1 //===- InstCombineSimplifyDemanded.cpp ------------------------------------===//
2 //
3 // Part of the LLVM Project, under the Apache License v2.0 with LLVM Exceptions.
4 // See https://llvm.org/LICENSE.txt for license information.
5 // SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception
6 //
7 //===----------------------------------------------------------------------===//
8 //
9 // This file contains logic for simplifying instructions based on information
10 // about how they are used.
11 //
12 //===----------------------------------------------------------------------===//
13 
14 #include "InstCombineInternal.h"
15 #include "llvm/Analysis/TargetTransformInfo.h"
16 #include "llvm/Analysis/ValueTracking.h"
17 #include "llvm/IR/IntrinsicInst.h"
18 #include "llvm/IR/PatternMatch.h"
19 #include "llvm/Support/KnownBits.h"
20 #include "llvm/Transforms/InstCombine/InstCombiner.h"
21 
22 using namespace llvm;
23 using namespace llvm::PatternMatch;
24 
25 #define DEBUG_TYPE "instcombine"
26 
27 /// Check to see if the specified operand of the specified instruction is a
28 /// constant integer. If so, check to see if there are any bits set in the
29 /// constant that are not demanded. If so, shrink the constant and return true.
30 static bool ShrinkDemandedConstant(Instruction *I, unsigned OpNo,
31                                    const APInt &Demanded) {
32   assert(I && "No instruction?");
33   assert(OpNo < I->getNumOperands() && "Operand index too large");
34 
35   // The operand must be a constant integer or splat integer.
36   Value *Op = I->getOperand(OpNo);
37   const APInt *C;
38   if (!match(Op, m_APInt(C)))
39     return false;
40 
41   // If there are no bits set that aren't demanded, nothing to do.
42   if (C->isSubsetOf(Demanded))
43     return false;
44 
45   // This instruction is producing bits that are not demanded. Shrink the RHS.
46   I->setOperand(OpNo, ConstantInt::get(Op->getType(), *C & Demanded));
47 
48   return true;
49 }
50 
51 
52 
53 /// Inst is an integer instruction that SimplifyDemandedBits knows about. See if
54 /// the instruction has any properties that allow us to simplify its operands.
55 bool InstCombinerImpl::SimplifyDemandedInstructionBits(Instruction &Inst) {
56   unsigned BitWidth = Inst.getType()->getScalarSizeInBits();
57   KnownBits Known(BitWidth);
58   APInt DemandedMask(APInt::getAllOnes(BitWidth));
59 
60   Value *V = SimplifyDemandedUseBits(&Inst, DemandedMask, Known,
61                                      0, &Inst);
62   if (!V) return false;
63   if (V == &Inst) return true;
64   replaceInstUsesWith(Inst, V);
65   return true;
66 }
67 
68 /// This form of SimplifyDemandedBits simplifies the specified instruction
69 /// operand if possible, updating it in place. It returns true if it made any
70 /// change and false otherwise.
71 bool InstCombinerImpl::SimplifyDemandedBits(Instruction *I, unsigned OpNo,
72                                             const APInt &DemandedMask,
73                                             KnownBits &Known, unsigned Depth) {
74   Use &U = I->getOperandUse(OpNo);
75   Value *NewVal = SimplifyDemandedUseBits(U.get(), DemandedMask, Known,
76                                           Depth, I);
77   if (!NewVal) return false;
78   if (Instruction* OpInst = dyn_cast<Instruction>(U))
79     salvageDebugInfo(*OpInst);
80 
81   replaceUse(U, NewVal);
82   return true;
83 }
84 
85 /// This function attempts to replace V with a simpler value based on the
86 /// demanded bits. When this function is called, it is known that only the bits
87 /// set in DemandedMask of the result of V are ever used downstream.
88 /// Consequently, depending on the mask and V, it may be possible to replace V
89 /// with a constant or one of its operands. In such cases, this function does
90 /// the replacement and returns true. In all other cases, it returns false after
91 /// analyzing the expression and setting KnownOne and known to be one in the
92 /// expression. Known.Zero contains all the bits that are known to be zero in
93 /// the expression. These are provided to potentially allow the caller (which
94 /// might recursively be SimplifyDemandedBits itself) to simplify the
95 /// expression.
96 /// Known.One and Known.Zero always follow the invariant that:
97 ///   Known.One & Known.Zero == 0.
98 /// That is, a bit can't be both 1 and 0. Note that the bits in Known.One and
99 /// Known.Zero may only be accurate for those bits set in DemandedMask. Note
100 /// also that the bitwidth of V, DemandedMask, Known.Zero and Known.One must all
101 /// be the same.
102 ///
103 /// This returns null if it did not change anything and it permits no
104 /// simplification.  This returns V itself if it did some simplification of V's
105 /// operands based on the information about what bits are demanded. This returns
106 /// some other non-null value if it found out that V is equal to another value
107 /// in the context where the specified bits are demanded, but not for all users.
108 Value *InstCombinerImpl::SimplifyDemandedUseBits(Value *V, APInt DemandedMask,
109                                                  KnownBits &Known,
110                                                  unsigned Depth,
111                                                  Instruction *CxtI) {
112   assert(V != nullptr && "Null pointer of Value???");
113   assert(Depth <= MaxAnalysisRecursionDepth && "Limit Search Depth");
114   uint32_t BitWidth = DemandedMask.getBitWidth();
115   Type *VTy = V->getType();
116   assert(
117       (!VTy->isIntOrIntVectorTy() || VTy->getScalarSizeInBits() == BitWidth) &&
118       Known.getBitWidth() == BitWidth &&
119       "Value *V, DemandedMask and Known must have same BitWidth");
120 
121   if (isa<Constant>(V)) {
122     computeKnownBits(V, Known, Depth, CxtI);
123     return nullptr;
124   }
125 
126   Known.resetAll();
127   if (DemandedMask.isZero()) // Not demanding any bits from V.
128     return UndefValue::get(VTy);
129 
130   if (Depth == MaxAnalysisRecursionDepth)
131     return nullptr;
132 
133   if (isa<ScalableVectorType>(VTy))
134     return nullptr;
135 
136   Instruction *I = dyn_cast<Instruction>(V);
137   if (!I) {
138     computeKnownBits(V, Known, Depth, CxtI);
139     return nullptr;        // Only analyze instructions.
140   }
141 
142   // If there are multiple uses of this value and we aren't at the root, then
143   // we can't do any simplifications of the operands, because DemandedMask
144   // only reflects the bits demanded by *one* of the users.
145   if (Depth != 0 && !I->hasOneUse())
146     return SimplifyMultipleUseDemandedBits(I, DemandedMask, Known, Depth, CxtI);
147 
148   KnownBits LHSKnown(BitWidth), RHSKnown(BitWidth);
149 
150   // If this is the root being simplified, allow it to have multiple uses,
151   // just set the DemandedMask to all bits so that we can try to simplify the
152   // operands.  This allows visitTruncInst (for example) to simplify the
153   // operand of a trunc without duplicating all the logic below.
154   if (Depth == 0 && !V->hasOneUse())
155     DemandedMask.setAllBits();
156 
157   switch (I->getOpcode()) {
158   default:
159     computeKnownBits(I, Known, Depth, CxtI);
160     break;
161   case Instruction::And: {
162     // If either the LHS or the RHS are Zero, the result is zero.
163     if (SimplifyDemandedBits(I, 1, DemandedMask, RHSKnown, Depth + 1) ||
164         SimplifyDemandedBits(I, 0, DemandedMask & ~RHSKnown.Zero, LHSKnown,
165                              Depth + 1))
166       return I;
167     assert(!RHSKnown.hasConflict() && "Bits known to be one AND zero?");
168     assert(!LHSKnown.hasConflict() && "Bits known to be one AND zero?");
169 
170     Known = LHSKnown & RHSKnown;
171 
172     // If the client is only demanding bits that we know, return the known
173     // constant.
174     if (DemandedMask.isSubsetOf(Known.Zero | Known.One))
175       return Constant::getIntegerValue(VTy, Known.One);
176 
177     // If all of the demanded bits are known 1 on one side, return the other.
178     // These bits cannot contribute to the result of the 'and'.
179     if (DemandedMask.isSubsetOf(LHSKnown.Zero | RHSKnown.One))
180       return I->getOperand(0);
181     if (DemandedMask.isSubsetOf(RHSKnown.Zero | LHSKnown.One))
182       return I->getOperand(1);
183 
184     // If the RHS is a constant, see if we can simplify it.
185     if (ShrinkDemandedConstant(I, 1, DemandedMask & ~LHSKnown.Zero))
186       return I;
187 
188     break;
189   }
190   case Instruction::Or: {
191     // If either the LHS or the RHS are One, the result is One.
192     if (SimplifyDemandedBits(I, 1, DemandedMask, RHSKnown, Depth + 1) ||
193         SimplifyDemandedBits(I, 0, DemandedMask & ~RHSKnown.One, LHSKnown,
194                              Depth + 1))
195       return I;
196     assert(!RHSKnown.hasConflict() && "Bits known to be one AND zero?");
197     assert(!LHSKnown.hasConflict() && "Bits known to be one AND zero?");
198 
199     Known = LHSKnown | RHSKnown;
200 
201     // If the client is only demanding bits that we know, return the known
202     // constant.
203     if (DemandedMask.isSubsetOf(Known.Zero | Known.One))
204       return Constant::getIntegerValue(VTy, Known.One);
205 
206     // If all of the demanded bits are known zero on one side, return the other.
