1 //===-- ShrinkWrap.cpp - Compute safe point for prolog/epilog insertion ---===//
2 //
3 //                     The LLVM Compiler Infrastructure
4 //
5 // This file is distributed under the University of Illinois Open Source
6 // License. See LICENSE.TXT for details.
7 //
8 //===----------------------------------------------------------------------===//
9 //
10 // This pass looks for safe point where the prologue and epilogue can be
11 // inserted.
12 // The safe point for the prologue (resp. epilogue) is called Save
13 // (resp. Restore).
14 // A point is safe for prologue (resp. epilogue) if and only if
15 // it 1) dominates (resp. post-dominates) all the frame related operations and
16 // between 2) two executions of the Save (resp. Restore) point there is an
17 // execution of the Restore (resp. Save) point.
18 //
19 // For instance, the following points are safe:
20 // for (int i = 0; i < 10; ++i) {
21 //   Save
22 //   ...
23 //   Restore
24 // }
25 // Indeed, the execution looks like Save -> Restore -> Save -> Restore ...
26 // And the following points are not:
27 // for (int i = 0; i < 10; ++i) {
28 //   Save
29 //   ...
30 // }
31 // for (int i = 0; i < 10; ++i) {
32 //   ...
33 //   Restore
34 // }
35 // Indeed, the execution looks like Save -> Save -> ... -> Restore -> Restore.
36 //
37 // This pass also ensures that the safe points are 3) cheaper than the regular
38 // entry and exits blocks.
39 //
40 // Property #1 is ensured via the use of MachineDominatorTree and
41 // MachinePostDominatorTree.
42 // Property #2 is ensured via property #1 and MachineLoopInfo, i.e., both
43 // points must be in the same loop.
44 // Property #3 is ensured via the MachineBlockFrequencyInfo.
45 //
46 // If this pass found points matching all these properties, then
47 // MachineFrameInfo is updated with this information.
48 //===----------------------------------------------------------------------===//
49 #include "llvm/ADT/BitVector.h"
50 #include "llvm/ADT/PostOrderIterator.h"
51 #include "llvm/ADT/SetVector.h"
52 #include "llvm/ADT/Statistic.h"
53 // To check for profitability.
54 #include "llvm/CodeGen/MachineBlockFrequencyInfo.h"
55 // For property #1 for Save.
56 #include "llvm/CodeGen/MachineDominators.h"
57 #include "llvm/CodeGen/MachineFunctionPass.h"
58 // To record the result of the analysis.
59 #include "llvm/CodeGen/MachineFrameInfo.h"
60 // For property #2.
61 #include "llvm/CodeGen/MachineLoopInfo.h"
62 // For property #1 for Restore.
63 #include "llvm/CodeGen/MachinePostDominators.h"
64 #include "llvm/CodeGen/Passes.h"
65 // To know about callee-saved.
66 #include "llvm/CodeGen/RegisterClassInfo.h"
67 #include "llvm/CodeGen/RegisterScavenging.h"
68 #include "llvm/MC/MCAsmInfo.h"
69 #include "llvm/Support/Debug.h"
70 // To query the target about frame lowering.
71 #include "llvm/Target/TargetFrameLowering.h"
72 // To know about frame setup operation.
73 #include "llvm/Target/TargetInstrInfo.h"
74 #include "llvm/Target/TargetMachine.h"
75 // To access TargetInstrInfo.
76 #include "llvm/Target/TargetSubtargetInfo.h"
77 
78 #define DEBUG_TYPE "shrink-wrap"
79 
80 using namespace llvm;
81 
82 STATISTIC(NumFunc, "Number of functions");
83 STATISTIC(NumCandidates, "Number of shrink-wrapping candidates");
84 STATISTIC(NumCandidatesDropped,
85           "Number of shrink-wrapping candidates dropped because of frequency");
86 
87 static cl::opt<cl::boolOrDefault>
88     EnableShrinkWrapOpt("enable-shrink-wrap", cl::Hidden,
89                         cl::desc("enable the shrink-wrapping pass"));
90 
91 namespace {
92 /// \brief Class to determine where the safe point to insert the
93 /// prologue and epilogue are.
