1 //===- GVN.cpp - Eliminate redundant values and loads ---------------------===//
2 //
3 //                     The LLVM Compiler Infrastructure
4 //
5 // This file is distributed under the University of Illinois Open Source
6 // License. See LICENSE.TXT for details.
7 //
8 //===----------------------------------------------------------------------===//
9 //
10 // This pass performs global value numbering to eliminate fully redundant
11 // instructions.  It also performs simple dead load elimination.
12 //
13 // Note that this pass does the value numbering itself; it does not use the
14 // ValueNumbering analysis passes.
15 //
16 //===----------------------------------------------------------------------===//
17 
18 #include "llvm/Transforms/Scalar/GVN.h"
19 #include "llvm/ADT/DenseMap.h"
20 #include "llvm/ADT/DepthFirstIterator.h"
21 #include "llvm/ADT/Hashing.h"
22 #include "llvm/ADT/MapVector.h"
23 #include "llvm/ADT/PointerIntPair.h"
24 #include "llvm/ADT/PostOrderIterator.h"
25 #include "llvm/ADT/STLExtras.h"
26 #include "llvm/ADT/SetVector.h"
27 #include "llvm/ADT/SmallPtrSet.h"
28 #include "llvm/ADT/SmallVector.h"
29 #include "llvm/ADT/Statistic.h"
30 #include "llvm/Analysis/AliasAnalysis.h"
31 #include "llvm/Analysis/AssumptionCache.h"
32 #include "llvm/Analysis/CFG.h"
33 #include "llvm/Analysis/GlobalsModRef.h"
34 #include "llvm/Analysis/InstructionSimplify.h"
35 #include "llvm/Analysis/LoopInfo.h"
36 #include "llvm/Analysis/MemoryBuiltins.h"
37 #include "llvm/Analysis/MemoryDependenceAnalysis.h"
38 #include "llvm/Analysis/OptimizationRemarkEmitter.h"
39 #include "llvm/Analysis/PHITransAddr.h"
40 #include "llvm/Analysis/TargetLibraryInfo.h"
41 #include "llvm/Analysis/ValueTracking.h"
42 #include "llvm/Config/llvm-config.h"
43 #include "llvm/IR/Attributes.h"
44 #include "llvm/IR/BasicBlock.h"
45 #include "llvm/IR/CallSite.h"
46 #include "llvm/IR/Constant.h"
47 #include "llvm/IR/Constants.h"
48 #include "llvm/IR/DataLayout.h"
49 #include "llvm/IR/DebugLoc.h"
50 #include "llvm/IR/DomTreeUpdater.h"
51 #include "llvm/IR/Dominators.h"
52 #include "llvm/IR/Function.h"
53 #include "llvm/IR/InstrTypes.h"
54 #include "llvm/IR/Instruction.h"
55 #include "llvm/IR/Instructions.h"
56 #include "llvm/IR/IntrinsicInst.h"
57 #include "llvm/IR/Intrinsics.h"
58 #include "llvm/IR/LLVMContext.h"
59 #include "llvm/IR/Metadata.h"
60 #include "llvm/IR/Module.h"
61 #include "llvm/IR/Operator.h"
62 #include "llvm/IR/PassManager.h"
63 #include "llvm/IR/PatternMatch.h"
64 #include "llvm/IR/Type.h"
65 #include "llvm/IR/Use.h"
66 #include "llvm/IR/Value.h"
67 #include "llvm/Pass.h"
68 #include "llvm/Support/Casting.h"
69 #include "llvm/Support/CommandLine.h"
70 #include "llvm/Support/Compiler.h"
71 #include "llvm/Support/Debug.h"
72 #include "llvm/Support/raw_ostream.h"
73 #include "llvm/Transforms/Utils/BasicBlockUtils.h"
74 #include "llvm/Transforms/Utils/Local.h"
75 #include "llvm/Transforms/Utils/SSAUpdater.h"
76 #include "llvm/Transforms/Utils/VNCoercion.h"
77 #include <algorithm>
78 #include <cassert>
79 #include <cstdint>
80 #include <utility>
81 #include <vector>
82 
83 using namespace llvm;
84 using namespace llvm::gvn;
85 using namespace llvm::VNCoercion;
86 using namespace PatternMatch;
87 
88 #define DEBUG_TYPE "gvn"
89 
90 STATISTIC(NumGVNInstr,  "Number of instructions deleted");
91 STATISTIC(NumGVNLoad,   "Number of loads deleted");
92 STATISTIC(NumGVNPRE,    "Number of instructions PRE'd");
93 STATISTIC(NumGVNBlocks, "Number of blocks merged");
94 STATISTIC(NumGVNSimpl,  "Number of instructions simplified");
95 STATISTIC(NumGVNEqProp, "Number of equalities propagated");
96 STATISTIC(NumPRELoad,   "Number of loads PRE'd");
97 
98 static cl::opt<bool> EnablePRE("enable-pre",
99                                cl::init(true), cl::Hidden);
100 static cl::opt<bool> EnableLoadPRE("enable-load-pre", cl::init(true));
101 static cl::opt<bool> EnableMemDep("enable-gvn-memdep", cl::init(true));
102 
103 // Maximum allowed recursion depth.
104 static cl::opt<uint32_t>
105 MaxRecurseDepth("max-recurse-depth", cl::Hidden, cl::init(1000), cl::ZeroOrMore,
106                 cl::desc("Max recurse depth (default = 1000)"));
107 
108 struct llvm::GVN::Expression {
109   uint32_t opcode;
110   Type *type;
111   bool commutative = false;
112   SmallVector<uint32_t, 4> varargs;
113 
114   Expression(uint32_t o = ~2U) : opcode(o) {}
115 
116   bool operator==(const Expression &other) const {
117     if (opcode != other.opcode)
118       return false;
119     if (opcode == ~0U || opcode == ~1U)
120       return true;
121     if (type != other.type)
122       return false;
123     if (varargs != other.varargs)
124       return false;
125     return true;
126   }
127 
128   friend hash_code hash_value(const Expression &Value) {
129     return hash_combine(
130         Value.opcode, Value.type,
131         hash_combine_range(Value.varargs.begin(), Value.varargs.end()));
132   }
133 };
134 
135 namespace llvm {
136 
137 template <> struct DenseMapInfo<GVN::Expression> {
138   static inline GVN::Expression getEmptyKey() { return ~0U; }
139   static inline GVN::Expression getTombstoneKey() { return ~1U; }
140 
141   static unsigned getHashValue(const GVN::Expression &e) {
142     using llvm::hash_value;
143 
144     return static_cast<unsigned>(hash_value(e));
145   }
146 
147   static bool isEqual(const GVN::Expression &LHS, const GVN::Expression &RHS) {
148     return LHS == RHS;
149   }
150 };
151 
152 } // end namespace llvm
153 
154 /// Represents a particular available value that we know how to materialize.
155 /// Materialization of an AvailableValue never fails.  An AvailableValue is
156 /// implicitly associated with a rematerialization point which is the
157 /// location of the instruction from which it was formed.
158 struct llvm::gvn::AvailableValue {
159   enum ValType {
160     SimpleVal, // A simple offsetted value that is accessed.
161     LoadVal,   // A value produced by a load.
162     MemIntrin, // A memory intrinsic which is loaded from.
163     UndefVal   // A UndefValue representing a value from dead block (which
164                // is not yet physically removed from the CFG).
165   };
166 
167   /// V - The value that is live out of the block.
