjCObjectType>()){
2765     // Indexing over an interface, as in "NSString *P; P[4];"
2766     CharUnits InterfaceSize = getContext().getTypeSizeInChars(OIT);
2767     llvm::Value *InterfaceSizeVal =
2768       llvm::ConstantInt::get(Idx->getType(), InterfaceSize.getQuantity());;
2769 
2770     llvm::Value *ScaledIdx = Builder.CreateMul(Idx, InterfaceSizeVal);
2771 
2772     // Emit the base pointer.
2773     Addr = EmitPointerWithAlignment(E->getBase(), &AlignSource);
2774 
2775     // We don't necessarily build correct LLVM struct types for ObjC
2776     // interfaces, so we can't rely on GEP to do this scaling
2777     // correctly, so we need to cast to i8*.  FIXME: is this actually
2778     // true?  A lot of other things in the fragile ABI would break...
2779     llvm::Type *OrigBaseTy = Addr.getType();
2780     Addr = Builder.CreateElementBitCast(Addr, Int8Ty);
2781 
2782     // Do the GEP.
2783     CharUnits EltAlign =
2784       getArrayElementAlign(Addr.getAlignment(), Idx, InterfaceSize);
2785     llvm::Value *EltPtr =
2786       emitArraySubscriptGEP(*this, Addr.getPointer(), ScaledIdx, false);
2787     Addr = Address(EltPtr, EltAlign);
2788 
2789     // Cast back.
2790     Addr = Builder.CreateBitCast(Addr, OrigBaseTy);
2791   } else if (const Expr *Array = isSimpleArrayDecayOperand(E->getBase())) {
2792     // If this is A[i] where A is an array, the frontend will have decayed the
2793     // base to be a ArrayToPointerDecay implicit cast.  While correct, it is
2794     // inefficient at -O0 to emit a "gep A, 0, 0" when codegen'ing it, then a
2795     // "gep x, i" here.  Emit one "gep A, 0, i".
2796     assert(Array->getType()->isArrayType() &&
2797            "Array to pointer decay must have array source type!");
2798     LValue ArrayLV;
2799     // For simple multidimensional array indexing, set the 'accessed' flag for
2800     // better bounds-checking of the base expression.
2801     if (const auto *ASE = dyn_cast<ArraySubscriptExpr>(Array))
2802       ArrayLV = EmitArraySubscriptExpr(ASE, /*Accessed*/ true);
2803     else
2804       ArrayLV = EmitLValue(Array);
2805 
2806     // Propagate the alignment from the array itself to the result.
2807     Addr = emitArraySubscriptGEP(*this, ArrayLV.getAddress(),
2808                                  {CGM.getSize(CharUnits::Zero()), Idx},
2809                                  E->getType(),
2810                                  !getLangOpts().isSignedOverflowDefined());
2811     AlignSource = ArrayLV.getAlignmentSource();
2812   } else {
2813     // The base must be a pointer; emit it with an estimate of its alignment.
2814     Addr = EmitPointerWithAlignment(E->getBase(), &AlignSource);
2815     Addr = emitArraySubscriptGEP(*this, Addr, Idx, E->getType(),
2816                                  !getLangOpts().isSignedOverflowDefined());
2817   }
2818 
2819   LValue LV = MakeAddrLValue(Addr, E->getType(), AlignSource);
2820 
2821   // TODO: Preserve/extend path TBAA metadata?
2822 
2823   if (getLangOpts().ObjC1 &&
2824       getLangOpts().getGC() != LangOptions::NonGC) {
2825     LV.setNonGC(!E->isOBJCGCCandidate(getContext()));
2826     setObjCGCLValueClass(getContext(), E, LV);
2827   }
2828   return LV;
2829 }
2830 
2831 LValue CodeGenFunction::EmitOMPArraySectionExpr(const OMPArraySectionExpr *E,
2832                                                 bool IsLowerBound) {
2833   LValue Base;
2834   if (auto *ASE =
2835           dyn_cast<OMPArraySectionExpr>(E->getBase()->IgnoreParenImpCasts()))
2836     Base = EmitOMPArraySectionExpr(ASE, IsLowerBound);
2837   else
2838     Base = EmitLValue(E->getBase());
2839   QualType BaseTy = Base.getType();
2840   llvm::Value *Idx = nullptr;
2841   QualType ResultExprTy;
2842   if (auto *AT = getContext().getAsArrayType(BaseTy))
2843     ResultExprTy = AT->getElementType();
2844   else
2845     ResultExprTy = BaseTy->getPointeeType();
2846   if (IsLowerBound || (!IsLowerBound && E->getColonLoc().isInvalid())) {
2847     // Requesting lower bound or upper bound, but without provided length and
2848     // without ':' symbol for the default length -> length = 1.
2849     // Idx = LowerBound ?: 0;
2850     if (auto *LowerBound = E->getLowerBound()) {
2851       Idx = Builder.CreateIntCast(
2852           EmitScalarExpr(LowerBound), IntPtrTy,
2853           LowerBound->getType()->hasSignedIntegerRepresentation());
2854     } else
2855       Idx = llvm::ConstantInt::getNullValue(IntPtrTy);
2856   } else {
2857     // Try to emit length or lower bound as constant. If this is possible, 1 is
2858     // subtracted from constant length or lower bound. Otherwise, emit LLVM IR
2859     // (LB + Len) - 1.
2860     auto &C = CGM.getContext();
2861     auto *Length = E->getLength();
2862     llvm::APSInt ConstLength;
2863     if (Length) {
2864       // Idx = LowerBound + Length - 1;
2865       if (Length->isIntegerConstantExpr(ConstLength, C)) {
2866         ConstLength = ConstLength.zextOrTrunc(PointerWidthInBits);
2867         Length = nullptr;
2868       }
2869       auto *LowerBound = E->getLowerBound();
2870       llvm::APSInt ConstLowerBound(PointerWidthInBits, /*isUnsigned=*/false);
2871       if (LowerBound && LowerBound->isIntegerConstantExpr(ConstLowerBound, C)) {
2872         ConstLowerBound = ConstLowerBound.zextOrTrunc(PointerWidthInBits);
2873         LowerBound = nullptr;
2874       }
2875       if (!Length)
2876         --ConstLength;
2877       else if (!LowerBound)
2878         --ConstLowerBound;
2879 
2880       if (Length || LowerBound) {
2881         auto *LowerBoundVal =
2882             LowerBound
2883                 ? Builder.CreateIntCast(
2884                       EmitScalarExpr(LowerBound), IntPtrTy,
2885                       LowerBound->getType()->hasSignedIntegerRepresentation())
2886                 : llvm::ConstantInt::get(IntPtrTy, ConstLowerBound);
2887         auto *LengthVal =
2888             Length
2889                 ? Builder.CreateIntCast(
2890                       EmitScalarExpr(Length), IntPtrTy,
2891                       Length->getType()->hasSignedIntegerRepresentation())
2892                 : llvm::ConstantInt::get(IntPtrTy, ConstLength);
2893         Idx = Builder.CreateAdd(LowerBoundVal, LengthVal, "lb_add_len",
2894                                 /*HasNUW=*/false,
2895                                 !getLangOpts().isSignedOverflowDefined());
2896         if (Length && LowerBound) {
2897           Idx = Builder.CreateSub(
2898               Idx, llvm::ConstantInt::get(IntPtrTy, /*V=*/1), "idx_sub_1",
2899               /*HasNUW=*/false, !getLangOpts().isSignedOverflowDefined());
2900         }
2901       } else
2902         Idx = llvm::ConstantInt::get(IntPtrTy, ConstLength + ConstLowerBound);
2903     } else {
2904       // Idx = ArraySize - 1;
2905       if (auto *VAT = C.getAsVariableArrayType(BaseTy)) {
2906         Length = VAT->getSizeExpr();
2907         if (Length->isIntegerConstantExpr(ConstLength, C))
2908           Length = nullptr;
2909       } else {
2910         auto *CAT = C.getAsConstantArrayType(BaseTy);
2911         ConstLength = CAT->getSize();
2912       }
2913       if (Length) {
2914         auto *LengthVal = Builder.CreateIntCast(
2915             EmitScalarExpr(Length), IntPtrTy,
2916             Length->getType()->hasSignedIntegerRepresentation());
2917         Idx = Builder.CreateSub(
2918             LengthVal, llvm::ConstantInt::get(IntPtrTy, /*V=*/1), "len_sub_1",
2919             /*HasNUW=*/false, !getLangOpts().isSignedOverflowDefined());
2920       } else {
2921         ConstLength = ConstLength.zextOrTrunc(PointerWidthInBits);
2922         --ConstLength;
2923         Idx = llvm::ConstantInt::get(IntPtrTy, ConstLength);
2924       }
2925     }
2926   }
2927   assert(Idx);
2928 
2929   llvm::Value *EltPtr;
2930   QualType FixedSizeEltType = ResultExprTy;
2931   if (auto *VLA = getContext().getAsVariableArrayType(ResultExprTy)) {
2932     // The element count here is the total number of non-VLA elements.