94 /// Unlike the paper from Fred C. Chow, PLDI'88, that introduces the
95 /// shrink-wrapping term for prologue/epilogue placement, this pass
96 /// does not rely on expensive data-flow analysis. Instead we use the
97 /// dominance properties and loop information to decide which point
98 /// are safe for such insertion.
99 class ShrinkWrap : public MachineFunctionPass {
100   /// Hold callee-saved information.
101   RegisterClassInfo RCI;
102   MachineDominatorTree *MDT;
103   MachinePostDominatorTree *MPDT;
104   /// Current safe point found for the prologue.
105   /// The prologue will be inserted before the first instruction
106   /// in this basic block.
107   MachineBasicBlock *Save;
108   /// Current safe point found for the epilogue.
109   /// The epilogue will be inserted before the first terminator instruction
110   /// in this basic block.
111   MachineBasicBlock *Restore;
112   /// Hold the information of the basic block frequency.
113   /// Use to check the profitability of the new points.
114   MachineBlockFrequencyInfo *MBFI;
115   /// Hold the loop information. Used to determine if Save and Restore
116   /// are in the same loop.
117   MachineLoopInfo *MLI;
118   /// Frequency of the Entry block.
119   uint64_t EntryFreq;
120   /// Current opcode for frame setup.
121   unsigned FrameSetupOpcode;
122   /// Current opcode for frame destroy.
123   unsigned FrameDestroyOpcode;
124   /// Entry block.
125   const MachineBasicBlock *Entry;
126   typedef SmallSetVector<unsigned, 16> SetOfRegs;
127   /// Registers that need to be saved for the current function.
128   mutable SetOfRegs CurrentCSRs;
129   /// Current MachineFunction.
130   MachineFunction *MachineFunc;
131 
132   /// \brief Check if \p MI uses or defines a callee-saved register or
133   /// a frame index. If this is the case, this means \p MI must happen
134   /// after Save and before Restore.
135   bool useOrDefCSROrFI(const MachineInstr &MI, RegScavenger *RS) const;
136 
137   const SetOfRegs &getCurrentCSRs(RegScavenger *RS) const {
138     if (CurrentCSRs.empty()) {
139       BitVector SavedRegs;
140       const TargetFrameLowering *TFI =
141           MachineFunc->getSubtarget().getFrameLowering();
142 
143       TFI->determineCalleeSaves(*MachineFunc, SavedRegs, RS);
144 
145       for (int Reg = SavedRegs.find_first(); Reg != -1;
146            Reg = SavedRegs.find_next(Reg))
147         CurrentCSRs.insert((unsigned)Reg);
148     }
149     return CurrentCSRs;
150   }
151 
152   /// \brief Update the Save and Restore points such that \p MBB is in
153   /// the region that is dominated by Save and post-dominated by Restore
154   /// and Save and Restore still match the safe point definition.
155   /// Such point may not exist and Save and/or Restore may be null after
156   /// this call.
157   void updateSaveRestorePoints(MachineBasicBlock &MBB, RegScavenger *RS);
158 
159   /// \brief Initialize the pass for \p MF.
160   void init(MachineFunction &MF) {
161     RCI.runOnMachineFunction(MF);
162     MDT = &getAnalysis<MachineDominatorTree>();
163     MPDT = &getAnalysis<MachinePostDominatorTree>();
164     Save = nullptr;
165     Restore = nullptr;
166     MBFI = &getAnalysis<MachineBlockFrequencyInfo>();
167     MLI = &getAnalysis<MachineLoopInfo>();
168     EntryFreq = MBFI->getEntryFreq();
169     const TargetInstrInfo &TII = *MF.getSubtarget().getInstrInfo();
170     FrameSetupOpcode = TII.getCallFrameSetupOpcode();
171     FrameDestroyOpcode = TII.getCallFrameDestroyOpcode();
172     Entry = &MF.front();
173     CurrentCSRs.clear();
174     MachineFunc = &MF;
175 
176     ++NumFunc;
177   }
178 
179   /// Check whether or not Save and Restore points are still interesting for
180   /// shrink-wrapping.
181   bool ArePointsInteresting() const { return Save != Entry && Save && Restore; }
182 
183   /// \brief Check if shrink wrapping is enabled for this target and function.
