1 //===-- X86FrameLowering.cpp - X86 Frame Information ----------------------===//
2 //
3 //                     The LLVM Compiler Infrastructure
4 //
5 // This file is distributed under the University of Illinois Open Source
6 // License. See LICENSE.TXT for details.
7 //
8 //===----------------------------------------------------------------------===//
9 //
10 // This file contains the X86 implementation of TargetFrameLowering class.
11 //
12 //===----------------------------------------------------------------------===//
13 
14 #include "X86FrameLowering.h"
15 #include "X86InstrBuilder.h"
16 #include "X86InstrInfo.h"
17 #include "X86MachineFunctionInfo.h"
18 #include "X86Subtarget.h"
19 #include "X86TargetMachine.h"
20 #include "llvm/ADT/SmallSet.h"
21 #include "llvm/Analysis/EHPersonalities.h"
22 #include "llvm/CodeGen/MachineFrameInfo.h"
23 #include "llvm/CodeGen/MachineFunction.h"
24 #include "llvm/CodeGen/MachineInstrBuilder.h"
25 #include "llvm/CodeGen/MachineModuleInfo.h"
26 #include "llvm/CodeGen/MachineRegisterInfo.h"
27 #include "llvm/CodeGen/WinEHFuncInfo.h"
28 #include "llvm/IR/DataLayout.h"
29 #include "llvm/IR/Function.h"
30 #include "llvm/MC/MCAsmInfo.h"
31 #include "llvm/MC/MCSymbol.h"
32 #include "llvm/Target/TargetOptions.h"
33 #include "llvm/Support/Debug.h"
34 #include <cstdlib>
35 
36 using namespace llvm;
37 
38 X86FrameLowering::X86FrameLowering(const X86Subtarget &STI,
39                                    unsigned StackAlignOverride)
40     : TargetFrameLowering(StackGrowsDown, StackAlignOverride,
41                           STI.is64Bit() ? -8 : -4),
42       STI(STI), TII(*STI.getInstrInfo()), TRI(STI.getRegisterInfo()) {
43   // Cache a bunch of frame-related predicates for this subtarget.
44   SlotSize = TRI->getSlotSize();
45   Is64Bit = STI.is64Bit();
46   IsLP64 = STI.isTarget64BitLP64();
47   // standard x86_64 and NaCl use 64-bit frame/stack pointers, x32 - 32-bit.
48   Uses64BitFramePtr = STI.isTarget64BitLP64() || STI.isTargetNaCl64();
49   StackPtr = TRI->getStackRegister();
50 }
51 
52 bool X86FrameLowering::hasReservedCallFrame(const MachineFunction &MF) const {
53   return !MF.getFrameInfo().hasVarSizedObjects() &&
54          !MF.getInfo<X86MachineFunctionInfo>()->getHasPushSequences();
55 }
56 
57 /// canSimplifyCallFramePseudos - If there is a reserved call frame, the
58 /// call frame pseudos can be simplified.  Having a FP, as in the default
59 /// implementation, is not sufficient here since we can't always use it.
60 /// Use a more nuanced condition.
61 bool
62 X86FrameLowering::canSimplifyCallFramePseudos(const MachineFunction &MF) const {
63   return hasReservedCallFrame(MF) ||
64          (hasFP(MF) && !TRI->needsStackRealignment(MF)) ||
65          TRI->hasBasePointer(MF);
66 }
67 
68 // needsFrameIndexResolution - Do we need to perform FI resolution for
69 // this function. Normally, this is required only when the function
70 // has any stack objects. However, FI resolution actually has another job,
71 // not apparent from the title - it resolves callframesetup/destroy
72 // that were not simplified earlier.
73 // So, this is required for x86 functions that have push sequences even
74 // when there are no stack objects.
75 bool
76 X86FrameLowering::needsFrameIndexResolution(const MachineFunction &MF) const {
77   return MF.getFrameInfo().hasStackObjects() ||
78          MF.getInfo<X86MachineFunctionInfo>()->getHasPushSequences();
79 }
80 
81 /// hasFP - Return true if the specified function should have a dedicated frame
82 /// pointer register.  This is true if the function has variable sized allocas
83 /// or if frame pointer elimination is disabled.
84 bool X86FrameLowering::hasFP(const MachineFunction &MF) const {
85   const MachineFrameInfo &MFI = MF.getFrameInfo();
86   return (MF.getTarget().Options.DisableFramePointerElim(MF) ||
87           TRI->needsStackRealignment(MF) ||
88           MFI.hasVarSizedObjects() ||
89           MFI.isFrameAddressTaken() || MFI.hasOpaqueSPAdjustment() ||
90           MF.getInfo<X86MachineFunctionInfo>()->getForceFramePointer() ||
91           MF.callsUnwindInit() || MF.hasEHFunclets() || MF.callsEHReturn() ||
92           MFI.hasStackMap() || MFI.hasPatchPoint() ||
93           MFI.hasCopyImplyingStackAdjustment());
94 }
95 
96 static unsigned getSUBriOpcode(unsigned IsLP64, int64_t Imm) {
97   if (IsLP64) {
98     if (isInt<8>(Imm))
99       return X86::SUB64ri8;
100     return X86::SUB64ri32;
101   } else {
102     if (isInt<8>(Imm))
103       return X86::SUB32ri8;
104     return X86::SUB32ri;
105   }
106 }
107 
108 static unsigned getADDriOpcode(unsigned IsLP64, int64_t Imm) {
109   if (IsLP64) {
110     if (isInt<8>(Imm))
111       return X86::ADD64ri8;
112     return X86::ADD64ri32;
113   } else {
114     if (isInt<8>(Imm))
115       return X86::ADD32ri8;
116     return X86::ADD32ri;
117   }
118 }
119 
120 static unsigned getSUBrrOpcode(unsigned isLP64) {
121   return isLP64 ? X86::SUB64rr : X86::SUB32rr;
122 }
123 
124 static unsigned getADDrrOpcode(unsigned isLP64) {
125   return isLP64 ? X86::ADD64rr : X86::ADD32rr;
126 }
127 
128 static unsigned getANDriOpcode(bool IsLP64, int64_t Imm) {
129   if (IsLP64) {
130     if (isInt<8>(Imm))
131       return X86::AND64ri8;
132     return X86::AND64ri32;
133   }
134   if (isInt<8>(Imm))
135     return X86::AND32ri8;
136   return X86::AND32ri;
137 }
138 
139 static unsigned getLEArOpcode(unsigned IsLP64) {
140   return IsLP64 ? X86::LEA64r : X86::LEA32r;
141 }
142 
143 /// findDeadCallerSavedReg - Return a caller-saved register that isn't live
144 /// when it reaches the "return" instruction. We can then pop a stack object
145 /// to this register without worry about clobbering it.
146 static unsigned findDeadCallerSavedReg(MachineBasicBlock &MBB,
147                                        MachineBasicBlock::iterator &MBBI,
148                                        const X86RegisterInfo *TRI,
149                                        bool Is64Bit) {
150   const MachineFunction *MF = MBB.getParent();
151   const Function *F = MF->getFunction();
152   if (!F || MF->callsEHReturn())
153     return 0;
154 
155   const TargetRegisterClass &AvailableRegs = *TRI->getGPRsForTailCall(*MF);
156 
157   if (MBBI == MBB.end())
158     return 0;
159 
160   switch (MBBI->getOpcode()) {
161   default: return 0;
162   case TargetOpcode::PATCHABLE_RET:
163   case X86::RET:
164   case X86::RETL:
165   case X86::RETQ:
166   case X86::RETIL:
167   case X86::RETIQ:
168   case X86::TCRETURNdi:
169   case X86::TCRETURNri:
170   case X86::TCRETURNmi:
171   case X86::TCRETURNdi64:
172   case X86::TCRETURNri64:
173   case X86::TCRETURNmi64:
174   case X86::EH_RETURN:
175   case X86::EH_RETURN64: {
176     SmallSet<uint16_t, 8> Uses;
177     for (unsigned i = 0, e = MBBI->getNumOperands(); i != e; ++i) {
178       MachineOperand &MO = MBBI->getOperand(i);
179       if (!MO.isReg() || MO.isDef())
180         continue;
181       unsigned Reg = MO.getReg();
182       if (!Reg)
183         continue;
184       for (MCRegAliasIterator AI(Reg, TRI, true); AI.isValid(); ++AI)
185         Uses.insert(*AI);
186     }
187 
188     for (auto CS : AvailableRegs)
189       if (!Uses.count(CS) && CS != X86::RIP)
190         return CS;
191   }
192   }
193 
194   return 0;
195 }
196 
197 static bool isEAXLiveIn(MachineBasicBlock &MBB) {
198   for (MachineBasicBlock::RegisterMaskPair RegMask : MBB.liveins()) {
199     unsigned Reg = RegMask.PhysReg;
200 
201     if (Reg == X86::RAX || Reg == X86::EAX || Reg == X86::AX ||
202         Reg == X86::AH || Reg == X86::AL)
203       return true;
204   }
205 
206   return false;
207 }
208 
209 /// Check if the flags need to be preserved before the terminators.
210 /// This would be the case, if the eflags is live-in of the region
211 /// composed by the terminators or live-out of that region, without
212 /// being defined by a terminator.
213 static bool
214 flagsNeedToBePreservedBeforeTheTerminators(const MachineBasicBlock &MBB) {
215   for (const MachineInstr &MI : MBB.terminators()) {
216     bool BreakNext = false;
217     for (const MachineOperand &MO : MI.operands()) {
218       if (!MO.isReg())
219         continue;
220       unsigned Reg = MO.getReg();
221       if (Reg != X86::EFLAGS)
222         continue;
223 
224       // This terminator needs an eflags that is not defined
225       // by a previous another terminator:
226       // EFLAGS is live-in of the region composed by the terminators.
227       if (!MO.isDef())
228         return true;
229       // This terminator defines the eflags, i.e., we don't need to preserve it.
230       // However, we still need to check this specific terminator does not
231       // read a live-in value.
232       BreakNext = true;
233     }
234     // We found a definition of the eflags, no need to preserve them.
235     if (BreakNext)
236       return false;
237   }
238 
239   // None of the terminators use or define the eflags.
240   // Check if they are live-out, that would imply we need to preserve them.
241   for (const MachineBasicBlock *Succ : MBB.successors())
242     if (Succ->isLiveIn(X86::EFLAGS))
243       return true;
244 
245   return false;
246 }
247 
248 /// emitSPUpdate - Emit a series of instructions to increment / decrement the
249 /// stack pointer by a constant value.
250 void X86FrameLowering::emitSPUpdate(MachineBasicBlock &MBB,
251                                     MachineBasicBlock::iterator &MBBI,
252                                     int64_t NumBytes, bool InEpilogue) const {
253   bool isSub = NumBytes < 0;
254   uint64_t Offset = isSub ? -NumBytes : NumBytes;
255   MachineInstr::MIFlag Flag =
256       isSub ? MachineInstr::FrameSetup : MachineInstr::FrameDestroy;
257 
258   uint64_t Chunk = (1LL << 31) - 1;
259   DebugLoc DL = MBB.findDebugLoc(MBBI);
260 
261   if (Offset > Chunk) {
262     // Rather than emit a long series of instructions for large offsets,
263     // load the offset into a register and do one sub/add
264     unsigned Reg = 0;
265     unsigned Rax = (unsigned)(Is64Bit ? X86::RAX : X86::EAX);
266 
267     if (isSub && !isEAXLiveIn(MBB))
268       Reg = Rax;
269     else
270       Reg = findDeadCallerSavedReg(MBB, MBBI, TRI, Is64Bit);
271 
272     unsigned MovRIOpc = Is64Bit ? X86::MOV64ri : X86::MOV32ri;
273     unsigned AddSubRROpc =
274         isSub ? getSUBrrOpcode(Is64Bit) : getADDrrOpcode(Is64Bit);
275     if (Reg) {
276       BuildMI(MBB, MBBI, DL, TII.get(MovRIOpc), Reg)
277           .addImm(Offset)
278           .setMIFlag(Flag);
279       MachineInstr *MI = BuildMI(MBB, MBBI, DL, TII.get(AddSubRROpc), StackPtr)
280                              .addReg(StackPtr)
281                              .addReg(Reg);
282       MI->getOperand(3).setIsDead(); // The EFLAGS implicit def is dead.
283       return;
284     } else if (Offset > 8 * Chunk) {
285       // If we would need more than 8 add or sub instructions (a >16GB stack
286       // frame), it's worth spilling RAX to materialize this immediate.
287       //   pushq %rax
288       //   movabsq +-$Offset+-SlotSize, %rax
289       //   addq %rsp, %rax
290       //   xchg %rax, (%rsp)
291       //   movq (%rsp), %rsp
292       assert(Is64Bit && "can't have 32-bit 16GB stack frame");
293       BuildMI(MBB, MBBI, DL, TII.get(X86::PUSH64r))
294           .addReg(Rax, RegState::Kill)
295           .setMIFlag(Flag);
296       // Subtract is not commutative, so negate the offset and always use add.
297       // Subtract 8 less and add 8 more to account for the PUSH we just did.
298       if (isSub)
299         Offset = -(Offset - SlotSize);
300       else
301         Offset = Offset + SlotSize;
302       BuildMI(MBB, MBBI, DL, TII.get(MovRIOpc), Rax)
303           .addImm(Offset)
304           .setMIFlag(Flag);
305       MachineInstr *MI = BuildMI(MBB, MBBI, DL, TII.get(X86::ADD64rr), Rax)
306                              .addReg(Rax)
307                              .addReg(StackPtr);
308       MI->getOperand(3).setIsDead(); // The EFLAGS implicit def is dead.
309       // Exchange the new SP in RAX with the top of the stack.
310       addRegOffset(
311           BuildMI(MBB, MBBI, DL, TII.get(X86::XCHG64rm), Rax).addReg(Rax),
312           StackPtr, false, 0);
313       // Load new SP from the top of the stack into RSP.
314       addRegOffset(BuildMI(MBB, MBBI, DL, TII.get(X86::MOV64rm), StackPtr),
315                    StackPtr, false, 0);
316       return;
317     }
318   }
319 
320   while (Offset) {
321     uint64_t ThisVal = std::min(Offset, Chunk);
322     if (ThisVal == SlotSize) {
323       // Use push / pop for slot sized adjustments as a size optimization. We
324       // need to find a dead register when using pop.
325       unsigned Reg = isSub
326         ? (unsigned)(Is64Bit ? X86::RAX : X86::EAX)
327         : findDeadCallerSavedReg(MBB, MBBI, TRI, Is64Bit);
328       if (Reg) {
329         unsigned Opc = isSub
330           ? (Is64Bit ? X86::PUSH64r : X86::PUSH32r)
331           : (Is64Bit ? X86::POP64r  : X86::POP32r);
332         BuildMI(MBB, MBBI, DL, TII.get(Opc))
333             .addReg(Reg, getDefRegState(!isSub) | getUndefRegState(isSub))
334             .setMIFlag(Flag);
335         Offset -= ThisVal;
336         continue;
337       }
338     }
339 
340     BuildStackAdjustment(MBB, MBBI, DL, isSub ? -ThisVal : ThisVal, InEpilogue)
341         .setMIFlag(Flag);
342 
343     Offset -= ThisVal;
344   }
345 }
346 
347 MachineInstrBuilder X86FrameLowering::BuildStackAdjustment(
348     MachineBasicBlock &MBB, MachineBasicBlock::iterator MBBI,
349     const DebugLoc &DL, int64_t Offset, bool InEpilogue) const {
350   assert(Offset != 0 && "zero offset stack adjustment requested");
351 
352   // On Atom, using LEA to adjust SP is preferred, but using it in the epilogue
353   // is tricky.
354   bool UseLEA;
355   if (!InEpilogue) {
356     // Check if inserting the prologue at the beginning
357     // of MBB would require to use LEA operations.
358     // We need to use LEA operations if EFLAGS is live in, because
359     // it means an instruction will read it before it gets defined.
360     UseLEA = STI.useLeaForSP() || MBB.isLiveIn(X86::EFLAGS);
361   } else {
362     // If we can use LEA for SP but we shouldn't, check that none
363     // of the terminators uses the eflags. Otherwise we will insert
364     // a ADD that will redefine the eflags and break the condition.
365     // Alternatively, we could move the ADD, but this may not be possible
366     // and is an optimization anyway.
367     UseLEA = canUseLEAForSPInEpilogue(*MBB.getParent());
368     if (UseLEA && !STI.useLeaForSP())
369       UseLEA = flagsNeedToBePreservedBeforeTheTerminators(MBB);
370     // If that assert breaks, that means we do not do the right thing
371     // in canUseAsEpilogue.
372     assert((UseLEA || !flagsNeedToBePreservedBeforeTheTerminators(MBB)) &&
373            "We shouldn't have allowed this insertion point");
374   }
375 
376   MachineInstrBuilder MI;
377   if (UseLEA) {
378     MI = addRegOffset(BuildMI(MBB, MBBI, DL,
379                               TII.get(getLEArOpcode(Uses64BitFramePtr)),
380                               StackPtr),
381                       StackPtr, false, Offset);
382   } else {
383     bool IsSub = Offset < 0;
384     uint64_t AbsOffset = IsSub ? -Offset : Offset;
385     unsigned Opc = IsSub ? getSUBriOpcode(Uses64BitFramePtr, AbsOffset)
386                          : getADDriOpcode(Uses64BitFramePtr, AbsOffset);
387     MI = BuildMI(MBB, MBBI, DL, TII.get(Opc), StackPtr)
388              .addReg(StackPtr)
389              .addImm(AbsOffset);
390     MI->getOperand(3).setIsDead(); // The EFLAGS implicit def is dead.
391   }
392   return MI;
393 }
394 
395 int X86FrameLowering::mergeSPUpdates(MachineBasicBlock &MBB,
396                                      MachineBasicBlock::iterator &MBBI,
397                                      bool doMergeWithPrevious) const {
398   if ((doMergeWithPrevious && MBBI == MBB.begin()) ||
399       (!doMergeWithPrevious && MBBI == MBB.end()))
400     return 0;
401 
402   MachineBasicBlock::iterator PI = doMergeWithPrevious ? std::prev(MBBI) : MBBI;
403   MachineBasicBlock::iterator NI = doMergeWithPrevious ? nullptr
404                                                        : std::next(MBBI);
405   PI = skipDebugInstructionsBackward(PI, MBB.begin());
406   if (NI != nullptr)
407     NI = skipDebugInstructionsForward(NI, MBB.end());
408 
409   unsigned Opc = PI->getOpcode();
410   int Offset = 0;
411 
412   if (!doMergeWithPrevious && NI != MBB.end() &&
413       NI->getOpcode() == TargetOpcode::CFI_INSTRUCTION) {
414     // Don't merge with the next instruction if it has CFI.