2933     llvm::Value *numElements = getVLASize(VLA).first;
2934     FixedSizeEltType = getFixedSizeElementType(getContext(), VLA);
2935 
2936     // Effectively, the multiply by the VLA size is part of the GEP.
2937     // GEP indexes are signed, and scaling an index isn't permitted to
2938     // signed-overflow, so we use the same semantics for our explicit
2939     // multiply.  We suppress this if overflow is not undefined behavior.
2940     if (getLangOpts().isSignedOverflowDefined()) {
2941       Idx = Builder.CreateMul(Idx, numElements);
2942       EltPtr = Builder.CreateGEP(Base.getPointer(), Idx, "arrayidx");
2943     } else {
2944       Idx = Builder.CreateNSWMul(Idx, numElements);
2945       EltPtr = Builder.CreateInBoundsGEP(Base.getPointer(), Idx, "arrayidx");
2946     }
2947   } else if (BaseTy->isConstantArrayType()) {
2948     llvm::Value *ArrayPtr = Base.getPointer();
2949     llvm::Value *Zero = llvm::ConstantInt::getNullValue(IntPtrTy);
2950     llvm::Value *Args[] = {Zero, Idx};
2951 
2952     if (getLangOpts().isSignedOverflowDefined())
2953       EltPtr = Builder.CreateGEP(ArrayPtr, Args, "arrayidx");
2954     else
2955       EltPtr = Builder.CreateInBoundsGEP(ArrayPtr, Args, "arrayidx");
2956   } else {
2957     // The base must be a pointer, which is not an aggregate.  Emit it.
2958     if (getLangOpts().isSignedOverflowDefined())
2959       EltPtr = Builder.CreateGEP(Base.getPointer(), Idx, "arrayidx");
2960     else
2961       EltPtr = Builder.CreateInBoundsGEP(Base.getPointer(), Idx, "arrayidx");
2962   }
2963 
2964   CharUnits EltAlign =
2965     Base.getAlignment().alignmentOfArrayElement(
2966                           getContext().getTypeSizeInChars(FixedSizeEltType));
2967 
2968   // Limit the alignment to that of the result type.
2969   LValue LV = MakeAddrLValue(Address(EltPtr, EltAlign), ResultExprTy,
2970                              Base.getAlignmentSource());
2971 
2972   LV.getQuals().setAddressSpace(BaseTy.getAddressSpace());
2973 
2974   return LV;
2975 }
2976 
2977 LValue CodeGenFunction::
2978 EmitExtVectorElementExpr(const ExtVectorElementExpr *E) {
2979   // Emit the base vector as an l-value.
2980   LValue Base;
2981 
2982   // ExtVectorElementExpr's base can either be a vector or pointer to vector.
2983   if (E->isArrow()) {
2984     // If it is a pointer to a vector, emit the address and form an lvalue with
2985     // it.
2986     AlignmentSource AlignSource;
2987     Address Ptr = EmitPointerWithAlignment(E->getBase(), &AlignSource);
2988     const PointerType *PT = E->getBase()->getType()->getAs<PointerType>();
2989     Base = MakeAddrLValue(Ptr, PT->getPointeeType(), AlignSource);
2990     Base.getQuals().removeObjCGCAttr();
2991   } else if (E->getBase()->isGLValue()) {
2992     // Otherwise, if the base is an lvalue ( as in the case of foo.x.x),
2993     // emit the base as an lvalue.
2994     assert(E->getBase()->getType()->isVectorType());
2995     Base = EmitLValue(E->getBase());
2996   } else {
2997     // Otherwise, the base is a normal rvalue (as in (V+V).x), emit it as such.
2998     assert(E->getBase()->getType()->isVectorType() &&
2999            "Result must be a vector");
3000     llvm::Value *Vec = EmitScalarExpr(E->getBase());
3001 
3002     // Store the vector to memory (because LValue wants an address).
3003     Address VecMem = CreateMemTemp(E->getBase()->getType());
3004     Builder.CreateStore(Vec, VecMem);
3005     Base = MakeAddrLValue(VecMem, E->getBase()->getType(),
3006                           AlignmentSource::Decl);
3007   }
3008 
3009   QualType type =
3010     E->getType().withCVRQualifiers(Base.getQuals().getCVRQualifiers());
3011 
3012   // Encode the element access list into a vector of unsigned indices.
3013   SmallVector<uint32_t, 4> Indices;
3014   E->getEncodedElementAccess(Indices);
3015 
3016   if (Base.isSimple()) {
3017     llvm::Constant *CV =
3018         llvm::ConstantDataVector::get(getLLVMContext(), Indices);
3019     return LValue::MakeExtVectorElt(Base.getAddress(), CV, type,
3020                                     Base.getAlignmentSource());
3021   }
3022   assert(Base.isExtVectorElt() && "Can only subscript lvalue vec elts here!");
3023 
3024   llvm::Constant *BaseElts = Base.getExtVectorElts();
3025   SmallVector<llvm::Constant *, 4> CElts;
3026 
3027   for (unsigned i = 0, e = Indices.size(); i != e; ++i)
3028     CElts.push_back(BaseElts->getAggregateElement(Indices[i]));
3029   llvm::Constant *CV = llvm::ConstantVector::get(CElts);
3030   return LValue::MakeExtVectorElt(Base.getExtVectorAddress(), CV, type,
3031                                   Base.getAlignmentSource());
3032 }
3033 
3034 LValue CodeGenFunction::EmitMemberExpr(const MemberExpr *E) {
3035   Expr *BaseExpr = E->getBase();
3036 
3037   // If this is s.x, emit s as an lvalue.  If it is s->x, emit s as a scalar.
3038   LValue BaseLV;
3039   if (E->isArrow()) {
3040     AlignmentSource AlignSource;
3041     Address Addr = EmitPointerWithAlignment(BaseExpr, &AlignSource);
3042     QualType PtrTy = BaseExpr->getType()->getPointeeType();
3043     EmitTypeCheck(TCK_MemberAccess, E->getExprLoc(), Addr.getPointer(), PtrTy);
3044     BaseLV = MakeAddrLValue(Addr, PtrTy, AlignSource);
3045   } else
3046     BaseLV = EmitCheckedLValue(BaseExpr, TCK_MemberAccess);
3047 
3048   NamedDecl *ND = E->getMemberDecl();
3049   if (auto *Field = dyn_cast<FieldDecl>(ND)) {
3050     LValue LV = EmitLValueForField(BaseLV, Field);
3051     setObjCGCLValueClass(getContext(), E, LV);
3052     return LV;
3053   }
3054 
3055   if (auto *VD = dyn_cast<VarDecl>(ND))
3056     return EmitGlobalVarDeclLValue(*this, E, VD);
3057 
3058   if (const auto *FD = dyn_cast<FunctionDecl>(ND))
3059     return EmitFunctionDeclLValue(*this, E, FD);
3060 
3061   llvm_unreachable("Unhandled member declaration!");
3062 }
3063 
3064 /// Given that we are currently emitting a lambda, emit an l-value for
3065 /// one of its members.