184   static bool isShrinkWrapEnabled(const MachineFunction &MF);
185 
186 public:
187   static char ID;
188 
189   ShrinkWrap() : MachineFunctionPass(ID) {
190     initializeShrinkWrapPass(*PassRegistry::getPassRegistry());
191   }
192 
193   void getAnalysisUsage(AnalysisUsage &AU) const override {
194     AU.setPreservesAll();
195     AU.addRequired<MachineBlockFrequencyInfo>();
196     AU.addRequired<MachineDominatorTree>();
197     AU.addRequired<MachinePostDominatorTree>();
198     AU.addRequired<MachineLoopInfo>();
199     MachineFunctionPass::getAnalysisUsage(AU);
200   }
201 
202   StringRef getPassName() const override { return "Shrink Wrapping analysis"; }
203 
204   /// \brief Perform the shrink-wrapping analysis and update
205   /// the MachineFrameInfo attached to \p MF with the results.
206   bool runOnMachineFunction(MachineFunction &MF) override;
207 };
208 } // End anonymous namespace.
209 
210 char ShrinkWrap::ID = 0;
211 char &llvm::ShrinkWrapID = ShrinkWrap::ID;
212 
213 INITIALIZE_PASS_BEGIN(ShrinkWrap, "shrink-wrap", "Shrink Wrap Pass", false,
214                       false)
215 INITIALIZE_PASS_DEPENDENCY(MachineBlockFrequencyInfo)
216 INITIALIZE_PASS_DEPENDENCY(MachineDominatorTree)
217 INITIALIZE_PASS_DEPENDENCY(MachinePostDominatorTree)
218 INITIALIZE_PASS_DEPENDENCY(MachineLoopInfo)
219 INITIALIZE_PASS_END(ShrinkWrap, "shrink-wrap", "Shrink Wrap Pass", false, false)
220 
221 bool ShrinkWrap::useOrDefCSROrFI(const MachineInstr &MI,
222                                  RegScavenger *RS) const {
223   if (MI.getOpcode() == FrameSetupOpcode ||
224       MI.getOpcode() == FrameDestroyOpcode) {
225     DEBUG(dbgs() << "Frame instruction: " << MI << '\n');
226     return true;
227   }
228   for (const MachineOperand &MO : MI.operands()) {
229     bool UseOrDefCSR = false;
230     if (MO.isReg()) {
231       unsigned PhysReg = MO.getReg();
232       if (!PhysReg)
233         continue;
234       assert(TargetRegisterInfo::isPhysicalRegister(PhysReg) &&
235              "Unallocated register?!");
236       UseOrDefCSR = RCI.getLastCalleeSavedAlias(PhysReg);
237     } else if (MO.isRegMask()) {
238       // Check if this regmask clobbers any of the CSRs.
239       for (unsigned Reg : getCurrentCSRs(RS)) {
240         if (MO.clobbersPhysReg(Reg)) {
241           UseOrDefCSR = true;
242           break;
243         }
244       }
245     }
246     if (UseOrDefCSR || MO.isFI()) {
247       DEBUG(dbgs() << "Use or define CSR(" << UseOrDefCSR << ") or FI("
248                    << MO.isFI() << "): " << MI << '\n');
249       return true;
250     }
251   }
252   return false;
253 }
254 
255 /// \brief Helper function to find the immediate (post) dominator.
256 template <typename ListOfBBs, typename DominanceAnalysis>
257 static MachineBasicBlock *FindIDom(MachineBasicBlock &Block, ListOfBBs BBs,
258                                    DominanceAnalysis &Dom) {
259   MachineBasicBlock *IDom = &Block;
260   for (MachineBasicBlock *BB : BBs) {
261     IDom = Dom.findNearestCommonDominator(IDom, BB);
262     if (!IDom)
263       break;
264   }
265   if (IDom == &Block)
266     return nullptr;
267   return IDom;
268 }
269 
270 void ShrinkWrap::updateSaveRestorePoints(MachineBasicBlock &MBB,
271                                          RegScavenger *RS) {
272   // Get rid of the easy cases first.