415     return Offset;
416   }
417 
418   if ((Opc == X86::ADD64ri32 || Opc == X86::ADD64ri8 ||
419        Opc == X86::ADD32ri || Opc == X86::ADD32ri8) &&
420       PI->getOperand(0).getReg() == StackPtr){
421     assert(PI->getOperand(1).getReg() == StackPtr);
422     Offset += PI->getOperand(2).getImm();
423     MBB.erase(PI);
424     if (!doMergeWithPrevious) MBBI = NI;
425   } else if ((Opc == X86::LEA32r || Opc == X86::LEA64_32r) &&
426              PI->getOperand(0).getReg() == StackPtr &&
427              PI->getOperand(1).getReg() == StackPtr &&
428              PI->getOperand(2).getImm() == 1 &&
429              PI->getOperand(3).getReg() == X86::NoRegister &&
430              PI->getOperand(5).getReg() == X86::NoRegister) {
431     // For LEAs we have: def = lea SP, FI, noreg, Offset, noreg.
432     Offset += PI->getOperand(4).getImm();
433     MBB.erase(PI);
434     if (!doMergeWithPrevious) MBBI = NI;
435   } else if ((Opc == X86::SUB64ri32 || Opc == X86::SUB64ri8 ||
436               Opc == X86::SUB32ri || Opc == X86::SUB32ri8) &&
437              PI->getOperand(0).getReg() == StackPtr) {
438     assert(PI->getOperand(1).getReg() == StackPtr);
439     Offset -= PI->getOperand(2).getImm();
440     MBB.erase(PI);
441     if (!doMergeWithPrevious) MBBI = NI;
442   }
443 
444   return Offset;
445 }
446 
447 void X86FrameLowering::BuildCFI(MachineBasicBlock &MBB,
448                                 MachineBasicBlock::iterator MBBI,
449                                 const DebugLoc &DL,
450                                 const MCCFIInstruction &CFIInst) const {
451   MachineFunction &MF = *MBB.getParent();
452   unsigned CFIIndex = MF.addFrameInst(CFIInst);
453   BuildMI(MBB, MBBI, DL, TII.get(TargetOpcode::CFI_INSTRUCTION))
454       .addCFIIndex(CFIIndex);
455 }
456 
457 void X86FrameLowering::emitCalleeSavedFrameMoves(
458     MachineBasicBlock &MBB, MachineBasicBlock::iterator MBBI,
459     const DebugLoc &DL) const {
460   MachineFunction &MF = *MBB.getParent();
461   MachineFrameInfo &MFI = MF.getFrameInfo();
462   MachineModuleInfo &MMI = MF.getMMI();
463   const MCRegisterInfo *MRI = MMI.getContext().getRegisterInfo();
464 
465   // Add callee saved registers to move list.
466   const std::vector<CalleeSavedInfo> &CSI = MFI.getCalleeSavedInfo();
467   if (CSI.empty()) return;
468 
469   // Calculate offsets.
470   for (std::vector<CalleeSavedInfo>::const_iterator
471          I = CSI.begin(), E = CSI.end(); I != E; ++I) {
472     int64_t Offset = MFI.getObjectOffset(I->getFrameIdx());
473     unsigned Reg = I->getReg();
474 
475     unsigned DwarfReg = MRI->getDwarfRegNum(Reg, true);
476     BuildCFI(MBB, MBBI, DL,
477              MCCFIInstruction::createOffset(nullptr, DwarfReg, Offset));
478   }
479 }
480 
481 void X86FrameLowering::emitStackProbe(MachineFunction &MF,
482                                       MachineBasicBlock &MBB,
483                                       MachineBasicBlock::iterator MBBI,
484                                       const DebugLoc &DL, bool InProlog) const {
485   const X86Subtarget &STI = MF.getSubtarget<X86Subtarget>();
486   if (STI.isTargetWindowsCoreCLR()) {
487     if (InProlog) {
488       emitStackProbeInlineStub(MF, MBB, MBBI, DL, true);
489     } else {
490       emitStackProbeInline(MF, MBB, MBBI, DL, false);
491     }
492   } else {
493     emitStackProbeCall(MF, MBB, MBBI, DL, InProlog);
494   }
495 }
496 
497 void X86FrameLowering::inlineStackProbe(MachineFunction &MF,
498                                         MachineBasicBlock &PrologMBB) const {
499   const StringRef ChkStkStubSymbol = "__chkstk_stub";
500   MachineInstr *ChkStkStub = nullptr;
501 
502   for (MachineInstr &MI : PrologMBB) {
503     if (MI.isCall() && MI.getOperand(0).isSymbol() &&
504         ChkStkStubSymbol == MI.getOperand(0).getSymbolName()) {
505       ChkStkStub = &MI;
506       break;
507     }
508   }
509 
510   if (ChkStkStub != nullptr) {
511     assert(!ChkStkStub->isBundled() &&
512            "Not expecting bundled instructions here");
513     MachineBasicBlock::iterator MBBI = std::next(ChkStkStub->getIterator());
514     assert(std::prev(MBBI) == ChkStkStub &&
515            "MBBI expected after __chkstk_stub.");
516     DebugLoc DL = PrologMBB.findDebugLoc(MBBI);
517     emitStackProbeInline(MF, PrologMBB, MBBI, DL, true);
518     ChkStkStub->eraseFromParent();
519   }
520 }
521 
522 void X86FrameLowering::emitStackProbeInline(MachineFunction &MF,
523                                             MachineBasicBlock &MBB,
524                                             MachineBasicBlock::iterator MBBI,
525                                             const DebugLoc &DL,
526                                             bool InProlog) const {
527   const X86Subtarget &STI = MF.getSubtarget<X86Subtarget>();
528   assert(STI.is64Bit() && "different expansion needed for 32 bit");
529   assert(STI.isTargetWindowsCoreCLR() && "custom expansion expects CoreCLR");
530   const TargetInstrInfo &TII = *STI.getInstrInfo();
531   const BasicBlock *LLVM_BB = MBB.getBasicBlock();
532 
533   // RAX contains the number of bytes of desired stack adjustment.
534   // The handling here assumes this value has already been updated so as to
535   // maintain stack alignment.
536   //
537   // We need to exit with RSP modified by this amount and execute suitable
538   // page touches to notify the OS that we're growing the stack responsibly.
539   // All stack probing must be done without modifying RSP.
540   //
541   // MBB:
542   //    SizeReg = RAX;
543   //    ZeroReg = 0
544   //    CopyReg = RSP
545   //    Flags, TestReg = CopyReg - SizeReg
546   //    FinalReg = !Flags.Ovf ? TestReg : ZeroReg
547   //    LimitReg = gs magic thread env access
548   //    if FinalReg >= LimitReg goto ContinueMBB
549   // RoundBB:
550   //    RoundReg = page address of FinalReg
551   // LoopMBB:
552   //    LoopReg = PHI(LimitReg,ProbeReg)
553   //    ProbeReg = LoopReg - PageSize
554   //    [ProbeReg] = 0
555   //    if (ProbeReg > RoundReg) goto LoopMBB
556   // ContinueMBB:
557   //    RSP = RSP - RAX
558   //    [rest of original MBB]
559 
560   // Set up the new basic blocks
561   MachineBasicBlock *RoundMBB = MF.CreateMachineBasicBlock(LLVM_BB);
562   MachineBasicBlock *LoopMBB = MF.CreateMachineBasicBlock(LLVM_BB);
563   MachineBasicBlock *ContinueMBB = MF.CreateMachineBasicBlock(LLVM_BB);
564 
565   MachineFunction::iterator MBBIter = std::next(MBB.getIterator());
566   MF.insert(MBBIter, RoundMBB);
567   MF.insert(MBBIter, LoopMBB);
568   MF.insert(MBBIter, ContinueMBB);
569 
570   // Split MBB and move the tail portion down to ContinueMBB.
571   MachineBasicBlock::iterator BeforeMBBI = std::prev(MBBI);
572   ContinueMBB->splice(ContinueMBB->begin(), &MBB, MBBI, MBB.end());
573   ContinueMBB->transferSuccessorsAndUpdatePHIs(&MBB);
574 
575   // Some useful constants
576   const int64_t ThreadEnvironmentStackLimit = 0x10;
577   const int64_t PageSize = 0x1000;
578   const int64_t PageMask = ~(PageSize - 1);
579 
580   // Registers we need. For the normal case we use virtual
581   // registers. For the prolog expansion we use RAX, RCX and RDX.
582   MachineRegisterInfo &MRI = MF.getRegInfo();
583   const TargetRegisterClass *RegClass = &X86::GR64RegClass;
584   const unsigned SizeReg = InProlog ? (unsigned)X86::RAX
585                                     : MRI.createVirtualRegister(RegClass),
586                  ZeroReg = InProlog ? (unsigned)X86::RCX
587                                     : MRI.createVirtualRegister(RegClass),
588                  CopyReg = InProlog ? (unsigned)X86::RDX
589                                     : MRI.createVirtualRegister(RegClass),
590                  TestReg = InProlog ? (unsigned)X86::RDX
591                                     : MRI.createVirtualRegister(RegClass),
592                  FinalReg = InProlog ? (unsigned)X86::RDX
593                                      : MRI.createVirtualRegister(RegClass),
594                  RoundedReg = InProlog ? (unsigned)X86::RDX
595                                        : MRI.createVirtualRegister(RegClass),
596                  LimitReg = InProlog ? (unsigned)X86::RCX
597                                      : MRI.createVirtualRegister(RegClass),
598                  JoinReg = InProlog ? (unsigned)X86::RCX
599                                     : MRI.createVirtualRegister(RegClass),
600                  ProbeReg = InProlog ? (unsigned)X86::RCX
601                                      : MRI.createVirtualRegister(RegClass);
602 
603   // SP-relative offsets where we can save RCX and RDX.
604   int64_t RCXShadowSlot = 0;
605   int64_t RDXShadowSlot = 0;
606 
607   // If inlining in the prolog, save RCX and RDX.
608   // Future optimization: don't save or restore if not live in.
609   if (InProlog) {
610     // Compute the offsets. We need to account for things already
611     // pushed onto the stack at this point: return address, frame
612     // pointer (if used), and callee saves.
613     X86MachineFunctionInfo *X86FI = MF.getInfo<X86MachineFunctionInfo>();
614     const int64_t CalleeSaveSize = X86FI->getCalleeSavedFrameSize();
615     const bool HasFP = hasFP(MF);
616     RCXShadowSlot = 8 + CalleeSaveSize + (HasFP ? 8 : 0);
617     RDXShadowSlot = RCXShadowSlot + 8;
618     // Emit the saves.
619     addRegOffset(BuildMI(&MBB, DL, TII.get(X86::MOV64mr)), X86::RSP, false,
620                  RCXShadowSlot)
621         .addReg(X86::RCX);
622     addRegOffset(BuildMI(&MBB, DL, TII.get(X86::MOV64mr)), X86::RSP, false,
623                  RDXShadowSlot)
624         .addReg(X86::RDX);
625   } else {
626     // Not in the prolog. Copy RAX to a virtual reg.
627     BuildMI(&MBB, DL, TII.get(X86::MOV64rr), SizeReg).addReg(X86::RAX);
628   }
629 
630   // Add code to MBB to check for overflow and set the new target stack pointer
631   // to zero if so.
632   BuildMI(&MBB, DL, TII.get(X86::XOR64rr), ZeroReg)
633       .addReg(ZeroReg, RegState::Undef)
634       .addReg(ZeroReg, RegState::Undef);
635   BuildMI(&MBB, DL, TII.get(X86::MOV64rr), CopyReg).addReg(X86::RSP);
636   BuildMI(&MBB, DL, TII.get(X86::SUB64rr), TestReg)
637       .addReg(CopyReg)
638       .addReg(SizeReg);
639   BuildMI(&MBB, DL, TII.get(X86::CMOVB64rr), FinalReg)
640       .addReg(TestReg)
641       .addReg(ZeroReg);
642 
643   // FinalReg now holds final stack pointer value, or zero if
644   // allocation would overflow. Compare against the current stack
645   // limit from the thread environment block. Note this limit is the
646   // lowest touched page on the stack, not the point at which the OS
647   // will cause an overflow exception, so this is just an optimization
648   // to avoid unnecessarily touching pages that are below the current
649   // SP but already committed to the stack by the OS.
650   BuildMI(&MBB, DL, TII.get(X86::MOV64rm), LimitReg)
651       .addReg(0)
652       .addImm(1)
653       .addReg(0)
654       .addImm(ThreadEnvironmentStackLimit)
655       .addReg(X86::GS);
656   BuildMI(&MBB, DL, TII.get(X86::CMP64rr)).addReg(FinalReg).addReg(LimitReg);
657   // Jump if the desired stack pointer is at or above the stack limit.
658   BuildMI(&MBB, DL, TII.get(X86::JAE_1)).addMBB(ContinueMBB);
659 
660   // Add code to roundMBB to round the final stack pointer to a page boundary.
661   BuildMI(RoundMBB, DL, TII.get(X86::AND64ri32), RoundedReg)
662       .addReg(FinalReg)
663       .addImm(PageMask);
664   BuildMI(RoundMBB, DL, TII.get(X86::JMP_1)).addMBB(LoopMBB);
665 
666   // LimitReg now holds the current stack limit, RoundedReg page-rounded
667   // final RSP value. Add code to loopMBB to decrement LimitReg page-by-page
668   // and probe until we reach RoundedReg.
669   if (!InProlog) {
670     BuildMI(LoopMBB, DL, TII.get(X86::PHI), JoinReg)
671         .addReg(LimitReg)
672         .addMBB(RoundMBB)
673         .addReg(ProbeReg)
674         .addMBB(LoopMBB);
675   }
676 
677   addRegOffset(BuildMI(LoopMBB, DL, TII.get(X86::LEA64r), ProbeReg), JoinReg,
678                false, -PageSize);
679 
680   // Probe by storing a byte onto the stack.
681   BuildMI(LoopMBB, DL, TII.get(X86::MOV8mi))
682       .addReg(ProbeReg)
683       .addImm(1)
684       .addReg(0)
685       .addImm(0)
686       .addReg(0)
687       .addImm(0);
688   BuildMI(LoopMBB, DL, TII.get(X86::CMP64rr))
689       .addReg(RoundedReg)
690       .addReg(ProbeReg);
691   BuildMI(LoopMBB, DL, TII.get(X86::JNE_1)).addMBB(LoopMBB);
692 
693   MachineBasicBlock::iterator ContinueMBBI = ContinueMBB->getFirstNonPHI();
694 
695   // If in prolog, restore RDX and RCX.
696   if (InProlog) {
697     addRegOffset(BuildMI(*ContinueMBB, ContinueMBBI, DL, TII.get(X86::MOV64rm),
698                          X86::RCX),
699                  X86::RSP, false, RCXShadowSlot);
700     addRegOffset(BuildMI(*ContinueMBB, ContinueMBBI, DL, TII.get(X86::MOV64rm),
701                          X86::RDX),
702                  X86::RSP, false, RDXShadowSlot);
703   }
704 
705   // Now that the probing is done, add code to continueMBB to update
706   // the stack pointer for real.
707   BuildMI(*ContinueMBB, ContinueMBBI, DL, TII.get(X86::SUB64rr), X86::RSP)
708       .addReg(X86::RSP)
709       .addReg(SizeReg);
710 
711   // Add the control flow edges we need.
712   MBB.addSuccessor(ContinueMBB);
713   MBB.addSuccessor(RoundMBB);
714   RoundMBB->addSuccessor(LoopMBB);
715   LoopMBB->addSuccessor(ContinueMBB);
716   LoopMBB->addSuccessor(LoopMBB);
717 
718   // Mark all the instructions added to the prolog as frame setup.
719   if (InProlog) {
720     for (++BeforeMBBI; BeforeMBBI != MBB.end(); ++BeforeMBBI) {
721       BeforeMBBI->setFlag(MachineInstr::FrameSetup);
722     }
723     for (MachineInstr &MI : *RoundMBB) {
724       MI.setFlag(MachineInstr::FrameSetup);
725     }
726     for (MachineInstr &MI : *LoopMBB) {
727       MI.setFlag(MachineInstr::FrameSetup);
728     }
729     for (MachineBasicBlock::iterator CMBBI = ContinueMBB->begin();
730          CMBBI != ContinueMBBI; ++CMBBI) {
731       CMBBI->setFlag(MachineInstr::FrameSetup);
732     }
733   }
734 
735   // Possible TODO: physreg liveness for InProlog case.
736 }
737 
738 void X86FrameLowering::emitStackProbeCall(MachineFunction &MF,
739                                           MachineBasicBlock &MBB,
740                                           MachineBasicBlock::iterator MBBI,
741                                           const DebugLoc &DL,
742                                           bool InProlog) const {
743   bool IsLargeCodeModel = MF.getTarget().getCodeModel() == CodeModel::Large;
744 
745   unsigned CallOp;
746   if (Is64Bit)
747     CallOp = IsLargeCodeModel ? X86::CALL64r : X86::CALL64pcrel32;
748   else
749     CallOp = X86::CALLpcrel32;
750 
751   const char *Symbol;
752   if (Is64Bit) {
753     if (STI.isTargetCygMing()) {
754       Symbol = "___chkstk_ms";
755     } else {
756       Symbol = "__chkstk";
757     }
758   } else if (STI.isTargetCygMing())
759     Symbol = "_alloca";
760   else
761     Symbol = "_chkstk";
762 
763   MachineInstrBuilder CI;
764   MachineBasicBlock::iterator ExpansionMBBI = std::prev(MBBI);
765 
766   // All current stack probes take AX and SP as input, clobber flags, and
767   // preserve all registers. x86_64 probes leave RSP unmodified.
768   if (Is64Bit && MF.getTarget().getCodeModel() == CodeModel::Large) {
769     // For the large code model, we have to call through a register. Use R11,
770     // as it is scratch in all supported calling conventions.
771     BuildMI(MBB, MBBI, DL, TII.get(X86::MOV64ri), X86::R11)
772         .addExternalSymbol(Symbol);
773     CI = BuildMI(MBB, MBBI, DL, TII.get(CallOp)).addReg(X86::R11);
774   } else {
775     CI = BuildMI(MBB, MBBI, DL, TII.get(CallOp)).addExternalSymbol(Symbol);
776   }
777 
778   unsigned AX = Is64Bit ? X86::RAX : X86::EAX;
779   unsigned SP = Is64Bit ? X86::RSP : X86::ESP;
780   CI.addReg(AX, RegState::Implicit)
781       .addReg(SP, RegState::Implicit)
782       .addReg(AX, RegState::Define | RegState::Implicit)
783       .addReg(SP, RegState::Define | RegState::Implicit)
784       .addReg(X86::EFLAGS, RegState::Define | RegState::Implicit);
785 
786   if (Is64Bit) {
787     // MSVC x64's __chkstk and cygwin/mingw's ___chkstk_ms do not adjust %rsp
788     // themselves. It also does not clobber %rax so we can reuse it when
789     // adjusting %rsp.