168   PointerIntPair<Value *, 2, ValType> Val;
169 
170   /// Offset - The byte offset in Val that is interesting for the load query.
171   unsigned Offset;
172 
173   static AvailableValue get(Value *V, unsigned Offset = 0) {
174     AvailableValue Res;
175     Res.Val.setPointer(V);
176     Res.Val.setInt(SimpleVal);
177     Res.Offset = Offset;
178     return Res;
179   }
180 
181   static AvailableValue getMI(MemIntrinsic *MI, unsigned Offset = 0) {
182     AvailableValue Res;
183     Res.Val.setPointer(MI);
184     Res.Val.setInt(MemIntrin);
185     Res.Offset = Offset;
186     return Res;
187   }
188 
189   static AvailableValue getLoad(LoadInst *LI, unsigned Offset = 0) {
190     AvailableValue Res;
191     Res.Val.setPointer(LI);
192     Res.Val.setInt(LoadVal);
193     Res.Offset = Offset;
194     return Res;
195   }
196 
197   static AvailableValue getUndef() {
198     AvailableValue Res;
199     Res.Val.setPointer(nullptr);
200     Res.Val.setInt(UndefVal);
201     Res.Offset = 0;
202     return Res;
203   }
204 
205   bool isSimpleValue() const { return Val.getInt() == SimpleVal; }
206   bool isCoercedLoadValue() const { return Val.getInt() == LoadVal; }
207   bool isMemIntrinValue() const { return Val.getInt() == MemIntrin; }
208   bool isUndefValue() const { return Val.getInt() == UndefVal; }
209 
210   Value *getSimpleValue() const {
211     assert(isSimpleValue() && "Wrong accessor");
212     return Val.getPointer();
213   }
214 
215   LoadInst *getCoercedLoadValue() const {
216     assert(isCoercedLoadValue() && "Wrong accessor");
217     return cast<LoadInst>(Val.getPointer());
218   }
219 
220   MemIntrinsic *getMemIntrinValue() const {
221     assert(isMemIntrinValue() && "Wrong accessor");
222     return cast<MemIntrinsic>(Val.getPointer());
223   }
224 
225   /// Emit code at the specified insertion point to adjust the value defined
226   /// here to the specified type. This handles various coercion cases.
227   Value *MaterializeAdjustedValue(LoadInst *LI, Instruction *InsertPt,
228                                   GVN &gvn) const;
229 };
230 
231 /// Represents an AvailableValue which can be rematerialized at the end of
232 /// the associated BasicBlock.
233 struct llvm::gvn::AvailableValueInBlock {
234   /// BB - The basic block in question.
235   BasicBlock *BB;
236 
237   /// AV - The actual available value
238   AvailableValue AV;
239 
240   static AvailableValueInBlock get(BasicBlock *BB, AvailableValue &&AV) {
241     AvailableValueInBlock Res;
242     Res.BB = BB;
243     Res.AV = std::move(AV);
244     return Res;
245   }
246 
247   static AvailableValueInBlock get(BasicBlock *BB, Value *V,
248                                    unsigned Offset = 0) {
249     return get(BB, AvailableValue::get(V, Offset));
250   }
251 
252   static AvailableValueInBlock getUndef(BasicBlock *BB) {
253     return get(BB, AvailableValue::getUndef());
254   }
255 
256   /// Emit code at the end of this block to adjust the value defined here to
257   /// the specified type. This handles various coercion cases.
258   Value *MaterializeAdjustedValue(LoadInst *LI, GVN &gvn) const {
259     return AV.MaterializeAdjustedValue(LI, BB->getTerminator(), gvn);
260   }
261 };
262 
263 //===----------------------------------------------------------------------===//
264 //                     ValueTable Internal Functions
265 //===----------------------------------------------------------------------===//
266 
267 GVN::Expression GVN::ValueTable::createExpr(Instruction *I) {
268   Expression e;
269   e.type = I->getType();
270   e.opcode = I->getOpcode();
271   for (Instruction::op_iterator OI = I->op_begin(), OE = I->op_end();
272        OI != OE; ++OI)
273     e.varargs.push_back(lookupOrAdd(*OI));
274   if (I->isCommutative()) {
275     // Ensure that commutative instructions that only differ by a permutation
276     // of their operands get the same value number by sorting the operand value
277     // numbers.  Since all commutative instructions have two operands it is more
278     // efficient to sort by hand rather than using, say, std::sort.
279     assert(I->getNumOperands() == 2 && "Unsupported commutative instruction!");
280     if (e.varargs[0] > e.varargs[1])
281       std::swap(e.varargs[0], e.varargs[1]);
282     e.commutative = true;
283   }
284 
285   if (CmpInst *C = dyn_cast<CmpInst>(I)) {
286     // Sort the operand value numbers so x<y and y>x get the same value number.
287     CmpInst::Predicate Predicate = C->getPredicate();
288     if (e.varargs[0] > e.varargs[1]) {
289       std::swap(e.varargs[0], e.varargs[1]);
290       Predicate = CmpInst::getSwappedPredicate(Predicate);
291     }
292     e.opcode = (C->getOpcode() << 8) | Predicate;
293     e.commutative = true;
294   } else if (InsertValueInst *E = dyn_cast<InsertValueInst>(I)) {
295     for (InsertValueInst::idx_iterator II = E->idx_begin(), IE = E->idx_end();
296          II != IE; ++II)
297       e.varargs.push_back(*II);
298   }
299 
300   return e;
301 }
302 
303 GVN::Expression GVN::ValueTable::createCmpExpr(unsigned Opcode,
304                                                CmpInst::Predicate Predicate,
305                                                Value *LHS, Value *RHS) {
306   assert((Opcode == Instruction::ICmp || Opcode == Instruction::FCmp) &&
307          "Not a comparison!");
308   Expression e;
309   e.type = CmpInst::makeCmpResultType(LHS->getType());
310   e.varargs.push_back(lookupOrAdd(LHS));
311   e.varargs.push_back(lookupOrAdd(RHS));
312 
313   // Sort the operand value numbers so x<y and y>x get the same value number.
314   if (e.varargs[0] > e.varargs[1]) {
315     std::swap(e.varargs[0], e.varargs[1]);
316     Predicate = CmpInst::getSwappedPredicate(Predicate);
317   }
318   e.opcode = (Opcode << 8) | Predicate;
319   e.commutative = true;
320   return e;
321 }
322 
323 GVN::Expression GVN::ValueTable::createExtractvalueExpr(ExtractValueInst *EI) {
324   assert(EI && "Not an ExtractValueInst?");
325   Expression e;
326   e.type = EI->getType();
327   e.opcode = 0;
328 
329   IntrinsicInst *I = dyn_cast<IntrinsicInst>(EI->getAggregateOperand());
330   if (I != nullptr && EI->getNumIndices() == 1 && *EI->idx_begin() == 0 ) {
331     // EI might be an extract from one of our recognised intrinsics. If it
332     // is we'll synthesize a semantically equivalent expression instead on
333     // an extract value expression.
334     switch (I->getIntrinsicID()) {
335       case Intrinsic::sadd_with_overflow:
336       case Intrinsic::uadd_with_overflow:
337         e.opcode = Instruction::Add;
338         break;
339       case Intrinsic::ssub_with_overflow:
340       case Intrinsic::usub_with_overflow:
341         e.opcode = Instruction::Sub;
342         break;
343       case Intrinsic::smul_with_overflow:
344       case Intrinsic::umul_with_overflow:
345         e.opcode = Instruction::Mul;
346         break;
347       default:
348         break;
349     }
350 
351     if (e.opcode != 0) {
352       // Intrinsic recognized. Grab its args to finish building the expression.