207     // These bits cannot contribute to the result of the 'or'.
208     if (DemandedMask.isSubsetOf(LHSKnown.One | RHSKnown.Zero))
209       return I->getOperand(0);
210     if (DemandedMask.isSubsetOf(RHSKnown.One | LHSKnown.Zero))
211       return I->getOperand(1);
212 
213     // If the RHS is a constant, see if we can simplify it.
214     if (ShrinkDemandedConstant(I, 1, DemandedMask))
215       return I;
216 
217     break;
218   }
219   case Instruction::Xor: {
220     if (SimplifyDemandedBits(I, 1, DemandedMask, RHSKnown, Depth + 1) ||
221         SimplifyDemandedBits(I, 0, DemandedMask, LHSKnown, Depth + 1))
222       return I;
223     Value *LHS, *RHS;
224     if (DemandedMask == 1 &&
225         match(I->getOperand(0), m_Intrinsic<Intrinsic::ctpop>(m_Value(LHS))) &&
226         match(I->getOperand(1), m_Intrinsic<Intrinsic::ctpop>(m_Value(RHS)))) {
227       // (ctpop(X) ^ ctpop(Y)) & 1 --> ctpop(X^Y) & 1
228       IRBuilderBase::InsertPointGuard Guard(Builder);
229       Builder.SetInsertPoint(I);
230       auto *Xor = Builder.CreateXor(LHS, RHS);
231       return Builder.CreateUnaryIntrinsic(Intrinsic::ctpop, Xor);
232     }
233 
234     assert(!RHSKnown.hasConflict() && "Bits known to be one AND zero?");
235     assert(!LHSKnown.hasConflict() && "Bits known to be one AND zero?");
236 
237     Known = LHSKnown ^ RHSKnown;
238 
239     // If the client is only demanding bits that we know, return the known
240     // constant.
241     if (DemandedMask.isSubsetOf(Known.Zero | Known.One))
242       return Constant::getIntegerValue(VTy, Known.One);
243 
244     // If all of the demanded bits are known zero on one side, return the other.
245     // These bits cannot contribute to the result of the 'xor'.
246     if (DemandedMask.isSubsetOf(RHSKnown.Zero))
247       return I->getOperand(0);
248     if (DemandedMask.isSubsetOf(LHSKnown.Zero))
249       return I->getOperand(1);
250 
251     // If all of the demanded bits are known to be zero on one side or the
252     // other, turn this into an *inclusive* or.
253     //    e.g. (A & C1)^(B & C2) -> (A & C1)|(B & C2) iff C1&C2 == 0
254     if (DemandedMask.isSubsetOf(RHSKnown.Zero | LHSKnown.Zero)) {
255       Instruction *Or =
256         BinaryOperator::CreateOr(I->getOperand(0), I->getOperand(1),
257                                  I->getName());
258       return InsertNewInstWith(Or, *I);
259     }
260 
261     // If all of the demanded bits on one side are known, and all of the set
262     // bits on that side are also known to be set on the other side, turn this
263     // into an AND, as we know the bits will be cleared.
264     //    e.g. (X | C1) ^ C2 --> (X | C1) & ~C2 iff (C1&C2) == C2
265     if (DemandedMask.isSubsetOf(RHSKnown.Zero|RHSKnown.One) &&
266         RHSKnown.One.isSubsetOf(LHSKnown.One)) {
267       Constant *AndC = Constant::getIntegerValue(VTy,
268                                                  ~RHSKnown.One & DemandedMask);
269       Instruction *And = BinaryOperator::CreateAnd(I->getOperand(0), AndC);
270       return InsertNewInstWith(And, *I);
271     }
272 
273     // If the RHS is a constant, see if we can change it. Don't alter a -1
274     // constant because that's a canonical 'not' op, and that is better for
275     // combining, SCEV, and codegen.
276     const APInt *C;
277     if (match(I->getOperand(1), m_APInt(C)) && !C->isAllOnes()) {
278       if ((*C | ~DemandedMask).isAllOnes()) {
279         // Force bits to 1 to create a 'not' op.
280         I->setOperand(1, ConstantInt::getAllOnesValue(VTy));
281         return I;
282       }
283       // If we can't turn this into a 'not', try to shrink the constant.
284       if (ShrinkDemandedConstant(I, 1, DemandedMask))
285         return I;
286     }
287 
288     // If our LHS is an 'and' and if it has one use, and if any of the bits we
289     // are flipping are known to be set, then the xor is just resetting those
290     // bits to zero.  We can just knock out bits from the 'and' and the 'xor',
291     // simplifying both of them.
292     if (Instruction *LHSInst = dyn_cast<Instruction>(I->getOperand(0))) {
293       ConstantInt *AndRHS, *XorRHS;
294       if (LHSInst->getOpcode() == Instruction::And && LHSInst->hasOneUse() &&
295           match(I->getOperand(1), m_ConstantInt(XorRHS)) &&
296           match(LHSInst->getOperand(1), m_ConstantInt(AndRHS)) &&
297           (LHSKnown.One & RHSKnown.One & DemandedMask) != 0) {
298         APInt NewMask = ~(LHSKnown.One & RHSKnown.One & DemandedMask);
299 
300         Constant *AndC =
301             ConstantInt::get(I->getType(), NewMask & AndRHS->getValue());
302         Instruction *NewAnd = BinaryOperator::CreateAnd(I->getOperand(0), AndC);
303         InsertNewInstWith(NewAnd, *I);
304 
305         Constant *XorC =
306             ConstantInt::get(I->getType(), NewMask & XorRHS->getValue());
307         Instruction *NewXor = BinaryOperator::CreateXor(NewAnd, XorC);
308         return InsertNewInstWith(NewXor, *I);
309       }
310     }
311     break;
312   }
313   case Instruction::Select: {
314     Value *LHS, *RHS;
315     SelectPatternFlavor SPF = matchSelectPattern(I, LHS, RHS).Flavor;
316     if (SPF == SPF_UMAX) {
317       // UMax(A, C) == A if ...
318       // The lowest non-zero bit of DemandMask is higher than the highest
319       // non-zero bit of C.
320       const APInt *C;
321       unsigned CTZ = DemandedMask.countTrailingZeros();
322       if (match(RHS, m_APInt(C)) && CTZ >= C->getActiveBits())
323         return LHS;
324     } else if (SPF == SPF_UMIN) {
325       // UMin(A, C) == A if ...
326       // The lowest non-zero bit of DemandMask is higher than the highest
327       // non-one bit of C.
328       // This comes from using DeMorgans on the above umax example.
329       const APInt *C;
330       unsigned CTZ = DemandedMask.countTrailingZeros();
331       if (match(RHS, m_APInt(C)) &&
332           CTZ >= C->getBitWidth() - C->countLeadingOnes())
333         return LHS;
334     }
335 
336     // If this is a select as part of any other min/max pattern, don't simplify
337     // any further in case we break the structure.
338     if (SPF != SPF_UNKNOWN)
339       return nullptr;
340 
341     if (SimplifyDemandedBits(I, 2, DemandedMask, RHSKnown, Depth + 1) ||
342         SimplifyDemandedBits(I, 1, DemandedMask, LHSKnown, Depth + 1))
343       return I;
344     assert(!RHSKnown.hasConflict() && "Bits known to be one AND zero?");
345     assert(!LHSKnown.hasConflict() && "Bits known to be one AND zero?");
346 
347     // If the operands are constants, see if we can simplify them.
348     // This is similar to ShrinkDemandedConstant, but for a select we want to
349     // try to keep the selected constants the same as icmp value constants, if
350     // we can. This helps not break apart (or helps put back together)
351     // canonical patterns like min and max.
352     auto CanonicalizeSelectConstant = [](Instruction *I, unsigned OpNo,
353                                          const APInt &DemandedMask) {
354       const APInt *SelC;
355       if (!match(I->getOperand(OpNo), m_APInt(SelC)))
356         return false;
357 
358       // Get the constant out of the ICmp, if there is one.
359       // Only try this when exactly 1 operand is a constant (if both operands
360       // are constant, the icmp should eventually simplify). Otherwise, we may
361       // invert the transform that reduces set bits and infinite-loop.
362       Value *X;
363       const APInt *CmpC;
364       ICmpInst::Predicate Pred;
365       if (!match(I->getOperand(0), m_ICmp(Pred, m_Value(X), m_APInt(CmpC))) ||
366           isa<Constant>(X) || CmpC->getBitWidth() != SelC->getBitWidth())
367         return ShrinkDemandedConstant(I, OpNo, DemandedMask);
368 
369       // If the constant is already the same as the ICmp, leave it as-is.
370       if (*CmpC == *SelC)
371         return false;
372       // If the constants are not already the same, but can be with the demand
373       // mask, use the constant value from the ICmp.
374       if ((*CmpC & DemandedMask) == (*SelC & DemandedMask)) {
375         I->setOperand(OpNo, ConstantInt::get(I->getType(), *CmpC));
376         return true;
377       }
378       return ShrinkDemandedConstant(I, OpNo, DemandedMask);
379     };
380     if (CanonicalizeSelectConstant(I, 1, DemandedMask) ||
381         CanonicalizeSelectConstant(I, 2, DemandedMask))
382       return I;
383 
384     // Only known if known in both the LHS and RHS.