790     BuildMI(MBB, MBBI, DL, TII.get(X86::SUB64rr), X86::RSP)
791         .addReg(X86::RSP)
792         .addReg(X86::RAX);
793   }
794 
795   if (InProlog) {
796     // Apply the frame setup flag to all inserted instrs.
797     for (++ExpansionMBBI; ExpansionMBBI != MBBI; ++ExpansionMBBI)
798       ExpansionMBBI->setFlag(MachineInstr::FrameSetup);
799   }
800 }
801 
802 void X86FrameLowering::emitStackProbeInlineStub(
803     MachineFunction &MF, MachineBasicBlock &MBB,
804     MachineBasicBlock::iterator MBBI, const DebugLoc &DL, bool InProlog) const {
805 
806   assert(InProlog && "ChkStkStub called outside prolog!");
807 
808   BuildMI(MBB, MBBI, DL, TII.get(X86::CALLpcrel32))
809       .addExternalSymbol("__chkstk_stub");
810 }
811 
812 static unsigned calculateSetFPREG(uint64_t SPAdjust) {
813   // Win64 ABI has a less restrictive limitation of 240; 128 works equally well
814   // and might require smaller successive adjustments.
815   const uint64_t Win64MaxSEHOffset = 128;
816   uint64_t SEHFrameOffset = std::min(SPAdjust, Win64MaxSEHOffset);
817   // Win64 ABI requires 16-byte alignment for the UWOP_SET_FPREG opcode.
818   return SEHFrameOffset & -16;
819 }
820 
821 // If we're forcing a stack realignment we can't rely on just the frame
822 // info, we need to know the ABI stack alignment as well in case we
823 // have a call out.  Otherwise just make sure we have some alignment - we'll
824 // go with the minimum SlotSize.
825 uint64_t X86FrameLowering::calculateMaxStackAlign(const MachineFunction &MF) const {
826   const MachineFrameInfo &MFI = MF.getFrameInfo();
827   uint64_t MaxAlign = MFI.getMaxAlignment(); // Desired stack alignment.
828   unsigned StackAlign = getStackAlignment();
829   if (MF.getFunction()->hasFnAttribute("stackrealign")) {
830     if (MFI.hasCalls())
831       MaxAlign = (StackAlign > MaxAlign) ? StackAlign : MaxAlign;
832     else if (MaxAlign < SlotSize)
833       MaxAlign = SlotSize;
834   }
835   return MaxAlign;
836 }
837 
838 void X86FrameLowering::BuildStackAlignAND(MachineBasicBlock &MBB,
839                                           MachineBasicBlock::iterator MBBI,
840                                           const DebugLoc &DL, unsigned Reg,
841                                           uint64_t MaxAlign) const {
842   uint64_t Val = -MaxAlign;
843   unsigned AndOp = getANDriOpcode(Uses64BitFramePtr, Val);
844   MachineInstr *MI = BuildMI(MBB, MBBI, DL, TII.get(AndOp), Reg)
845                          .addReg(Reg)
846                          .addImm(Val)
847                          .setMIFlag(MachineInstr::FrameSetup);
848 
849   // The EFLAGS implicit def is dead.
850   MI->getOperand(3).setIsDead();
851 }
852 
853 /// emitPrologue - Push callee-saved registers onto the stack, which
854 /// automatically adjust the stack pointer. Adjust the stack pointer to allocate
855 /// space for local variables. Also emit labels used by the exception handler to
856 /// generate the exception handling frames.
857 
858 /*
859   Here's a gist of what gets emitted:
860 
861   ; Establish frame pointer, if needed
862   [if needs FP]
863       push  %rbp
864       .cfi_def_cfa_offset 16
865       .cfi_offset %rbp, -16
866       .seh_pushreg %rpb
867       mov  %rsp, %rbp
868       .cfi_def_cfa_register %rbp
869 
870   ; Spill general-purpose registers
871   [for all callee-saved GPRs]
872       pushq %<reg>
873       [if not needs FP]
874          .cfi_def_cfa_offset (offset from RETADDR)
875       .seh_pushreg %<reg>
876 
877   ; If the required stack alignment > default stack alignment
878   ; rsp needs to be re-aligned.  This creates a "re-alignment gap"
879   ; of unknown size in the stack frame.
880   [if stack needs re-alignment]
881       and  $MASK, %rsp
882 
883   ; Allocate space for locals
884   [if target is Windows and allocated space > 4096 bytes]
885       ; Windows needs special care for allocations larger
886       ; than one page.
887       mov $NNN, %rax
888       call ___chkstk_ms/___chkstk
889       sub  %rax, %rsp
890   [else]
891       sub  $NNN, %rsp
892 
893   [if needs FP]
894       .seh_stackalloc (size of XMM spill slots)
895       .seh_setframe %rbp, SEHFrameOffset ; = size of all spill slots
896   [else]
897       .seh_stackalloc NNN
898 
899   ; Spill XMMs
900   ; Note, that while only Windows 64 ABI specifies XMMs as callee-preserved,
901   ; they may get spilled on any platform, if the current function
902   ; calls @llvm.eh.unwind.init
903   [if needs FP]
904       [for all callee-saved XMM registers]
905           movaps  %<xmm reg>, -MMM(%rbp)
906       [for all callee-saved XMM registers]
907           .seh_savexmm %<xmm reg>, (-MMM + SEHFrameOffset)
908               ; i.e. the offset relative to (%rbp - SEHFrameOffset)
909   [else]
910       [for all callee-saved XMM registers]
911           movaps  %<xmm reg>, KKK(%rsp)
912       [for all callee-saved XMM registers]
913           .seh_savexmm %<xmm reg>, KKK
914 
915   .seh_endprologue
916 
917   [if needs base pointer]
918       mov  %rsp, %rbx
919       [if needs to restore base pointer]
920           mov %rsp, -MMM(%rbp)
921 
922   ; Emit CFI info
923   [if needs FP]
924       [for all callee-saved registers]
925           .cfi_offset %<reg>, (offset from %rbp)
926   [else]
927        .cfi_def_cfa_offset (offset from RETADDR)
928       [for all callee-saved registers]
929           .cfi_offset %<reg>, (offset from %rsp)
930 
931   Notes:
932   - .seh directives are emitted only for Windows 64 ABI
933   - .cfi directives are emitted for all other ABIs
934   - for 32-bit code, substitute %e?? registers for %r??
935 */
936 
937 void X86FrameLowering::emitPrologue(MachineFunction &MF,
938                                     MachineBasicBlock &MBB) const {
939   assert(&STI == &MF.getSubtarget<X86Subtarget>() &&
940          "MF used frame lowering for wrong subtarget");
941   MachineBasicBlock::iterator MBBI = MBB.begin();
942   MachineFrameInfo &MFI = MF.getFrameInfo();
943   const Function *Fn = MF.getFunction();
944   MachineModuleInfo &MMI = MF.getMMI();
945   X86MachineFunctionInfo *X86FI = MF.getInfo<X86MachineFunctionInfo>();
946   uint64_t MaxAlign = calculateMaxStackAlign(MF); // Desired stack alignment.
947   uint64_t StackSize = MFI.getStackSize();    // Number of bytes to allocate.
948   bool IsFunclet = MBB.isEHFuncletEntry();
949   EHPersonality Personality = EHPersonality::Unknown;
950   if (Fn->hasPersonalityFn())
951     Personality = classifyEHPersonality(Fn->getPersonalityFn());
952   bool FnHasClrFunclet =
953       MF.hasEHFunclets() && Personality == EHPersonality::CoreCLR;
954   bool IsClrFunclet = IsFunclet && FnHasClrFunclet;
955   bool HasFP = hasFP(MF);
956   bool IsWin64CC = STI.isCallingConvWin64(Fn->getCallingConv());
957   bool IsWin64Prologue = MF.getTarget().getMCAsmInfo()->usesWindowsCFI();
958   bool NeedsWinCFI = IsWin64Prologue && Fn->needsUnwindTableEntry();
959   bool NeedsDwarfCFI =
960       !IsWin64Prologue && (MMI.hasDebugInfo() || Fn->needsUnwindTableEntry());
961   unsigned FramePtr = TRI->getFrameRegister(MF);
962   const unsigned MachineFramePtr =
963       STI.isTarget64BitILP32()
964           ? getX86SubSuperRegister(FramePtr, 64) : FramePtr;
965   unsigned BasePtr = TRI->getBaseRegister();
966   bool HasWinCFI = false;
967 
968   // Debug location must be unknown since the first debug location is used
969   // to determine the end of the prologue.
970   DebugLoc DL;
971 
972   // Add RETADDR move area to callee saved frame size.
973   int TailCallReturnAddrDelta = X86FI->getTCReturnAddrDelta();
974   if (TailCallReturnAddrDelta && IsWin64Prologue)
975     report_fatal_error("Can't handle guaranteed tail call under win64 yet");
976 
977   if (TailCallReturnAddrDelta < 0)
978     X86FI->setCalleeSavedFrameSize(
979       X86FI->getCalleeSavedFrameSize() - TailCallReturnAddrDelta);
980 
981   bool UseStackProbe = (STI.isOSWindows() && !STI.isTargetMachO());
982 
983   // The default stack probe size is 4096 if the function has no stackprobesize
984   // attribute.
985   unsigned StackProbeSize = 4096;
986   if (Fn->hasFnAttribute("stack-probe-size"))
987     Fn->getFnAttribute("stack-probe-size")
988         .getValueAsString()
989         .getAsInteger(0, StackProbeSize);
990 
991   // Re-align the stack on 64-bit if the x86-interrupt calling convention is
992   // used and an error code was pushed, since the x86-64 ABI requires a 16-byte
993   // stack alignment.
994   if (Fn->getCallingConv() == CallingConv::X86_INTR && Is64Bit &&
995       Fn->arg_size() == 2) {
996     StackSize += 8;
997     MFI.setStackSize(StackSize);
998     emitSPUpdate(MBB, MBBI, -8, /*InEpilogue=*/false);
999   }
1000 
1001   // If this is x86-64 and the Red Zone is not disabled, if we are a leaf
1002   // function, and use up to 128 bytes of stack space, don't have a frame
1003   // pointer, calls, or dynamic alloca then we do not need to adjust the
1004   // stack pointer (we fit in the Red Zone). We also check that we don't
1005   // push and pop from the stack.
1006   if (Is64Bit && !Fn->hasFnAttribute(Attribute::NoRedZone) &&
1007       !TRI->needsStackRealignment(MF) &&
1008       !MFI.hasVarSizedObjects() &&             // No dynamic alloca.
1009       !MFI.adjustsStack() &&                   // No calls.
1010       !IsWin64CC &&                            // Win64 has no Red Zone
1011       !MFI.hasCopyImplyingStackAdjustment() && // Don't push and pop.
1012       !MF.shouldSplitStack()) {                // Regular stack
1013     uint64_t MinSize = X86FI->getCalleeSavedFrameSize();
1014     if (HasFP) MinSize += SlotSize;
1015     X86FI->setUsesRedZone(MinSize > 0 || StackSize > 0);
1016     StackSize = std::max(MinSize, StackSize > 128 ? StackSize - 128 : 0);
1017     MFI.setStackSize(StackSize);
1018   }
1019 
1020   // Insert stack pointer adjustment for later moving of return addr.  Only
1021   // applies to tail call optimized functions where the callee argument stack
1022   // size is bigger than the callers.
1023   if (TailCallReturnAddrDelta < 0) {
1024     BuildStackAdjustment(MBB, MBBI, DL, TailCallReturnAddrDelta,
1025                          /*InEpilogue=*/false)
1026         .setMIFlag(MachineInstr::FrameSetup);
1027   }
1028 
1029   // Mapping for machine moves:
1030   //
1031   //   DST: VirtualFP AND
1032   //        SRC: VirtualFP              => DW_CFA_def_cfa_offset
1033   //        ELSE                        => DW_CFA_def_cfa
1034   //
1035   //   SRC: VirtualFP AND
1036   //        DST: Register               => DW_CFA_def_cfa_register
1037   //
1038   //   ELSE
1039   //        OFFSET < 0                  => DW_CFA_offset_extended_sf
1040   //        REG < 64                    => DW_CFA_offset + Reg
1041   //        ELSE                        => DW_CFA_offset_extended
1042 
1043   uint64_t NumBytes = 0;
1044   int stackGrowth = -SlotSize;
1045 
1046   // Find the funclet establisher parameter
1047   unsigned Establisher = X86::NoRegister;
1048   if (IsClrFunclet)
1049     Establisher = Uses64BitFramePtr ? X86::RCX : X86::ECX;
1050   else if (IsFunclet)
1051     Establisher = Uses64BitFramePtr ? X86::RDX : X86::EDX;
1052 
1053   if (IsWin64Prologue && IsFunclet && !IsClrFunclet) {
1054     // Immediately spill establisher into the home slot.
1055     // The runtime cares about this.
1056     // MOV64mr %rdx, 16(%rsp)
1057     unsigned MOVmr = Uses64BitFramePtr ? X86::MOV64mr : X86::MOV32mr;
1058     addRegOffset(BuildMI(MBB, MBBI, DL, TII.get(MOVmr)), StackPtr, true, 16)
1059         .addReg(Establisher)
1060         .setMIFlag(MachineInstr::FrameSetup);
1061     MBB.addLiveIn(Establisher);
1062   }
1063 
1064   if (HasFP) {
1065     // Calculate required stack adjustment.
1066     uint64_t FrameSize = StackSize - SlotSize;
1067     // If required, include space for extra hidden slot for stashing base pointer.
1068     if (X86FI->getRestoreBasePointer())
1069       FrameSize += SlotSize;
1070 
1071     NumBytes = FrameSize - X86FI->getCalleeSavedFrameSize();
1072 
1073     // Callee-saved registers are pushed on stack before the stack is realigned.
1074     if (TRI->needsStackRealignment(MF) && !IsWin64Prologue)
1075       NumBytes = alignTo(NumBytes, MaxAlign);
1076 
1077     // Get the offset of the stack slot for the EBP register, which is
1078     // guaranteed to be the last slot by processFunctionBeforeFrameFinalized.
1079     // Update the frame offset adjustment.
1080     if (!IsFunclet)
1081       MFI.setOffsetAdjustment(-NumBytes);
1082     else
1083       assert(MFI.getOffsetAdjustment() == -(int)NumBytes &&
1084              "should calculate same local variable offset for funclets");
1085 
1086     // Save EBP/RBP into the appropriate stack slot.
1087     BuildMI(MBB, MBBI, DL, TII.get(Is64Bit ? X86::PUSH64r : X86::PUSH32r))
1088       .addReg(MachineFramePtr, RegState::Kill)
1089       .setMIFlag(MachineInstr::FrameSetup);
1090 
1091     if (NeedsDwarfCFI) {
1092       // Mark the place where EBP/RBP was saved.
1093       // Define the current CFA rule to use the provided offset.
1094       assert(StackSize);
1095       BuildCFI(MBB, MBBI, DL,
1096                MCCFIInstruction::createDefCfaOffset(nullptr, 2 * stackGrowth));
1097 
1098       // Change the rule for the FramePtr to be an "offset" rule.
1099       unsigned DwarfFramePtr = TRI->getDwarfRegNum(MachineFramePtr, true);
1100       BuildCFI(MBB, MBBI, DL, MCCFIInstruction::createOffset(
1101                                   nullptr, DwarfFramePtr, 2 * stackGrowth));
1102     }
1103 
1104     if (NeedsWinCFI) {
1105       HasWinCFI = true;
1106       BuildMI(MBB, MBBI, DL, TII.get(X86::SEH_PushReg))
1107           .addImm(FramePtr)
1108           .setMIFlag(MachineInstr::FrameSetup);
1109     }
1110 
1111     if (!IsWin64Prologue && !IsFunclet) {
1112       // Update EBP with the new base value.
1113       BuildMI(MBB, MBBI, DL,
1114               TII.get(Uses64BitFramePtr ? X86::MOV64rr : X86::MOV32rr),
1115               FramePtr)
1116           .addReg(StackPtr)
1117           .setMIFlag(MachineInstr::FrameSetup);
1118 
1119       if (NeedsDwarfCFI) {
1120         // Mark effective beginning of when frame pointer becomes valid.
1121         // Define the current CFA to use the EBP/RBP register.
1122         unsigned DwarfFramePtr = TRI->getDwarfRegNum(MachineFramePtr, true);
1123         BuildCFI(MBB, MBBI, DL, MCCFIInstruction::createDefCfaRegister(
1124                                     nullptr, DwarfFramePtr));
1125       }
1126     }
1127 
1128     // Mark the FramePtr as live-in in every block. Don't do this again for
1129     // funclet prologues.
1130     if (!IsFunclet) {
1131       for (MachineBasicBlock &EveryMBB : MF)
1132         EveryMBB.addLiveIn(MachineFramePtr);
1133     }
1134   } else {
1135     assert(!IsFunclet && "funclets without FPs not yet implemented");
1136     NumBytes = StackSize - X86FI->getCalleeSavedFrameSize();
1137   }
1138 
1139   // For EH funclets, only allocate enough space for outgoing calls. Save the
1140   // NumBytes value that we would've used for the parent frame.
1141   unsigned ParentFrameNumBytes = NumBytes;
1142   if (IsFunclet)
1143     NumBytes = getWinEHFuncletFrameSize(MF);
1144 
1145   // Skip the callee-saved push instructions.
1146   bool PushedRegs = false;
1147   int StackOffset = 2 * stackGrowth;
1148 
1149   while (MBBI != MBB.end() &&
1150          MBBI->getFlag(MachineInstr::FrameSetup) &&
1151          (MBBI->getOpcode() == X86::PUSH32r ||
1152           MBBI->getOpcode() == X86::PUSH64r)) {
1153     PushedRegs = true;
1154     unsigned Reg = MBBI->getOperand(0).getReg();
1155     ++MBBI;
1156 
1157     if (!HasFP && NeedsDwarfCFI) {
1158       // Mark callee-saved push instruction.
1159       // Define the current CFA rule to use the provided offset.
1160       assert(StackSize);
1161       BuildCFI(MBB, MBBI, DL,
1162                MCCFIInstruction::createDefCfaOffset(nullptr, StackOffset));
1163       StackOffset += stackGrowth;
1164     }
1165 
1166     if (NeedsWinCFI) {
1167       HasWinCFI = true;
1168       BuildMI(MBB, MBBI, DL, TII.get(X86::SEH_PushReg)).addImm(Reg).setMIFlag(
1169           MachineInstr::FrameSetup);
1170     }
1171   }
1172 
1173   // Realign stack after we pushed callee-saved registers (so that we'll be
1174   // able to calculate their offsets from the frame pointer).