353       assert(I->getNumArgOperands() == 2 &&
354              "Expect two args for recognised intrinsics.");
355       e.varargs.push_back(lookupOrAdd(I->getArgOperand(0)));
356       e.varargs.push_back(lookupOrAdd(I->getArgOperand(1)));
357       return e;
358     }
359   }
360 
361   // Not a recognised intrinsic. Fall back to producing an extract value
362   // expression.
363   e.opcode = EI->getOpcode();
364   for (Instruction::op_iterator OI = EI->op_begin(), OE = EI->op_end();
365        OI != OE; ++OI)
366     e.varargs.push_back(lookupOrAdd(*OI));
367 
368   for (ExtractValueInst::idx_iterator II = EI->idx_begin(), IE = EI->idx_end();
369          II != IE; ++II)
370     e.varargs.push_back(*II);
371 
372   return e;
373 }
374 
375 //===----------------------------------------------------------------------===//
376 //                     ValueTable External Functions
377 //===----------------------------------------------------------------------===//
378 
379 GVN::ValueTable::ValueTable() = default;
380 GVN::ValueTable::ValueTable(const ValueTable &) = default;
381 GVN::ValueTable::ValueTable(ValueTable &&) = default;
382 GVN::ValueTable::~ValueTable() = default;
383 
384 /// add - Insert a value into the table with a specified value number.
385 void GVN::ValueTable::add(Value *V, uint32_t num) {
386   valueNumbering.insert(std::make_pair(V, num));
387   if (PHINode *PN = dyn_cast<PHINode>(V))
388     NumberingPhi[num] = PN;
389 }
390 
391 uint32_t GVN::ValueTable::lookupOrAddCall(CallInst *C) {
392   if (AA->doesNotAccessMemory(C)) {
393     Expression exp = createExpr(C);
394     uint32_t e = assignExpNewValueNum(exp).first;
395     valueNumbering[C] = e;
396     return e;
397   } else if (MD && AA->onlyReadsMemory(C)) {
398     Expression exp = createExpr(C);
399     auto ValNum = assignExpNewValueNum(exp);
400     if (ValNum.second) {
401       valueNumbering[C] = ValNum.first;
402       return ValNum.first;
403     }
404 
405     MemDepResult local_dep = MD->getDependency(C);
406 
407     if (!local_dep.isDef() && !local_dep.isNonLocal()) {
408       valueNumbering[C] =  nextValueNumber;
409       return nextValueNumber++;
410     }
411 
412     if (local_dep.isDef()) {
413       CallInst* local_cdep = cast<CallInst>(local_dep.getInst());
414 
415       if (local_cdep->getNumArgOperands() != C->getNumArgOperands()) {
416         valueNumbering[C] = nextValueNumber;
417         return nextValueNumber++;
418       }
419 
420       for (unsigned i = 0, e = C->getNumArgOperands(); i < e; ++i) {
421         uint32_t c_vn = lookupOrAdd(C->getArgOperand(i));
422         uint32_t cd_vn = lookupOrAdd(local_cdep->getArgOperand(i));
423         if (c_vn != cd_vn) {
424           valueNumbering[C] = nextValueNumber;
425           return nextValueNumber++;
426         }
427       }
428 
429       uint32_t v = lookupOrAdd(local_cdep);
430       valueNumbering[C] = v;
431       return v;
432     }
433 
434     // Non-local case.
435     const MemoryDependenceResults::NonLocalDepInfo &deps =
436       MD->getNonLocalCallDependency(CallSite(C));
437     // FIXME: Move the checking logic to MemDep!
438     CallInst* cdep = nullptr;
439 
440     // Check to see if we have a single dominating call instruction that is
441     // identical to C.
442     for (unsigned i = 0, e = deps.size(); i != e; ++i) {
443       const NonLocalDepEntry *I = &deps[i];
444       if (I->getResult().isNonLocal())
445         continue;
446 
447       // We don't handle non-definitions.  If we already have a call, reject
448       // instruction dependencies.
449       if (!I->getResult().isDef() || cdep != nullptr) {
450         cdep = nullptr;
451         break;
452       }
453 
454       CallInst *NonLocalDepCall = dyn_cast<CallInst>(I->getResult().getInst());
455       // FIXME: All duplicated with non-local case.
456       if (NonLocalDepCall && DT->properlyDominates(I->getBB(), C->getParent())){
457         cdep = NonLocalDepCall;
458         continue;
459       }
460 
461       cdep = nullptr;
462       break;
463     }
464 
465     if (!cdep) {
466       valueNumbering[C] = nextValueNumber;
467       return nextValueNumber++;
468     }
469 
470     if (cdep->getNumArgOperands() != C->getNumArgOperands()) {
471       valueNumbering[C] = nextValueNumber;
472       return nextValueNumber++;
473     }
474     for (unsigned i = 0, e = C->getNumArgOperands(); i < e; ++i) {
475       uint32_t c_vn = lookupOrAdd(C->getArgOperand(i));
476       uint32_t cd_vn = lookupOrAdd(cdep->getArgOperand(i));
477       if (c_vn != cd_vn) {
478         valueNumbering[C] = nextValueNumber;
479         return nextValueNumber++;
480       }
481     }
482 
483     uint32_t v = lookupOrAdd(cdep);
484     valueNumbering[C] = v;
485     return v;
486   } else {
487     valueNumbering[C] = nextValueNumber;
488     return nextValueNumber++;
489   }
490 }
491 
492 /// Returns true if a value number exists for the specified value.
493 bool GVN::ValueTable::exists(Value *V) const { return valueNumbering.count(V) != 0; }
494 
495 /// lookup_or_add - Returns the value number for the specified value, assigning
496 /// it a new number if it did not have one before.
497 uint32_t GVN::ValueTable::lookupOrAdd(Value *V) {
498   DenseMap<Value*, uint32_t>::iterator VI = valueNumbering.find(V);
499   if (VI != valueNumbering.end())
500     return VI->second;
501 
502   if (!isa<Instruction>(V)) {
503     valueNumbering[V] = nextValueNumber;
504     return nextValueNumber++;
505   }
506 
507   Instruction* I = cast<Instruction>(V);
508   Expression exp;
509   switch (I->getOpcode()) {
510     case Instruction::Call:
511       return lookupOrAddCall(cast<CallInst>(I));
512     case Instruction::Add:
513     case Instruction::FAdd:
514     case Instruction::Sub:
515     case Instruction::FSub:
516     case Instruction::Mul:
517     case Instruction::FMul:
518     case Instruction::UDiv:
519     case Instruction::SDiv:
520     case Instruction::FDiv:
521     case Instruction::URem:
522     case Instruction::SRem:
523     case Instruction::FRem:
524     case Instruction::Shl:
525     case Instruction::LShr:
526     case Instruction::AShr:
527     case Instruction::And:
528     case Instruction::Or:
529     case Instruction::Xor:
530     case Instruction::ICmp:
531     case Instruction::FCmp:
532     case Instruction::Trunc:
533     case Instruction::ZExt:
534     case Instruction::SExt:
535     case Instruction::FPToUI:
536     case Instruction::FPToSI:
537     case Instruction::UIToFP:
538     case Instruction::SIToFP:
539     case Instruction::FPTrunc:
540     case Instruction::FPExt:
541     case Instruction::PtrToInt:
542     case Instruction::IntToPtr:
543     case Instruction::BitCast:
544     case Instruction::Select:
545     case Instruction::ExtractElement:
546     case Instruction::InsertElement:
547     case Instruction::ShuffleVector:
548     case Instruction::InsertValue:
549     case Instruction::GetElementPtr:
550       exp = createExpr(I);
551       break;
552     case Instruction::ExtractValue:
553       exp = createExtractvalueExpr(cast<ExtractValueInst>(I));
554       break;
555     case Instruction::PHI:
556       valueNumbering[V] = nextValueNumber;
557       NumberingPhi[nextValueNumber] = cast<PHINode>(V);
558       return nextValueNumber++;
559     default:
560       valueNumbering[V] = nextValueNumber;
561       return nextValueNumber++;
562   }
563 
564   uint32_t e = assignExpNewValueNum(exp).first;
565   valueNumbering[V] = e;
566   return e;
567 }
568 
569 /// Returns the value number of the specified value. Fails if
570 /// the value has not yet been numbered.