3066 LValue CodeGenFunction::EmitLValueForLambdaField(const FieldDecl *Field) {
3067   assert(cast<CXXMethodDecl>(CurCodeDecl)->getParent()->isLambda());
3068   assert(cast<CXXMethodDecl>(CurCodeDecl)->getParent() == Field->getParent());
3069   QualType LambdaTagType =
3070     getContext().getTagDeclType(Field->getParent());
3071   LValue LambdaLV = MakeNaturalAlignAddrLValue(CXXABIThisValue, LambdaTagType);
3072   return EmitLValueForField(LambdaLV, Field);
3073 }
3074 
3075 /// Drill down to the storage of a field without walking into
3076 /// reference types.
3077 ///
3078 /// The resulting address doesn't necessarily have the right type.
3079 static Address emitAddrOfFieldStorage(CodeGenFunction &CGF, Address base,
3080                                       const FieldDecl *field) {
3081   const RecordDecl *rec = field->getParent();
3082 
3083   unsigned idx =
3084     CGF.CGM.getTypes().getCGRecordLayout(rec).getLLVMFieldNo(field);
3085 
3086   CharUnits offset;
3087   // Adjust the alignment down to the given offset.
3088   // As a special case, if the LLVM field index is 0, we know that this
3089   // is zero.
3090   assert((idx != 0 || CGF.getContext().getASTRecordLayout(rec)
3091                          .getFieldOffset(field->getFieldIndex()) == 0) &&
3092          "LLVM field at index zero had non-zero offset?");
3093   if (idx != 0) {
3094     auto &recLayout = CGF.getContext().getASTRecordLayout(rec);
3095     auto offsetInBits = recLayout.getFieldOffset(field->getFieldIndex());
3096     offset = CGF.getContext().toCharUnitsFromBits(offsetInBits);
3097   }
3098 
3099   return CGF.Builder.CreateStructGEP(base, idx, offset, field->getName());
3100 }
3101 
3102 LValue CodeGenFunction::EmitLValueForField(LValue base,
3103                                            const FieldDecl *field) {
3104   AlignmentSource fieldAlignSource =
3105     getFieldAlignmentSource(base.getAlignmentSource());
3106 
3107   if (field->isBitField()) {
3108     const CGRecordLayout &RL =
3109       CGM.getTypes().getCGRecordLayout(field->getParent());
3110     const CGBitFieldInfo &Info = RL.getBitFieldInfo(field);
3111     Address Addr = base.getAddress();
3112     unsigned Idx = RL.getLLVMFieldNo(field);
3113     if (Idx != 0)
3114       // For structs, we GEP to the field that the record layout suggests.
3115       Addr = Builder.CreateStructGEP(Addr, Idx, Info.StorageOffset,
3116                                      field->getName());
3117     // Get the access type.
3118     llvm::Type *FieldIntTy =
3119       llvm::Type::getIntNTy(getLLVMContext(), Info.StorageSize);
3120     if (Addr.getElementType() != FieldIntTy)
3121       Addr = Builder.CreateElementBitCast(Addr, FieldIntTy);
3122 
3123     QualType fieldType =
3124       field->getType().withCVRQualifiers(base.getVRQualifiers());
3125     return LValue::MakeBitfield(Addr, Info, fieldType, fieldAlignSource);
3126   }
3127 
3128   const RecordDecl *rec = field->getParent();
3129   QualType type = field->getType();
3130 
3131   bool mayAlias = rec->hasAttr<MayAliasAttr>();
3132 
3133   Address addr = base.getAddress();
3134   unsigned cvr = base.getVRQualifiers();
3135   bool TBAAPath = CGM.getCodeGenOpts().StructPathTBAA;
3136   if (rec->isUnion()) {
3137     // For unions, there is no pointer adjustment.
3138     assert(!type->isReferenceType() && "union has reference member");
3139     // TODO: handle path-aware TBAA for union.
3140     TBAAPath = false;
3141   } else {
3142     // For structs, we GEP to the field that the record layout suggests.
3143     addr = emitAddrOfFieldStorage(*this, addr, field);
3144 
3145     // If this is a reference field, load the reference right now.
3146     if (const ReferenceType *refType = type->getAs<ReferenceType>()) {
3147       llvm::LoadInst *load = Builder.CreateLoad(addr, "ref");
3148       if (cvr & Qualifiers::Volatile) load->setVolatile(true);
3149 
3150       // Loading the reference will disable path-aware TBAA.
3151       TBAAPath = false;
3152       if (CGM.shouldUseTBAA()) {
3153         llvm::MDNode *tbaa;
3154         if (mayAlias)
3155           tbaa = CGM.getTBAAInfo(getContext().CharTy);
3156         else
3157           tbaa = CGM.getTBAAInfo(type);
3158         if (tbaa)
3159           CGM.DecorateInstructionWithTBAA(load, tbaa);
3160       }
3161 
3162       mayAlias = false;
3163       type = refType->getPointeeType();
3164 
3165       CharUnits alignment =
3166         getNaturalTypeAlignment(type, &fieldAlignSource, /*pointee*/ true);
3167       addr = Address(load, alignment);
3168 
3169       // Qualifiers on the struct don't apply to the referencee, and
3170       // we'll pick up CVR from the actual type later, so reset these
3171       // additional qualifiers now.
3172       cvr = 0;
3173     }
3174   }
3175 
3176   // Make sure that the address is pointing to the right type.  This is critical
3177   // for both unions and structs.  A union needs a bitcast, a struct element
3178   // will need a bitcast if the LLVM type laid out doesn't match the desired
3179   // type.
3180   addr = Builder.CreateElementBitCast(addr,
3181                                       CGM.getTypes().ConvertTypeForMem(type),
3182                                       field->getName());
3183 
3184   if (field->hasAttr<AnnotateAttr>())
3185     addr = EmitFieldAnnotations(field, addr);
3186 
3187   LValue LV = MakeAddrLValue(addr, type, fieldAlignSource);
3188   LV.getQuals().addCVRQualifiers(cvr);
3189   if (TBAAPath) {
3190     const ASTRecordLayout &Layout =
3191         getContext().getASTRecordLayout(field->getParent());
3192     // Set the base type to be the base type of the base LValue and
3193     // update offset to be relative to the base type.
3194     LV.setTBAABaseType(mayAlias ? getContext().CharTy : base.getTBAABaseType());
3195     LV.setTBAAOffset(mayAlias ? 0 : base.getTBAAOffset() +
3196                      Layout.getFieldOffset(field->getFieldIndex()) /
3197                                            getContext().getCharWidth());
3198   }
3199 
3200   // __weak attribute on a field is ignored.
3201   if (LV.getQuals().getObjCGCAttr() == Qualifiers::Weak)
3202     LV.getQuals().removeObjCGCAttr();
3203 
3204   // Fields of may_alias structs act like 'char' for TBAA purposes.
3205   // FIXME: this should get propagated down through anonymous structs
3206   // and unions.
3207   if (mayAlias && LV.getTBAAInfo())
3208     LV.setTBAAInfo(CGM.getTBAAInfo(getContext().CharTy));
3209 
3210   return LV;
3211 }
3212 
3213 LValue
3214 CodeGenFunction::EmitLValueForFieldInitialization(LValue Base,
3215                                                   const FieldDecl *Field) {
3216   QualType FieldType = Field->getType();
3217 
3218   if (!FieldType->isReferenceType())
3219     return EmitLValueForField(Base, Field);
3220 
3221   Address V = emitAddrOfFieldStorage(*this, Base.getAddress(), Field);
3222 
3223   // Make sure that the address is pointing to the right type.
3224   llvm::Type *llvmType = ConvertTypeForMem(FieldType);
3225   V = Builder.CreateElementBitCast(V, llvmType, Field->getName());
3226 
3227   // TODO: access-path TBAA?