1175   // Don't do this for Win64, it needs to realign the stack after the prologue.
1176   if (!IsWin64Prologue && !IsFunclet && TRI->needsStackRealignment(MF)) {
1177     assert(HasFP && "There should be a frame pointer if stack is realigned.");
1178     BuildStackAlignAND(MBB, MBBI, DL, StackPtr, MaxAlign);
1179   }
1180 
1181   // If there is an SUB32ri of ESP immediately before this instruction, merge
1182   // the two. This can be the case when tail call elimination is enabled and
1183   // the callee has more arguments then the caller.
1184   NumBytes -= mergeSPUpdates(MBB, MBBI, true);
1185 
1186   // Adjust stack pointer: ESP -= numbytes.
1187 
1188   // Windows and cygwin/mingw require a prologue helper routine when allocating
1189   // more than 4K bytes on the stack.  Windows uses __chkstk and cygwin/mingw
1190   // uses __alloca.  __alloca and the 32-bit version of __chkstk will probe the
1191   // stack and adjust the stack pointer in one go.  The 64-bit version of
1192   // __chkstk is only responsible for probing the stack.  The 64-bit prologue is
1193   // responsible for adjusting the stack pointer.  Touching the stack at 4K
1194   // increments is necessary to ensure that the guard pages used by the OS
1195   // virtual memory manager are allocated in correct sequence.
1196   uint64_t AlignedNumBytes = NumBytes;
1197   if (IsWin64Prologue && !IsFunclet && TRI->needsStackRealignment(MF))
1198     AlignedNumBytes = alignTo(AlignedNumBytes, MaxAlign);
1199   if (AlignedNumBytes >= StackProbeSize && UseStackProbe) {
1200     // Check whether EAX is livein for this block.
1201     bool isEAXAlive = isEAXLiveIn(MBB);
1202 
1203     if (isEAXAlive) {
1204       // Sanity check that EAX is not livein for this function.
1205       // It should not be, so throw an assert.
1206       assert(!Is64Bit && "EAX is livein in x64 case!");
1207 
1208       // Save EAX
1209       BuildMI(MBB, MBBI, DL, TII.get(X86::PUSH32r))
1210         .addReg(X86::EAX, RegState::Kill)
1211         .setMIFlag(MachineInstr::FrameSetup);
1212     }
1213 
1214     if (Is64Bit) {
1215       // Handle the 64-bit Windows ABI case where we need to call __chkstk.
1216       // Function prologue is responsible for adjusting the stack pointer.
1217       if (isUInt<32>(NumBytes)) {
1218         BuildMI(MBB, MBBI, DL, TII.get(X86::MOV32ri), X86::EAX)
1219             .addImm(NumBytes)
1220             .setMIFlag(MachineInstr::FrameSetup);
1221       } else if (isInt<32>(NumBytes)) {
1222         BuildMI(MBB, MBBI, DL, TII.get(X86::MOV64ri32), X86::RAX)
1223             .addImm(NumBytes)
1224             .setMIFlag(MachineInstr::FrameSetup);
1225       } else {
1226         BuildMI(MBB, MBBI, DL, TII.get(X86::MOV64ri), X86::RAX)
1227             .addImm(NumBytes)
1228             .setMIFlag(MachineInstr::FrameSetup);
1229       }
1230     } else {
1231       // Allocate NumBytes-4 bytes on stack in case of isEAXAlive.
1232       // We'll also use 4 already allocated bytes for EAX.
1233       BuildMI(MBB, MBBI, DL, TII.get(X86::MOV32ri), X86::EAX)
1234           .addImm(isEAXAlive ? NumBytes - 4 : NumBytes)
1235           .setMIFlag(MachineInstr::FrameSetup);
1236     }
1237 
1238     // Call __chkstk, __chkstk_ms, or __alloca.
1239     emitStackProbe(MF, MBB, MBBI, DL, true);
1240 
1241     if (isEAXAlive) {
1242       // Restore EAX
1243       MachineInstr *MI =
1244           addRegOffset(BuildMI(MF, DL, TII.get(X86::MOV32rm), X86::EAX),
1245                        StackPtr, false, NumBytes - 4);
1246       MI->setFlag(MachineInstr::FrameSetup);
1247       MBB.insert(MBBI, MI);
1248     }
1249   } else if (NumBytes) {
1250     emitSPUpdate(MBB, MBBI, -(int64_t)NumBytes, /*InEpilogue=*/false);
1251   }
1252 
1253   if (NeedsWinCFI && NumBytes) {
1254     HasWinCFI = true;
1255     BuildMI(MBB, MBBI, DL, TII.get(X86::SEH_StackAlloc))
1256         .addImm(NumBytes)
1257         .setMIFlag(MachineInstr::FrameSetup);
1258   }
1259 
1260   int SEHFrameOffset = 0;
1261   unsigned SPOrEstablisher;
1262   if (IsFunclet) {
1263     if (IsClrFunclet) {
1264       // The establisher parameter passed to a CLR funclet is actually a pointer
1265       // to the (mostly empty) frame of its nearest enclosing funclet; we have
1266       // to find the root function establisher frame by loading the PSPSym from
1267       // the intermediate frame.
1268       unsigned PSPSlotOffset = getPSPSlotOffsetFromSP(MF);
1269       MachinePointerInfo NoInfo;
1270       MBB.addLiveIn(Establisher);
1271       addRegOffset(BuildMI(MBB, MBBI, DL, TII.get(X86::MOV64rm), Establisher),
1272                    Establisher, false, PSPSlotOffset)
1273           .addMemOperand(MF.getMachineMemOperand(
1274               NoInfo, MachineMemOperand::MOLoad, SlotSize, SlotSize));
1275       ;
1276       // Save the root establisher back into the current funclet's (mostly
1277       // empty) frame, in case a sub-funclet or the GC needs it.
1278       addRegOffset(BuildMI(MBB, MBBI, DL, TII.get(X86::MOV64mr)), StackPtr,
1279                    false, PSPSlotOffset)
1280           .addReg(Establisher)
1281           .addMemOperand(
1282               MF.getMachineMemOperand(NoInfo, MachineMemOperand::MOStore |
1283                                                   MachineMemOperand::MOVolatile,
1284                                       SlotSize, SlotSize));
1285     }
1286     SPOrEstablisher = Establisher;
1287   } else {
1288     SPOrEstablisher = StackPtr;
1289   }
1290 
1291   if (IsWin64Prologue && HasFP) {
1292     // Set RBP to a small fixed offset from RSP. In the funclet case, we base
1293     // this calculation on the incoming establisher, which holds the value of
1294     // RSP from the parent frame at the end of the prologue.
1295     SEHFrameOffset = calculateSetFPREG(ParentFrameNumBytes);
1296     if (SEHFrameOffset)
1297       addRegOffset(BuildMI(MBB, MBBI, DL, TII.get(X86::LEA64r), FramePtr),
1298                    SPOrEstablisher, false, SEHFrameOffset);
1299     else
1300       BuildMI(MBB, MBBI, DL, TII.get(X86::MOV64rr), FramePtr)
1301           .addReg(SPOrEstablisher);
1302 
1303     // If this is not a funclet, emit the CFI describing our frame pointer.
1304     if (NeedsWinCFI && !IsFunclet) {
1305       HasWinCFI = true;
1306       BuildMI(MBB, MBBI, DL, TII.get(X86::SEH_SetFrame))
1307           .addImm(FramePtr)
1308           .addImm(SEHFrameOffset)
1309           .setMIFlag(MachineInstr::FrameSetup);
1310       if (isAsynchronousEHPersonality(Personality))
1311         MF.getWinEHFuncInfo()->SEHSetFrameOffset = SEHFrameOffset;
1312     }
1313   } else if (IsFunclet && STI.is32Bit()) {
1314     // Reset EBP / ESI to something good for funclets.
1315     MBBI = restoreWin32EHStackPointers(MBB, MBBI, DL);
1316     // If we're a catch funclet, we can be returned to via catchret. Save ESP
1317     // into the registration node so that the runtime will restore it for us.
1318     if (!MBB.isCleanupFuncletEntry()) {
1319       assert(Personality == EHPersonality::MSVC_CXX);
1320       unsigned FrameReg;
1321       int FI = MF.getWinEHFuncInfo()->EHRegNodeFrameIndex;
1322       int64_t EHRegOffset = getFrameIndexReference(MF, FI, FrameReg);
1323       // ESP is the first field, so no extra displacement is needed.
1324       addRegOffset(BuildMI(MBB, MBBI, DL, TII.get(X86::MOV32mr)), FrameReg,
1325                    false, EHRegOffset)
1326           .addReg(X86::ESP);
1327     }
1328   }
1329 
1330   while (MBBI != MBB.end() && MBBI->getFlag(MachineInstr::FrameSetup)) {
1331     const MachineInstr &FrameInstr = *MBBI;
1332     ++MBBI;
1333 
1334     if (NeedsWinCFI) {
1335       int FI;
1336       if (unsigned Reg = TII.isStoreToStackSlot(FrameInstr, FI)) {
1337         if (X86::FR64RegClass.contains(Reg)) {
1338           unsigned IgnoredFrameReg;
1339           int Offset = getFrameIndexReference(MF, FI, IgnoredFrameReg);
1340           Offset += SEHFrameOffset;
1341 
1342           HasWinCFI = true;
1343           BuildMI(MBB, MBBI, DL, TII.get(X86::SEH_SaveXMM))
1344               .addImm(Reg)
1345               .addImm(Offset)
1346               .setMIFlag(MachineInstr::FrameSetup);
1347         }
1348       }
1349     }
1350   }
1351 
1352   if (NeedsWinCFI && HasWinCFI)
1353     BuildMI(MBB, MBBI, DL, TII.get(X86::SEH_EndPrologue))
1354         .setMIFlag(MachineInstr::FrameSetup);
1355 
1356   if (FnHasClrFunclet && !IsFunclet) {
1357     // Save the so-called Initial-SP (i.e. the value of the stack pointer
1358     // immediately after the prolog)  into the PSPSlot so that funclets
1359     // and the GC can recover it.
1360     unsigned PSPSlotOffset = getPSPSlotOffsetFromSP(MF);
1361     auto PSPInfo = MachinePointerInfo::getFixedStack(
1362         MF, MF.getWinEHFuncInfo()->PSPSymFrameIdx);
1363     addRegOffset(BuildMI(MBB, MBBI, DL, TII.get(X86::MOV64mr)), StackPtr, false,
1364                  PSPSlotOffset)
1365         .addReg(StackPtr)
1366         .addMemOperand(MF.getMachineMemOperand(
1367             PSPInfo, MachineMemOperand::MOStore | MachineMemOperand::MOVolatile,
1368             SlotSize, SlotSize));
1369   }
1370 
1371   // Realign stack after we spilled callee-saved registers (so that we'll be
1372   // able to calculate their offsets from the frame pointer).
1373   // Win64 requires aligning the stack after the prologue.
1374   if (IsWin64Prologue && TRI->needsStackRealignment(MF)) {
1375     assert(HasFP && "There should be a frame pointer if stack is realigned.");
1376     BuildStackAlignAND(MBB, MBBI, DL, SPOrEstablisher, MaxAlign);
1377   }
1378 
1379   // We already dealt with stack realignment and funclets above.
1380   if (IsFunclet && STI.is32Bit())
1381     return;
1382 
1383   // If we need a base pointer, set it up here. It's whatever the value
1384   // of the stack pointer is at this point. Any variable size objects
1385   // will be allocated after this, so we can still use the base pointer
1386   // to reference locals.
1387   if (TRI->hasBasePointer(MF)) {
1388     // Update the base pointer with the current stack pointer.
1389     unsigned Opc = Uses64BitFramePtr ? X86::MOV64rr : X86::MOV32rr;
1390     BuildMI(MBB, MBBI, DL, TII.get(Opc), BasePtr)
1391       .addReg(SPOrEstablisher)
1392       .setMIFlag(MachineInstr::FrameSetup);
1393     if (X86FI->getRestoreBasePointer()) {
1394       // Stash value of base pointer.  Saving RSP instead of EBP shortens
1395       // dependence chain. Used by SjLj EH.
1396       unsigned Opm = Uses64BitFramePtr ? X86::MOV64mr : X86::MOV32mr;
1397       addRegOffset(BuildMI(MBB, MBBI, DL, TII.get(Opm)),
1398                    FramePtr, true, X86FI->getRestoreBasePointerOffset())
1399         .addReg(SPOrEstablisher)
1400         .setMIFlag(MachineInstr::FrameSetup);
1401     }
1402 
1403     if (X86FI->getHasSEHFramePtrSave() && !IsFunclet) {
1404       // Stash the value of the frame pointer relative to the base pointer for
1405       // Win32 EH. This supports Win32 EH, which does the inverse of the above:
1406       // it recovers the frame pointer from the base pointer rather than the
1407       // other way around.
1408       unsigned Opm = Uses64BitFramePtr ? X86::MOV64mr : X86::MOV32mr;
1409       unsigned UsedReg;
1410       int Offset =
1411           getFrameIndexReference(MF, X86FI->getSEHFramePtrSaveIndex(), UsedReg);
1412       assert(UsedReg == BasePtr);
1413       addRegOffset(BuildMI(MBB, MBBI, DL, TII.get(Opm)), UsedReg, true, Offset)
1414           .addReg(FramePtr)
1415           .setMIFlag(MachineInstr::FrameSetup);
1416     }
1417   }
1418 
1419   if (((!HasFP && NumBytes) || PushedRegs) && NeedsDwarfCFI) {
1420     // Mark end of stack pointer adjustment.
1421     if (!HasFP && NumBytes) {
1422       // Define the current CFA rule to use the provided offset.
1423       assert(StackSize);
1424       BuildCFI(MBB, MBBI, DL, MCCFIInstruction::createDefCfaOffset(
1425                                   nullptr, -StackSize + stackGrowth));
1426     }
1427 
1428     // Emit DWARF info specifying the offsets of the callee-saved registers.
1429     if (PushedRegs)
1430       emitCalleeSavedFrameMoves(MBB, MBBI, DL);
1431   }
1432 
1433   // X86 Interrupt handling function cannot assume anything about the direction
1434   // flag (DF in EFLAGS register). Clear this flag by creating "cld" instruction
1435   // in each prologue of interrupt handler function.
1436   //
1437   // FIXME: Create "cld" instruction only in these cases:
1438   // 1. The interrupt handling function uses any of the "rep" instructions.
1439   // 2. Interrupt handling function calls another function.
1440   //
1441   if (Fn->getCallingConv() == CallingConv::X86_INTR)
1442     BuildMI(MBB, MBBI, DL, TII.get(X86::CLD))
1443         .setMIFlag(MachineInstr::FrameSetup);
1444 
1445   // At this point we know if the function has WinCFI or not.
1446   MF.setHasWinCFI(HasWinCFI);
1447 }
1448 
1449 bool X86FrameLowering::canUseLEAForSPInEpilogue(
1450     const MachineFunction &MF) const {
1451   // We can't use LEA instructions for adjusting the stack pointer if we don't
1452   // have a frame pointer in the Win64 ABI.  Only ADD instructions may be used
1453   // to deallocate the stack.
1454   // This means that we can use LEA for SP in two situations:
1455   // 1. We *aren't* using the Win64 ABI which means we are free to use LEA.
1456   // 2. We *have* a frame pointer which means we are permitted to use LEA.
1457   return !MF.getTarget().getMCAsmInfo()->usesWindowsCFI() || hasFP(MF);
1458 }
1459 
1460 static bool isFuncletReturnInstr(MachineInstr &MI) {
1461   switch (MI.getOpcode()) {
1462   case X86::CATCHRET:
1463   case X86::CLEANUPRET:
1464     return true;
1465   default:
1466     return false;
1467   }
1468   llvm_unreachable("impossible");
1469 }
1470 
1471 // CLR funclets use a special "Previous Stack Pointer Symbol" slot on the
1472 // stack. It holds a pointer to the bottom of the root function frame.  The
1473 // establisher frame pointer passed to a nested funclet may point to the
1474 // (mostly empty) frame of its parent funclet, but it will need to find
1475 // the frame of the root function to access locals.  To facilitate this,
1476 // every funclet copies the pointer to the bottom of the root function
1477 // frame into a PSPSym slot in its own (mostly empty) stack frame. Using the
1478 // same offset for the PSPSym in the root function frame that's used in the
1479 // funclets' frames allows each funclet to dynamically accept any ancestor
1480 // frame as its establisher argument (the runtime doesn't guarantee the
1481 // immediate parent for some reason lost to history), and also allows the GC,
1482 // which uses the PSPSym for some bookkeeping, to find it in any funclet's
1483 // frame with only a single offset reported for the entire method.
1484 unsigned
1485 X86FrameLowering::getPSPSlotOffsetFromSP(const MachineFunction &MF) const {
1486   const WinEHFuncInfo &Info = *MF.getWinEHFuncInfo();
1487   unsigned SPReg;
1488   int Offset = getFrameIndexReferencePreferSP(MF, Info.PSPSymFrameIdx, SPReg,
1489                                               /*IgnoreSPUpdates*/ true);
1490   assert(Offset >= 0 && SPReg == TRI->getStackRegister());
1491   return static_cast<unsigned>(Offset);
1492 }
1493 
1494 unsigned
1495 X86FrameLowering::getWinEHFuncletFrameSize(const MachineFunction &MF) const {
1496   // This is the size of the pushed CSRs.
1497   unsigned CSSize =
1498       MF.getInfo<X86MachineFunctionInfo>()->getCalleeSavedFrameSize();
1499   // This is the amount of stack a funclet needs to allocate.
1500   unsigned UsedSize;
1501   EHPersonality Personality =
1502       classifyEHPersonality(MF.getFunction()->getPersonalityFn());
1503   if (Personality == EHPersonality::CoreCLR) {
1504     // CLR funclets need to hold enough space to include the PSPSym, at the
1505     // same offset from the stack pointer (immediately after the prolog) as it
1506     // resides at in the main function.
1507     UsedSize = getPSPSlotOffsetFromSP(MF) + SlotSize;
1508   } else {
1509     // Other funclets just need enough stack for outgoing call arguments.
1510     UsedSize = MF.getFrameInfo().getMaxCallFrameSize();
1511   }
1512   // RBP is not included in the callee saved register block. After pushing RBP,
1513   // everything is 16 byte aligned. Everything we allocate before an outgoing
1514   // call must also be 16 byte aligned.
1515   unsigned FrameSizeMinusRBP = alignTo(CSSize + UsedSize, getStackAlignment());
1516   // Subtract out the size of the callee saved registers. This is how much stack
1517   // each funclet will allocate.