571 uint32_t GVN::ValueTable::lookup(Value *V, bool Verify) const {
572   DenseMap<Value*, uint32_t>::const_iterator VI = valueNumbering.find(V);
573   if (Verify) {
574     assert(VI != valueNumbering.end() && "Value not numbered?");
575     return VI->second;
576   }
577   return (VI != valueNumbering.end()) ? VI->second : 0;
578 }
579 
580 /// Returns the value number of the given comparison,
581 /// assigning it a new number if it did not have one before.  Useful when
582 /// we deduced the result of a comparison, but don't immediately have an
583 /// instruction realizing that comparison to hand.
584 uint32_t GVN::ValueTable::lookupOrAddCmp(unsigned Opcode,
585                                          CmpInst::Predicate Predicate,
586                                          Value *LHS, Value *RHS) {
587   Expression exp = createCmpExpr(Opcode, Predicate, LHS, RHS);
588   return assignExpNewValueNum(exp).first;
589 }
590 
591 /// Remove all entries from the ValueTable.
592 void GVN::ValueTable::clear() {
593   valueNumbering.clear();
594   expressionNumbering.clear();
595   NumberingPhi.clear();
596   PhiTranslateTable.clear();
597   nextValueNumber = 1;
598   Expressions.clear();
599   ExprIdx.clear();
600   nextExprNumber = 0;
601 }
602 
603 /// Remove a value from the value numbering.
604 void GVN::ValueTable::erase(Value *V) {
605   uint32_t Num = valueNumbering.lookup(V);
606   valueNumbering.erase(V);
607   // If V is PHINode, V <--> value number is an one-to-one mapping.
608   if (isa<PHINode>(V))
609     NumberingPhi.erase(Num);
610 }
611 
612 /// verifyRemoved - Verify that the value is removed from all internal data
613 /// structures.
614 void GVN::ValueTable::verifyRemoved(const Value *V) const {
615   for (DenseMap<Value*, uint32_t>::const_iterator
616          I = valueNumbering.begin(), E = valueNumbering.end(); I != E; ++I) {
617     assert(I->first != V && "Inst still occurs in value numbering map!");
618   }
619 }
620 
621 //===----------------------------------------------------------------------===//
622 //                                GVN Pass
623 //===----------------------------------------------------------------------===//
624 
625 PreservedAnalyses GVN::run(Function &F, FunctionAnalysisManager &AM) {
626   // FIXME: The order of evaluation of these 'getResult' calls is very
627   // significant! Re-ordering these variables will cause GVN when run alone to
628   // be less effective! We should fix memdep and basic-aa to not exhibit this
629   // behavior, but until then don't change the order here.
630   auto &AC = AM.getResult<AssumptionAnalysis>(F);
631   auto &DT = AM.getResult<DominatorTreeAnalysis>(F);
632   auto &TLI = AM.getResult<TargetLibraryAnalysis>(F);
633   auto &AA = AM.getResult<AAManager>(F);
634   auto &MemDep = AM.getResult<MemoryDependenceAnalysis>(F);
635   auto *LI = AM.getCachedResult<LoopAnalysis>(F);
636   auto &ORE = AM.getResult<OptimizationRemarkEmitterAnalysis>(F);
637   bool Changed = runImpl(F, AC, DT, TLI, AA, &MemDep, LI, &ORE);
638   if (!Changed)
639     return PreservedAnalyses::all();
640   PreservedAnalyses PA;
641   PA.preserve<DominatorTreeAnalysis>();
642   PA.preserve<GlobalsAA>();
643   PA.preserve<TargetLibraryAnalysis>();
644   return PA;
645 }
646 
647 #if !defined(NDEBUG) || defined(LLVM_ENABLE_DUMP)
648 LLVM_DUMP_METHOD void GVN::dump(DenseMap<uint32_t, Value*>& d) const {
649   errs() << "{\n";
650   for (DenseMap<uint32_t, Value*>::iterator I = d.begin(),
651        E = d.end(); I != E; ++I) {
652       errs() << I->first << "\n";
653       I->second->dump();
654   }
655   errs() << "}\n";
656 }
657 #endif
658 
659 /// Return true if we can prove that the value
660 /// we're analyzing is fully available in the specified block.  As we go, keep
661 /// track of which blocks we know are fully alive in FullyAvailableBlocks.  This
662 /// map is actually a tri-state map with the following values:
663 ///   0) we know the block *is not* fully available.
664 ///   1) we know the block *is* fully available.
665 ///   2) we do not know whether the block is fully available or not, but we are
666 ///      currently speculating that it will be.
667 ///   3) we are speculating for this block and have used that to speculate for
668 ///      other blocks.
669 static bool IsValueFullyAvailableInBlock(BasicBlock *BB,
670                             DenseMap<BasicBlock*, char> &FullyAvailableBlocks,
671                             uint32_t RecurseDepth) {
672   if (RecurseDepth > MaxRecurseDepth)
673     return false;
674 
675   // Optimistically assume that the block is fully available and check to see
676   // if we already know about this block in one lookup.
677   std::pair<DenseMap<BasicBlock*, char>::iterator, bool> IV =
678     FullyAvailableBlocks.insert(std::make_pair(BB, 2));
679 
680   // If the entry already existed for this block, return the precomputed value.
681   if (!IV.second) {
682     // If this is a speculative "available" value, mark it as being used for
683     // speculation of other blocks.
684     if (IV.first->second == 2)
685       IV.first->second = 3;
686     return IV.first->second != 0;
687   }
688 
689   // Otherwise, see if it is fully available in all predecessors.
690   pred_iterator PI = pred_begin(BB), PE = pred_end(BB);
691 
692   // If this block has no predecessors, it isn't live-in here.
693   if (PI == PE)
694     goto SpeculationFailure;
695 
696   for (; PI != PE; ++PI)
697     // If the value isn't fully available in one of our predecessors, then it
698     // isn't fully available in this block either.  Undo our previous
699     // optimistic assumption and bail out.
700     if (!IsValueFullyAvailableInBlock(*PI, FullyAvailableBlocks,RecurseDepth+1))
701       goto SpeculationFailure;
702 
703   return true;
704 
705 // If we get here, we found out that this is not, after
706 // all, a fully-available block.  We have a problem if we speculated on this and
707 // used the speculation to mark other blocks as available.
708 SpeculationFailure:
709   char &BBVal = FullyAvailableBlocks[BB];
710 
711   // If we didn't speculate on this, just return with it set to false.