385     Known = KnownBits::commonBits(LHSKnown, RHSKnown);
386     break;
387   }
388   case Instruction::Trunc: {
389     // If we do not demand the high bits of a right-shifted and truncated value,
390     // then we may be able to truncate it before the shift.
391     Value *X;
392     const APInt *C;
393     if (match(I->getOperand(0), m_OneUse(m_LShr(m_Value(X), m_APInt(C))))) {
394       // The shift amount must be valid (not poison) in the narrow type, and
395       // it must not be greater than the high bits demanded of the result.
396       if (C->ult(I->getType()->getScalarSizeInBits()) &&
397           C->ule(DemandedMask.countLeadingZeros())) {
398         // trunc (lshr X, C) --> lshr (trunc X), C
399         IRBuilderBase::InsertPointGuard Guard(Builder);
400         Builder.SetInsertPoint(I);
401         Value *Trunc = Builder.CreateTrunc(X, I->getType());
402         return Builder.CreateLShr(Trunc, C->getZExtValue());
403       }
404     }
405   }
406     LLVM_FALLTHROUGH;
407   case Instruction::ZExt: {
408     unsigned SrcBitWidth = I->getOperand(0)->getType()->getScalarSizeInBits();
409 
410     APInt InputDemandedMask = DemandedMask.zextOrTrunc(SrcBitWidth);
411     KnownBits InputKnown(SrcBitWidth);
412     if (SimplifyDemandedBits(I, 0, InputDemandedMask, InputKnown, Depth + 1))
413       return I;
414     assert(InputKnown.getBitWidth() == SrcBitWidth && "Src width changed?");
415     Known = InputKnown.zextOrTrunc(BitWidth);
416     assert(!Known.hasConflict() && "Bits known to be one AND zero?");
417     break;
418   }
419   case Instruction::BitCast:
420     if (!I->getOperand(0)->getType()->isIntOrIntVectorTy())
421       return nullptr;  // vector->int or fp->int?
422 
423     if (VectorType *DstVTy = dyn_cast<VectorType>(I->getType())) {
424       if (VectorType *SrcVTy =
425             dyn_cast<VectorType>(I->getOperand(0)->getType())) {
426         if (cast<FixedVectorType>(DstVTy)->getNumElements() !=
427             cast<FixedVectorType>(SrcVTy)->getNumElements())
428           // Don't touch a bitcast between vectors of different element counts.
429           return nullptr;
430       } else
431         // Don't touch a scalar-to-vector bitcast.
432         return nullptr;
433     } else if (I->getOperand(0)->getType()->isVectorTy())
434       // Don't touch a vector-to-scalar bitcast.
435       return nullptr;
436 
437     if (SimplifyDemandedBits(I, 0, DemandedMask, Known, Depth + 1))
438       return I;
439     assert(!Known.hasConflict() && "Bits known to be one AND zero?");
440     break;
441   case Instruction::SExt: {
442     // Compute the bits in the result that are not present in the input.
443     unsigned SrcBitWidth = I->getOperand(0)->getType()->getScalarSizeInBits();
444 
445     APInt InputDemandedBits = DemandedMask.trunc(SrcBitWidth);
446 
447     // If any of the sign extended bits are demanded, we know that the sign
448     // bit is demanded.
449     if (DemandedMask.getActiveBits() > SrcBitWidth)
450       InputDemandedBits.setBit(SrcBitWidth-1);
451 
452     KnownBits InputKnown(SrcBitWidth);
453     if (SimplifyDemandedBits(I, 0, InputDemandedBits, InputKnown, Depth + 1))
454       return I;
455 
456     // If the input sign bit is known zero, or if the NewBits are not demanded
457     // convert this into a zero extension.
458     if (InputKnown.isNonNegative() ||
459         DemandedMask.getActiveBits() <= SrcBitWidth) {
460       // Convert to ZExt cast.
461       CastInst *NewCast = new ZExtInst(I->getOperand(0), VTy, I->getName());
462       return InsertNewInstWith(NewCast, *I);
463      }
464 
465     // If the sign bit of the input is known set or clear, then we know the
466     // top bits of the result.
467     Known = InputKnown.sext(BitWidth);
468     assert(!Known.hasConflict() && "Bits known to be one AND zero?");
469     break;
470   }
471   case Instruction::Add:
472     if ((DemandedMask & 1) == 0) {
473       // If we do not need the low bit, try to convert bool math to logic:
474       // add iN (zext i1 X), (sext i1 Y) --> sext (~X & Y) to iN
475       Value *X, *Y;
476       if (match(I, m_c_Add(m_OneUse(m_ZExt(m_Value(X))),
477                            m_OneUse(m_SExt(m_Value(Y))))) &&
478           X->getType()->isIntOrIntVectorTy(1) && X->getType() == Y->getType()) {
479         // Truth table for inputs and output signbits:
480         //       X:0 | X:1
481         //      ----------
482         // Y:0  |  0 | 0 |
483         // Y:1  | -1 | 0 |
484         //      ----------
485         IRBuilderBase::InsertPointGuard Guard(Builder);
486         Builder.SetInsertPoint(I);
487         Value *AndNot = Builder.CreateAnd(Builder.CreateNot(X), Y);
488         return Builder.CreateSExt(AndNot, VTy);
489       }
490 
491       // add iN (sext i1 X), (sext i1 Y) --> sext (X | Y) to iN
492       // TODO: Relax the one-use checks because we are removing an instruction?
493       if (match(I, m_Add(m_OneUse(m_SExt(m_Value(X))),
494                          m_OneUse(m_SExt(m_Value(Y))))) &&
495           X->getType()->isIntOrIntVectorTy(1) && X->getType() == Y->getType()) {
496         // Truth table for inputs and output signbits:
497         //       X:0 | X:1
498         //      -----------
499         // Y:0  | -1 | -1 |
500         // Y:1  | -1 |  0 |
501         //      -----------
502         IRBuilderBase::InsertPointGuard Guard(Builder);
503         Builder.SetInsertPoint(I);
504         Value *Or = Builder.CreateOr(X, Y);
505         return Builder.CreateSExt(Or, VTy);
506       }
507     }
508     LLVM_FALLTHROUGH;
509   case Instruction::Sub: {
510     /// If the high-bits of an ADD/SUB are not demanded, then we do not care
511     /// about the high bits of the operands.
512     unsigned NLZ = DemandedMask.countLeadingZeros();
513     // Right fill the mask of bits for this ADD/SUB to demand the most
514     // significant bit and all those below it.
515     APInt DemandedFromOps(APInt::getLowBitsSet(BitWidth, BitWidth-NLZ));
516     if (ShrinkDemandedConstant(I, 0, DemandedFromOps) ||
517         SimplifyDemandedBits(I, 0, DemandedFromOps, LHSKnown, Depth + 1) ||
518         ShrinkDemandedConstant(I, 1, DemandedFromOps) ||
519         SimplifyDemandedBits(I, 1, DemandedFromOps, RHSKnown, Depth + 1)) {
520       if (NLZ > 0) {
521         // Disable the nsw and nuw flags here: We can no longer guarantee that
522         // we won't wrap after simplification. Removing the nsw/nuw flags is
523         // legal here because the top bit is not demanded.
524         BinaryOperator &BinOP = *cast<BinaryOperator>(I);
525         BinOP.setHasNoSignedWrap(false);
526         BinOP.setHasNoUnsignedWrap(false);
527       }
528       return I;
529     }
530 
531     // If we are known to be adding/subtracting zeros to every bit below
532     // the highest demanded bit, we just return the other side.
533     if (DemandedFromOps.isSubsetOf(RHSKnown.Zero))
534       return I->getOperand(0);
535     // We can't do this with the LHS for subtraction, unless we are only
536     // demanding the LSB.
537     if ((I->getOpcode() == Instruction::Add || DemandedFromOps.isOne()) &&
538         DemandedFromOps.isSubsetOf(LHSKnown.Zero))
539       return I->getOperand(1);
540 
541     // Otherwise just compute the known bits of the result.
542     bool NSW = cast<OverflowingBinaryOperator>(I)->hasNoSignedWrap();
543     Known = KnownBits::computeForAddSub(I->getOpcode() == Instruction::Add,
544                                         NSW, LHSKnown, RHSKnown);
545     break;
546   }
547   case Instruction::Shl: {
548     const APInt *SA;
549     if (match(I->getOperand(1), m_APInt(SA))) {
550       const APInt *ShrAmt;
551       if (match(I->getOperand(0), m_Shr(m_Value(), m_APInt(ShrAmt))))
552         if (Instruction *Shr = dyn_cast<Instruction>(I->getOperand(0)))
553           if (Value *R = simplifyShrShlDemandedBits(Shr, *ShrAmt, I, *SA,
554                                                     DemandedMask, Known))
555             return R;
556 
557       uint64_t ShiftAmt = SA->getLimitedValue(BitWidth-1);
558       APInt DemandedMaskIn(DemandedMask.lshr(ShiftAmt));
559 
560       // If the shift is NUW/NSW, then it does demand the high bits.
561       ShlOperator *IOp = cast<ShlOperator>(I);
562       if (IOp->hasNoSignedWrap())
563         DemandedMaskIn.setHighBits(ShiftAmt+1);
564       else if (IOp->hasNoUnsignedWrap())
565         DemandedMaskIn.setHighBits(ShiftAmt);
566 
567       if (SimplifyDemandedBits(I, 0, DemandedMaskIn, Known, Depth + 1))
568         return I;
569       assert(!Known.hasConflict() && "Bits known to be one AND zero?");
570 
571       bool SignBitZero = Known.Zero.isSignBitSet();
572       bool SignBitOne = Known.One.isSignBitSet();
573       Known.Zero <<= ShiftAmt;
574       Known.One  <<= ShiftAmt;
575       // low bits known zero.