1518   return FrameSizeMinusRBP - CSSize;
1519 }
1520 
1521 static bool isTailCallOpcode(unsigned Opc) {
1522     return Opc == X86::TCRETURNri || Opc == X86::TCRETURNdi ||
1523         Opc == X86::TCRETURNmi ||
1524         Opc == X86::TCRETURNri64 || Opc == X86::TCRETURNdi64 ||
1525         Opc == X86::TCRETURNmi64;
1526 }
1527 
1528 void X86FrameLowering::emitEpilogue(MachineFunction &MF,
1529                                     MachineBasicBlock &MBB) const {
1530   const MachineFrameInfo &MFI = MF.getFrameInfo();
1531   X86MachineFunctionInfo *X86FI = MF.getInfo<X86MachineFunctionInfo>();
1532   MachineBasicBlock::iterator MBBI = MBB.getFirstTerminator();
1533   Optional<unsigned> RetOpcode;
1534   if (MBBI != MBB.end())
1535     RetOpcode = MBBI->getOpcode();
1536   DebugLoc DL;
1537   if (MBBI != MBB.end())
1538     DL = MBBI->getDebugLoc();
1539   // standard x86_64 and NaCl use 64-bit frame/stack pointers, x32 - 32-bit.
1540   const bool Is64BitILP32 = STI.isTarget64BitILP32();
1541   unsigned FramePtr = TRI->getFrameRegister(MF);
1542   unsigned MachineFramePtr =
1543       Is64BitILP32 ? getX86SubSuperRegister(FramePtr, 64) : FramePtr;
1544 
1545   bool IsWin64Prologue = MF.getTarget().getMCAsmInfo()->usesWindowsCFI();
1546   bool NeedsWinCFI =
1547       IsWin64Prologue && MF.getFunction()->needsUnwindTableEntry();
1548   bool IsFunclet = MBBI == MBB.end() ? false : isFuncletReturnInstr(*MBBI);
1549   MachineBasicBlock *TargetMBB = nullptr;
1550 
1551   // Get the number of bytes to allocate from the FrameInfo.
1552   uint64_t StackSize = MFI.getStackSize();
1553   uint64_t MaxAlign = calculateMaxStackAlign(MF);
1554   unsigned CSSize = X86FI->getCalleeSavedFrameSize();
1555   uint64_t NumBytes = 0;
1556 
1557   if (RetOpcode && *RetOpcode == X86::CATCHRET) {
1558     // SEH shouldn't use catchret.
1559     assert(!isAsynchronousEHPersonality(
1560                classifyEHPersonality(MF.getFunction()->getPersonalityFn())) &&
1561            "SEH should not use CATCHRET");
1562 
1563     NumBytes = getWinEHFuncletFrameSize(MF);
1564     assert(hasFP(MF) && "EH funclets without FP not yet implemented");
1565     TargetMBB = MBBI->getOperand(0).getMBB();
1566 
1567     // Pop EBP.
1568     BuildMI(MBB, MBBI, DL, TII.get(Is64Bit ? X86::POP64r : X86::POP32r),
1569             MachineFramePtr)
1570         .setMIFlag(MachineInstr::FrameDestroy);
1571   } else if (RetOpcode && *RetOpcode == X86::CLEANUPRET) {
1572     NumBytes = getWinEHFuncletFrameSize(MF);
1573     assert(hasFP(MF) && "EH funclets without FP not yet implemented");
1574     BuildMI(MBB, MBBI, DL, TII.get(Is64Bit ? X86::POP64r : X86::POP32r),
1575             MachineFramePtr)
1576         .setMIFlag(MachineInstr::FrameDestroy);
1577   } else if (hasFP(MF)) {
1578     // Calculate required stack adjustment.
1579     uint64_t FrameSize = StackSize - SlotSize;
1580     NumBytes = FrameSize - CSSize;
1581 
1582     // Callee-saved registers were pushed on stack before the stack was
1583     // realigned.
1584     if (TRI->needsStackRealignment(MF) && !IsWin64Prologue)
1585       NumBytes = alignTo(FrameSize, MaxAlign);
1586 
1587     // Pop EBP.
1588     BuildMI(MBB, MBBI, DL,
1589             TII.get(Is64Bit ? X86::POP64r : X86::POP32r), MachineFramePtr)
1590         .setMIFlag(MachineInstr::FrameDestroy);
1591   } else {
1592     NumBytes = StackSize - CSSize;
1593   }
1594   uint64_t SEHStackAllocAmt = NumBytes;
1595 
1596   MachineBasicBlock::iterator FirstCSPop = MBBI;
1597   // Skip the callee-saved pop instructions.
1598   while (MBBI != MBB.begin()) {
1599     MachineBasicBlock::iterator PI = std::prev(MBBI);
1600     unsigned Opc = PI->getOpcode();
1601 
1602     if (Opc != X86::DBG_VALUE && !PI->isTerminator()) {
1603       if ((Opc != X86::POP32r || !PI->getFlag(MachineInstr::FrameDestroy)) &&
1604           (Opc != X86::POP64r || !PI->getFlag(MachineInstr::FrameDestroy)))
1605         break;
1606       FirstCSPop = PI;
1607     }
1608 
1609     --MBBI;
1610   }
1611   MBBI = FirstCSPop;
1612 
1613   if (TargetMBB) {
1614     // Fill EAX/RAX with the address of the target block.
1615     unsigned ReturnReg = STI.is64Bit() ? X86::RAX : X86::EAX;
1616     if (STI.is64Bit()) {
1617       // LEA64r TargetMBB(%rip), %rax
1618       BuildMI(MBB, FirstCSPop, DL, TII.get(X86::LEA64r), ReturnReg)
1619           .addReg(X86::RIP)
1620           .addImm(0)
1621           .addReg(0)
1622           .addMBB(TargetMBB)
1623           .addReg(0);
1624     } else {
1625       // MOV32ri $TargetMBB, %eax
1626       BuildMI(MBB, FirstCSPop, DL, TII.get(X86::MOV32ri), ReturnReg)
1627           .addMBB(TargetMBB);
1628     }
1629     // Record that we've taken the address of TargetMBB and no longer just
1630     // reference it in a terminator.
1631     TargetMBB->setHasAddressTaken();
1632   }
1633 
1634   if (MBBI != MBB.end())
1635     DL = MBBI->getDebugLoc();
1636 
1637   // If there is an ADD32ri or SUB32ri of ESP immediately before this
1638   // instruction, merge the two instructions.
1639   if (NumBytes || MFI.hasVarSizedObjects())
1640     NumBytes += mergeSPUpdates(MBB, MBBI, true);
1641 
1642   // If dynamic alloca is used, then reset esp to point to the last callee-saved
1643   // slot before popping them off! Same applies for the case, when stack was
1644   // realigned. Don't do this if this was a funclet epilogue, since the funclets
1645   // will not do realignment or dynamic stack allocation.
1646   if ((TRI->needsStackRealignment(MF) || MFI.hasVarSizedObjects()) &&
1647       !IsFunclet) {
1648     if (TRI->needsStackRealignment(MF))
1649       MBBI = FirstCSPop;
1650     unsigned SEHFrameOffset = calculateSetFPREG(SEHStackAllocAmt);
1651     uint64_t LEAAmount =
1652         IsWin64Prologue ? SEHStackAllocAmt - SEHFrameOffset : -CSSize;
1653 
1654     // There are only two legal forms of epilogue:
1655     // - add SEHAllocationSize, %rsp
1656     // - lea SEHAllocationSize(%FramePtr), %rsp
1657     //
1658     // 'mov %FramePtr, %rsp' will not be recognized as an epilogue sequence.
1659     // However, we may use this sequence if we have a frame pointer because the
1660     // effects of the prologue can safely be undone.
1661     if (LEAAmount != 0) {
1662       unsigned Opc = getLEArOpcode(Uses64BitFramePtr);
1663       addRegOffset(BuildMI(MBB, MBBI, DL, TII.get(Opc), StackPtr),
1664                    FramePtr, false, LEAAmount);
1665       --MBBI;
1666     } else {
1667       unsigned Opc = (Uses64BitFramePtr ? X86::MOV64rr : X86::MOV32rr);
1668       BuildMI(MBB, MBBI, DL, TII.get(Opc), StackPtr)
1669         .addReg(FramePtr);
1670       --MBBI;
1671     }
1672   } else if (NumBytes) {
1673     // Adjust stack pointer back: ESP += numbytes.
1674     emitSPUpdate(MBB, MBBI, NumBytes, /*InEpilogue=*/true);
1675     --MBBI;
1676   }
1677 
1678   // Windows unwinder will not invoke function's exception handler if IP is
1679   // either in prologue or in epilogue.  This behavior causes a problem when a
1680   // call immediately precedes an epilogue, because the return address points
1681   // into the epilogue.  To cope with that, we insert an epilogue marker here,
1682   // then replace it with a 'nop' if it ends up immediately after a CALL in the
1683   // final emitted code.
1684   if (NeedsWinCFI && MF.hasWinCFI())
1685     BuildMI(MBB, MBBI, DL, TII.get(X86::SEH_Epilogue));
1686 
1687   if (!RetOpcode || !isTailCallOpcode(*RetOpcode)) {
1688     // Add the return addr area delta back since we are not tail calling.
1689     int Offset = -1 * X86FI->getTCReturnAddrDelta();
1690     assert(Offset >= 0 && "TCDelta should never be positive");
1691     if (Offset) {
1692       MBBI = MBB.getFirstTerminator();
1693 
1694       // Check for possible merge with preceding ADD instruction.
1695       Offset += mergeSPUpdates(MBB, MBBI, true);
1696       emitSPUpdate(MBB, MBBI, Offset, /*InEpilogue=*/true);
1697     }
1698   }
1699 }
1700 
1701 // NOTE: this only has a subset of the full frame index logic. In
1702 // particular, the FI < 0 and AfterFPPop logic is handled in
1703 // X86RegisterInfo::eliminateFrameIndex, but not here. Possibly
1704 // (probably?) it should be moved into here.
1705 int X86FrameLowering::getFrameIndexReference(const MachineFunction &MF, int FI,
1706                                              unsigned &FrameReg) const {
1707   const MachineFrameInfo &MFI = MF.getFrameInfo();
1708 
1709   // We can't calculate offset from frame pointer if the stack is realigned,
1710   // so enforce usage of stack/base pointer.  The base pointer is used when we
1711   // have dynamic allocas in addition to dynamic realignment.
1712   if (TRI->hasBasePointer(MF))
1713     FrameReg = TRI->getBaseRegister();
1714   else if (TRI->needsStackRealignment(MF))
1715     FrameReg = TRI->getStackRegister();
1716   else
1717     FrameReg = TRI->getFrameRegister(MF);
1718 
1719   // Offset will hold the offset from the stack pointer at function entry to the
1720   // object.
1721   // We need to factor in additional offsets applied during the prologue to the
1722   // frame, base, and stack pointer depending on which is used.
1723   int Offset = MFI.getObjectOffset(FI) - getOffsetOfLocalArea();
1724   const X86MachineFunctionInfo *X86FI = MF.getInfo<X86MachineFunctionInfo>();
1725   unsigned CSSize = X86FI->getCalleeSavedFrameSize();
1726   uint64_t StackSize = MFI.getStackSize();
1727   bool HasFP = hasFP(MF);
1728   bool IsWin64Prologue = MF.getTarget().getMCAsmInfo()->usesWindowsCFI();
1729   int64_t FPDelta = 0;
1730 
1731   if (IsWin64Prologue) {
1732     assert(!MFI.hasCalls() || (StackSize % 16) == 8);
1733 
1734     // Calculate required stack adjustment.
1735     uint64_t FrameSize = StackSize - SlotSize;
1736     // If required, include space for extra hidden slot for stashing base pointer.
1737     if (X86FI->getRestoreBasePointer())
1738       FrameSize += SlotSize;
1739     uint64_t NumBytes = FrameSize - CSSize;
1740 
1741     uint64_t SEHFrameOffset = calculateSetFPREG(NumBytes);
1742     if (FI && FI == X86FI->getFAIndex())
1743       return -SEHFrameOffset;
1744 
1745     // FPDelta is the offset from the "traditional" FP location of the old base
1746     // pointer followed by return address and the location required by the
1747     // restricted Win64 prologue.
1748     // Add FPDelta to all offsets below that go through the frame pointer.
1749     FPDelta = FrameSize - SEHFrameOffset;
1750     assert((!MFI.hasCalls() || (FPDelta % 16) == 0) &&
1751            "FPDelta isn't aligned per the Win64 ABI!");
1752   }
1753 
1754 
1755   if (TRI->hasBasePointer(MF)) {
1756     assert(HasFP && "VLAs and dynamic stack realign, but no FP?!");
1757     if (FI < 0) {
1758       // Skip the saved EBP.
1759       return Offset + SlotSize + FPDelta;
1760     } else {
1761       assert((-(Offset + StackSize)) % MFI.getObjectAlignment(FI) == 0);
1762       return Offset + StackSize;
1763     }
1764   } else if (TRI->needsStackRealignment(MF)) {
1765     if (FI < 0) {
1766       // Skip the saved EBP.
1767       return Offset + SlotSize + FPDelta;
1768     } else {
1769       assert((-(Offset + StackSize)) % MFI.getObjectAlignment(FI) == 0);
1770       return Offset + StackSize;
1771     }
1772     // FIXME: Support tail calls
1773   } else {
1774     if (!HasFP)
1775       return Offset + StackSize;
1776 
1777     // Skip the saved EBP.
1778     Offset += SlotSize;
1779 
1780     // Skip the RETADDR move area
1781     int TailCallReturnAddrDelta = X86FI->getTCReturnAddrDelta();
1782     if (TailCallReturnAddrDelta < 0)
1783       Offset -= TailCallReturnAddrDelta;
1784   }
1785 
1786   return Offset + FPDelta;
1787 }
1788 
1789 int
1790 X86FrameLowering::getFrameIndexReferencePreferSP(const MachineFunction &MF,
1791                                                  int FI, unsigned &FrameReg,
1792                                                  bool IgnoreSPUpdates) const {
1793 
1794   const MachineFrameInfo &MFI = MF.getFrameInfo();
1795   // Does not include any dynamic realign.
1796   const uint64_t StackSize = MFI.getStackSize();
1797   // LLVM arranges the stack as follows:
1798   //   ...
1799   //   ARG2
1800   //   ARG1
1801   //   RETADDR
1802   //   PUSH RBP   <-- RBP points here
1803   //   PUSH CSRs
1804   //   ~~~~~~~    <-- possible stack realignment (non-win64)
1805   //   ...
1806   //   STACK OBJECTS
1807   //   ...        <-- RSP after prologue points here
1808   //   ~~~~~~~    <-- possible stack realignment (win64)
1809   //
1810   // if (hasVarSizedObjects()):
1811   //   ...        <-- "base pointer" (ESI/RBX) points here
1812   //   DYNAMIC ALLOCAS
1813   //   ...        <-- RSP points here
1814   //
1815   // Case 1: In the simple case of no stack realignment and no dynamic
1816   // allocas, both "fixed" stack objects (arguments and CSRs) are addressable
1817   // with fixed offsets from RSP.
1818   //
1819   // Case 2: In the case of stack realignment with no dynamic allocas, fixed
1820   // stack objects are addressed with RBP and regular stack objects with RSP.
1821   //
1822   // Case 3: In the case of dynamic allocas and stack realignment, RSP is used
1823   // to address stack arguments for outgoing calls and nothing else. The "base
1824   // pointer" points to local variables, and RBP points to fixed objects.
1825   //
1826   // In cases 2 and 3, we can only answer for non-fixed stack objects, and the
1827   // answer we give is relative to the SP after the prologue, and not the
1828   // SP in the middle of the function.
1829 
1830   if (MFI.isFixedObjectIndex(FI) && TRI->needsStackRealignment(MF) &&
1831       !STI.isTargetWin64())
1832     return getFrameIndexReference(MF, FI, FrameReg);
1833 
1834   // If !hasReservedCallFrame the function might have SP adjustement in the
1835   // body.  So, even though the offset is statically known, it depends on where
1836   // we are in the function.
1837   const TargetFrameLowering *TFI = MF.getSubtarget().getFrameLowering();
1838   if (!IgnoreSPUpdates && !TFI->hasReservedCallFrame(MF))
1839     return getFrameIndexReference(MF, FI, FrameReg);
1840 
1841   // We don't handle tail calls, and shouldn't be seeing them either.
1842   assert(MF.getInfo<X86MachineFunctionInfo>()->getTCReturnAddrDelta() >= 0 &&
1843          "we don't handle this case!");
1844 
1845   // Fill in FrameReg output argument.
1846   FrameReg = TRI->getStackRegister();
1847 
1848   // This is how the math works out:
1849   //
1850   //  %rsp grows (i.e. gets lower) left to right. Each box below is
1851   //  one word (eight bytes).  Obj0 is the stack slot we're trying to
1852   //  get to.
1853   //
1854   //    ----------------------------------
1855   //    | BP | Obj0 | Obj1 | ... | ObjN |
1856   //    ----------------------------------
1857   //    ^    ^      ^                   ^
1858   //    A    B      C                   E
1859   //
1860   // A is the incoming stack pointer.
1861   // (B - A) is the local area offset (-8 for x86-64) [1]
1862   // (C - A) is the Offset returned by MFI.getObjectOffset for Obj0 [2]
1863   //
1864   // |(E - B)| is the StackSize (absolute value, positive).  For a
1865   // stack that grown down, this works out to be (B - E). [3]
1866   //
1867   // E is also the value of %rsp after stack has been set up, and we
1868   // want (C - E) -- the value we can add to %rsp to get to Obj0.  Now
1869   // (C - E) == (C - A) - (B - A) + (B - E)
1870   //            { Using [1], [2] and [3] above }
1871   //         == getObjectOffset - LocalAreaOffset + StackSize
1872   //
1873 
1874   // Get the Offset from the StackPointer
1875   int Offset = MFI.getObjectOffset(FI) - getOffsetOfLocalArea();
1876 
1877   return Offset + StackSize;
1878 }
1879 
1880 bool X86FrameLowering::assignCalleeSavedSpillSlots(
1881     MachineFunction &MF, const TargetRegisterInfo *TRI,
1882     std::vector<CalleeSavedInfo> &CSI) const {
1883   MachineFrameInfo &MFI = MF.getFrameInfo();
1884   X86MachineFunctionInfo *X86FI = MF.getInfo<X86MachineFunctionInfo>();
1885 
1886   unsigned CalleeSavedFrameSize = 0;
1887   int SpillSlotOffset = getOffsetOfLocalArea() + X86FI->getTCReturnAddrDelta();
1888 
1889   if (hasFP(MF)) {
1890     // emitPrologue always spills frame register the first thing.