712   if (BBVal == 2) {
713     BBVal = 0;
714     return false;
715   }
716 
717   // If we did speculate on this value, we could have blocks set to 1 that are
718   // incorrect.  Walk the (transitive) successors of this block and mark them as
719   // 0 if set to one.
720   SmallVector<BasicBlock*, 32> BBWorklist;
721   BBWorklist.push_back(BB);
722 
723   do {
724     BasicBlock *Entry = BBWorklist.pop_back_val();
725     // Note that this sets blocks to 0 (unavailable) if they happen to not
726     // already be in FullyAvailableBlocks.  This is safe.
727     char &EntryVal = FullyAvailableBlocks[Entry];
728     if (EntryVal == 0) continue;  // Already unavailable.
729 
730     // Mark as unavailable.
731     EntryVal = 0;
732 
733     BBWorklist.append(succ_begin(Entry), succ_end(Entry));
734   } while (!BBWorklist.empty());
735 
736   return false;
737 }
738 
739 /// Given a set of loads specified by ValuesPerBlock,
740 /// construct SSA form, allowing us to eliminate LI.  This returns the value
741 /// that should be used at LI's definition site.
742 static Value *ConstructSSAForLoadSet(LoadInst *LI,
743                          SmallVectorImpl<AvailableValueInBlock> &ValuesPerBlock,
744                                      GVN &gvn) {
745   // Check for the fully redundant, dominating load case.  In this case, we can
746   // just use the dominating value directly.
747   if (ValuesPerBlock.size() == 1 &&
748       gvn.getDominatorTree().properlyDominates(ValuesPerBlock[0].BB,
749                                                LI->getParent())) {
750     assert(!ValuesPerBlock[0].AV.isUndefValue() &&
751            "Dead BB dominate this block");
752     return ValuesPerBlock[0].MaterializeAdjustedValue(LI, gvn);
753   }
754 
755   // Otherwise, we have to construct SSA form.
756   SmallVector<PHINode*, 8> NewPHIs;
757   SSAUpdater SSAUpdate(&NewPHIs);
758   SSAUpdate.Initialize(LI->getType(), LI->getName());
759 
760   for (const AvailableValueInBlock &AV : ValuesPerBlock) {
761     BasicBlock *BB = AV.BB;
762 
763     if (SSAUpdate.HasValueForBlock(BB))
764       continue;
765 
766     // If the value is the load that we will be eliminating, and the block it's
767     // available in is the block that the load is in, then don't add it as
768     // SSAUpdater will resolve the value to the relevant phi which may let it
769     // avoid phi construction entirely if there's actually only one value.
770     if (BB == LI->getParent() &&
771         ((AV.AV.isSimpleValue() && AV.AV.getSimpleValue() == LI) ||
772          (AV.AV.isCoercedLoadValue() && AV.AV.getCoercedLoadValue() == LI)))
773       continue;
774 
775     SSAUpdate.AddAvailableValue(BB, AV.MaterializeAdjustedValue(LI, gvn));
776   }
777 
778   // Perform PHI construction.
779   return SSAUpdate.GetValueInMiddleOfBlock(LI->getParent());
780 }
781 
782 Value *AvailableValue::MaterializeAdjustedValue(LoadInst *LI,
783                                                 Instruction *InsertPt,
784                                                 GVN &gvn) const {
785   Value *Res;
786   Type *LoadTy = LI->getType();
787   const DataLayout &DL = LI->getModule()->getDataLayout();
788   if (isSimpleValue()) {
789     Res = getSimpleValue();
790     if (Res->getType() != LoadTy) {
791       Res = getStoreValueForLoad(Res, Offset, LoadTy, InsertPt, DL);
792 
793       LLVM_DEBUG(dbgs() << "GVN COERCED NONLOCAL VAL:\nOffset: " << Offset
794                         << "  " << *getSimpleValue() << '\n'
795                         << *Res << '\n'
796                         << "\n\n\n");
797     }
798   } else if (isCoercedLoadValue()) {
799     LoadInst *Load = getCoercedLoadValue();
800     if (Load->getType() == LoadTy && Offset == 0) {
801       Res = Load;
802     } else {
803       Res = getLoadValueForLoad(Load, Offset, LoadTy, InsertPt, DL);
804       // We would like to use gvn.markInstructionForDeletion here, but we can't
805       // because the load is already memoized into the leader map table that GVN
806       // tracks.  It is potentially possible to remove the load from the table,
807       // but then there all of the operations based on it would need to be
808       // rehashed.  Just leave the dead load around.
809       gvn.getMemDep().removeInstruction(Load);
810       LLVM_DEBUG(dbgs() << "GVN COERCED NONLOCAL LOAD:\nOffset: " << Offset
811                         << "  " << *getCoercedLoadValue() << '\n'
812                         << *Res << '\n'
813                         << "\n\n\n");
814     }
815   } else if (isMemIntrinValue()) {
816     Res = getMemInstValueForLoad(getMemIntrinValue(), Offset, LoadTy,
817                                  InsertPt, DL);
818     LLVM_DEBUG(dbgs() << "GVN COERCED NONLOCAL MEM INTRIN:\nOffset: " << Offset
819                       << "  " << *getMemIntrinValue() << '\n'
820                       << *Res << '\n'
821                       << "\n\n\n");
822   } else {
823     assert(isUndefValue() && "Should be UndefVal");
824     LLVM_DEBUG(dbgs() << "GVN COERCED NONLOCAL Undef:\n";);
825     return UndefValue::get(LoadTy);
826   }
827   assert(Res && "failed to materialize?");
828   return Res;
829 }
830 
831 static bool isLifetimeStart(const Instruction *Inst) {
832   if (const IntrinsicInst* II = dyn_cast<IntrinsicInst>(Inst))
833     return II->getIntrinsicID() == Intrinsic::lifetime_start;
834   return false;
835 }
836 
837 /// Try to locate the three instruction involved in a missed
838 /// load-elimination case that is due to an intervening store.
839 static void reportMayClobberedLoad(LoadInst *LI, MemDepResult DepInfo,
840                                    DominatorTree *DT,
841                                    OptimizationRemarkEmitter *ORE) {
842   using namespace ore;
843 
844   User *OtherAccess = nullptr;
845 
846   OptimizationRemarkMissed R(DEBUG_TYPE, "LoadClobbered", LI);
847   R << "load of type " << NV("Type", LI->getType()) << " not eliminated"
848     << setExtraArgs();
849 
850   for (auto *U : LI->getPointerOperand()->users())
851     if (U != LI && (isa<LoadInst>(U) || isa<StoreInst>(U)) &&
852         DT->dominates(cast<Instruction>(U), LI)) {
853       // FIXME: for now give up if there are multiple memory accesses that
854       // dominate the load.  We need further analysis to decide which one is
855       // that we're forwarding from.
856       if (OtherAccess)
857         OtherAccess = nullptr;
858       else
859         OtherAccess = U;
860     }
861 
862   if (OtherAccess)
863     R << " in favor of " << NV("OtherAccess", OtherAccess);
864 
865   R << " because it is clobbered by " << NV("ClobberedBy", DepInfo.getInst());
866 
867   ORE->emit(R);
868 }
869 
870 bool GVN::AnalyzeLoadAvailability(LoadInst *LI, MemDepResult DepInfo,
871                                   Value *Address, AvailableValue &Res) {
872   assert((DepInfo.isDef() || DepInfo.isClobber()) &&
873          "expected a local dependence");
874   assert(LI->isUnordered() && "rules below are incorrect for ordered access");
875 
876   const DataLayout &DL = LI->getModule()->getDataLayout();
877 
878   if (DepInfo.isClobber()) {
879     // If the dependence is to a store that writes to a superset of the bits
880     // read by the load, we can extract the bits we need for the load from the
881     // stored value.