576       if (ShiftAmt)
577         Known.Zero.setLowBits(ShiftAmt);
578 
579       // If this shift has "nsw" keyword, then the result is either a poison
580       // value or has the same sign bit as the first operand.
581       if (IOp->hasNoSignedWrap()) {
582         if (SignBitZero)
583           Known.Zero.setSignBit();
584         else if (SignBitOne)
585           Known.One.setSignBit();
586         if (Known.hasConflict())
587           return UndefValue::get(I->getType());
588       }
589     } else {
590       // This is a variable shift, so we can't shift the demand mask by a known
591       // amount. But if we are not demanding high bits, then we are not
592       // demanding those bits from the pre-shifted operand either.
593       if (unsigned CTLZ = DemandedMask.countLeadingZeros()) {
594         APInt DemandedFromOp(APInt::getLowBitsSet(BitWidth, BitWidth - CTLZ));
595         if (SimplifyDemandedBits(I, 0, DemandedFromOp, Known, Depth + 1)) {
596           // We can't guarantee that nsw/nuw hold after simplifying the operand.
597           I->dropPoisonGeneratingFlags();
598           return I;
599         }
600       }
601       computeKnownBits(I, Known, Depth, CxtI);
602     }
603     break;
604   }
605   case Instruction::LShr: {
606     const APInt *SA;
607     if (match(I->getOperand(1), m_APInt(SA))) {
608       uint64_t ShiftAmt = SA->getLimitedValue(BitWidth-1);
609 
610       // Unsigned shift right.
611       APInt DemandedMaskIn(DemandedMask.shl(ShiftAmt));
612 
613       // If the shift is exact, then it does demand the low bits (and knows that
614       // they are zero).
615       if (cast<LShrOperator>(I)->isExact())
616         DemandedMaskIn.setLowBits(ShiftAmt);
617 
618       if (SimplifyDemandedBits(I, 0, DemandedMaskIn, Known, Depth + 1))
619         return I;
620       assert(!Known.hasConflict() && "Bits known to be one AND zero?");
621       Known.Zero.lshrInPlace(ShiftAmt);
622       Known.One.lshrInPlace(ShiftAmt);
623       if (ShiftAmt)
624         Known.Zero.setHighBits(ShiftAmt);  // high bits known zero.
625     } else {
626       computeKnownBits(I, Known, Depth, CxtI);
627     }
628     break;
629   }
630   case Instruction::AShr: {
631     // If this is an arithmetic shift right and only the low-bit is set, we can
632     // always convert this into a logical shr, even if the shift amount is
633     // variable.  The low bit of the shift cannot be an input sign bit unless
634     // the shift amount is >= the size of the datatype, which is undefined.
635     if (DemandedMask.isOne()) {
636       // Perform the logical shift right.
637       Instruction *NewVal = BinaryOperator::CreateLShr(
638                         I->getOperand(0), I->getOperand(1), I->getName());
639       return InsertNewInstWith(NewVal, *I);
640     }
641 
642     // If the sign bit is the only bit demanded by this ashr, then there is no
643     // need to do it, the shift doesn't change the high bit.
644     if (DemandedMask.isSignMask())
645       return I->getOperand(0);
646 
647     const APInt *SA;
648     if (match(I->getOperand(1), m_APInt(SA))) {
649       uint32_t ShiftAmt = SA->getLimitedValue(BitWidth-1);
650 
651       // Signed shift right.
652       APInt DemandedMaskIn(DemandedMask.shl(ShiftAmt));
653       // If any of the high bits are demanded, we should set the sign bit as
654       // demanded.
655       if (DemandedMask.countLeadingZeros() <= ShiftAmt)
656         DemandedMaskIn.setSignBit();
657 
658       // If the shift is exact, then it does demand the low bits (and knows that
659       // they are zero).
660       if (cast<AShrOperator>(I)->isExact())
661         DemandedMaskIn.setLowBits(ShiftAmt);
662 
663       if (SimplifyDemandedBits(I, 0, DemandedMaskIn, Known, Depth + 1))
664         return I;
665 
666       unsigned SignBits = ComputeNumSignBits(I->getOperand(0), Depth + 1, CxtI);
667 
668       assert(!Known.hasConflict() && "Bits known to be one AND zero?");
669       // Compute the new bits that are at the top now plus sign bits.
670       APInt HighBits(APInt::getHighBitsSet(
671           BitWidth, std::min(SignBits + ShiftAmt - 1, BitWidth)));
672       Known.Zero.lshrInPlace(ShiftAmt);
673       Known.One.lshrInPlace(ShiftAmt);
674 
675       // If the input sign bit is known to be zero, or if none of the top bits
676       // are demanded, turn this into an unsigned shift right.
677       assert(BitWidth > ShiftAmt && "Shift amount not saturated?");
678       if (Known.Zero[BitWidth-ShiftAmt-1] ||
679           !DemandedMask.intersects(HighBits)) {
680         BinaryOperator *LShr = BinaryOperator::CreateLShr(I->getOperand(0),
681                                                           I->getOperand(1));
682         LShr->setIsExact(cast<BinaryOperator>(I)->isExact());
683         return InsertNewInstWith(LShr, *I);
684       } else if (Known.One[BitWidth-ShiftAmt-1]) { // New bits are known one.
685         Known.One |= HighBits;
686       }
687     } else {
688       computeKnownBits(I, Known, Depth, CxtI);
689     }
690     break;
691   }
692   case Instruction::UDiv: {
693     // UDiv doesn't demand low bits that are zero in the divisor.
694     const APInt *SA;
695     if (match(I->getOperand(1), m_APInt(SA))) {
696       // If the shift is exact, then it does demand the low bits.
697       if (cast<UDivOperator>(I)->isExact())
698         break;
699 
700       // FIXME: Take the demanded mask of the result into account.
701       unsigned RHSTrailingZeros = SA->countTrailingZeros();
702       APInt DemandedMaskIn =
703           APInt::getHighBitsSet(BitWidth, BitWidth - RHSTrailingZeros);
704       if (SimplifyDemandedBits(I, 0, DemandedMaskIn, LHSKnown, Depth + 1))
705         return I;
706 
707       // Propagate zero bits from the input.
708       Known.Zero.setHighBits(std::min(
709           BitWidth, LHSKnown.Zero.countLeadingOnes() + RHSTrailingZeros));
710     } else {
711       computeKnownBits(I, Known, Depth, CxtI);
712     }
713     break;
714   }
715   case Instruction::SRem: {
716     ConstantInt *Rem;
717     if (match(I->getOperand(1), m_ConstantInt(Rem))) {
718       // X % -1 demands all the bits because we don't want to introduce
719       // INT_MIN % -1 (== undef) by accident.
720       if (Rem->isMinusOne())
721         break;
722       APInt RA = Rem->getValue().abs();
723       if (RA.isPowerOf2()) {
724         if (DemandedMask.ult(RA))    // srem won't affect demanded bits
725           return I->getOperand(0);
726 
727         APInt LowBits = RA - 1;
728         APInt Mask2 = LowBits | APInt::getSignMask(BitWidth);
729         if (SimplifyDemandedBits(I, 0, Mask2, LHSKnown, Depth + 1))
730           return I;
731 
732         // The low bits of LHS are unchanged by the srem.
733         Known.Zero = LHSKnown.Zero & LowBits;
734         Known.One = LHSKnown.One & LowBits;
735 
736         // If LHS is non-negative or has all low bits zero, then the upper bits
737         // are all zero.
738         if (LHSKnown.isNonNegative() || LowBits.isSubsetOf(LHSKnown.Zero))
739           Known.Zero |= ~LowBits;
740 
741         // If LHS is negative and not all low bits are zero, then the upper bits
742         // are all one.
743         if (LHSKnown.isNegative() && LowBits.intersects(LHSKnown.One))
744           Known.One |= ~LowBits;
745 
746         assert(!Known.hasConflict() && "Bits known to be one AND zero?");
747         break;
748       }
749     }
750 
751     // The sign bit is the LHS's sign bit, except when the result of the
752     // remainder is zero.
753     if (DemandedMask.isSignBitSet()) {
754       computeKnownBits(I->getOperand(0), LHSKnown, Depth + 1, CxtI);
755       // If it's known zero, our sign bit is also zero.
756       if (LHSKnown.isNonNegative())
757         Known.makeNonNegative();
758     }
759     break;
760   }
761   case Instruction::URem: {
762     KnownBits Known2(BitWidth);
763     APInt AllOnes = APInt::getAllOnes(BitWidth);
764     if (SimplifyDemandedBits(I, 0, AllOnes, Known2, Depth + 1) ||
765         SimplifyDemandedBits(I, 1, AllOnes, Known2, Depth + 1))
766       return I;
767 
768     unsigned Leaders = Known2.countMinLeadingZeros();
769     Known.Zero = APInt::getHighBitsSet(BitWidth, Leaders) & DemandedMask;
770     break;
771   }
772   case Instruction::Call: {
773     bool KnownBitsComputed = false;
774     if (IntrinsicInst *II = dyn_cast<IntrinsicInst>(I)) {
775       switch (II->getIntrinsicID()) {
776       case Intrinsic::abs: {
777         if (DemandedMask == 1)
778           return II->getArgOperand(0);
779         break;
780       }
781       case Intrinsic::ctpop: {
782         // Checking if the number of clear bits is odd (parity)? If the type has
783         // an even number of bits, that's the same as checking if the number of
784         // set bits is odd, so we can eliminate the 'not' op.