1891     SpillSlotOffset -= SlotSize;
1892     MFI.CreateFixedSpillStackObject(SlotSize, SpillSlotOffset);
1893 
1894     // Since emitPrologue and emitEpilogue will handle spilling and restoring of
1895     // the frame register, we can delete it from CSI list and not have to worry
1896     // about avoiding it later.
1897     unsigned FPReg = TRI->getFrameRegister(MF);
1898     for (unsigned i = 0; i < CSI.size(); ++i) {
1899       if (TRI->regsOverlap(CSI[i].getReg(),FPReg)) {
1900         CSI.erase(CSI.begin() + i);
1901         break;
1902       }
1903     }
1904   }
1905 
1906   // Assign slots for GPRs. It increases frame size.
1907   for (unsigned i = CSI.size(); i != 0; --i) {
1908     unsigned Reg = CSI[i - 1].getReg();
1909 
1910     if (!X86::GR64RegClass.contains(Reg) && !X86::GR32RegClass.contains(Reg))
1911       continue;
1912 
1913     SpillSlotOffset -= SlotSize;
1914     CalleeSavedFrameSize += SlotSize;
1915 
1916     int SlotIndex = MFI.CreateFixedSpillStackObject(SlotSize, SpillSlotOffset);
1917     CSI[i - 1].setFrameIdx(SlotIndex);
1918   }
1919 
1920   X86FI->setCalleeSavedFrameSize(CalleeSavedFrameSize);
1921 
1922   // Assign slots for XMMs.
1923   for (unsigned i = CSI.size(); i != 0; --i) {
1924     unsigned Reg = CSI[i - 1].getReg();
1925     if (X86::GR64RegClass.contains(Reg) || X86::GR32RegClass.contains(Reg))
1926       continue;
1927 
1928     const TargetRegisterClass *RC = TRI->getMinimalPhysRegClass(Reg);
1929     // ensure alignment
1930     SpillSlotOffset -= std::abs(SpillSlotOffset) % RC->getAlignment();
1931     // spill into slot
1932     SpillSlotOffset -= RC->getSize();
1933     int SlotIndex =
1934         MFI.CreateFixedSpillStackObject(RC->getSize(), SpillSlotOffset);
1935     CSI[i - 1].setFrameIdx(SlotIndex);
1936     MFI.ensureMaxAlignment(RC->getAlignment());
1937   }
1938 
1939   return true;
1940 }
1941 
1942 bool X86FrameLowering::spillCalleeSavedRegisters(
1943     MachineBasicBlock &MBB, MachineBasicBlock::iterator MI,
1944     const std::vector<CalleeSavedInfo> &CSI,
1945     const TargetRegisterInfo *TRI) const {
1946   DebugLoc DL = MBB.findDebugLoc(MI);
1947 
1948   // Don't save CSRs in 32-bit EH funclets. The caller saves EBX, EBP, ESI, EDI
1949   // for us, and there are no XMM CSRs on Win32.
1950   if (MBB.isEHFuncletEntry() && STI.is32Bit() && STI.isOSWindows())
1951     return true;
1952 
1953   // Push GPRs. It increases frame size.
1954   const MachineFunction &MF = *MBB.getParent();
1955   unsigned Opc = STI.is64Bit() ? X86::PUSH64r : X86::PUSH32r;
1956   for (unsigned i = CSI.size(); i != 0; --i) {
1957     unsigned Reg = CSI[i - 1].getReg();
1958 
1959     if (!X86::GR64RegClass.contains(Reg) && !X86::GR32RegClass.contains(Reg))
1960       continue;
1961 
1962     const MachineRegisterInfo &MRI = MF.getRegInfo();
1963     bool isLiveIn = MRI.isLiveIn(Reg);
1964     if (!isLiveIn)
1965       MBB.addLiveIn(Reg);
1966 
1967     // Decide whether we can add a kill flag to the use.
1968     bool CanKill = !isLiveIn;
1969     // Check if any subregister is live-in
1970     if (CanKill) {
1971       for (MCRegAliasIterator AReg(Reg, TRI, false); AReg.isValid(); ++AReg) {
1972         if (MRI.isLiveIn(*AReg)) {
1973           CanKill = false;
1974           break;
1975         }
1976       }
1977     }
1978 
1979     // Do not set a kill flag on values that are also marked as live-in. This
1980     // happens with the @llvm-returnaddress intrinsic and with arguments
1981     // passed in callee saved registers.
1982     // Omitting the kill flags is conservatively correct even if the live-in
1983     // is not used after all.
1984     BuildMI(MBB, MI, DL, TII.get(Opc)).addReg(Reg, getKillRegState(CanKill))
1985       .setMIFlag(MachineInstr::FrameSetup);
1986   }
1987 
1988   // Make XMM regs spilled. X86 does not have ability of push/pop XMM.
1989   // It can be done by spilling XMMs to stack frame.
1990   for (unsigned i = CSI.size(); i != 0; --i) {
1991     unsigned Reg = CSI[i-1].getReg();
1992     if (X86::GR64RegClass.contains(Reg) || X86::GR32RegClass.contains(Reg))
1993       continue;
1994     // Add the callee-saved register as live-in. It's killed at the spill.
1995     MBB.addLiveIn(Reg);
1996     const TargetRegisterClass *RC = TRI->getMinimalPhysRegClass(Reg);
1997 
1998     TII.storeRegToStackSlot(MBB, MI, Reg, true, CSI[i - 1].getFrameIdx(), RC,
1999                             TRI);
2000     --MI;
2001     MI->setFlag(MachineInstr::FrameSetup);
2002     ++MI;
2003   }
2004 
2005   return true;
2006 }
2007 
2008 bool X86FrameLowering::restoreCalleeSavedRegisters(MachineBasicBlock &MBB,
2009                                                MachineBasicBlock::iterator MI,
2010                                         const std::vector<CalleeSavedInfo> &CSI,
2011                                           const TargetRegisterInfo *TRI) const {
2012   if (CSI.empty())
2013     return false;
2014 
2015   if (MI != MBB.end() && isFuncletReturnInstr(*MI) && STI.isOSWindows()) {
2016     // Don't restore CSRs in 32-bit EH funclets. Matches
2017     // spillCalleeSavedRegisters.
2018     if (STI.is32Bit())
2019       return true;
2020     // Don't restore CSRs before an SEH catchret. SEH except blocks do not form
2021     // funclets. emitEpilogue transforms these to normal jumps.
2022     if (MI->getOpcode() == X86::CATCHRET) {
2023       const Function *Func = MBB.getParent()->getFunction();
2024       bool IsSEH = isAsynchronousEHPersonality(
2025           classifyEHPersonality(Func->getPersonalityFn()));
2026       if (IsSEH)
2027         return true;
2028     }
2029   }
2030 
2031   DebugLoc DL = MBB.findDebugLoc(MI);
2032 
2033   // Reload XMMs from stack frame.
2034   for (unsigned i = 0, e = CSI.size(); i != e; ++i) {
2035     unsigned Reg = CSI[i].getReg();
2036     if (X86::GR64RegClass.contains(Reg) ||
2037         X86::GR32RegClass.contains(Reg))
2038       continue;
2039 
2040     const TargetRegisterClass *RC = TRI->getMinimalPhysRegClass(Reg);
2041     TII.loadRegFromStackSlot(MBB, MI, Reg, CSI[i].getFrameIdx(), RC, TRI);
2042   }
2043 
2044   // POP GPRs.
2045   unsigned Opc = STI.is64Bit() ? X86::POP64r : X86::POP32r;
2046   for (unsigned i = 0, e = CSI.size(); i != e; ++i) {
2047     unsigned Reg = CSI[i].getReg();
2048     if (!X86::GR64RegClass.contains(Reg) &&
2049         !X86::GR32RegClass.contains(Reg))
2050       continue;
2051 
2052     BuildMI(MBB, MI, DL, TII.get(Opc), Reg)
2053         .setMIFlag(MachineInstr::FrameDestroy);
2054   }
2055   return true;
2056 }
2057 
2058 void X86FrameLowering::determineCalleeSaves(MachineFunction &MF,
2059                                             BitVector &SavedRegs,
2060                                             RegScavenger *RS) const {
2061   TargetFrameLowering::determineCalleeSaves(MF, SavedRegs, RS);
2062 
2063   MachineFrameInfo &MFI = MF.getFrameInfo();
2064 
2065   X86MachineFunctionInfo *X86FI = MF.getInfo<X86MachineFunctionInfo>();
2066   int64_t TailCallReturnAddrDelta = X86FI->getTCReturnAddrDelta();
2067 
2068   if (TailCallReturnAddrDelta < 0) {
2069     // create RETURNADDR area
2070     //   arg
2071     //   arg
2072     //   RETADDR
2073     //   { ...
2074     //     RETADDR area
2075     //     ...
2076     //   }
2077     //   [EBP]
2078     MFI.CreateFixedObject(-TailCallReturnAddrDelta,
2079                            TailCallReturnAddrDelta - SlotSize, true);
2080   }
2081 
2082   // Spill the BasePtr if it's used.
2083   if (TRI->hasBasePointer(MF)) {
2084     SavedRegs.set(TRI->getBaseRegister());
2085 
2086     // Allocate a spill slot for EBP if we have a base pointer and EH funclets.
2087     if (MF.hasEHFunclets()) {
2088       int FI = MFI.CreateSpillStackObject(SlotSize, SlotSize);
2089       X86FI->setHasSEHFramePtrSave(true);
2090       X86FI->setSEHFramePtrSaveIndex(FI);
2091     }
2092   }
2093 }
2094 
2095 static bool
2096 HasNestArgument(const MachineFunction *MF) {
2097   const Function *F = MF->getFunction();
2098   for (Function::const_arg_iterator I = F->arg_begin(), E = F->arg_end();
2099        I != E; I++) {
2100     if (I->hasNestAttr())
2101       return true;
2102   }
2103   return false;
2104 }
2105 
2106 /// GetScratchRegister - Get a temp register for performing work in the
2107 /// segmented stack and the Erlang/HiPE stack prologue. Depending on platform
2108 /// and the properties of the function either one or two registers will be
2109 /// needed. Set primary to true for the first register, false for the second.
2110 static unsigned
2111 GetScratchRegister(bool Is64Bit, bool IsLP64, const MachineFunction &MF, bool Primary) {
2112   CallingConv::ID CallingConvention = MF.getFunction()->getCallingConv();
2113 
2114   // Erlang stuff.
2115   if (CallingConvention == CallingConv::HiPE) {
2116     if (Is64Bit)
2117       return Primary ? X86::R14 : X86::R13;
2118     else
2119       return Primary ? X86::EBX : X86::EDI;
2120   }
2121 
2122   if (Is64Bit) {
2123     if (IsLP64)
2124       return Primary ? X86::R11 : X86::R12;
2125     else
2126       return Primary ? X86::R11D : X86::R12D;
2127   }
2128 
2129   bool IsNested = HasNestArgument(&MF);
2130 
2131   if (CallingConvention == CallingConv::X86_FastCall ||
2132       CallingConvention == CallingConv::Fast) {
2133     if (IsNested)
2134       report_fatal_error("Segmented stacks does not support fastcall with "
2135                          "nested function.");
2136     return Primary ? X86::EAX : X86::ECX;
2137   }
2138   if (IsNested)
2139     return Primary ? X86::EDX : X86::EAX;
2140   return Primary ? X86::ECX : X86::EAX;
2141 }
2142 
2143 // The stack limit in the TCB is set to this many bytes above the actual stack
2144 // limit.
2145 static const uint64_t kSplitStackAvailable = 256;
2146 
2147 void X86FrameLowering::adjustForSegmentedStacks(
2148     MachineFunction &MF, MachineBasicBlock &PrologueMBB) const {
2149   MachineFrameInfo &MFI = MF.getFrameInfo();
2150   uint64_t StackSize;
2151   unsigned TlsReg, TlsOffset;
2152   DebugLoc DL;
2153 
2154   // To support shrink-wrapping we would need to insert the new blocks
2155   // at the right place and update the branches to PrologueMBB.
2156   assert(&(*MF.begin()) == &PrologueMBB && "Shrink-wrapping not supported yet");
2157 
2158   unsigned ScratchReg = GetScratchRegister(Is64Bit, IsLP64, MF, true);
2159   assert(!MF.getRegInfo().isLiveIn(ScratchReg) &&
2160          "Scratch register is live-in");
2161 
2162   if (MF.getFunction()->isVarArg())
2163     report_fatal_error("Segmented stacks do not support vararg functions.");
2164   if (!STI.isTargetLinux() && !STI.isTargetDarwin() && !STI.isTargetWin32() &&
2165       !STI.isTargetWin64() && !STI.isTargetFreeBSD() &&
2166       !STI.isTargetDragonFly())
2167     report_fatal_error("Segmented stacks not supported on this platform.");
2168 
2169   // Eventually StackSize will be calculated by a link-time pass; which will
2170   // also decide whether checking code needs to be injected into this particular
2171   // prologue.
2172   StackSize = MFI.getStackSize();
2173 
2174   // Do not generate a prologue for functions with a stack of size zero
2175   if (StackSize == 0)
2176     return;
2177 
2178   MachineBasicBlock *allocMBB = MF.CreateMachineBasicBlock();
2179   MachineBasicBlock *checkMBB = MF.CreateMachineBasicBlock();
2180   X86MachineFunctionInfo *X86FI = MF.getInfo<X86MachineFunctionInfo>();
2181   bool IsNested = false;
2182 
2183   // We need to know if the function has a nest argument only in 64 bit mode.
2184   if (Is64Bit)
2185     IsNested = HasNestArgument(&MF);
2186 
2187   // The MOV R10, RAX needs to be in a different block, since the RET we emit in
2188   // allocMBB needs to be last (terminating) instruction.
2189 
2190   for (const auto &LI : PrologueMBB.liveins()) {
2191     allocMBB->addLiveIn(LI);
2192     checkMBB->addLiveIn(LI);
2193   }
2194 
2195   if (IsNested)
2196     allocMBB->addLiveIn(IsLP64 ? X86::R10 : X86::R10D);
2197 
2198   MF.push_front(allocMBB);
2199   MF.push_front(checkMBB);
2200 
2201   // When the frame size is less than 256 we just compare the stack
2202   // boundary directly to the value of the stack pointer, per gcc.
2203   bool CompareStackPointer = StackSize < kSplitStackAvailable;
2204 
2205   // Read the limit off the current stacklet off the stack_guard location.
2206   if (Is64Bit) {
2207     if (STI.isTargetLinux()) {
2208       TlsReg = X86::FS;
2209       TlsOffset = IsLP64 ? 0x70 : 0x40;
2210     } else if (STI.isTargetDarwin()) {
2211       TlsReg = X86::GS;
2212       TlsOffset = 0x60 + 90*8; // See pthread_machdep.h. Steal TLS slot 90.
2213     } else if (STI.isTargetWin64()) {
2214       TlsReg = X86::GS;
2215       TlsOffset = 0x28; // pvArbitrary, reserved for application use
2216     } else if (STI.isTargetFreeBSD()) {
2217       TlsReg = X86::FS;
2218       TlsOffset = 0x18;
2219     } else if (STI.isTargetDragonFly()) {
2220       TlsReg = X86::FS;
2221       TlsOffset = 0x20; // use tls_tcb.tcb_segstack
2222     } else {
2223       report_fatal_error("Segmented stacks not supported on this platform.");
2224     }
2225 
2226     if (CompareStackPointer)
2227       ScratchReg = IsLP64 ? X86::RSP : X86::ESP;
2228     else
2229       BuildMI(checkMBB, DL, TII.get(IsLP64 ? X86::LEA64r : X86::LEA64_32r), ScratchReg).addReg(X86::RSP)
2230         .addImm(1).addReg(0).addImm(-StackSize).addReg(0);
2231 
2232     BuildMI(checkMBB, DL, TII.get(IsLP64 ? X86::CMP64rm : X86::CMP32rm)).addReg(ScratchReg)
2233       .addReg(0).addImm(1).addReg(0).addImm(TlsOffset).addReg(TlsReg);
2234   } else {
2235     if (STI.isTargetLinux()) {
2236       TlsReg = X86::GS;
2237       TlsOffset = 0x30;
2238     } else if (STI.isTargetDarwin()) {
2239       TlsReg = X86::GS;
2240       TlsOffset = 0x48 + 90*4;
2241     } else if (STI.isTargetWin32()) {
2242       TlsReg = X86::FS;
2243       TlsOffset = 0x14; // pvArbitrary, reserved for application use
2244     } else if (STI.isTargetDragonFly()) {
2245       TlsReg = X86::FS;
2246       TlsOffset = 0x10; // use tls_tcb.tcb_segstack
2247     } else if (STI.isTargetFreeBSD()) {
2248       report_fatal_error("Segmented stacks not supported on FreeBSD i386.");
2249     } else {
2250       report_fatal_error("Segmented stacks not supported on this platform.");
2251     }
2252 
2253     if (CompareStackPointer)
2254       ScratchReg = X86::ESP;
2255     else
2256       BuildMI(checkMBB, DL, TII.get(X86::LEA32r), ScratchReg).addReg(X86::ESP)
2257         .addImm(1).addReg(0).addImm(-StackSize).addReg(0);
2258 
2259     if (STI.isTargetLinux() || STI.isTargetWin32() || STI.isTargetWin64() ||
2260         STI.isTargetDragonFly()) {
2261       BuildMI(checkMBB, DL, TII.get(X86::CMP32rm)).addReg(ScratchReg)
2262         .addReg(0).addImm(0).addReg(0).addImm(TlsOffset).addReg(TlsReg);
2263     } else if (STI.isTargetDarwin()) {
2264 
2265       // TlsOffset doesn't fit into a mod r/m byte so we need an extra register.
2266       unsigned ScratchReg2;
2267       bool SaveScratch2;
2268       if (CompareStackPointer) {
2269         // The primary scratch register is available for holding the TLS offset.
2270         ScratchReg2 = GetScratchRegister(Is64Bit, IsLP64, MF, true);
2271         SaveScratch2 = false;
2272       } else {
2273         // Need to use a second register to hold the TLS offset
2274         ScratchReg2 = GetScratchRegister(Is64Bit, IsLP64, MF, false);
2275 
2276         // Unfortunately, with fastcc the second scratch register may hold an
2277         // argument.
2278         SaveScratch2 = MF.getRegInfo().isLiveIn(ScratchReg2);
2279       }
2280 
2281       // If Scratch2 is live-in then it needs to be saved.