882     if (StoreInst *DepSI = dyn_cast<StoreInst>(DepInfo.getInst())) {
883       // Can't forward from non-atomic to atomic without violating memory model.
884       if (Address && LI->isAtomic() <= DepSI->isAtomic()) {
885         int Offset =
886           analyzeLoadFromClobberingStore(LI->getType(), Address, DepSI, DL);
887         if (Offset != -1) {
888           Res = AvailableValue::get(DepSI->getValueOperand(), Offset);
889           return true;
890         }
891       }
892     }
893 
894     // Check to see if we have something like this:
895     //    load i32* P
896     //    load i8* (P+1)
897     // if we have this, replace the later with an extraction from the former.
898     if (LoadInst *DepLI = dyn_cast<LoadInst>(DepInfo.getInst())) {
899       // If this is a clobber and L is the first instruction in its block, then
900       // we have the first instruction in the entry block.
901       // Can't forward from non-atomic to atomic without violating memory model.
902       if (DepLI != LI && Address && LI->isAtomic() <= DepLI->isAtomic()) {
903         int Offset =
904           analyzeLoadFromClobberingLoad(LI->getType(), Address, DepLI, DL);
905 
906         if (Offset != -1) {
907           Res = AvailableValue::getLoad(DepLI, Offset);
908           return true;
909         }
910       }
911     }
912 
913     // If the clobbering value is a memset/memcpy/memmove, see if we can
914     // forward a value on from it.
915     if (MemIntrinsic *DepMI = dyn_cast<MemIntrinsic>(DepInfo.getInst())) {
916       if (Address && !LI->isAtomic()) {
917         int Offset = analyzeLoadFromClobberingMemInst(LI->getType(), Address,
918                                                       DepMI, DL);
919         if (Offset != -1) {
920           Res = AvailableValue::getMI(DepMI, Offset);
921           return true;
922         }
923       }
924     }
925     // Nothing known about this clobber, have to be conservative
926     LLVM_DEBUG(
927         // fast print dep, using operator<< on instruction is too slow.
928         dbgs() << "GVN: load "; LI->printAsOperand(dbgs());
929         Instruction *I = DepInfo.getInst();
930         dbgs() << " is clobbered by " << *I << '\n';);
931     if (ORE->allowExtraAnalysis(DEBUG_TYPE))
932       reportMayClobberedLoad(LI, DepInfo, DT, ORE);
933 
934     return false;
935   }
936   assert(DepInfo.isDef() && "follows from above");
937 
938   Instruction *DepInst = DepInfo.getInst();
939 
940   // Loading the allocation -> undef.
941   if (isa<AllocaInst>(DepInst) || isMallocLikeFn(DepInst, TLI) ||
942       // Loading immediately after lifetime begin -> undef.
943       isLifetimeStart(DepInst)) {
944     Res = AvailableValue::get(UndefValue::get(LI->getType()));
945     return true;
946   }
947 
948   // Loading from calloc (which zero initializes memory) -> zero
949   if (isCallocLikeFn(DepInst, TLI)) {
950     Res = AvailableValue::get(Constant::getNullValue(LI->getType()));
951     return true;
952   }
953 
954   if (StoreInst *S = dyn_cast<StoreInst>(DepInst)) {
955     // Reject loads and stores that are to the same address but are of
956     // different types if we have to. If the stored value is larger or equal to
957     // the loaded value, we can reuse it.
958     if (S->getValueOperand()->getType() != LI->getType() &&
959         !canCoerceMustAliasedValueToLoad(S->getValueOperand(),
960                                          LI->getType(), DL))
961       return false;
962 
963     // Can't forward from non-atomic to atomic without violating memory model.
964     if (S->isAtomic() < LI->isAtomic())
965       return false;
966 
967     Res = AvailableValue::get(S->getValueOperand());
968     return true;
969   }
970 
971   if (LoadInst *LD = dyn_cast<LoadInst>(DepInst)) {
972     // If the types mismatch and we can't handle it, reject reuse of the load.
973     // If the stored value is larger or equal to the loaded value, we can reuse
974     // it.
975     if (LD->getType() != LI->getType() &&
976         !canCoerceMustAliasedValueToLoad(LD, LI->getType(), DL))
977       return false;
978 
979     // Can't forward from non-atomic to atomic without violating memory model.
980     if (LD->isAtomic() < LI->isAtomic())
981       return false;
982 
983     Res = AvailableValue::getLoad(LD);
984     return true;
985   }
986 
987   // Unknown def - must be conservative
988   LLVM_DEBUG(
989       // fast print dep, using operator<< on instruction is too slow.
990       dbgs() << "GVN: load "; LI->printAsOperand(dbgs());
991       dbgs() << " has unknown def " << *DepInst << '\n';);
992   return false;
993 }
994 
995 void GVN::AnalyzeLoadAvailability(LoadInst *LI, LoadDepVect &Deps,
996                                   AvailValInBlkVect &ValuesPerBlock,
997                                   UnavailBlkVect &UnavailableBlocks) {
998   // Filter out useless results (non-locals, etc).  Keep track of the blocks
999   // where we have a value available in repl, also keep track of whether we see
1000   // dependencies that produce an unknown value for the load (such as a call
1001   // that could potentially clobber the load).
1002   unsigned NumDeps = Deps.size();
1003   for (unsigned i = 0, e = NumDeps; i != e; ++i) {
1004     BasicBlock *DepBB = Deps[i].getBB();
1005     MemDepResult DepInfo = Deps[i].getResult();
1006 
1007     if (DeadBlocks.count(DepBB)) {
1008       // Dead dependent mem-op disguise as a load evaluating the same value
1009       // as the load in question.
1010       ValuesPerBlock.push_back(AvailableValueInBlock::getUndef(DepBB));
1011       continue;
1012     }
1013 
1014     if (!DepInfo.isDef() && !DepInfo.isClobber()) {
1015       UnavailableBlocks.push_back(DepBB);
1016       continue;
1017     }
1018 
1019     // The address being loaded in this non-local block may not be the same as
1020     // the pointer operand of the load if PHI translation occurs.  Make sure
1021     // to consider the right address.
1022     Value *Address = Deps[i].getAddress();
1023 
1024     AvailableValue AV;
1025     if (AnalyzeLoadAvailability(LI, DepInfo, Address, AV)) {
1026       // subtlety: because we know this was a non-local dependency, we know
1027       // it's safe to materialize anywhere between the instruction within
1028       // DepInfo and the end of it's block.
1029       ValuesPerBlock.push_back(AvailableValueInBlock::get(DepBB,
1030                                                           std::move(AV)));
1031     } else {
1032       UnavailableBlocks.push_back(DepBB);
1033     }
1034   }
1035 
1036   assert(NumDeps == ValuesPerBlock.size() + UnavailableBlocks.size() &&
1037          "post condition violation");
1038 }
1039 
1040 bool GVN::PerformLoadPRE(LoadInst *LI, AvailValInBlkVect &ValuesPerBlock,
1041                          UnavailBlkVect &UnavailableBlocks) {
1042   // Okay, we have *some* definitions of the value.  This means that the value
1043   // is available in some of our (transitive) predecessors.  Lets think about
1044   // doing PRE of this load.  This will involve inserting a new load into the
1045   // predecessor when it's not available.  We could do this in general, but
1046   // prefer to not increase code size.  As such, we only do this when we know
1047   // that we only have to insert *one* load (which means we're basically moving
1048   // the load, not inserting a new one).