785         Value *X;
786         if (DemandedMask == 1 && VTy->getScalarSizeInBits() % 2 == 0 &&
787             match(II->getArgOperand(0), m_Not(m_Value(X)))) {
788           Function *Ctpop = Intrinsic::getDeclaration(
789               II->getModule(), Intrinsic::ctpop, II->getType());
790           return InsertNewInstWith(CallInst::Create(Ctpop, {X}), *I);
791         }
792         break;
793       }
794       case Intrinsic::bswap: {
795         // If the only bits demanded come from one byte of the bswap result,
796         // just shift the input byte into position to eliminate the bswap.
797         unsigned NLZ = DemandedMask.countLeadingZeros();
798         unsigned NTZ = DemandedMask.countTrailingZeros();
799 
800         // Round NTZ down to the next byte.  If we have 11 trailing zeros, then
801         // we need all the bits down to bit 8.  Likewise, round NLZ.  If we
802         // have 14 leading zeros, round to 8.
803         NLZ = alignDown(NLZ, 8);
804         NTZ = alignDown(NTZ, 8);
805         // If we need exactly one byte, we can do this transformation.
806         if (BitWidth - NLZ - NTZ == 8) {
807           // Replace this with either a left or right shift to get the byte into
808           // the right place.
809           Instruction *NewVal;
810           if (NLZ > NTZ)
811             NewVal = BinaryOperator::CreateLShr(
812                 II->getArgOperand(0),
813                 ConstantInt::get(I->getType(), NLZ - NTZ));
814           else
815             NewVal = BinaryOperator::CreateShl(
816                 II->getArgOperand(0),
817                 ConstantInt::get(I->getType(), NTZ - NLZ));
818           NewVal->takeName(I);
819           return InsertNewInstWith(NewVal, *I);
820         }
821         break;
822       }
823       case Intrinsic::fshr:
824       case Intrinsic::fshl: {
825         const APInt *SA;
826         if (!match(I->getOperand(2), m_APInt(SA)))
827           break;
828 
829         // Normalize to funnel shift left. APInt shifts of BitWidth are well-
830         // defined, so no need to special-case zero shifts here.
831         uint64_t ShiftAmt = SA->urem(BitWidth);
832         if (II->getIntrinsicID() == Intrinsic::fshr)
833           ShiftAmt = BitWidth - ShiftAmt;
834 
835         APInt DemandedMaskLHS(DemandedMask.lshr(ShiftAmt));
836         APInt DemandedMaskRHS(DemandedMask.shl(BitWidth - ShiftAmt));
837         if (SimplifyDemandedBits(I, 0, DemandedMaskLHS, LHSKnown, Depth + 1) ||
838             SimplifyDemandedBits(I, 1, DemandedMaskRHS, RHSKnown, Depth + 1))
839           return I;
840 
841         Known.Zero = LHSKnown.Zero.shl(ShiftAmt) |
842                      RHSKnown.Zero.lshr(BitWidth - ShiftAmt);
843         Known.One = LHSKnown.One.shl(ShiftAmt) |
844                     RHSKnown.One.lshr(BitWidth - ShiftAmt);
845         KnownBitsComputed = true;
846         break;
847       }
848       case Intrinsic::umax: {
849         // UMax(A, C) == A if ...
850         // The lowest non-zero bit of DemandMask is higher than the highest
851         // non-zero bit of C.
852         const APInt *C;
853         unsigned CTZ = DemandedMask.countTrailingZeros();
854         if (match(II->getArgOperand(1), m_APInt(C)) &&
855             CTZ >= C->getActiveBits())
856           return II->getArgOperand(0);
857         break;
858       }
859       case Intrinsic::umin: {
860         // UMin(A, C) == A if ...
861         // The lowest non-zero bit of DemandMask is higher than the highest
862         // non-one bit of C.
863         // This comes from using DeMorgans on the above umax example.
864         const APInt *C;
865         unsigned CTZ = DemandedMask.countTrailingZeros();
866         if (match(II->getArgOperand(1), m_APInt(C)) &&
867             CTZ >= C->getBitWidth() - C->countLeadingOnes())
868           return II->getArgOperand(0);
869         break;
870       }
871       default: {
872         // Handle target specific intrinsics
873         Optional<Value *> V = targetSimplifyDemandedUseBitsIntrinsic(
874             *II, DemandedMask, Known, KnownBitsComputed);
875         if (V.hasValue())
876           return V.getValue();
877         break;
878       }
879       }
880     }
881 
882     if (!KnownBitsComputed)
883       computeKnownBits(V, Known, Depth, CxtI);
884     break;
885   }
886   }
887 
888   // If the client is only demanding bits that we know, return the known
889   // constant.
890   if (DemandedMask.isSubsetOf(Known.Zero|Known.One))
891     return Constant::getIntegerValue(VTy, Known.One);
892   return nullptr;
893 }
894 
895 /// Helper routine of SimplifyDemandedUseBits. It computes Known
896 /// bits. It also tries to handle simplifications that can be done based on
897 /// DemandedMask, but without modifying the Instruction.
898 Value *InstCombinerImpl::SimplifyMultipleUseDemandedBits(
899     Instruction *I, const APInt &DemandedMask, KnownBits &Known, unsigned Depth,
900     Instruction *CxtI) {
901   unsigned BitWidth = DemandedMask.getBitWidth();
902   Type *ITy = I->getType();
903 
904   KnownBits LHSKnown(BitWidth);
905   KnownBits RHSKnown(BitWidth);
906 
907   // Despite the fact that we can't simplify this instruction in all User's
908   // context, we can at least compute the known bits, and we can
909   // do simplifications that apply to *just* the one user if we know that
910   // this instruction has a simpler value in that context.
911   switch (I->getOpcode()) {
912   case Instruction::And: {
913     // If either the LHS or the RHS are Zero, the result is zero.
914     computeKnownBits(I->getOperand(1), RHSKnown, Depth + 1, CxtI);
915     computeKnownBits(I->getOperand(0), LHSKnown, Depth + 1,
916                      CxtI);
917 
918     Known = LHSKnown & RHSKnown;
919 
920     // If the client is only demanding bits that we know, return the known
921     // constant.
922     if (DemandedMask.isSubsetOf(Known.Zero | Known.One))
923       return Constant::getIntegerValue(ITy, Known.One);
924 
925     // If all of the demanded bits are known 1 on one side, return the other.
926     // These bits cannot contribute to the result of the 'and' in this
927     // context.
928     if (DemandedMask.isSubsetOf(LHSKnown.Zero | RHSKnown.One))
929       return I->getOperand(0);
930     if (DemandedMask.isSubsetOf(RHSKnown.Zero | LHSKnown.One))
931       return I->getOperand(1);
932 
933     break;
934   }
935   case Instruction::Or: {
936     // We can simplify (X|Y) -> X or Y in the user's context if we know that
937     // only bits from X or Y are demanded.
938 
939     // If either the LHS or the RHS are One, the result is One.
940     computeKnownBits(I->getOperand(1), RHSKnown, Depth + 1, CxtI);
941     computeKnownBits(I->getOperand(0), LHSKnown, Depth + 1,
942                      CxtI);
943 
944     Known = LHSKnown | RHSKnown;
945 
946     // If the client is only demanding bits that we know, return the known
947     // constant.
948     if (DemandedMask.isSubsetOf(Known.Zero | Known.One))
949       return Constant::getIntegerValue(ITy, Known.One);
950 
951     // If all of the demanded bits are known zero on one side, return the
952     // other.  These bits cannot contribute to the result of the 'or' in this
953     // context.
954     if (DemandedMask.isSubsetOf(LHSKnown.One | RHSKnown.Zero))
955       return I->getOperand(0);
956     if (DemandedMask.isSubsetOf(RHSKnown.One | LHSKnown.Zero))
957       return I->getOperand(1);
958 
959     break;
960   }
961   case Instruction::Xor: {
962     // We can simplify (X^Y) -> X or Y in the user's context if we know that
963     // only bits from X or Y are demanded.
964 
965     computeKnownBits(I->getOperand(1), RHSKnown, Depth + 1, CxtI);
966     computeKnownBits(I->getOperand(0), LHSKnown, Depth + 1,
967                      CxtI);
968 
969     Known = LHSKnown ^ RHSKnown;
970 
971     // If the client is only demanding bits that we know, return the known
972     // constant.
973     if (DemandedMask.isSubsetOf(Known.Zero | Known.One))
974       return Constant::getIntegerValue(ITy, Known.One);
975 
976     // If all of the demanded bits are known zero on one side, return the
977     // other.
978     if (DemandedMask.isSubsetOf(RHSKnown.Zero))
979       return I->getOperand(0);
980     if (DemandedMask.isSubsetOf(LHSKnown.Zero))
981       return I->getOperand(1);
982 
983     break;
984   }
985   case Instruction::AShr: {
986     // Compute the Known bits to simplify things downstream.
987     computeKnownBits(I, Known, Depth, CxtI);
988 
989     // If this user is only demanding bits that we know, return the known
990     // constant.