3228   auto FieldAlignSource = getFieldAlignmentSource(Base.getAlignmentSource());
3229   return MakeAddrLValue(V, FieldType, FieldAlignSource);
3230 }
3231 
3232 LValue CodeGenFunction::EmitCompoundLiteralLValue(const CompoundLiteralExpr *E){
3233   if (E->isFileScope()) {
3234     ConstantAddress GlobalPtr = CGM.GetAddrOfConstantCompoundLiteral(E);
3235     return MakeAddrLValue(GlobalPtr, E->getType(), AlignmentSource::Decl);
3236   }
3237   if (E->getType()->isVariablyModifiedType())
3238     // make sure to emit the VLA size.
3239     EmitVariablyModifiedType(E->getType());
3240 
3241   Address DeclPtr = CreateMemTemp(E->getType(), ".compoundliteral");
3242   const Expr *InitExpr = E->getInitializer();
3243   LValue Result = MakeAddrLValue(DeclPtr, E->getType(), AlignmentSource::Decl);
3244 
3245   EmitAnyExprToMem(InitExpr, DeclPtr, E->getType().getQualifiers(),
3246                    /*Init*/ true);
3247 
3248   return Result;
3249 }
3250 
3251 LValue CodeGenFunction::EmitInitListLValue(const InitListExpr *E) {
3252   if (!E->isGLValue())
3253     // Initializing an aggregate temporary in C++11: T{...}.
3254     return EmitAggExprToLValue(E);
3255 
3256   // An lvalue initializer list must be initializing a reference.
3257   assert(E->getNumInits() == 1 && "reference init with multiple values");
3258   return EmitLValue(E->getInit(0));
3259 }
3260 
3261 /// Emit the operand of a glvalue conditional operator. This is either a glvalue
3262 /// or a (possibly-parenthesized) throw-expression. If this is a throw, no
3263 /// LValue is returned and the current block has been terminated.
3264 static Optional<LValue> EmitLValueOrThrowExpression(CodeGenFunction &CGF,
3265                                                     const Expr *Operand) {
3266   if (auto *ThrowExpr = dyn_cast<CXXThrowExpr>(Operand->IgnoreParens())) {
3267     CGF.EmitCXXThrowExpr(ThrowExpr, /*KeepInsertionPoint*/false);
3268     return None;
3269   }
3270 
3271   return CGF.EmitLValue(Operand);
3272 }
3273 
3274 LValue CodeGenFunction::
3275 EmitConditionalOperatorLValue(const AbstractConditionalOperator *expr) {
3276   if (!expr->isGLValue()) {
3277     // ?: here should be an aggregate.
3278     assert(hasAggregateEvaluationKind(expr->getType()) &&
3279            "Unexpected conditional operator!");
3280     return EmitAggExprToLValue(expr);
3281   }
3282 
3283   OpaqueValueMapping binding(*this, expr);
3284 
3285   const Expr *condExpr = expr->getCond();
3286   bool CondExprBool;
3287   if (ConstantFoldsToSimpleInteger(condExpr, CondExprBool)) {
3288     const Expr *live = expr->getTrueExpr(), *dead = expr->getFalseExpr();
3289     if (!CondExprBool) std::swap(live, dead);
3290 
3291     if (!ContainsLabel(dead)) {
3292       // If the true case is live, we need to track its region.
3293       if (CondExprBool)
3294         incrementProfileCounter(expr);
3295       return EmitLValue(live);
3296     }
3297   }
3298 
3299   llvm::BasicBlock *lhsBlock = createBasicBlock("cond.true");
3300   llvm::BasicBlock *rhsBlock = createBasicBlock("cond.false");
3301   llvm::BasicBlock *contBlock = createBasicBlock("cond.end");
3302 
3303   ConditionalEvaluation eval(*this);
3304   EmitBranchOnBoolExpr(condExpr, lhsBlock, rhsBlock, getProfileCount(expr));
3305 
3306   // Any temporaries created here are conditional.
3307   EmitBlock(lhsBlock);
3308   incrementProfileCounter(expr);
3309   eval.begin(*this);
3310   Optional<LValue> lhs =
3311       EmitLValueOrThrowExpression(*this, expr->getTrueExpr());
3312   eval.end(*this);
3313 
3314   if (lhs && !lhs->isSimple())
3315     return EmitUnsupportedLValue(expr, "conditional operator");
3316 
3317   lhsBlock = Builder.GetInsertBlock();
3318   if (lhs)
3319     Builder.CreateBr(contBlock);
3320 
3321   // Any temporaries created here are conditional.
3322   EmitBlock(rhsBlock);
3323   eval.begin(*this);
3324   Optional<LValue> rhs =
3325       EmitLValueOrThrowExpression(*this, expr->getFalseExpr());
3326   eval.end(*this);
3327   if (rhs && !rhs->isSimple())
3328     return EmitUnsupportedLValue(expr, "conditional operator");
3329   rhsBlock = Builder.GetInsertBlock();
3330 
3331   EmitBlock(contBlock);
3332 
3333   if (lhs && rhs) {
3334     llvm::PHINode *phi = Builder.CreatePHI(lhs->getPointer()->getType(),
3335                                            2, "cond-lvalue");
3336     phi->addIncoming(lhs->getPointer(), lhsBlock);
3337     phi->addIncoming(rhs->getPointer(), rhsBlock);
3338     Address result(phi, std::min(lhs->getAlignment(), rhs->getAlignment()));
3339     AlignmentSource alignSource =
3340       std::max(lhs->getAlignmentSource(), rhs->getAlignmentSource());
3341     return MakeAddrLValue(result, expr->getType(), alignSource);
3342   } else {
3343     assert((lhs || rhs) &&
3344            "both operands of glvalue conditional are throw-expressions?");
3345     return lhs ? *lhs : *rhs;
3346   }
3347 }
3348 
3349 /// EmitCastLValue - Casts are never lvalues unless that cast is to a reference
3350 /// type. If the cast is to a reference, we can have the usual lvalue result,
3351 /// otherwise if a cast is needed by the code generator in an lvalue context,
3352 /// then it must mean that we need the address of an aggregate in order to
3353 /// access one of its members.  This can happen for all the reasons that casts
3354 /// are permitted with aggregate result, including noop aggregate casts, and
3355 /// cast from scalar to union.
3356 LValue CodeGenFunction::EmitCastLValue(const CastExpr *E) {
3357   switch (E->getCastKind()) {
3358   case CK_ToVoid:
3359   case CK_BitCast:
3360   case CK_ArrayToPointerDecay:
3361   case CK_FunctionToPointerDecay:
3362   case CK_NullToMemberPointer:
3363   case CK_NullToPointer:
3364   case CK_IntegralToPointer:
3365   case CK_PointerToIntegral:
3366   case CK_PointerToBoolean:
3367   case CK_VectorSplat:
3368   case CK_IntegralCast:
3369   case CK_BooleanToSignedIntegral:
3370   case CK_IntegralToBoolean:
3371   case CK_IntegralToFloating:
3372   case CK_FloatingToIntegral:
3373   case CK_FloatingToBoolean:
3374   case CK_FloatingCast:
3375   case CK_FloatingRealToComplex:
3376   case CK_FloatingComplexToReal:
3377   case CK_FloatingComplexToBoolean:
3378   case CK_FloatingComplexCast:
3379   case CK_FloatingComplexToIntegralComplex:
3380   case CK_IntegralRealToComplex:
3381   case CK_IntegralComplexToReal:
3382   case CK_IntegralComplexToBoolean:
3383   case CK_IntegralComplexCast:
3384   case CK_IntegralComplexToFloatingComplex:
3385   case CK_DerivedToBaseMemberPointer:
3386   case CK_BaseToDerivedMemberPointer:
3387   case CK_MemberPointerToBoolean:
3388   case CK_ReinterpretMemberPointer:
3389   case CK_AnyPointerToBlockPointerCast:
3390   case CK_ARCProduceObject:
3391   case CK_ARCConsumeObject:
3392   case CK_ARCReclaimReturnedObject:
3393   case CK_ARCExtendBlockObject:
3394   case CK_CopyAndAutoreleaseBlockObject:
3395   case CK_AddressSpaceConversion:
3396     return EmitUnsupportedLValue(E, "unexpected cast lvalue");
3397 
3398   case CK_Dependent:
3399     llvm_unreachable("dependent cast kind in IR gen!");
3400 
3401   case CK_BuiltinFnToFnPtr:
3402     llvm_unreachable("builtin functions are handled elsewhere");
3403 
3404   // These are never l-values; just use the aggregate emission code.