1049 
1050   SmallPtrSet<BasicBlock *, 4> Blockers(UnavailableBlocks.begin(),
1051                                         UnavailableBlocks.end());
1052 
1053   // Let's find the first basic block with more than one predecessor.  Walk
1054   // backwards through predecessors if needed.
1055   BasicBlock *LoadBB = LI->getParent();
1056   BasicBlock *TmpBB = LoadBB;
1057   bool IsSafeToSpeculativelyExecute = isSafeToSpeculativelyExecute(LI);
1058 
1059   // Check that there is no implicit control flow instructions above our load in
1060   // its block. If there is an instruction that doesn't always pass the
1061   // execution to the following instruction, then moving through it may become
1062   // invalid. For example:
1063   //
1064   // int arr[LEN];
1065   // int index = ???;
1066   // ...
1067   // guard(0 <= index && index < LEN);
1068   // use(arr[index]);
1069   //
1070   // It is illegal to move the array access to any point above the guard,
1071   // because if the index is out of bounds we should deoptimize rather than
1072   // access the array.
1073   // Check that there is no guard in this block above our instruction.
1074   if (!IsSafeToSpeculativelyExecute && ICF->isDominatedByICFIFromSameBlock(LI))
1075     return false;
1076   while (TmpBB->getSinglePredecessor()) {
1077     TmpBB = TmpBB->getSinglePredecessor();
1078     if (TmpBB == LoadBB) // Infinite (unreachable) loop.
1079       return false;
1080     if (Blockers.count(TmpBB))
1081       return false;
1082 
1083     // If any of these blocks has more than one successor (i.e. if the edge we
1084     // just traversed was critical), then there are other paths through this
1085     // block along which the load may not be anticipated.  Hoisting the load
1086     // above this block would be adding the load to execution paths along
1087     // which it was not previously executed.
1088     if (TmpBB->getTerminator()->getNumSuccessors() != 1)
1089       return false;
1090 
1091     // Check that there is no implicit control flow in a block above.
1092     if (!IsSafeToSpeculativelyExecute && ICF->hasICF(TmpBB))
1093       return false;
1094   }
1095 
1096   assert(TmpBB);
1097   LoadBB = TmpBB;
1098 
1099   // Check to see how many predecessors have the loaded value fully
1100   // available.
1101   MapVector<BasicBlock *, Value *> PredLoads;
1102   DenseMap<BasicBlock*, char> FullyAvailableBlocks;
1103   for (const AvailableValueInBlock &AV : ValuesPerBlock)
1104     FullyAvailableBlocks[AV.BB] = true;
1105   for (BasicBlock *UnavailableBB : UnavailableBlocks)
1106     FullyAvailableBlocks[UnavailableBB] = false;
1107 
1108   SmallVector<BasicBlock *, 4> CriticalEdgePred;
1109   for (BasicBlock *Pred : predecessors(LoadBB)) {
1110     // If any predecessor block is an EH pad that does not allow non-PHI
1111     // instructions before the terminator, we can't PRE the load.
1112     if (Pred->getTerminator()->isEHPad()) {
1113       LLVM_DEBUG(
1114           dbgs() << "COULD NOT PRE LOAD BECAUSE OF AN EH PAD PREDECESSOR '"
1115                  << Pred->getName() << "': " << *LI << '\n');
1116       return false;
1117     }
1118 
1119     if (IsValueFullyAvailableInBlock(Pred, FullyAvailableBlocks, 0)) {
1120       continue;
1121     }
1122 
1123     if (Pred->getTerminator()->getNumSuccessors() != 1) {
1124       if (isa<IndirectBrInst>(Pred->getTerminator())) {
1125         LLVM_DEBUG(
1126             dbgs() << "COULD NOT PRE LOAD BECAUSE OF INDBR CRITICAL EDGE '"
1127                    << Pred->getName() << "': " << *LI << '\n');
1128         return false;
1129       }
1130 
1131       if (LoadBB->isEHPad()) {
1132         LLVM_DEBUG(
1133             dbgs() << "COULD NOT PRE LOAD BECAUSE OF AN EH PAD CRITICAL EDGE '"
1134                    << Pred->getName() << "': " << *LI << '\n');
1135         return false;
1136       }
1137 
1138       CriticalEdgePred.push_back(Pred);
1139     } else {
1140       // Only add the predecessors that will not be split for now.
1141       PredLoads[Pred] = nullptr;
1142     }
1143   }
1144 
1145   // Decide whether PRE is profitable for this load.
1146   unsigned NumUnavailablePreds = PredLoads.size() + CriticalEdgePred.size();
1147   assert(NumUnavailablePreds != 0 &&
1148          "Fully available value should already be eliminated!");
1149 
1150   // If this load is unavailable in multiple predecessors, reject it.
1151   // FIXME: If we could restructure the CFG, we could make a common pred with
1152   // all the preds that don't have an available LI and insert a new load into
1153   // that one block.
1154   if (NumUnavailablePreds != 1)
1155       return false;
1156 
1157   // Split critical edges, and update the unavailable predecessors accordingly.
1158   for (BasicBlock *OrigPred : CriticalEdgePred) {
1159     BasicBlock *NewPred = splitCriticalEdges(OrigPred, LoadBB);
1160     assert(!PredLoads.count(OrigPred) && "Split edges shouldn't be in map!");
1161     PredLoads[NewPred] = nullptr;
1162     LLVM_DEBUG(dbgs() << "Split critical edge " << OrigPred->getName() << "->"
1163                       << LoadBB->getName() << '\n');
1164   }
1165 
1166   // Check if the load can safely be moved to all the unavailable predecessors.
1167   bool CanDoPRE = true;
1168   const DataLayout &DL = LI->getModule()->getDataLayout();
1169   SmallVector<Instruction*, 8> NewInsts;
1170   for (auto &PredLoad : PredLoads) {
1171     BasicBlock *UnavailablePred = PredLoad.first;
1172 
1173     // Do PHI translation to get its value in the predecessor if necessary.  The
1174     // returned pointer (if non-null) is guaranteed to dominate UnavailablePred.
1175 
1176     // If all preds have a single successor, then we know it is safe to insert
1177     // the load on the pred (?!?), so we can insert code to materialize the
1178     // pointer if it is not available.
1179     PHITransAddr Address(LI->getPointerOperand(), DL, AC);
1180     Value *LoadPtr = nullptr;
1181     LoadPtr = Address.PHITranslateWithInsertion(LoadBB, UnavailablePred,
1182                                                 *DT, NewInsts);
1183 
1184     // If we couldn't find or insert a computation of this phi translated value,
1185     // we fail PRE.
1186     if (!LoadPtr) {
1187       LLVM_DEBUG(dbgs() << "COULDN'T INSERT PHI TRANSLATED VALUE OF: "
1188                         << *LI->getPointerOperand() << "\n");
1189       CanDoPRE = false;
1190       break;
1191     }
1192 
1193     PredLoad.second = LoadPtr;
1194   }
1195 
1196   if (!CanDoPRE) {
1197     while (!NewInsts.empty()) {
1198       Instruction *I = NewInsts.pop_back_val();
1199       markInstructionForDeletion(I);
1200     }
1201     // HINT: Don't revert the edge-splitting as following transformation may
1202     // also need to split these critical edges.