2282       assert((!MF.getRegInfo().isLiveIn(ScratchReg2) || SaveScratch2) &&
2283              "Scratch register is live-in and not saved");
2284 
2285       if (SaveScratch2)
2286         BuildMI(checkMBB, DL, TII.get(X86::PUSH32r))
2287           .addReg(ScratchReg2, RegState::Kill);
2288 
2289       BuildMI(checkMBB, DL, TII.get(X86::MOV32ri), ScratchReg2)
2290         .addImm(TlsOffset);
2291       BuildMI(checkMBB, DL, TII.get(X86::CMP32rm))
2292         .addReg(ScratchReg)
2293         .addReg(ScratchReg2).addImm(1).addReg(0)
2294         .addImm(0)
2295         .addReg(TlsReg);
2296 
2297       if (SaveScratch2)
2298         BuildMI(checkMBB, DL, TII.get(X86::POP32r), ScratchReg2);
2299     }
2300   }
2301 
2302   // This jump is taken if SP >= (Stacklet Limit + Stack Space required).
2303   // It jumps to normal execution of the function body.
2304   BuildMI(checkMBB, DL, TII.get(X86::JA_1)).addMBB(&PrologueMBB);
2305 
2306   // On 32 bit we first push the arguments size and then the frame size. On 64
2307   // bit, we pass the stack frame size in r10 and the argument size in r11.
2308   if (Is64Bit) {
2309     // Functions with nested arguments use R10, so it needs to be saved across
2310     // the call to _morestack
2311 
2312     const unsigned RegAX = IsLP64 ? X86::RAX : X86::EAX;
2313     const unsigned Reg10 = IsLP64 ? X86::R10 : X86::R10D;
2314     const unsigned Reg11 = IsLP64 ? X86::R11 : X86::R11D;
2315     const unsigned MOVrr = IsLP64 ? X86::MOV64rr : X86::MOV32rr;
2316     const unsigned MOVri = IsLP64 ? X86::MOV64ri : X86::MOV32ri;
2317 
2318     if (IsNested)
2319       BuildMI(allocMBB, DL, TII.get(MOVrr), RegAX).addReg(Reg10);
2320 
2321     BuildMI(allocMBB, DL, TII.get(MOVri), Reg10)
2322       .addImm(StackSize);
2323     BuildMI(allocMBB, DL, TII.get(MOVri), Reg11)
2324       .addImm(X86FI->getArgumentStackSize());
2325   } else {
2326     BuildMI(allocMBB, DL, TII.get(X86::PUSHi32))
2327       .addImm(X86FI->getArgumentStackSize());
2328     BuildMI(allocMBB, DL, TII.get(X86::PUSHi32))
2329       .addImm(StackSize);
2330   }
2331 
2332   // __morestack is in libgcc
2333   if (Is64Bit && MF.getTarget().getCodeModel() == CodeModel::Large) {
2334     // Under the large code model, we cannot assume that __morestack lives
2335     // within 2^31 bytes of the call site, so we cannot use pc-relative
2336     // addressing. We cannot perform the call via a temporary register,
2337     // as the rax register may be used to store the static chain, and all
2338     // other suitable registers may be either callee-save or used for
2339     // parameter passing. We cannot use the stack at this point either
2340     // because __morestack manipulates the stack directly.
2341     //
2342     // To avoid these issues, perform an indirect call via a read-only memory
2343     // location containing the address.
2344     //
2345     // This solution is not perfect, as it assumes that the .rodata section
2346     // is laid out within 2^31 bytes of each function body, but this seems
2347     // to be sufficient for JIT.
2348     BuildMI(allocMBB, DL, TII.get(X86::CALL64m))
2349         .addReg(X86::RIP)
2350         .addImm(0)
2351         .addReg(0)
2352         .addExternalSymbol("__morestack_addr")
2353         .addReg(0);
2354     MF.getMMI().setUsesMorestackAddr(true);
2355   } else {
2356     if (Is64Bit)
2357       BuildMI(allocMBB, DL, TII.get(X86::CALL64pcrel32))
2358         .addExternalSymbol("__morestack");
2359     else
2360       BuildMI(allocMBB, DL, TII.get(X86::CALLpcrel32))
2361         .addExternalSymbol("__morestack");
2362   }
2363 
2364   if (IsNested)
2365     BuildMI(allocMBB, DL, TII.get(X86::MORESTACK_RET_RESTORE_R10));
2366   else
2367     BuildMI(allocMBB, DL, TII.get(X86::MORESTACK_RET));
2368 
2369   allocMBB->addSuccessor(&PrologueMBB);
2370 
2371   checkMBB->addSuccessor(allocMBB);
2372   checkMBB->addSuccessor(&PrologueMBB);
2373 
2374 #ifdef EXPENSIVE_CHECKS
2375   MF.verify();
2376 #endif
2377 }
2378 
2379 /// Lookup an ERTS parameter in the !hipe.literals named metadata node.
2380 /// HiPE provides Erlang Runtime System-internal parameters, such as PCB offsets
2381 /// to fields it needs, through a named metadata node "hipe.literals" containing
2382 /// name-value pairs.
2383 static unsigned getHiPELiteral(
2384     NamedMDNode *HiPELiteralsMD, const StringRef LiteralName) {
2385   for (int i = 0, e = HiPELiteralsMD->getNumOperands(); i != e; ++i) {
2386     MDNode *Node = HiPELiteralsMD->getOperand(i);
2387     if (Node->getNumOperands() != 2) continue;
2388     MDString *NodeName = dyn_cast<MDString>(Node->getOperand(0));
2389     ValueAsMetadata *NodeVal = dyn_cast<ValueAsMetadata>(Node->getOperand(1));
2390     if (!NodeName || !NodeVal) continue;
2391     ConstantInt *ValConst = dyn_cast_or_null<ConstantInt>(NodeVal->getValue());
2392     if (ValConst && NodeName->getString() == LiteralName) {
2393       return ValConst->getZExtValue();
2394     }
2395   }
2396 
2397   report_fatal_error("HiPE literal " + LiteralName
2398                      + " required but not provided");
2399 }
2400 
2401 /// Erlang programs may need a special prologue to handle the stack size they
2402 /// might need at runtime. That is because Erlang/OTP does not implement a C
2403 /// stack but uses a custom implementation of hybrid stack/heap architecture.
2404 /// (for more information see Eric Stenman's Ph.D. thesis:
2405 /// http://publications.uu.se/uu/fulltext/nbn_se_uu_diva-2688.pdf)
2406 ///
2407 /// CheckStack:
2408 ///       temp0 = sp - MaxStack
2409 ///       if( temp0 < SP_LIMIT(P) ) goto IncStack else goto OldStart
2410 /// OldStart:
2411 ///       ...
2412 /// IncStack:
2413 ///       call inc_stack   # doubles the stack space
2414 ///       temp0 = sp - MaxStack
2415 ///       if( temp0 < SP_LIMIT(P) ) goto IncStack else goto OldStart
2416 void X86FrameLowering::adjustForHiPEPrologue(
2417     MachineFunction &MF, MachineBasicBlock &PrologueMBB) const {
2418   MachineFrameInfo &MFI = MF.getFrameInfo();
2419   DebugLoc DL;
2420 
2421   // To support shrink-wrapping we would need to insert the new blocks
2422   // at the right place and update the branches to PrologueMBB.
2423   assert(&(*MF.begin()) == &PrologueMBB && "Shrink-wrapping not supported yet");
2424 
2425   // HiPE-specific values
2426   NamedMDNode *HiPELiteralsMD = MF.getMMI().getModule()
2427     ->getNamedMetadata("hipe.literals");
2428   if (!HiPELiteralsMD)
2429     report_fatal_error(
2430         "Can't generate HiPE prologue without runtime parameters");
2431   const unsigned HipeLeafWords
2432     = getHiPELiteral(HiPELiteralsMD,
2433                      Is64Bit ? "AMD64_LEAF_WORDS" : "X86_LEAF_WORDS");
2434   const unsigned CCRegisteredArgs = Is64Bit ? 6 : 5;
2435   const unsigned Guaranteed = HipeLeafWords * SlotSize;
2436   unsigned CallerStkArity = MF.getFunction()->arg_size() > CCRegisteredArgs ?
2437                             MF.getFunction()->arg_size() - CCRegisteredArgs : 0;
2438   unsigned MaxStack = MFI.getStackSize() + CallerStkArity*SlotSize + SlotSize;
2439 
2440   assert(STI.isTargetLinux() &&
2441          "HiPE prologue is only supported on Linux operating systems.");
2442 
2443   // Compute the largest caller's frame that is needed to fit the callees'
2444   // frames. This 'MaxStack' is computed from:
2445   //
2446   // a) the fixed frame size, which is the space needed for all spilled temps,
2447   // b) outgoing on-stack parameter areas, and
2448   // c) the minimum stack space this function needs to make available for the
2449   //    functions it calls (a tunable ABI property).
2450   if (MFI.hasCalls()) {
2451     unsigned MoreStackForCalls = 0;
2452 
2453     for (auto &MBB : MF) {
2454       for (auto &MI : MBB) {
2455         if (!MI.isCall())
2456           continue;
2457 
2458         // Get callee operand.
2459         const MachineOperand &MO = MI.getOperand(0);
2460 
2461         // Only take account of global function calls (no closures etc.).
2462         if (!MO.isGlobal())
2463           continue;
2464 
2465         const Function *F = dyn_cast<Function>(MO.getGlobal());
2466         if (!F)
2467           continue;
2468 
2469         // Do not update 'MaxStack' for primitive and built-in functions
2470         // (encoded with names either starting with "erlang."/"bif_" or not
2471         // having a ".", such as a simple <Module>.<Function>.<Arity>, or an
2472         // "_", such as the BIF "suspend_0") as they are executed on another
2473         // stack.
2474         if (F->getName().find("erlang.") != StringRef::npos ||
2475             F->getName().find("bif_") != StringRef::npos ||
2476             F->getName().find_first_of("._") == StringRef::npos)
2477           continue;
2478 
2479         unsigned CalleeStkArity =
2480           F->arg_size() > CCRegisteredArgs ? F->arg_size()-CCRegisteredArgs : 0;
2481         if (HipeLeafWords - 1 > CalleeStkArity)
2482           MoreStackForCalls = std::max(MoreStackForCalls,
2483                                (HipeLeafWords - 1 - CalleeStkArity) * SlotSize);
2484       }
2485     }
2486     MaxStack += MoreStackForCalls;
2487   }
2488 
2489   // If the stack frame needed is larger than the guaranteed then runtime checks
2490   // and calls to "inc_stack_0" BIF should be inserted in the assembly prologue.
2491   if (MaxStack > Guaranteed) {
2492     MachineBasicBlock *stackCheckMBB = MF.CreateMachineBasicBlock();
2493     MachineBasicBlock *incStackMBB = MF.CreateMachineBasicBlock();
2494 
2495     for (const auto &LI : PrologueMBB.liveins()) {
2496       stackCheckMBB->addLiveIn(LI);
2497       incStackMBB->addLiveIn(LI);
2498     }
2499 
2500     MF.push_front(incStackMBB);
2501     MF.push_front(stackCheckMBB);
2502 
2503     unsigned ScratchReg, SPReg, PReg, SPLimitOffset;
2504     unsigned LEAop, CMPop, CALLop;
2505     SPLimitOffset = getHiPELiteral(HiPELiteralsMD, "P_NSP_LIMIT");
2506     if (Is64Bit) {
2507       SPReg = X86::RSP;
2508       PReg  = X86::RBP;
2509       LEAop = X86::LEA64r;
2510       CMPop = X86::CMP64rm;
2511       CALLop = X86::CALL64pcrel32;
2512     } else {
2513       SPReg = X86::ESP;
2514       PReg  = X86::EBP;
2515       LEAop = X86::LEA32r;
2516       CMPop = X86::CMP32rm;
2517       CALLop = X86::CALLpcrel32;
2518     }
2519 
2520     ScratchReg = GetScratchRegister(Is64Bit, IsLP64, MF, true);
2521     assert(!MF.getRegInfo().isLiveIn(ScratchReg) &&
2522            "HiPE prologue scratch register is live-in");
2523 
2524     // Create new MBB for StackCheck:
2525     addRegOffset(BuildMI(stackCheckMBB, DL, TII.get(LEAop), ScratchReg),
2526                  SPReg, false, -MaxStack);
2527     // SPLimitOffset is in a fixed heap location (pointed by BP).
2528     addRegOffset(BuildMI(stackCheckMBB, DL, TII.get(CMPop))
2529                  .addReg(ScratchReg), PReg, false, SPLimitOffset);
2530     BuildMI(stackCheckMBB, DL, TII.get(X86::JAE_1)).addMBB(&PrologueMBB);
2531 
2532     // Create new MBB for IncStack:
2533     BuildMI(incStackMBB, DL, TII.get(CALLop)).
2534       addExternalSymbol("inc_stack_0");
2535     addRegOffset(BuildMI(incStackMBB, DL, TII.get(LEAop), ScratchReg),
2536                  SPReg, false, -MaxStack);
2537     addRegOffset(BuildMI(incStackMBB, DL, TII.get(CMPop))
2538                  .addReg(ScratchReg), PReg, false, SPLimitOffset);
2539     BuildMI(incStackMBB, DL, TII.get(X86::JLE_1)).addMBB(incStackMBB);
2540 
2541     stackCheckMBB->addSuccessor(&PrologueMBB, {99, 100});
2542     stackCheckMBB->addSuccessor(incStackMBB, {1, 100});
2543     incStackMBB->addSuccessor(&PrologueMBB, {99, 100});
2544     incStackMBB->addSuccessor(incStackMBB, {1, 100});
2545   }
2546 #ifdef EXPENSIVE_CHECKS
2547   MF.verify();
2548 #endif
2549 }
2550 
2551 bool X86FrameLowering::adjustStackWithPops(MachineBasicBlock &MBB,
2552                                            MachineBasicBlock::iterator MBBI,
2553                                            const DebugLoc &DL,
2554                                            int Offset) const {
2555 
2556   if (Offset <= 0)
2557     return false;
2558 
2559   if (Offset % SlotSize)
2560     return false;
2561 
2562   int NumPops = Offset / SlotSize;
2563   // This is only worth it if we have at most 2 pops.
2564   if (NumPops != 1 && NumPops != 2)
2565     return false;
2566 
2567   // Handle only the trivial case where the adjustment directly follows
2568   // a call. This is the most common one, anyway.
2569   if (MBBI == MBB.begin())
2570     return false;
2571   MachineBasicBlock::iterator Prev = std::prev(MBBI);
2572   if (!Prev->isCall() || !Prev->getOperand(1).isRegMask())
2573     return false;
2574 
2575   unsigned Regs[2];
2576   unsigned FoundRegs = 0;
2577 
2578   auto RegMask = Prev->getOperand(1);
2579 
2580   auto &RegClass =
2581       Is64Bit ? X86::GR64_NOREX_NOSPRegClass : X86::GR32_NOREX_NOSPRegClass;
2582   // Try to find up to NumPops free registers.
2583   for (auto Candidate : RegClass) {
2584 
2585     // Poor man's liveness:
2586     // Since we're immediately after a call, any register that is clobbered
2587     // by the call and not defined by it can be considered dead.
2588     if (!RegMask.clobbersPhysReg(Candidate))
2589       continue;
2590 
2591     bool IsDef = false;
2592     for (const MachineOperand &MO : Prev->implicit_operands()) {
2593       if (MO.isReg() && MO.isDef() &&
2594           TRI->isSuperOrSubRegisterEq(MO.getReg(), Candidate)) {
2595         IsDef = true;
2596         break;
2597       }
2598     }
2599 
2600     if (IsDef)
2601       continue;
2602 
2603     Regs[FoundRegs++] = Candidate;
2604     if (FoundRegs == (unsigned)NumPops)
2605       break;
2606   }
2607 
2608   if (FoundRegs == 0)
2609     return false;
2610 
2611   // If we found only one free register, but need two, reuse the same one twice.
2612   while (FoundRegs < (unsigned)NumPops)
2613     Regs[FoundRegs++] = Regs[0];
2614 
2615   for (int i = 0; i < NumPops; ++i)
2616     BuildMI(MBB, MBBI, DL,
2617             TII.get(STI.is64Bit() ? X86::POP64r : X86::POP32r), Regs[i]);
2618 
2619   return true;
2620 }
2621 
2622 MachineBasicBlock::iterator X86FrameLowering::
2623 eliminateCallFramePseudoInstr(MachineFunction &MF, MachineBasicBlock &MBB,
2624                               MachineBasicBlock::iterator I) const {
2625   bool reserveCallFrame = hasReservedCallFrame(MF);
2626   unsigned Opcode = I->getOpcode();
2627   bool isDestroy = Opcode == TII.getCallFrameDestroyOpcode();
2628   DebugLoc DL = I->getDebugLoc();
2629   uint64_t Amount = !reserveCallFrame ? I->getOperand(0).getImm() : 0;
2630   uint64_t InternalAmt = (isDestroy || Amount) ? I->getOperand(1).getImm() : 0;
2631   I = MBB.erase(I);
2632   auto InsertPos = skipDebugInstructionsForward(I, MBB.end());
2633 
2634   if (!reserveCallFrame) {
2635     // If the stack pointer can be changed after prologue, turn the
2636     // adjcallstackup instruction into a 'sub ESP, <amt>' and the
2637     // adjcallstackdown instruction into 'add ESP, <amt>'
2638 
2639     // We need to keep the stack aligned properly.  To do this, we round the
2640     // amount of space needed for the outgoing arguments up to the next
2641     // alignment boundary.
2642     unsigned StackAlign = getStackAlignment();
2643     Amount = alignTo(Amount, StackAlign);
2644 
2645     MachineModuleInfo &MMI = MF.getMMI();
2646     const Function *Fn = MF.getFunction();
2647     bool WindowsCFI = MF.getTarget().getMCAsmInfo()->usesWindowsCFI();
2648     bool DwarfCFI = !WindowsCFI &&
2649                     (MMI.hasDebugInfo() || Fn->needsUnwindTableEntry());
2650 
2651     // If we have any exception handlers in this function, and we adjust
2652     // the SP before calls, we may need to indicate this to the unwinder
2653     // using GNU_ARGS_SIZE. Note that this may be necessary even when
2654     // Amount == 0, because the preceding function may have set a non-0
2655     // GNU_ARGS_SIZE.
2656     // TODO: We don't need to reset this between subsequent functions,
2657     // if it didn't change.
2658     bool HasDwarfEHHandlers = !WindowsCFI && !MF.getLandingPads().empty();
2659 
2660     if (HasDwarfEHHandlers && !isDestroy &&
2661         MF.getInfo<X86MachineFunctionInfo>()->getHasPushSequences())
2662       BuildCFI(MBB, InsertPos, DL,
2663                MCCFIInstruction::createGnuArgsSize(nullptr, Amount));
2664 
2665     if (Amount == 0)
2666       return I;
2667 
2668     // Factor out the amount that gets handled inside the sequence
2669     // (Pushes of argument for frame setup, callee pops for frame destroy)
2670     Amount -= InternalAmt;
2671 
2672     // TODO: This is needed only if we require precise CFA.