273   if (!Save)
274     Save = &MBB;
275   else
276     Save = MDT->findNearestCommonDominator(Save, &MBB);
277 
278   if (!Save) {
279     DEBUG(dbgs() << "Found a block that is not reachable from Entry\n");
280     return;
281   }
282 
283   if (!Restore)
284     Restore = &MBB;
285   else if (MPDT->getNode(&MBB)) // If the block is not in the post dom tree, it
286                                 // means the block never returns. If that's the
287                                 // case, we don't want to call
288                                 // `findNearestCommonDominator`, which will
289                                 // return `Restore`.
290     Restore = MPDT->findNearestCommonDominator(Restore, &MBB);
291   else
292     Restore = nullptr; // Abort, we can't find a restore point in this case.
293 
294   // Make sure we would be able to insert the restore code before the
295   // terminator.
296   if (Restore == &MBB) {
297     for (const MachineInstr &Terminator : MBB.terminators()) {
298       if (!useOrDefCSROrFI(Terminator, RS))
299         continue;
300       // One of the terminator needs to happen before the restore point.
301       if (MBB.succ_empty()) {
302         Restore = nullptr; // Abort, we can't find a restore point in this case.
303         break;
304       }
305       // Look for a restore point that post-dominates all the successors.
306       // The immediate post-dominator is what we are looking for.
307       Restore = FindIDom<>(*Restore, Restore->successors(), *MPDT);
308       break;
309     }
310   }
311 
312   if (!Restore) {
313     DEBUG(dbgs() << "Restore point needs to be spanned on several blocks\n");
314     return;
315   }
316 
317   // Make sure Save and Restore are suitable for shrink-wrapping:
318   // 1. all path from Save needs to lead to Restore before exiting.
319   // 2. all path to Restore needs to go through Save from Entry.
320   // We achieve that by making sure that:
321   // A. Save dominates Restore.
322   // B. Restore post-dominates Save.
323   // C. Save and Restore are in the same loop.
324   bool SaveDominatesRestore = false;
325   bool RestorePostDominatesSave = false;
326   while (Save && Restore &&
327          (!(SaveDominatesRestore = MDT->dominates(Save, Restore)) ||
328           !(RestorePostDominatesSave = MPDT->dominates(Restore, Save)) ||
329           // Post-dominance is not enough in loops to ensure that all uses/defs
330           // are after the prologue and before the epilogue at runtime.
331           // E.g.,
332           // while(1) {
333           //  Save
334           //  Restore
335           //   if (...)
336           //     break;
337           //  use/def CSRs
338           // }
339           // All the uses/defs of CSRs are dominated by Save and post-dominated
340           // by Restore. However, the CSRs uses are still reachable after
341           // Restore and before Save are executed.
342           //
343           // For now, just push the restore/save points outside of loops.
344           // FIXME: Refine the criteria to still find interesting cases
345           // for loops.
346           MLI->getLoopFor(Save) || MLI->getLoopFor(Restore))) {
347     // Fix (A).
348     if (!SaveDominatesRestore) {
349       Save = MDT->findNearestCommonDominator(Save, Restore);
350       continue;
351     }
352     // Fix (B).
353     if (!RestorePostDominatesSave)
354       Restore = MPDT->findNearestCommonDominator(Restore, Save);
355 
356     // Fix (C).
357     if (Save && Restore &&
358         (MLI->getLoopFor(Save) || MLI->getLoopFor(Restore))) {
359       if (MLI->getLoopDepth(Save) > MLI->getLoopDepth(Restore)) {
360         // Push Save outside of this loop if immediate dominator is different
361         // from save block. If immediate dominator is not different, bail out.
362         Save = FindIDom<>(*Save, Save->predecessors(), *MDT);
363         if (!Save)
364           break;
365       } else {
366         // If the loop does not exit, there is no point in looking
367         // for a post-dominator outside the loop.
368         SmallVector<MachineBasicBlock*, 4> ExitBlocks;
369         MLI->getLoopFor(Restore)->getExitingBlocks(ExitBlocks);
370         // Push Restore outside of this loop.
371         // Look for the immediate post-dominator of the loop exits.
372         MachineBasicBlock *IPdom = Restore;
373         for (MachineBasicBlock *LoopExitBB: ExitBlocks) {
374           IPdom = FindIDom<>(*IPdom, LoopExitBB->successors(), *MPDT);
375           if (!IPdom)
376             break;
377         }
378         // If the immediate post-dominator is not in a less nested loop,
379         // then we are stuck in a program with an infinite loop.