3405   case CK_NonAtomicToAtomic:
3406   case CK_AtomicToNonAtomic:
3407     return EmitAggExprToLValue(E);
3408 
3409   case CK_Dynamic: {
3410     LValue LV = EmitLValue(E->getSubExpr());
3411     Address V = LV.getAddress();
3412     const auto *DCE = cast<CXXDynamicCastExpr>(E);
3413     return MakeNaturalAlignAddrLValue(EmitDynamicCast(V, DCE), E->getType());
3414   }
3415 
3416   case CK_ConstructorConversion:
3417   case CK_UserDefinedConversion:
3418   case CK_CPointerToObjCPointerCast:
3419   case CK_BlockPointerToObjCPointerCast:
3420   case CK_NoOp:
3421   case CK_LValueToRValue:
3422     return EmitLValue(E->getSubExpr());
3423 
3424   case CK_UncheckedDerivedToBase:
3425   case CK_DerivedToBase: {
3426     const RecordType *DerivedClassTy =
3427       E->getSubExpr()->getType()->getAs<RecordType>();
3428     auto *DerivedClassDecl = cast<CXXRecordDecl>(DerivedClassTy->getDecl());
3429 
3430     LValue LV = EmitLValue(E->getSubExpr());
3431     Address This = LV.getAddress();
3432 
3433     // Perform the derived-to-base conversion
3434     Address Base = GetAddressOfBaseClass(
3435         This, DerivedClassDecl, E->path_begin(), E->path_end(),
3436         /*NullCheckValue=*/false, E->getExprLoc());
3437 
3438     return MakeAddrLValue(Base, E->getType(), LV.getAlignmentSource());
3439   }
3440   case CK_ToUnion:
3441     return EmitAggExprToLValue(E);
3442   case CK_BaseToDerived: {
3443     const RecordType *DerivedClassTy = E->getType()->getAs<RecordType>();
3444     auto *DerivedClassDecl = cast<CXXRecordDecl>(DerivedClassTy->getDecl());
3445 
3446     LValue LV = EmitLValue(E->getSubExpr());
3447 
3448     // Perform the base-to-derived conversion
3449     Address Derived =
3450       GetAddressOfDerivedClass(LV.getAddress(), DerivedClassDecl,
3451                                E->path_begin(), E->path_end(),
3452                                /*NullCheckValue=*/false);
3453 
3454     // C++11 [expr.static.cast]p2: Behavior is undefined if a downcast is
3455     // performed and the object is not of the derived type.
3456     if (sanitizePerformTypeCheck())
3457       EmitTypeCheck(TCK_DowncastReference, E->getExprLoc(),
3458                     Derived.getPointer(), E->getType());
3459 
3460     if (SanOpts.has(SanitizerKind::CFIDerivedCast))
3461       EmitVTablePtrCheckForCast(E->getType(), Derived.getPointer(),
3462                                 /*MayBeNull=*/false,
3463                                 CFITCK_DerivedCast, E->getLocStart());
3464 
3465     return MakeAddrLValue(Derived, E->getType(), LV.getAlignmentSource());
3466   }
3467   case CK_LValueBitCast: {
3468     // This must be a reinterpret_cast (or c-style equivalent).
3469     const auto *CE = cast<ExplicitCastExpr>(E);
3470 
3471     CGM.EmitExplicitCastExprType(CE, this);
3472     LValue LV = EmitLValue(E->getSubExpr());
3473     Address V = Builder.CreateBitCast(LV.getAddress(),
3474                                       ConvertType(CE->getTypeAsWritten()));
3475 
3476     if (SanOpts.has(SanitizerKind::CFIUnrelatedCast))
3477       EmitVTablePtrCheckForCast(E->getType(), V.getPointer(),
3478                                 /*MayBeNull=*/false,
3479                                 CFITCK_UnrelatedCast, E->getLocStart());
3480 
3481     return MakeAddrLValue(V, E->getType(), LV.getAlignmentSource());
3482   }
3483   case CK_ObjCObjectLValueCast: {
3484     LValue LV = EmitLValue(E->getSubExpr());
3485     Address V = Builder.CreateElementBitCast(LV.getAddress(),
3486                                              ConvertType(E->getType()));
3487     return MakeAddrLValue(V, E->getType(), LV.getAlignmentSource());
3488   }
3489   case CK_ZeroToOCLEvent:
3490     llvm_unreachable("NULL to OpenCL event lvalue cast is not valid");
3491   }
3492 
3493   llvm_unreachable("Unhandled lvalue cast kind?");
3494 }
3495 
3496 LValue CodeGenFunction::EmitOpaqueValueLValue(const OpaqueValueExpr *e) {
3497   assert(OpaqueValueMappingData::shouldBindAsLValue(e));
3498   return getOpaqueLValueMapping(e);
3499 }
3500 
3501 RValue CodeGenFunction::EmitRValueForField(LValue LV,
3502                                            const FieldDecl *FD,
3503                                            SourceLocation Loc) {
3504   QualType FT = FD->getType();
3505   LValue FieldLV = EmitLValueForField(LV, FD);
3506   switch (getEvaluationKind(FT)) {
3507   case TEK_Complex:
3508     return RValue::getComplex(EmitLoadOfComplex(FieldLV, Loc));
3509   case TEK_Aggregate:
3510     return FieldLV.asAggregateRValue();
3511   case TEK_Scalar:
3512     return EmitLoadOfLValue(FieldLV, Loc);
3513   }
3514   llvm_unreachable("bad evaluation kind");
3515 }
3516 
3517 //===--------------------------------------------------------------------===//
3518 //                             Expression Emission
3519 //===--------------------------------------------------------------------===//
3520 
3521 RValue CodeGenFunction::EmitCallExpr(const CallExpr *E,
3522                                      ReturnValueSlot ReturnValue) {
3523   // Builtins never have block type.
3524   if (E->getCallee()->getType()->isBlockPointerType())
3525     return EmitBlockCallExpr(E, ReturnValue);
3526 
3527   if (const auto *CE = dyn_cast<CXXMemberCallExpr>(E))
3528     return EmitCXXMemberCallExpr(CE, ReturnValue);
3529 
3530   if (const auto *CE = dyn_cast<CUDAKernelCallExpr>(E))
3531     return EmitCUDAKernelCallExpr(CE, ReturnValue);
3532 
3533   const Decl *TargetDecl = E->getCalleeDecl();
3534   if (const FunctionDecl *FD = dyn_cast_or_null<FunctionDecl>(TargetDecl)) {
3535     if (unsigned builtinID = FD->getBuiltinID())
3536       return EmitBuiltinExpr(FD, builtinID, E, ReturnValue);
3537   }
3538 
3539   if (const auto *CE = dyn_cast<CXXOperatorCallExpr>(E))
3540     if (const CXXMethodDecl *MD = dyn_cast_or_null<CXXMethodDecl>(TargetDecl))
3541       return EmitCXXOperatorMemberCallExpr(CE, MD, ReturnValue);
3542 
3543   if (const auto *PseudoDtor =
3544           dyn_cast<CXXPseudoDestructorExpr>(E->getCallee()->IgnoreParens())) {
3545     QualType DestroyedType = PseudoDtor->getDestroyedType();
3546     if (DestroyedType.hasStrongOrWeakObjCLifetime()) {
3547       // Automatic Reference Counting:
3548       //   If the pseudo-expression names a retainable object with weak or
3549       //   strong lifetime, the object shall be released.
3550       Expr *BaseExpr = PseudoDtor->getBase();
3551       Address BaseValue = Address::invalid();
3552       Qualifiers BaseQuals;
3553 
3554       // If this is s.x, emit s as an lvalue. If it is s->x, emit s as a scalar.