2673     // If this is a callee-pop calling convention, emit a CFA adjust for
2674     // the amount the callee popped.
2675     if (isDestroy && InternalAmt && DwarfCFI && !hasFP(MF))
2676       BuildCFI(MBB, InsertPos, DL,
2677                MCCFIInstruction::createAdjustCfaOffset(nullptr, -InternalAmt));
2678 
2679     // Add Amount to SP to destroy a frame, or subtract to setup.
2680     int64_t StackAdjustment = isDestroy ? Amount : -Amount;
2681     int64_t CfaAdjustment = -StackAdjustment;
2682 
2683     if (StackAdjustment) {
2684       // Merge with any previous or following adjustment instruction. Note: the
2685       // instructions merged with here do not have CFI, so their stack
2686       // adjustments do not feed into CfaAdjustment.
2687       StackAdjustment += mergeSPUpdates(MBB, InsertPos, true);
2688       StackAdjustment += mergeSPUpdates(MBB, InsertPos, false);
2689 
2690       if (StackAdjustment) {
2691         if (!(Fn->optForMinSize() &&
2692               adjustStackWithPops(MBB, InsertPos, DL, StackAdjustment)))
2693           BuildStackAdjustment(MBB, InsertPos, DL, StackAdjustment,
2694                                /*InEpilogue=*/false);
2695       }
2696     }
2697 
2698     if (DwarfCFI && !hasFP(MF)) {
2699       // If we don't have FP, but need to generate unwind information,
2700       // we need to set the correct CFA offset after the stack adjustment.
2701       // How much we adjust the CFA offset depends on whether we're emitting
2702       // CFI only for EH purposes or for debugging. EH only requires the CFA
2703       // offset to be correct at each call site, while for debugging we want
2704       // it to be more precise.
2705 
2706       // TODO: When not using precise CFA, we also need to adjust for the
2707       // InternalAmt here.
2708       if (CfaAdjustment) {
2709         BuildCFI(MBB, InsertPos, DL,
2710                  MCCFIInstruction::createAdjustCfaOffset(nullptr,
2711                                                          CfaAdjustment));
2712       }
2713     }
2714 
2715     return I;
2716   }
2717 
2718   if (isDestroy && InternalAmt) {
2719     // If we are performing frame pointer elimination and if the callee pops
2720     // something off the stack pointer, add it back.  We do this until we have
2721     // more advanced stack pointer tracking ability.
2722     // We are not tracking the stack pointer adjustment by the callee, so make
2723     // sure we restore the stack pointer immediately after the call, there may
2724     // be spill code inserted between the CALL and ADJCALLSTACKUP instructions.
2725     MachineBasicBlock::iterator CI = I;
2726     MachineBasicBlock::iterator B = MBB.begin();
2727     while (CI != B && !std::prev(CI)->isCall())
2728       --CI;
2729     BuildStackAdjustment(MBB, CI, DL, -InternalAmt, /*InEpilogue=*/false);
2730   }
2731 
2732   return I;
2733 }
2734 
2735 bool X86FrameLowering::canUseAsPrologue(const MachineBasicBlock &MBB) const {
2736   assert(MBB.getParent() && "Block is not attached to a function!");
2737   const MachineFunction &MF = *MBB.getParent();
2738   return !TRI->needsStackRealignment(MF) || !MBB.isLiveIn(X86::EFLAGS);
2739 }
2740 
2741 bool X86FrameLowering::canUseAsEpilogue(const MachineBasicBlock &MBB) const {
2742   assert(MBB.getParent() && "Block is not attached to a function!");
2743 
2744   // Win64 has strict requirements in terms of epilogue and we are
2745   // not taking a chance at messing with them.
2746   // I.e., unless this block is already an exit block, we can't use
2747   // it as an epilogue.
2748   if (STI.isTargetWin64() && !MBB.succ_empty() && !MBB.isReturnBlock())
2749     return false;
2750 
2751   if (canUseLEAForSPInEpilogue(*MBB.getParent()))
2752     return true;
2753 
2754   // If we cannot use LEA to adjust SP, we may need to use ADD, which
2755   // clobbers the EFLAGS. Check that we do not need to preserve it,
2756   // otherwise, conservatively assume this is not
2757   // safe to insert the epilogue here.
2758   return !flagsNeedToBePreservedBeforeTheTerminators(MBB);
2759 }
2760 
2761 bool X86FrameLowering::enableShrinkWrapping(const MachineFunction &MF) const {
2762   // If we may need to emit frameless compact unwind information, give
2763   // up as this is currently broken: PR25614.
2764   return (MF.getFunction()->hasFnAttribute(Attribute::NoUnwind) || hasFP(MF)) &&
2765          // The lowering of segmented stack and HiPE only support entry blocks
2766          // as prologue blocks: PR26107.
2767          // This limitation may be lifted if we fix:
2768          // - adjustForSegmentedStacks
2769          // - adjustForHiPEPrologue
2770          MF.getFunction()->getCallingConv() != CallingConv::HiPE &&
2771          !MF.shouldSplitStack();
2772 }
2773 
2774 MachineBasicBlock::iterator X86FrameLowering::restoreWin32EHStackPointers(
2775     MachineBasicBlock &MBB, MachineBasicBlock::iterator MBBI,
2776     const DebugLoc &DL, bool RestoreSP) const {
2777   assert(STI.isTargetWindowsMSVC() && "funclets only supported in MSVC env");
2778   assert(STI.isTargetWin32() && "EBP/ESI restoration only required on win32");
2779   assert(STI.is32Bit() && !Uses64BitFramePtr &&
2780          "restoring EBP/ESI on non-32-bit target");
2781 
2782   MachineFunction &MF = *MBB.getParent();
2783   unsigned FramePtr = TRI->getFrameRegister(MF);
2784   unsigned BasePtr = TRI->getBaseRegister();
2785   WinEHFuncInfo &FuncInfo = *MF.getWinEHFuncInfo();
2786   X86MachineFunctionInfo *X86FI = MF.getInfo<X86MachineFunctionInfo>();
2787   MachineFrameInfo &MFI = MF.getFrameInfo();
2788 
2789   // FIXME: Don't set FrameSetup flag in catchret case.
2790 
2791   int FI = FuncInfo.EHRegNodeFrameIndex;
2792   int EHRegSize = MFI.getObjectSize(FI);
2793 
2794   if (RestoreSP) {
2795     // MOV32rm -EHRegSize(%ebp), %esp
2796     addRegOffset(BuildMI(MBB, MBBI, DL, TII.get(X86::MOV32rm), X86::ESP),
2797                  X86::EBP, true, -EHRegSize)
2798         .setMIFlag(MachineInstr::FrameSetup);
2799   }
2800 
2801   unsigned UsedReg;
2802   int EHRegOffset = getFrameIndexReference(MF, FI, UsedReg);
2803   int EndOffset = -EHRegOffset - EHRegSize;
2804   FuncInfo.EHRegNodeEndOffset = EndOffset;
2805 
2806   if (UsedReg == FramePtr) {
2807     // ADD $offset, %ebp
2808     unsigned ADDri = getADDriOpcode(false, EndOffset);
2809     BuildMI(MBB, MBBI, DL, TII.get(ADDri), FramePtr)
2810         .addReg(FramePtr)
2811         .addImm(EndOffset)
2812         .setMIFlag(MachineInstr::FrameSetup)
2813         ->getOperand(3)
2814         .setIsDead();
2815     assert(EndOffset >= 0 &&
2816            "end of registration object above normal EBP position!");
2817   } else if (UsedReg == BasePtr) {
2818     // LEA offset(%ebp), %esi
2819     addRegOffset(BuildMI(MBB, MBBI, DL, TII.get(X86::LEA32r), BasePtr),
2820                  FramePtr, false, EndOffset)
2821         .setMIFlag(MachineInstr::FrameSetup);
2822     // MOV32rm SavedEBPOffset(%esi), %ebp
2823     assert(X86FI->getHasSEHFramePtrSave());
2824     int Offset =
2825         getFrameIndexReference(MF, X86FI->getSEHFramePtrSaveIndex(), UsedReg);
2826     assert(UsedReg == BasePtr);
2827     addRegOffset(BuildMI(MBB, MBBI, DL, TII.get(X86::MOV32rm), FramePtr),
2828                  UsedReg, true, Offset)
2829         .setMIFlag(MachineInstr::FrameSetup);
2830   } else {
2831     llvm_unreachable("32-bit frames with WinEH must use FramePtr or BasePtr");
2832   }
2833   return MBBI;
2834 }
2835 
2836 namespace {
2837 // Struct used by orderFrameObjects to help sort the stack objects.
2838 struct X86FrameSortingObject {
2839   bool IsValid = false;         // true if we care about this Object.
2840   unsigned ObjectIndex = 0;     // Index of Object into MFI list.
2841   unsigned ObjectSize = 0;      // Size of Object in bytes.
2842   unsigned ObjectAlignment = 1; // Alignment of Object in bytes.
2843   unsigned ObjectNumUses = 0;   // Object static number of uses.
2844 };
2845 
2846 // The comparison function we use for std::sort to order our local
2847 // stack symbols. The current algorithm is to use an estimated
2848 // "density". This takes into consideration the size and number of
2849 // uses each object has in order to roughly minimize code size.
2850 // So, for example, an object of size 16B that is referenced 5 times
2851 // will get higher priority than 4 4B objects referenced 1 time each.
2852 // It's not perfect and we may be able to squeeze a few more bytes out of
2853 // it (for example : 0(esp) requires fewer bytes, symbols allocated at the
2854 // fringe end can have special consideration, given their size is less
2855 // important, etc.), but the algorithmic complexity grows too much to be
2856 // worth the extra gains we get. This gets us pretty close.
2857 // The final order leaves us with objects with highest priority going
2858 // at the end of our list.
2859 struct X86FrameSortingComparator {
2860   inline bool operator()(const X86FrameSortingObject &A,
2861                          const X86FrameSortingObject &B) {
2862     uint64_t DensityAScaled, DensityBScaled;
2863 
2864     // For consistency in our comparison, all invalid objects are placed
2865     // at the end. This also allows us to stop walking when we hit the
2866     // first invalid item after it's all sorted.
2867     if (!A.IsValid)
2868       return false;
2869     if (!B.IsValid)
2870       return true;
2871 
2872     // The density is calculated by doing :
2873     //     (double)DensityA = A.ObjectNumUses / A.ObjectSize
2874     //     (double)DensityB = B.ObjectNumUses / B.ObjectSize
2875     // Since this approach may cause inconsistencies in
2876     // the floating point <, >, == comparisons, depending on the floating
2877     // point model with which the compiler was built, we're going
2878     // to scale both sides by multiplying with
2879     // A.ObjectSize * B.ObjectSize. This ends up factoring away
2880     // the division and, with it, the need for any floating point
2881     // arithmetic.
2882     DensityAScaled = static_cast<uint64_t>(A.ObjectNumUses) *
2883       static_cast<uint64_t>(B.ObjectSize);
2884     DensityBScaled = static_cast<uint64_t>(B.ObjectNumUses) *
2885       static_cast<uint64_t>(A.ObjectSize);
2886 
2887     // If the two densities are equal, prioritize highest alignment
2888     // objects. This allows for similar alignment objects
2889     // to be packed together (given the same density).
2890     // There's room for improvement here, also, since we can pack
2891     // similar alignment (different density) objects next to each
2892     // other to save padding. This will also require further
2893     // complexity/iterations, and the overall gain isn't worth it,
2894     // in general. Something to keep in mind, though.
2895     if (DensityAScaled == DensityBScaled)
2896       return A.ObjectAlignment < B.ObjectAlignment;
2897 
2898     return DensityAScaled < DensityBScaled;
2899   }
2900 };
2901 } // namespace
2902 
2903 // Order the symbols in the local stack.
2904 // We want to place the local stack objects in some sort of sensible order.
2905 // The heuristic we use is to try and pack them according to static number
2906 // of uses and size of object in order to minimize code size.
2907 void X86FrameLowering::orderFrameObjects(
2908     const MachineFunction &MF, SmallVectorImpl<int> &ObjectsToAllocate) const {
2909   const MachineFrameInfo &MFI = MF.getFrameInfo();
2910 
2911   // Don't waste time if there's nothing to do.
2912   if (ObjectsToAllocate.empty())
2913     return;
2914 
2915   // Create an array of all MFI objects. We won't need all of these
2916   // objects, but we're going to create a full array of them to make
2917   // it easier to index into when we're counting "uses" down below.
2918   // We want to be able to easily/cheaply access an object by simply
2919   // indexing into it, instead of having to search for it every time.
2920   std::vector<X86FrameSortingObject> SortingObjects(MFI.getObjectIndexEnd());
2921 
2922   // Walk the objects we care about and mark them as such in our working
2923   // struct.
2924   for (auto &Obj : ObjectsToAllocate) {
2925     SortingObjects[Obj].IsValid = true;
2926     SortingObjects[Obj].ObjectIndex = Obj;
2927     SortingObjects[Obj].ObjectAlignment = MFI.getObjectAlignment(Obj);
2928     // Set the size.
2929     int ObjectSize = MFI.getObjectSize(Obj);
2930     if (ObjectSize == 0)
2931       // Variable size. Just use 4.
2932       SortingObjects[Obj].ObjectSize = 4;
2933     else
2934       SortingObjects[Obj].ObjectSize = ObjectSize;
2935   }
2936 
2937   // Count the number of uses for each object.
2938   for (auto &MBB : MF) {
2939     for (auto &MI : MBB) {
2940       if (MI.isDebugValue())
2941         continue;
2942       for (const MachineOperand &MO : MI.operands()) {
2943         // Check to see if it's a local stack symbol.
2944         if (!MO.isFI())
2945           continue;
2946         int Index = MO.getIndex();
2947         // Check to see if it falls within our range, and is tagged
2948         // to require ordering.
2949         if (Index >= 0 && Index < MFI.getObjectIndexEnd() &&
2950             SortingObjects[Index].IsValid)
2951           SortingObjects[Index].ObjectNumUses++;
2952       }
2953     }
2954   }
2955 
2956   // Sort the objects using X86FrameSortingAlgorithm (see its comment for
2957   // info).
2958   std::stable_sort(SortingObjects.begin(), SortingObjects.end(),
2959                    X86FrameSortingComparator());
2960 
2961   // Now modify the original list to represent the final order that
2962   // we want. The order will depend on whether we're going to access them
2963   // from the stack pointer or the frame pointer. For SP, the list should
2964   // end up with the END containing objects that we want with smaller offsets.
2965   // For FP, it should be flipped.
2966   int i = 0;
2967   for (auto &Obj : SortingObjects) {
2968     // All invalid items are sorted at the end, so it's safe to stop.
2969     if (!Obj.IsValid)
2970       break;
2971     ObjectsToAllocate[i++] = Obj.ObjectIndex;
2972   }
2973 
2974   // Flip it if we're accessing off of the FP.
2975   if (!TRI->needsStackRealignment(MF) && hasFP(MF))
2976     std::reverse(ObjectsToAllocate.begin(), ObjectsToAllocate.end());
2977 }
2978 
2979 
2980 unsigned X86FrameLowering::getWinEHParentFrameOffset(const MachineFunction &MF) const {
2981   // RDX, the parent frame pointer, is homed into 16(%rsp) in the prologue.
2982   unsigned Offset = 16;
2983   // RBP is immediately pushed.
2984   Offset += SlotSize;
2985   // All callee-saved registers are then pushed.
2986   Offset += MF.getInfo<X86MachineFunctionInfo>()->getCalleeSavedFrameSize();
2987   // Every funclet allocates enough stack space for the largest outgoing call.
2988   Offset += getWinEHFuncletFrameSize(MF);
2989   return Offset;
2990 }
2991 
2992 void X86FrameLowering::processFunctionBeforeFrameFinalized(
2993     MachineFunction &MF, RegScavenger *RS) const {
2994   // If this function isn't doing Win64-style C++ EH, we don't need to do
2995   // anything.
2996   const Function *Fn = MF.getFunction();
2997   if (!STI.is64Bit() || !MF.hasEHFunclets() ||
2998       classifyEHPersonality(Fn->getPersonalityFn()) != EHPersonality::MSVC_CXX)
2999     return;
3000 
3001   // Win64 C++ EH needs to allocate the UnwindHelp object at some fixed offset
3002   // relative to RSP after the prologue.  Find the offset of the last fixed
3003   // object, so that we can allocate a slot immediately following it. If there
3004   // were no fixed objects, use offset -SlotSize, which is immediately after the
3005   // return address. Fixed objects have negative frame indices.
3006   MachineFrameInfo &MFI = MF.getFrameInfo();
3007   WinEHFuncInfo &EHInfo = *MF.getWinEHFuncInfo();
3008   int64_t MinFixedObjOffset = -SlotSize;
3009   for (int I = MFI.getObjectIndexBegin(); I < 0; ++I)
3010     MinFixedObjOffset = std::min(MinFixedObjOffset, MFI.getObjectOffset(I));
3011 
3012   for (WinEHTryBlockMapEntry &TBME : EHInfo.TryBlockMap) {
3013     for (WinEHHandlerType &H : TBME.HandlerArray) {
3014       int FrameIndex = H.CatchObj.FrameIndex;
3015       if (FrameIndex != INT_MAX) {
3016         // Ensure alignment.
3017         unsigned Align = MFI.getObjectAlignment(FrameIndex);
3018         MinFixedObjOffset -= std::abs(MinFixedObjOffset) % Align;
3019         MinFixedObjOffset -= MFI.getObjectSize(FrameIndex);
3020         MFI.setObjectOffset(FrameIndex, MinFixedObjOffset);
3021       }
3022     }
3023   }
3024 
3025   // Ensure alignment.
3026   MinFixedObjOffset -= std::abs(MinFixedObjOffset) % 8;
3027   int64_t UnwindHelpOffset = MinFixedObjOffset - SlotSize;
3028   int UnwindHelpFI =
3029       MFI.CreateFixedObject(SlotSize, UnwindHelpOffset, /*Immutable=*/false);
3030   EHInfo.UnwindHelpFrameIdx = UnwindHelpFI;
3031 
3032   // Store -2 into UnwindHelp on function entry. We have to scan forwards past
3033   // other frame setup instructions.
3034   MachineBasicBlock &MBB = MF.front();
3035   auto MBBI = MBB.begin();
3036   while (MBBI != MBB.end() && MBBI->getFlag(MachineInstr::FrameSetup))
3037     ++MBBI;
3038 
3039   DebugLoc DL = MBB.findDebugLoc(MBBI);
3040   addFrameReference(BuildMI(MBB, MBBI, DL, TII.get(X86::MOV64mi32)),
3041                     UnwindHelpFI)
3042       .addImm(-2);
3043 }
3044