380         // In that case, we will not find a safe point, hence, bail out.
381         if (IPdom && MLI->getLoopDepth(IPdom) < MLI->getLoopDepth(Restore))
382           Restore = IPdom;
383         else {
384           Restore = nullptr;
385           break;
386         }
387       }
388     }
389   }
390 }
391 
392 /// Check whether the edge (\p SrcBB, \p DestBB) is a backedge according to MLI.
393 /// I.e., check if it exists a loop that contains SrcBB and where DestBB is the
394 /// loop header.
395 static bool isProperBackedge(const MachineLoopInfo &MLI,
396                              const MachineBasicBlock *SrcBB,
397                              const MachineBasicBlock *DestBB) {
398   for (const MachineLoop *Loop = MLI.getLoopFor(SrcBB); Loop;
399        Loop = Loop->getParentLoop()) {
400     if (Loop->getHeader() == DestBB)
401       return true;
402   }
403   return false;
404 }
405 
406 /// Check if the CFG of \p MF is irreducible.
407 static bool isIrreducibleCFG(const MachineFunction &MF,
408                              const MachineLoopInfo &MLI) {
409   const MachineBasicBlock *Entry = &*MF.begin();
410   ReversePostOrderTraversal<const MachineBasicBlock *> RPOT(Entry);
411   BitVector VisitedBB(MF.getNumBlockIDs());
412   for (const MachineBasicBlock *MBB : RPOT) {
413     VisitedBB.set(MBB->getNumber());
414     for (const MachineBasicBlock *SuccBB : MBB->successors()) {
415       if (!VisitedBB.test(SuccBB->getNumber()))
416         continue;
417       // We already visited SuccBB, thus MBB->SuccBB must be a backedge.
418       // Check that the head matches what we have in the loop information.
419       // Otherwise, we have an irreducible graph.
420       if (!isProperBackedge(MLI, MBB, SuccBB))
421         return true;
422     }
423   }
424   return false;
425 }
426 
427 bool ShrinkWrap::runOnMachineFunction(MachineFunction &MF) {
428   if (skipFunction(*MF.getFunction()) || MF.empty() || !isShrinkWrapEnabled(MF))
429     return false;
430 
431   DEBUG(dbgs() << "**** Analysing " << MF.getName() << '\n');
432 
433   init(MF);
434 
435   if (isIrreducibleCFG(MF, *MLI)) {
436     // If MF is irreducible, a block may be in a loop without
437     // MachineLoopInfo reporting it. I.e., we may use the
438     // post-dominance property in loops, which lead to incorrect
439     // results. Moreover, we may miss that the prologue and
440     // epilogue are not in the same loop, leading to unbalanced
441     // construction/deconstruction of the stack frame.
442     DEBUG(dbgs() << "Irreducible CFGs are not supported yet\n");
443     return false;
444   }
445 
446   const TargetRegisterInfo *TRI = MF.getSubtarget().getRegisterInfo();
447   std::unique_ptr<RegScavenger> RS(
448       TRI->requiresRegisterScavenging(MF) ? new RegScavenger() : nullptr);
449 
450   for (MachineBasicBlock &MBB : MF) {
451     DEBUG(dbgs() << "Look into: " << MBB.getNumber() << ' ' << MBB.getName()
452                  << '\n');
453 
454     if (MBB.isEHFuncletEntry()) {
455       DEBUG(dbgs() << "EH Funclets are not supported yet.\n");
456       return false;
457     }
458 
459     for (const MachineInstr &MI : MBB) {
460       if (!useOrDefCSROrFI(MI, RS.get()))
461         continue;
462       // Save (resp. restore) point must dominate (resp. post dominate)
463       // MI. Look for the proper basic block for those.
464       updateSaveRestorePoints(MBB, RS.get());
465       // If we are at a point where we cannot improve the placement of
466       // save/restore instructions, just give up.
467       if (!ArePointsInteresting()) {
468         DEBUG(dbgs() << "No Shrink wrap candidate found\n");
469         return false;
470       }
471       // No need to look for other instructions, this basic block
472       // will already be part of the handled region.