3555       if (PseudoDtor->isArrow()) {
3556         BaseValue = EmitPointerWithAlignment(BaseExpr);
3557         const PointerType *PTy = BaseExpr->getType()->getAs<PointerType>();
3558         BaseQuals = PTy->getPointeeType().getQualifiers();
3559       } else {
3560         LValue BaseLV = EmitLValue(BaseExpr);
3561         BaseValue = BaseLV.getAddress();
3562         QualType BaseTy = BaseExpr->getType();
3563         BaseQuals = BaseTy.getQualifiers();
3564       }
3565 
3566       switch (DestroyedType.getObjCLifetime()) {
3567       case Qualifiers::OCL_None:
3568       case Qualifiers::OCL_ExplicitNone:
3569       case Qualifiers::OCL_Autoreleasing:
3570         break;
3571 
3572       case Qualifiers::OCL_Strong:
3573         EmitARCRelease(Builder.CreateLoad(BaseValue,
3574                           PseudoDtor->getDestroyedType().isVolatileQualified()),
3575                        ARCPreciseLifetime);
3576         break;
3577 
3578       case Qualifiers::OCL_Weak:
3579         EmitARCDestroyWeak(BaseValue);
3580         break;
3581       }
3582     } else {
3583       // C++ [expr.pseudo]p1:
3584       //   The result shall only be used as the operand for the function call
3585       //   operator (), and the result of such a call has type void. The only
3586       //   effect is the evaluation of the postfix-expression before the dot or
3587       //   arrow.
3588       EmitScalarExpr(E->getCallee());
3589     }
3590 
3591     return RValue::get(nullptr);
3592   }
3593 
3594   llvm::Value *Callee = EmitScalarExpr(E->getCallee());
3595   return EmitCall(E->getCallee()->getType(), Callee, E, ReturnValue,
3596                   TargetDecl);
3597 }
3598 
3599 LValue CodeGenFunction::EmitBinaryOperatorLValue(const BinaryOperator *E) {
3600   // Comma expressions just emit their LHS then their RHS as an l-value.
3601   if (E->getOpcode() == BO_Comma) {
3602     EmitIgnoredExpr(E->getLHS());
3603     EnsureInsertPoint();
3604     return EmitLValue(E->getRHS());
3605   }
3606 
3607   if (E->getOpcode() == BO_PtrMemD ||
3608       E->getOpcode() == BO_PtrMemI)
3609     return EmitPointerToDataMemberBinaryExpr(E);
3610 
3611   assert(E->getOpcode() == BO_Assign && "unexpected binary l-value");
3612 
3613   // Note that in all of these cases, __block variables need the RHS
3614   // evaluated first just in case the variable gets moved by the RHS.
3615 
3616   switch (getEvaluationKind(E->getType())) {
3617   case TEK_Scalar: {
3618     switch (E->getLHS()->getType().getObjCLifetime()) {
3619     case Qualifiers::OCL_Strong:
3620       return EmitARCStoreStrong(E, /*ignored*/ false).first;
3621 
3622     case Qualifiers::OCL_Autoreleasing:
3623       return EmitARCStoreAutoreleasing(E).first;
3624 
3625     // No reason to do any of these differently.
3626     case Qualifiers::OCL_None:
3627     case Qualifiers::OCL_ExplicitNone:
3628     case Qualifiers::OCL_Weak:
3629       break;
3630     }
3631 
3632     RValue RV = EmitAnyExpr(E->getRHS());
3633     LValue LV = EmitCheckedLValue(E->getLHS(), TCK_Store);
3634     EmitStoreThroughLValue(RV, LV);
3635     return LV;
3636   }
3637 
3638   case TEK_Complex:
3639     return EmitComplexAssignmentLValue(E);
3640 
3641   case TEK_Aggregate:
3642     return EmitAggExprToLValue(E);
3643   }
3644   llvm_unreachable("bad evaluation kind");
3645 }
3646 
3647 LValue CodeGenFunction::EmitCallExprLValue(const CallExpr *E) {
3648   RValue RV = EmitCallExpr(E);
3649 
3650   if (!RV.isScalar())
3651     return MakeAddrLValue(RV.getAggregateAddress(), E->getType(),
3652                           AlignmentSource::Decl);
3653 
3654   assert(E->getCallReturnType(getContext())->isReferenceType() &&
3655          "Can't have a scalar return unless the return type is a "
3656          "reference type!");
3657 
3658   return MakeNaturalAlignPointeeAddrLValue(RV.getScalarVal(), E->getType());
3659 }
3660 
3661 LValue CodeGenFunction::EmitVAArgExprLValue(const VAArgExpr *E) {
3662   // FIXME: This shouldn't require another copy.
3663   return EmitAggExprToLValue(E);
3664 }
3665 
3666 LValue CodeGenFunction::EmitCXXConstructLValue(const CXXConstructExpr *E) {
3667   assert(E->getType()->getAsCXXRecordDecl()->hasTrivialDestructor()
3668          && "binding l-value to type which needs a temporary");
3669   AggValueSlot Slot = CreateAggTemp(E->getType());
3670   EmitCXXConstructExpr(E, Slot);
3671   return MakeAddrLValue(Slot.getAddress(), E->getType(),
3672                         AlignmentSource::Decl);
3673 }
3674 
3675 LValue
3676 CodeGenFunction::EmitCXXTypeidLValue(const CXXTypeidExpr *E) {
3677   return MakeNaturalAlignAddrLValue(EmitCXXTypeidExpr(E), E->getType());
3678 }
3679 
3680 Address CodeGenFunction::EmitCXXUuidofExpr(const CXXUuidofExpr *E) {
3681   return Builder.CreateElementBitCast(CGM.GetAddrOfUuidDescriptor(E),
3682                                       ConvertType(E->getType()));
3683 }
3684 
3685 LValue CodeGenFunction::EmitCXXUuidofLValue(const CXXUuidofExpr *E) {
3686   return MakeAddrLValue(EmitCXXUuidofExpr(E), E->getType(),
3687                         AlignmentSource::Decl);
3688 }
3689 
3690 LValue
3691 CodeGenFunction::EmitCXXBindTemporaryLValue(const CXXBindTemporaryExpr *E) {
3692   AggValueSlot Slot = CreateAggTemp(E->getType(), "temp.lvalue");
3693   Slot.setExternallyDestructed();
3694   EmitAggExpr(E->getSubExpr(), Slot);
3695   EmitCXXTemporary(E->getTemporary(), E->getType(), Slot.getAddress());
3696   return MakeAddrLValue(Slot.getAddress(), E->getType(),
3697                         AlignmentSource::Decl);
3698 }
3699 
3700 LValue
3701 CodeGenFunction::EmitLambdaLValue(const LambdaExpr *E) {
3702   AggValueSlot Slot = CreateAggTemp(E->getType(), "temp.lvalue");
3703   EmitLambdaExpr(E, Slot);
3704   return MakeAddrLValue(Slot.getAddress(), E->getType(),
3705                         AlignmentSource::Decl);
3706 }
3707 
3708 LValue CodeGenFunction::EmitObjCMessageExprLValue(const ObjCMessageExpr *E) {
3709   RValue RV = EmitObjCMessageExpr(E);
3710 
3711   if (!RV.isScalar())
3712     return MakeAddrLValue(RV.getAggregateAddress(), E->getType(),
3713                           AlignmentSource::Decl);
3714 
3715   assert(E->getMethodDecl()->getReturnType()->isReferenceType() &&
3716          "Can't have a scalar return unless the return type is a "
3717          "reference type!");
3718 
3719   return MakeNaturalAlignPointeeAddrLValue(RV.getScalarVal(), E->getType());
3720 }
3721 
3722 LValue CodeGenFunction::EmitObjCSelectorLValue(const ObjCSelectorExpr *E) {
3723   Address V =
3724     CGM.getObjCRuntime().GetAddrOfSelector(*this, E->getSelector());
3725   return MakeAddrLValue(V, E->getType(), AlignmentSource::Decl);
3726 }
3727 
3728 llvm::Value *CodeGenFunction::EmitIvarOffset(const ObjCInterfaceDecl *Interface,
3729                                              const ObjCIvarDecl *Ivar) {
3730   return CGM.getObjCRuntime().EmitIvarOffset(*this, Interface, Ivar);
3731 }
3732 
3733 LValue CodeGenFunction::EmitLValueForIvar(QualType ObjectTy,
3734                                           llvm::Value *BaseValue,
3735                                           const ObjCIvarDecl *Ivar,
3736                                           unsigned CVRQualifiers) {
3737   return CGM.getObjCRuntime().EmitObjCValueForIvar(*this, ObjectTy, BaseValue,
3738                                                    Ivar, CVRQualifiers);
3739 }
3740 
3741 LValue CodeGenFunction::EmitObjCIvarRefLValue(const ObjCIvarRefExpr *E) {
3742   // FIXME: A lot of the code below could be shared with EmitMemberExpr.