991     if (DemandedMask.isSubsetOf(Known.Zero | Known.One))
992       return Constant::getIntegerValue(ITy, Known.One);
993 
994     // If the right shift operand 0 is a result of a left shift by the same
995     // amount, this is probably a zero/sign extension, which may be unnecessary,
996     // if we do not demand any of the new sign bits. So, return the original
997     // operand instead.
998     const APInt *ShiftRC;
999     const APInt *ShiftLC;
1000     Value *X;
1001     unsigned BitWidth = DemandedMask.getBitWidth();
1002     if (match(I,
1003               m_AShr(m_Shl(m_Value(X), m_APInt(ShiftLC)), m_APInt(ShiftRC))) &&
1004         ShiftLC == ShiftRC && ShiftLC->ult(BitWidth) &&
1005         DemandedMask.isSubsetOf(APInt::getLowBitsSet(
1006             BitWidth, BitWidth - ShiftRC->getZExtValue()))) {
1007       return X;
1008     }
1009 
1010     break;
1011   }
1012   default:
1013     // Compute the Known bits to simplify things downstream.
1014     computeKnownBits(I, Known, Depth, CxtI);
1015 
1016     // If this user is only demanding bits that we know, return the known
1017     // constant.
1018     if (DemandedMask.isSubsetOf(Known.Zero|Known.One))
1019       return Constant::getIntegerValue(ITy, Known.One);
1020 
1021     break;
1022   }
1023 
1024   return nullptr;
1025 }
1026 
1027 /// Helper routine of SimplifyDemandedUseBits. It tries to simplify
1028 /// "E1 = (X lsr C1) << C2", where the C1 and C2 are constant, into
1029 /// "E2 = X << (C2 - C1)" or "E2 = X >> (C1 - C2)", depending on the sign
1030 /// of "C2-C1".
1031 ///
1032 /// Suppose E1 and E2 are generally different in bits S={bm, bm+1,
1033 /// ..., bn}, without considering the specific value X is holding.
1034 /// This transformation is legal iff one of following conditions is hold:
1035 ///  1) All the bit in S are 0, in this case E1 == E2.
1036 ///  2) We don't care those bits in S, per the input DemandedMask.
1037 ///  3) Combination of 1) and 2). Some bits in S are 0, and we don't care the
1038 ///     rest bits.
1039 ///
1040 /// Currently we only test condition 2).
1041 ///
1042 /// As with SimplifyDemandedUseBits, it returns NULL if the simplification was
1043 /// not successful.
1044 Value *InstCombinerImpl::simplifyShrShlDemandedBits(
1045     Instruction *Shr, const APInt &ShrOp1, Instruction *Shl,
1046     const APInt &ShlOp1, const APInt &DemandedMask, KnownBits &Known) {
1047   if (!ShlOp1 || !ShrOp1)
1048     return nullptr; // No-op.
1049 
1050   Value *VarX = Shr->getOperand(0);
1051   Type *Ty = VarX->getType();
1052   unsigned BitWidth = Ty->getScalarSizeInBits();
1053   if (ShlOp1.uge(BitWidth) || ShrOp1.uge(BitWidth))
1054     return nullptr; // Undef.
1055 
1056   unsigned ShlAmt = ShlOp1.getZExtValue();
1057   unsigned ShrAmt = ShrOp1.getZExtValue();
1058 
1059   Known.One.clearAllBits();
1060   Known.Zero.setLowBits(ShlAmt - 1);
1061   Known.Zero &= DemandedMask;
1062 
1063   APInt BitMask1(APInt::getAllOnes(BitWidth));
1064   APInt BitMask2(APInt::getAllOnes(BitWidth));
1065 
1066   bool isLshr = (Shr->getOpcode() == Instruction::LShr);
1067   BitMask1 = isLshr ? (BitMask1.lshr(ShrAmt) << ShlAmt) :
1068                       (BitMask1.ashr(ShrAmt) << ShlAmt);
1069 
1070   if (ShrAmt <= ShlAmt) {
1071     BitMask2 <<= (ShlAmt - ShrAmt);
1072   } else {
1073     BitMask2 = isLshr ? BitMask2.lshr(ShrAmt - ShlAmt):
1074                         BitMask2.ashr(ShrAmt - ShlAmt);
1075   }
1076 
1077   // Check if condition-2 (see the comment to this function) is satified.
1078   if ((BitMask1 & DemandedMask) == (BitMask2 & DemandedMask)) {
1079     if (ShrAmt == ShlAmt)
1080       return VarX;
1081 
1082     if (!Shr->hasOneUse())
1083       return nullptr;
1084 
1085     BinaryOperator *New;
1086     if (ShrAmt < ShlAmt) {
1087       Constant *Amt = ConstantInt::get(VarX->getType(), ShlAmt - ShrAmt);
1088       New = BinaryOperator::CreateShl(VarX, Amt);
1089       BinaryOperator *Orig = cast<BinaryOperator>(Shl);
1090       New->setHasNoSignedWrap(Orig->hasNoSignedWrap());
1091       New->setHasNoUnsignedWrap(Orig->hasNoUnsignedWrap());
1092     } else {
1093       Constant *Amt = ConstantInt::get(VarX->getType(), ShrAmt - ShlAmt);
1094       New = isLshr ? BinaryOperator::CreateLShr(VarX, Amt) :
1095                      BinaryOperator::CreateAShr(VarX, Amt);
1096       if (cast<BinaryOperator>(Shr)->isExact())
1097         New->setIsExact(true);
1098     }
1099 
1100     return InsertNewInstWith(New, *Shl);
1101   }
1102 
1103   return nullptr;
1104 }
1105 
1106 /// The specified value produces a vector with any number of elements.
1107 /// This method analyzes which elements of the operand are undef or poison and
1108 /// returns that information in UndefElts.
1109 ///
1110 /// DemandedElts contains the set of elements that are actually used by the
1111 /// caller, and by default (AllowMultipleUsers equals false) the value is
1112 /// simplified only if it has a single caller. If AllowMultipleUsers is set
1113 /// to true, DemandedElts refers to the union of sets of elements that are
1114 /// used by all callers.
1115 ///
1116 /// If the information about demanded elements can be used to simplify the
1117 /// operation, the operation is simplified, then the resultant value is
1118 /// returned.  This returns null if no change was made.
1119 Value *InstCombinerImpl::SimplifyDemandedVectorElts(Value *V,
1120                                                     APInt DemandedElts,
1121                                                     APInt &UndefElts,
1122                                                     unsigned Depth,
1123                                                     bool AllowMultipleUsers) {
1124   // Cannot analyze scalable type. The number of vector elements is not a
1125   // compile-time constant.
1126   if (isa<ScalableVectorType>(V->getType()))
1127     return nullptr;
1128 
1129   unsigned VWidth = cast<FixedVectorType>(V->getType())->getNumElements();
1130   APInt EltMask(APInt::getAllOnes(VWidth));
1131   assert((DemandedElts & ~EltMask) == 0 && "Invalid DemandedElts!");
1132 
1133   if (match(V, m_Undef())) {
1134     // If the entire vector is undef or poison, just return this info.
1135     UndefElts = EltMask;
1136     return nullptr;
1137   }
1138 
1139   if (DemandedElts.isZero()) { // If nothing is demanded, provide poison.
1140     UndefElts = EltMask;
1141     return PoisonValue::get(V->getType());
1142   }
1143 
1144   UndefElts = 0;
1145 
1146   if (auto *C = dyn_cast<Constant>(V)) {
1147     // Check if this is identity. If so, return 0 since we are not simplifying
1148     // anything.
1149     if (DemandedElts.isAllOnes())
1150       return nullptr;
1151 
1152     Type *EltTy = cast<VectorType>(V->getType())->getElementType();
1153     Constant *Poison = PoisonValue::get(EltTy);
1154     SmallVector<Constant*, 16> Elts;
1155     for (unsigned i = 0; i != VWidth; ++i) {
1156       if (!DemandedElts[i]) {   // If not demanded, set to poison.
1157         Elts.push_back(Poison);
1158         UndefElts.setBit(i);
1159         continue;
1160       }
1161 
1162       Constant *Elt = C->getAggregateElement(i);
1163       if (!Elt) return nullptr;
1164 
1165       Elts.push_back(Elt);
1166       if (isa<UndefValue>(Elt))   // Already undef or poison.
1167         UndefElts.setBit(i);
1168     }
1169 
1170     // If we changed the constant, return it.
1171     Constant *NewCV = ConstantVector::get(Elts);
1172     return NewCV != C ? NewCV : nullptr;
1173   }
1174 
1175   // Limit search depth.
1176   if (Depth == 10)
1177     return nullptr;
1178 
1179   if (!AllowMultipleUsers) {
1180     // If multiple users are using the root value, proceed with
1181     // simplification conservatively assuming that all elements
1182     // are needed.
1183     if (!V->hasOneUse()) {
1184       // Quit if we find multiple users of a non-root value though.
1185       // They'll be handled when it's their turn to be visited by
1186       // the main instcombine process.
1187       if (Depth != 0)
1188         // TODO: Just compute the UndefElts information recursively.
1189         return nullptr;
1190 
1191       // Conservatively assume that all elements are needed.
1192       DemandedElts = EltMask;
1193     }
1194   }
1195 
1196   Instruction *I = dyn_cast<Instruction>(V);
1197   if (!I) return nullptr;        // Only analyze instructions.