473       break;
474     }
475   }
476   if (!ArePointsInteresting()) {
477     // If the points are not interesting at this point, then they must be null
478     // because it means we did not encounter any frame/CSR related code.
479     // Otherwise, we would have returned from the previous loop.
480     assert(!Save && !Restore && "We miss a shrink-wrap opportunity?!");
481     DEBUG(dbgs() << "Nothing to shrink-wrap\n");
482     return false;
483   }
484 
485   DEBUG(dbgs() << "\n ** Results **\nFrequency of the Entry: " << EntryFreq
486                << '\n');
487 
488   const TargetFrameLowering *TFI = MF.getSubtarget().getFrameLowering();
489   do {
490     DEBUG(dbgs() << "Shrink wrap candidates (#, Name, Freq):\nSave: "
491                  << Save->getNumber() << ' ' << Save->getName() << ' '
492                  << MBFI->getBlockFreq(Save).getFrequency() << "\nRestore: "
493                  << Restore->getNumber() << ' ' << Restore->getName() << ' '
494                  << MBFI->getBlockFreq(Restore).getFrequency() << '\n');
495 
496     bool IsSaveCheap, TargetCanUseSaveAsPrologue = false;
497     if (((IsSaveCheap = EntryFreq >= MBFI->getBlockFreq(Save).getFrequency()) &&
498          EntryFreq >= MBFI->getBlockFreq(Restore).getFrequency()) &&
499         ((TargetCanUseSaveAsPrologue = TFI->canUseAsPrologue(*Save)) &&
500          TFI->canUseAsEpilogue(*Restore)))
501       break;
502     DEBUG(dbgs() << "New points are too expensive or invalid for the target\n");
503     MachineBasicBlock *NewBB;
504     if (!IsSaveCheap || !TargetCanUseSaveAsPrologue) {
505       Save = FindIDom<>(*Save, Save->predecessors(), *MDT);
506       if (!Save)
507         break;
508       NewBB = Save;
509     } else {
510       // Restore is expensive.
511       Restore = FindIDom<>(*Restore, Restore->successors(), *MPDT);
512       if (!Restore)
513         break;
514       NewBB = Restore;
515     }
516     updateSaveRestorePoints(*NewBB, RS.get());
517   } while (Save && Restore);
518 
519   if (!ArePointsInteresting()) {
520     ++NumCandidatesDropped;
521     return false;
522   }
523 
524   DEBUG(dbgs() << "Final shrink wrap candidates:\nSave: " << Save->getNumber()
525                << ' ' << Save->getName() << "\nRestore: "
526                << Restore->getNumber() << ' ' << Restore->getName() << '\n');
527 
528   MachineFrameInfo &MFI = MF.getFrameInfo();
529   MFI.setSavePoint(Save);
530   MFI.setRestorePoint(Restore);
531   ++NumCandidates;
532   return false;
533 }
534 
535 bool ShrinkWrap::isShrinkWrapEnabled(const MachineFunction &MF) {
536   const TargetFrameLowering *TFI = MF.getSubtarget().getFrameLowering();
537 
538   switch (EnableShrinkWrapOpt) {
539   case cl::BOU_UNSET:
540     return TFI->enableShrinkWrapping(MF) &&
541       // Windows with CFI has some limitations that make it impossible
542       // to use shrink-wrapping.
543       !MF.getTarget().getMCAsmInfo()->usesWindowsCFI() &&
544       // Sanitizers look at the value of the stack at the location
545       // of the crash. Since a crash can happen anywhere, the
546       // frame must be lowered before anything else happen for the
547       // sanitizers to be able to get a correct stack frame.
548       !(MF.getFunction()->hasFnAttribute(Attribute::SanitizeAddress) ||
549         MF.getFunction()->hasFnAttribute(Attribute::SanitizeThread) ||
550         MF.getFunction()->hasFnAttribute(Attribute::SanitizeMemory));
551   // If EnableShrinkWrap is set, it takes precedence on whatever the
552   // target sets. The rational is that we assume we want to test
553   // something related to shrink-wrapping.
554   case cl::BOU_TRUE:
555     return true;
556   case cl::BOU_FALSE:
557     return false;
558   }
559   llvm_unreachable("Invalid shrink-wrapping state");
560 }
561