3743   llvm::Value *BaseValue = nullptr;
3744   const Expr *BaseExpr = E->getBase();
3745   Qualifiers BaseQuals;
3746   QualType ObjectTy;
3747   if (E->isArrow()) {
3748     BaseValue = EmitScalarExpr(BaseExpr);
3749     ObjectTy = BaseExpr->getType()->getPointeeType();
3750     BaseQuals = ObjectTy.getQualifiers();
3751   } else {
3752     LValue BaseLV = EmitLValue(BaseExpr);
3753     BaseValue = BaseLV.getPointer();
3754     ObjectTy = BaseExpr->getType();
3755     BaseQuals = ObjectTy.getQualifiers();
3756   }
3757 
3758   LValue LV =
3759     EmitLValueForIvar(ObjectTy, BaseValue, E->getDecl(),
3760                       BaseQuals.getCVRQualifiers());
3761   setObjCGCLValueClass(getContext(), E, LV);
3762   return LV;
3763 }
3764 
3765 LValue CodeGenFunction::EmitStmtExprLValue(const StmtExpr *E) {
3766   // Can only get l-value for message expression returning aggregate type
3767   RValue RV = EmitAnyExprToTemp(E);
3768   return MakeAddrLValue(RV.getAggregateAddress(), E->getType(),
3769                         AlignmentSource::Decl);
3770 }
3771 
3772 RValue CodeGenFunction::EmitCall(QualType CalleeType, llvm::Value *Callee,
3773                                  const CallExpr *E, ReturnValueSlot ReturnValue,
3774                                  CGCalleeInfo CalleeInfo, llvm::Value *Chain) {
3775   // Get the actual function type. The callee type will always be a pointer to
3776   // function type or a block pointer type.
3777   assert(CalleeType->isFunctionPointerType() &&
3778          "Call must have function pointer type!");
3779 
3780   // Preserve the non-canonical function type because things like exception
3781   // specifications disappear in the canonical type. That information is useful
3782   // to drive the generation of more accurate code for this call later on.
3783   const FunctionProtoType *NonCanonicalFTP = CalleeType->getAs<PointerType>()
3784                                                  ->getPointeeType()
3785                                                  ->getAs<FunctionProtoType>();
3786 
3787   const Decl *TargetDecl = CalleeInfo.getCalleeDecl();
3788 
3789   if (const FunctionDecl *FD = dyn_cast_or_null<FunctionDecl>(TargetDecl))
3790     // We can only guarantee that a function is called from the correct
3791     // context/function based on the appropriate target attributes,
3792     // so only check in the case where we have both always_inline and target
3793     // since otherwise we could be making a conditional call after a check for
3794     // the proper cpu features (and it won't cause code generation issues due to
3795     // function based code generation).
3796     if (TargetDecl->hasAttr<AlwaysInlineAttr>() &&
3797         TargetDecl->hasAttr<TargetAttr>())
3798       checkTargetFeatures(E, FD);
3799 
3800   CalleeType = getContext().getCanonicalType(CalleeType);
3801 
3802   const auto *FnType =
3803       cast<FunctionType>(cast<PointerType>(CalleeType)->getPointeeType());
3804 
3805   if (getLangOpts().CPlusPlus && SanOpts.has(SanitizerKind::Function) &&
3806       (!TargetDecl || !isa<FunctionDecl>(TargetDecl))) {
3807     if (llvm::Constant *PrefixSig =
3808             CGM.getTargetCodeGenInfo().getUBSanFunctionSignature(CGM)) {
3809       SanitizerScope SanScope(this);
3810       llvm::Constant *FTRTTIConst =
3811           CGM.GetAddrOfRTTIDescriptor(QualType(FnType, 0), /*ForEH=*/true);
3812       llvm::Type *PrefixStructTyElems[] = {
3813         PrefixSig->getType(),
3814         FTRTTIConst->getType()
3815       };
3816       llvm::StructType *PrefixStructTy = llvm::StructType::get(
3817           CGM.getLLVMContext(), PrefixStructTyElems, /*isPacked=*/true);
3818 
3819       llvm::Value *CalleePrefixStruct = Builder.CreateBitCast(
3820           Callee, llvm::PointerType::getUnqual(PrefixStructTy));
3821       llvm::Value *CalleeSigPtr =
3822           Builder.CreateConstGEP2_32(PrefixStructTy, CalleePrefixStruct, 0, 0);
3823       llvm::Value *CalleeSig =
3824           Builder.CreateAlignedLoad(CalleeSigPtr, getIntAlign());
3825       llvm::Value *CalleeSigMatch = Builder.CreateICmpEQ(CalleeSig, PrefixSig);
3826 
3827       llvm::BasicBlock *Cont = createBasicBlock("cont");
3828       llvm::BasicBlock *TypeCheck = createBasicBlock("typecheck");
3829       Builder.CreateCondBr(CalleeSigMatch, TypeCheck, Cont);
3830 
3831       EmitBlock(TypeCheck);
3832       llvm::Value *CalleeRTTIPtr =
3833           Builder.CreateConstGEP2_32(PrefixStructTy, CalleePrefixStruct, 0, 1);
3834       llvm::Value *CalleeRTTI =
3835           Builder.CreateAlignedLoad(CalleeRTTIPtr, getPointerAlign());
3836       llvm::Value *CalleeRTTIMatch =
3837           Builder.CreateICmpEQ(CalleeRTTI, FTRTTIConst);
3838       llvm::Constant *StaticData[] = {
3839         EmitCheckSourceLocation(E->getLocStart()),
3840         EmitCheckTypeDescriptor(CalleeType)
3841       };
3842       EmitCheck(std::make_pair(CalleeRTTIMatch, SanitizerKind::Function),
3843                 "function_type_mismatch", StaticData, Callee);
3844 
3845       Builder.CreateBr(Cont);
3846       EmitBlock(Cont);
3847     }
3848   }
3849 
3850   // If we are checking indirect calls and this call is indirect, check that the
3851   // function pointer is a member of the bit set for the function type.