1198 
1199   bool MadeChange = false;
1200   auto simplifyAndSetOp = [&](Instruction *Inst, unsigned OpNum,
1201                               APInt Demanded, APInt &Undef) {
1202     auto *II = dyn_cast<IntrinsicInst>(Inst);
1203     Value *Op = II ? II->getArgOperand(OpNum) : Inst->getOperand(OpNum);
1204     if (Value *V = SimplifyDemandedVectorElts(Op, Demanded, Undef, Depth + 1)) {
1205       replaceOperand(*Inst, OpNum, V);
1206       MadeChange = true;
1207     }
1208   };
1209 
1210   APInt UndefElts2(VWidth, 0);
1211   APInt UndefElts3(VWidth, 0);
1212   switch (I->getOpcode()) {
1213   default: break;
1214 
1215   case Instruction::GetElementPtr: {
1216     // The LangRef requires that struct geps have all constant indices.  As
1217     // such, we can't convert any operand to partial undef.
1218     auto mayIndexStructType = [](GetElementPtrInst &GEP) {
1219       for (auto I = gep_type_begin(GEP), E = gep_type_end(GEP);
1220            I != E; I++)
1221         if (I.isStruct())
1222           return true;;
1223       return false;
1224     };
1225     if (mayIndexStructType(cast<GetElementPtrInst>(*I)))
1226       break;
1227 
1228     // Conservatively track the demanded elements back through any vector
1229     // operands we may have.  We know there must be at least one, or we
1230     // wouldn't have a vector result to get here. Note that we intentionally
1231     // merge the undef bits here since gepping with either an undef base or
1232     // index results in undef.
1233     for (unsigned i = 0; i < I->getNumOperands(); i++) {
1234       if (match(I->getOperand(i), m_Undef())) {
1235         // If the entire vector is undefined, just return this info.
1236         UndefElts = EltMask;
1237         return nullptr;
1238       }
1239       if (I->getOperand(i)->getType()->isVectorTy()) {
1240         APInt UndefEltsOp(VWidth, 0);
1241         simplifyAndSetOp(I, i, DemandedElts, UndefEltsOp);
1242         UndefElts |= UndefEltsOp;
1243       }
1244     }
1245 
1246     break;
1247   }
1248   case Instruction::InsertElement: {
1249     // If this is a variable index, we don't know which element it overwrites.
1250     // demand exactly the same input as we produce.
1251     ConstantInt *Idx = dyn_cast<ConstantInt>(I->getOperand(2));
1252     if (!Idx) {
1253       // Note that we can't propagate undef elt info, because we don't know
1254       // which elt is getting updated.
1255       simplifyAndSetOp(I, 0, DemandedElts, UndefElts2);
1256       break;
1257     }
1258 
1259     // The element inserted overwrites whatever was there, so the input demanded
1260     // set is simpler than the output set.
1261     unsigned IdxNo = Idx->getZExtValue();
1262     APInt PreInsertDemandedElts = DemandedElts;
1263     if (IdxNo < VWidth)
1264       PreInsertDemandedElts.clearBit(IdxNo);
1265 
1266     // If we only demand the element that is being inserted and that element
1267     // was extracted from the same index in another vector with the same type,
1268     // replace this insert with that other vector.
1269     // Note: This is attempted before the call to simplifyAndSetOp because that
1270     //       may change UndefElts to a value that does not match with Vec.
1271     Value *Vec;
1272     if (PreInsertDemandedElts == 0 &&
1273         match(I->getOperand(1),
1274               m_ExtractElt(m_Value(Vec), m_SpecificInt(IdxNo))) &&
1275         Vec->getType() == I->getType()) {
1276       return Vec;
1277     }
1278 
1279     simplifyAndSetOp(I, 0, PreInsertDemandedElts, UndefElts);
1280 
1281     // If this is inserting an element that isn't demanded, remove this
1282     // insertelement.
1283     if (IdxNo >= VWidth || !DemandedElts[IdxNo]) {
1284       Worklist.push(I);
1285       return I->getOperand(0);
1286     }
1287 
1288     // The inserted element is defined.
1289     UndefElts.clearBit(IdxNo);
1290     break;
1291   }
1292   case Instruction::ShuffleVector: {
1293     auto *Shuffle = cast<ShuffleVectorInst>(I);
1294     assert(Shuffle->getOperand(0)->getType() ==
1295            Shuffle->getOperand(1)->getType() &&
1296            "Expected shuffle operands to have same type");
1297     unsigned OpWidth = cast<FixedVectorType>(Shuffle->getOperand(0)->getType())
1298                            ->getNumElements();
1299     // Handle trivial case of a splat. Only check the first element of LHS
1300     // operand.
1301     if (all_of(Shuffle->getShuffleMask(), [](int Elt) { return Elt == 0; }) &&
1302         DemandedElts.isAllOnes()) {
1303       if (!match(I->getOperand(1), m_Undef())) {
1304         I->setOperand(1, PoisonValue::get(I->getOperand(1)->getType()));
1305         MadeChange = true;
1306       }
1307       APInt LeftDemanded(OpWidth, 1);
1308       APInt LHSUndefElts(OpWidth, 0);
1309       simplifyAndSetOp(I, 0, LeftDemanded, LHSUndefElts);
1310       if (LHSUndefElts[0])
1311         UndefElts = EltMask;
1312       else
1313         UndefElts.clearAllBits();
1314       break;
1315     }
1316 
1317     APInt LeftDemanded(OpWidth, 0), RightDemanded(OpWidth, 0);
1318     for (unsigned i = 0; i < VWidth; i++) {
1319       if (DemandedElts[i]) {
1320         unsigned MaskVal = Shuffle->getMaskValue(i);
1321         if (MaskVal != -1u) {
1322           assert(MaskVal < OpWidth * 2 &&
1323                  "shufflevector mask index out of range!");
1324           if (MaskVal < OpWidth)
1325             LeftDemanded.setBit(MaskVal);
1326           else
1327             RightDemanded.setBit(MaskVal - OpWidth);
1328         }
1329       }
1330     }
1331 
1332     APInt LHSUndefElts(OpWidth, 0);
1333     simplifyAndSetOp(I, 0, LeftDemanded, LHSUndefElts);
1334 
1335     APInt RHSUndefElts(OpWidth, 0);
1336     simplifyAndSetOp(I, 1, RightDemanded, RHSUndefElts);
1337 
1338     // If this shuffle does not change the vector length and the elements
1339     // demanded by this shuffle are an identity mask, then this shuffle is
1340     // unnecessary.
1341     //
1342     // We are assuming canonical form for the mask, so the source vector is
1343     // operand 0 and operand 1 is not used.
1344     //
1345     // Note that if an element is demanded and this shuffle mask is undefined
1346     // for that element, then the shuffle is not considered an identity
1347     // operation. The shuffle prevents poison from the operand vector from
1348     // leaking to the result by replacing poison with an undefined value.
1349     if (VWidth == OpWidth) {
1350       bool IsIdentityShuffle = true;
1351       for (unsigned i = 0; i < VWidth; i++) {
1352         unsigned MaskVal = Shuffle->getMaskValue(i);
1353         if (DemandedElts[i] && i != MaskVal) {
1354           IsIdentityShuffle = false;
1355           break;
1356         }
1357       }
1358       if (IsIdentityShuffle)
1359         return Shuffle->getOperand(0);
1360     }
1361 
1362     bool NewUndefElts = false;
1363     unsigned LHSIdx = -1u, LHSValIdx = -1u;
1364     unsigned RHSIdx = -1u, RHSValIdx = -1u;
1365     bool LHSUniform = true;
1366     bool RHSUniform = true;
1367     for (unsigned i = 0; i < VWidth; i++) {
1368       unsigned MaskVal = Shuffle->getMaskValue(i);
1369       if (MaskVal == -1u) {
1370         UndefElts.setBit(i);
1371       } else if (!DemandedElts[i]) {
1372         NewUndefElts = true;
1373         UndefElts.setBit(i);
1374       } else if (MaskVal < OpWidth) {
1375         if (LHSUndefElts[MaskVal]) {
1376           NewUndefElts = true;
1377           UndefElts.setBit(i);
1378         } else {
1379           LHSIdx = LHSIdx == -1u ? i : OpWidth;
1380           LHSValIdx = LHSValIdx == -1u ? MaskVal : OpWidth;
1381           LHSUniform = LHSUniform && (MaskVal == i);
1382         }
1383       } else {
1384         if (RHSUndefElts[MaskVal - OpWidth]) {
1385           NewUndefElts = true;
1386           UndefElts.setBit(i);
1387         } else {
1388           RHSIdx = RHSIdx == -1u ? i : OpWidth;
1389           RHSValIdx = RHSValIdx == -1u ? MaskVal - OpWidth : OpWidth;
1390           RHSUniform = RHSUniform && (MaskVal - OpWidth == i);
1391         }
1392       }
1393     }
1394 
1395     // Try to transform shuffle with constant vector and single element from
1396     // this constant vector to single insertelement instruction.
1397     // shufflevector V, C, <v1, v2, .., ci, .., vm> ->
1398     // insertelement V, C[ci], ci-n
1399     if (OpWidth ==
1400         cast<FixedVectorType>(Shuffle->getType())->getNumElements()) {
1401       Value *Op = nullptr;
1402       Constant *Value = nullptr;
1403       unsigned Idx = -1u;
1404 
1405       // Find constant vector with the single element in shuffle (LHS or RHS).
1406       if (LHSIdx < OpWidth && RHSUniform) {
1407         if (auto *CV = dyn_cast<ConstantVector>(Shuffle->getOperand(0))) {
1408           Op = Shuffle->getOperand(1);
1409           Value = CV->getOperand(LHSValIdx);
1410           Idx = LHSIdx;
1411         }
1412       }
1413       if (RHSIdx < OpWidth && LHSUniform) {
1414         if (auto *CV = dyn_cast<ConstantVector>(Shuffle->getOperand(1))) {
1415           Op = Shuffle->getOperand(0);
1416           Value = CV->getOperand(RHSValIdx);
1417           Idx = RHSIdx;
1418         }
1419       }
1420       // Found constant vector with single element - convert to insertelement.
1421       if (Op && Value) {
1422         Instruction *New = InsertElementInst::Create(
1423             Op, Value, ConstantInt::get(Type::getInt32Ty(I->getContext()), Idx),
1424             Shuffle->getName());
1425         InsertNewInstWith(New, *Shuffle);
1426         return New;
1427       }
1428     }
1429     if (NewUndefElts) {
1430       // Add additional discovered undefs.
1431       SmallVector<int, 16> Elts;
1432       for (unsigned i = 0; i < VWidth; ++i) {
1433         if (UndefElts[i])
1434           Elts.push_back(UndefMaskElem);
1435         else
1436           Elts.push_back(Shuffle->getMaskValue(i));
1437       }
1438       Shuffle->setShuffleMask(Elts);
1439       MadeChange = true;
1440     }
1441     break;
1442   }
1443   case Instruction::Select: {
1444     // If this is a vector select, try to transform the select condition based
1445     // on the current demanded elements.
1446     SelectInst *Sel = cast<SelectInst>(I);
1447     if (Sel->getCondition()->getType()->isVectorTy()) {
1448       // TODO: We are not doing anything with UndefElts based on this call.
1449       // It is overwritten below based on the other select operands. If an
1450       // element of the select condition is known undef, then we are free to
1451       // choose the output value from either arm of the select. If we know that
1452       // one of those values is undef, then the output can be undef.
1453       simplifyAndSetOp(I, 0, DemandedElts, UndefElts);
1454     }
1455 
1456     // Next, see if we can transform the arms of the select.
1457     APInt DemandedLHS(DemandedElts), DemandedRHS(DemandedElts);
1458     if (auto *CV = dyn_cast<ConstantVector>(Sel->getCondition())) {
1459       for (unsigned i = 0; i < VWidth; i++) {
1460         // isNullValue() always returns false when called on a ConstantExpr.
1461         // Skip constant expressions to avoid propagating incorrect information.
1462         Constant *CElt = CV->getAggregateElement(i);
1463         if (isa<ConstantExpr>(CElt))
1464           continue;
1465         // TODO: If a select condition element is undef, we can demand from
1466         // either side. If one side is known undef, choosing that side would
1467         // propagate undef.
1468         if (CElt->isNullValue())
1469           DemandedLHS.clearBit(i);
1470         else
1471           DemandedRHS.clearBit(i);
1472       }
1473     }
1474 
1475     simplifyAndSetOp(I, 1, DemandedLHS, UndefElts2);
1476     simplifyAndSetOp(I, 2, DemandedRHS, UndefElts3);
1477 
1478     // Output elements are undefined if the element from each arm is undefined.
1479     // TODO: This can be improved. See comment in select condition handling.
1480     UndefElts = UndefElts2 & UndefElts3;
1481     break;
1482   }
1483   case Instruction::BitCast: {
1484     // Vector->vector casts only.
1485     VectorType *VTy = dyn_cast<VectorType>(I->getOperand(0)->getType());
1486     if (!VTy) break;
1487     unsigned InVWidth = cast<FixedVectorType>(VTy)->getNumElements();
1488     APInt InputDemandedElts(InVWidth, 0);
1489     UndefElts2 = APInt(InVWidth, 0);
1490     unsigned Ratio;
1491 
1492     if (VWidth == InVWidth) {
1493       // If we are converting from <4 x i32> -> <4 x f32>, we demand the same
1494       // elements as are demanded of us.
1495       Ratio = 1;
1496       InputDemandedElts = DemandedElts;
1497     } else if ((VWidth % InVWidth) == 0) {
1498       // If the number of elements in the output is a multiple of the number of
1499       // elements in the input then an input element is live if any of the
1500       // corresponding output elements are live.
1501       Ratio = VWidth / InVWidth;
1502       for (unsigned OutIdx = 0; OutIdx != VWidth; ++OutIdx)
1503         if (DemandedElts[OutIdx])
1504           InputDemandedElts.setBit(OutIdx / Ratio);
1505     } else if ((InVWidth % VWidth) == 0) {
1506       // If the number of elements in the input is a multiple of the number of
1507       // elements in the output then an input element is live if the
1508       // corresponding output element is live.
1509       Ratio = InVWidth / VWidth;
1510       for (unsigned InIdx = 0; InIdx != InVWidth; ++InIdx)
1511         if (DemandedElts[InIdx / Ratio])
1512           InputDemandedElts.setBit(InIdx);
1513     } else {
1514       // Unsupported so far.
1515       break;
1516     }
1517 
1518     simplifyAndSetOp(I, 0, InputDemandedElts, UndefElts2);
1519 
1520     if (VWidth == InVWidth) {
1521       UndefElts = UndefElts2;
1522     } else if ((VWidth % InVWidth) == 0) {
1523       // If the number of elements in the output is a multiple of the number of
1524       // elements in the input then an output element is undef if the
1525       // corresponding input element is undef.
1526       for (unsigned OutIdx = 0; OutIdx != VWidth; ++OutIdx)
1527         if (UndefElts2[OutIdx / Ratio])
1528           UndefElts.setBit(OutIdx);
1529     } else if ((InVWidth % VWidth) == 0) {
1530       // If the number of elements in the input is a multiple of the number of
1531       // elements in the output then an output element is undef if all of the
1532       // corresponding input elements are undef.
1533       for (unsigned OutIdx = 0; OutIdx != VWidth; ++OutIdx) {
1534         APInt SubUndef = UndefElts2.lshr(OutIdx * Ratio).zextOrTrunc(Ratio);
1535         if (SubUndef.countPopulation() == Ratio)
1536           UndefElts.setBit(OutIdx);
1537       }
1538     } else {
1539       llvm_unreachable("Unimp");
1540     }
1541     break;
1542   }
1543   case Instruction::FPTrunc:
1544   case Instruction::FPExt:
1545     simplifyAndSetOp(I, 0, DemandedElts, UndefElts);
1546     break;
1547 
1548   case Instruction::Call: {
1549     IntrinsicInst *II = dyn_cast<IntrinsicInst>(I);
1550     if (!II) break;
1551     switch (II->getIntrinsicID()) {
1552     case Intrinsic::masked_gather: // fallthrough
1553     case Intrinsic::masked_load: {
1554       // Subtlety: If we load from a pointer, the pointer must be valid
1555       // regardless of whether the element is demanded.  Doing otherwise risks
1556       // segfaults which didn't exist in the original program.
1557       APInt DemandedPtrs(APInt::getAllOnes(VWidth)),
1558           DemandedPassThrough(DemandedElts);
1559       if (auto *CV = dyn_cast<ConstantVector>(II->getOperand(2)))
1560         for (unsigned i = 0; i < VWidth; i++) {
1561           Constant *CElt = CV->getAggregateElement(i);
1562           if (CElt->isNullValue())
1563             DemandedPtrs.clearBit(i);
1564           else if (CElt->isAllOnesValue())
1565             DemandedPassThrough.clearBit(i);
1566         }
1567       if (II->getIntrinsicID() == Intrinsic::masked_gather)
1568         simplifyAndSetOp(II, 0, DemandedPtrs, UndefElts2);
1569       simplifyAndSetOp(II, 3, DemandedPassThrough, UndefElts3);
1570 
1571       // Output elements are undefined if the element from both sources are.
1572       // TODO: can strengthen via mask as well.
1573       UndefElts = UndefElts2 & UndefElts3;
1574       break;
1575     }
1576     default: {
1577       // Handle target specific intrinsics
1578       Optional<Value *> V = targetSimplifyDemandedVectorEltsIntrinsic(
1579           *II, DemandedElts, UndefElts, UndefElts2, UndefElts3,
1580           simplifyAndSetOp);
1581       if (V.hasValue())
1582         return V.getValue();
1583       break;
1584     }
1585     } // switch on IntrinsicID
1586     break;
1587   } // case Call
1588   } // switch on Opcode
1589 
1590   // TODO: We bail completely on integer div/rem and shifts because they have
1591   // UB/poison potential, but that should be refined.
1592   BinaryOperator *BO;
1593   if (match(I, m_BinOp(BO)) && !BO->isIntDivRem() && !BO->isShift()) {
1594     simplifyAndSetOp(I, 0, DemandedElts, UndefElts);
1595     simplifyAndSetOp(I, 1, DemandedElts, UndefElts2);
1596 
1597     // Output elements are undefined if both are undefined. Consider things
1598     // like undef & 0. The result is known zero, not undef.
1599     UndefElts &= UndefElts2;
1600   }
1601 
1602   // If we've proven all of the lanes undef, return an undef value.
1603   // TODO: Intersect w/demanded lanes
1604   if (UndefElts.isAllOnes())
1605     return UndefValue::get(I->getType());;
1606 
1607   return MadeChange ? I : nullptr;
1608 }
1609