3852   if (SanOpts.has(SanitizerKind::CFIICall) &&
3853       (!TargetDecl || !isa<FunctionDecl>(TargetDecl))) {
3854     SanitizerScope SanScope(this);
3855 
3856     llvm::Metadata *MD = CGM.CreateMetadataIdentifierForType(QualType(FnType, 0));
3857     llvm::Value *BitSetName = llvm::MetadataAsValue::get(getLLVMContext(), MD);
3858 
3859     llvm::Value *CastedCallee = Builder.CreateBitCast(Callee, Int8PtrTy);
3860     llvm::Value *BitSetTest =
3861         Builder.CreateCall(CGM.getIntrinsic(llvm::Intrinsic::bitset_test),
3862                            {CastedCallee, BitSetName});
3863 
3864     auto TypeId = CGM.CreateCfiIdForTypeMetadata(MD);
3865     if (CGM.getCodeGenOpts().SanitizeCfiCrossDso && TypeId) {
3866       EmitCfiSlowPathCheck(BitSetTest, TypeId, CastedCallee);
3867     } else {
3868       llvm::Constant *StaticData[] = {
3869           EmitCheckSourceLocation(E->getLocStart()),
3870           EmitCheckTypeDescriptor(QualType(FnType, 0)),
3871       };
3872       EmitCheck(std::make_pair(BitSetTest, SanitizerKind::CFIICall),
3873                 "cfi_bad_icall", StaticData, CastedCallee);
3874     }
3875   }
3876 
3877   CallArgList Args;
3878   if (Chain)
3879     Args.add(RValue::get(Builder.CreateBitCast(Chain, CGM.VoidPtrTy)),
3880              CGM.getContext().VoidPtrTy);
3881   EmitCallArgs(Args, dyn_cast<FunctionProtoType>(FnType), E->arguments(),
3882                E->getDirectCallee(), /*ParamsToSkip*/ 0);
3883 
3884   const CGFunctionInfo &FnInfo = CGM.getTypes().arrangeFreeFunctionCall(
3885       Args, FnType, /*isChainCall=*/Chain);
3886 
3887   // C99 6.5.2.2p6:
3888   //   If the expression that denotes the called function has a type
3889   //   that does not include a prototype, [the default argument
3890   //   promotions are performed]. If the number of arguments does not
3891   //   equal the number of parameters, the behavior is undefined. If
3892   //   the function is defined with a type that includes a prototype,
3893   //   and either the prototype ends with an ellipsis (, ...) or the
3894   //   types of the arguments after promotion are not compatible with
3895   //   the types of the parameters, the behavior is undefined. If the
3896   //   function is defined with a type that does not include a
3897   //   prototype, and the types of the arguments after promotion are
3898   //   not compatible with those of the parameters after promotion,
3899   //   the behavior is undefined [except in some trivial cases].
3900   // That is, in the general case, we should assume that a call
3901   // through an unprototyped function type works like a *non-variadic*
3902   // call.  The way we make this work is to cast to the exact type
3903   // of the promoted arguments.
3904   //
3905   // Chain calls use this same code path to add the invisible chain parameter
3906   // to the function type.
3907   if (isa<FunctionNoProtoType>(FnType) || Chain) {
3908     llvm::Type *CalleeTy = getTypes().GetFunctionType(FnInfo);
3909     CalleeTy = CalleeTy->getPointerTo();
3910     Callee = Builder.CreateBitCast(Callee, CalleeTy, "callee.knr.cast");
3911   }
3912 
3913   return EmitCall(FnInfo, Callee, ReturnValue, Args,
3914                   CGCalleeInfo(NonCanonicalFTP, TargetDecl));
3915 }
3916 
3917 LValue CodeGenFunction::
3918 EmitPointerToDataMemberBinaryExpr(const BinaryOperator *E) {
3919   Address BaseAddr = Address::invalid();
3920   if (E->getOpcode() == BO_PtrMemI) {
3921     BaseAddr = EmitPointerWithAlignment(E->getLHS());
3922   } else {
3923     BaseAddr = EmitLValue(E->getLHS()).getAddress();
3924   }
3925 
3926   llvm::Value *OffsetV = EmitScalarExpr(E->getRHS());
3927 
3928   const MemberPointerType *MPT
3929     = E->getRHS()->getType()->getAs<MemberPointerType>();
3930 
3931   AlignmentSource AlignSource;
3932   Address MemberAddr =
3933     EmitCXXMemberDataPointerAddress(E, BaseAddr, OffsetV, MPT,
3934                                     &AlignSource);
3935 
3936   return MakeAddrLValue(MemberAddr, MPT->getPointeeType(), AlignSource);
3937 }
3938 
3939 /// Given the address of a temporary variable, produce an r-value of
3940 /// its type.
3941 RValue CodeGenFunction::convertTempToRValue(Address addr,
3942                                             QualType type,
3943                                             SourceLocation loc) {
3944   LValue lvalue = MakeAddrLValue(addr, type, AlignmentSource::Decl);
3945   switch (getEvaluationKind(type)) {
3946   case TEK_Complex:
3947     return RValue::getComplex(EmitLoadOfComplex(lvalue, loc));
3948   case TEK_Aggregate:
3949     return lvalue.asAggregateRValue();
3950   case TEK_Scalar:
3951     return RValue::get(EmitLoadOfScalar(lvalue, loc));
3952   }
3953   llvm_unreachable("bad evaluation kind");
3954 }
3955 
3956 void CodeGenFunction::SetFPAccuracy(llvm::Value *Val, float Accuracy) {
3957   assert(Val->getType()->isFPOrFPVectorTy());
3958   if (Accuracy == 0.0 || !isa<llvm::Instruction>(Val))
3959     return;
3960 
3961   llvm::MDBuilder MDHelper(getLLVMContext());
3962   llvm::MDNode *Node = MDHelper.createFPMath(Accuracy);
3963 
3964   cast<llvm::Instruction>(Val)->setMetadata(llvm::LLVMContext::MD_fpmath, Node);
3965 }
3966 
3967 namespace {
3968   struct LValueOrRValue {
3969     LValue LV;
3970     RValue RV;
3971   };
3972 }
3973 
3974 static LValueOrRValue emitPseudoObjectExpr(CodeGenFunction &CGF,
3975                                            const PseudoObjectExpr *E,
3976                                            bool forLValue,
3977                                            AggValueSlot slot) {
3978   SmallVector<CodeGenFunction::OpaqueValueMappingData, 4> opaques;
3979 
3980   // Find the result expression, if any.
3981   const Expr *resultExpr = E->getResultExpr();
3982   LValueOrRValue result;
3983 
3984   for (PseudoObjectExpr::const_semantics_iterator
3985          i = E->semantics_begin(), e = E->semantics_end(); i != e; ++i) {
3986     const Expr *semantic = *i;
3987 
3988     // If this semantic expression is an opaque value, bind it
3989     // to the result of its source expression.
3990     if (const auto *ov = dyn_cast<OpaqueValueExpr>(semantic)) {
3991 
3992       // If this is the result expression, we may need to evaluate
3993       // directly into the slot.
3994       typedef CodeGenFunction::OpaqueValueMappingData OVMA;
3995       OVMA opaqueData;
3996       if (ov == resultExpr && ov->isRValue() && !forLValue &&
3997           CodeGenFunction::hasAggregateEvaluationKind(ov->getType())) {
3998         CGF.EmitAggExpr(ov->getSourceExpr(), slot);
3999 
4000         LValue LV = CGF.MakeAddrLValue(slot.getAddress(), ov->getType(),
4001                                        AlignmentSource::Decl);
4002         opaqueData = OVMA::bind(CGF, ov, LV);
4003         result.RV = slot.asRValue();
4004 
4005       // Otherwise, emit as normal.
4006       } else {
4007         opaqueData = OVMA::bind(CGF, ov, ov->getSourceExpr());
4008 
4009         // If this is the result, also evaluate the result now.
4010         if (ov == resultExpr) {
4011           if (forLValue)
4012             result.LV = CGF.EmitLValue(ov);
4013           else
4014             result.RV = CGF.EmitAnyExpr(ov, slot);
4015         }
4016       }
4017 
4018       opaques.push_back(opaqueData);
4019 
4020     // Otherwise, if the expression is the result, evaluate it
4021     // and remember the result.
4022     } else if (semantic == resultExpr) {
4023       if (forLValue)
4024         result.LV = CGF.EmitLValue(semantic);
4025       else
4026         result.RV = CGF.EmitAnyExpr(semantic, slot);
4027 
4028     // Otherwise, evaluate the expression in an ignored context.
4029     } else {
4030       CGF.EmitIgnoredExpr(semantic);
4031     }
4032   }
4033 
4034   // Unbind all the opaques now.
4035   for (unsigned i = 0, e = opaques.size(); i != e; ++i)
4036     opaques[i].unbind(CGF);
4037 
4038   return result;
4039 }
4040 
4041 RValue CodeGenFunction::EmitPseudoObjectRValue(const PseudoObjectExpr *E,
4042                                                AggValueSlot slot) {
4043   return emitPseudoObjectExpr(*this, E, false, slot).RV;
4044 }
4045 
4046 LValue CodeGenFunction::EmitPseudoObjectLValue(const PseudoObjectExpr *E) {
4047   return emitPseudoObjectExpr(*this, E, true, AggValueSlot::ignored()).LV;
4048 }
4049