1203     return !CriticalEdgePred.empty();
1204   }
1205 
1206   // Okay, we can eliminate this load by inserting a reload in the predecessor
1207   // and using PHI construction to get the value in the other predecessors, do
1208   // it.
1209   LLVM_DEBUG(dbgs() << "GVN REMOVING PRE LOAD: " << *LI << '\n');
1210   LLVM_DEBUG(if (!NewInsts.empty()) dbgs()
1211              << "INSERTED " << NewInsts.size() << " INSTS: " << *NewInsts.back()
1212              << '\n');
1213 
1214   // Assign value numbers to the new instructions.
1215   for (Instruction *I : NewInsts) {
1216     // Instructions that have been inserted in predecessor(s) to materialize
1217     // the load address do not retain their original debug locations. Doing
1218     // so could lead to confusing (but correct) source attributions.
1219     // FIXME: How do we retain source locations without causing poor debugging
1220     // behavior?
1221     I->setDebugLoc(DebugLoc());
1222 
1223     // FIXME: We really _ought_ to insert these value numbers into their
1224     // parent's availability map.  However, in doing so, we risk getting into
1225     // ordering issues.  If a block hasn't been processed yet, we would be
1226     // marking a value as AVAIL-IN, which isn't what we intend.
1227     VN.lookupOrAdd(I);
1228   }
1229 
1230   for (const auto &PredLoad : PredLoads) {
1231     BasicBlock *UnavailablePred = PredLoad.first;
1232     Value *LoadPtr = PredLoad.second;
1233 
1234     auto *NewLoad = new LoadInst(LoadPtr, LI->getName()+".pre",
1235                                  LI->isVolatile(), LI->getAlignment(),
1236                                  LI->getOrdering(), LI->getSyncScopeID(),
1237                                  UnavailablePred->getTerminator());
1238     NewLoad->setDebugLoc(LI->getDebugLoc());
1239 
1240     // Transfer the old load's AA tags to the new load.
1241     AAMDNodes Tags;
1242     LI->getAAMetadata(Tags);
1243     if (Tags)
1244       NewLoad->setAAMetadata(Tags);
1245 
1246     if (auto *MD = LI->getMetadata(LLVMContext::MD_invariant_load))
1247       NewLoad->setMetadata(LLVMContext::MD_invariant_load, MD);
1248     if (auto *InvGroupMD = LI->getMetadata(LLVMContext::MD_invariant_group))
1249       NewLoad->setMetadata(LLVMContext::MD_invariant_group, InvGroupMD);
1250     if (auto *RangeMD = LI->getMetadata(LLVMContext::MD_range))
1251       NewLoad->setMetadata(LLVMContext::MD_range, RangeMD);
1252 
1253     // We do not propagate the old load's debug location, because the new
1254     // load now lives in a different BB, and we want to avoid a jumpy line
1255     // table.
1256     // FIXME: How do we retain source locations without causing poor debugging
1257     // behavior?
1258 
1259     // Add the newly created load.
1260     ValuesPerBlock.push_back(AvailableValueInBlock::get(UnavailablePred,
1261                                                         NewLoad));
1262     MD->invalidateCachedPointerInfo(LoadPtr);
1263     LLVM_DEBUG(dbgs() << "GVN INSERTED " << *NewLoad << '\n');
1264   }
1265 
1266   // Perform PHI construction.
1267   Value *V = ConstructSSAForLoadSet(LI, ValuesPerBlock, *this);
1268   LI->replaceAllUsesWith(V);
1269   if (isa<PHINode>(V))
1270     V->takeName(LI);
1271   if (Instruction *I = dyn_cast<Instruction>(V))
1272     I->setDebugLoc(LI->getDebugLoc());
1273   if (V->getType()->isPtrOrPtrVectorTy())
1274     MD->invalidateCachedPointerInfo(V);
1275   markInstructionForDeletion(LI);
1276   ORE->emit([&]() {
1277     return OptimizationRemark(DEBUG_TYPE, "LoadPRE", LI)
1278            << "load eliminated by PRE";
1279   });
1280   ++NumPRELoad;
1281   return true;
1282 }
1283 
1284 static void reportLoadElim(LoadInst *LI, Value *AvailableValue,
1285                            OptimizationRemarkEmitter *ORE) {
1286   using namespace ore;
1287 
1288   ORE->emit([&]() {
1289     return OptimizationRemark(DEBUG_TYPE, "LoadElim", LI)
1290            << "load of type " << NV("Type", LI->getType()) << " eliminated"
1291            << setExtraArgs() << " in favor of "
1292            << NV("InfavorOfValue", AvailableValue);
1293   });
1294 }
1295 
1296 /// Attempt to eliminate a load whose dependencies are
1297 /// non-local by performing PHI construction.
1298 bool GVN::processNonLocalLoad(LoadInst *LI) {
1299   // non-local speculations are not allowed under asan.
1300   if (LI->getParent()->getParent()->hasFnAttribute(
1301           Attribute::SanitizeAddress) ||
1302       LI->getParent()->getParent()->hasFnAttribute(
1303           Attribute::SanitizeHWAddress))
1304     return false;
1305 
1306   // Step 1: Find the non-local dependencies of the load.
1307   LoadDepVect Deps;
1308   MD->getNonLocalPointerDependency(LI, Deps);
1309 
1310   // If we had to process more than one hundred blocks to find the
1311   // dependencies, this load isn't worth worrying about.  Optimizing
1312   // it will be too expensive.
1313   unsigned NumDeps = Deps.size();
1314   if (NumDeps > 100)
1315     return false;
1316 
1317   // If we had a phi translation failure, we'll have a single entry which is a
1318   // clobber in the current block.  Reject this early.
1319   if (NumDeps == 1 &&
1320       !Deps[0].getResult().isDef() && !Deps[0].getResult().isClobber()) {
1321     LLVM_DEBUG(dbgs() << "GVN: non-local load "; LI->printAsOperand(dbgs());
1322                dbgs() << " has unknown dependencies\n";);
1323     return false;
1324   }
1325 
1326   // If this load follows a GEP, see if we can PRE the indices before analyzing.
1327   if (GetElementPtrInst *GEP = dyn_cast<GetElementPtrInst>(LI->getOperand(0))) {
1328     for (GetElementPtrInst::op_iterator OI = GEP->idx_begin(),
1329                                         OE = GEP->idx_end();
1330          OI != OE; ++OI)
1331       if (Instruction *I = dyn_cast<Instruction>(OI->get()))
1332         performScalarPRE(I);
1333   }
1334 
1335   // Step 2: Analyze the availability of the load
1336   AvailValInBlkVect ValuesPerBlock;
1337   UnavailBlkVect UnavailableBlocks;
1338   AnalyzeLoadAvailability(LI, Deps, ValuesPerBlock, UnavailableBlocks);
1339 
1340   // If we have no predecessors that produce a known value for this load, exit
1341   // early.
1342   if (ValuesPerBlock.empty())
1343     return false;
1344 
1345   // Step 3: Eliminate fully redundancy.
1346   //
1347   // If all of the instructions we depend on produce a known value for this
1348   // load, then it is fully redundant and we can use PHI insertion to compute
1349   // its value.  Insert PHIs and remove the fully redundant value now.
1350   if (UnavailableBlocks.empty()) {
1351     LLVM_DEBUG(dbgs() << "GVN REMOVING NONLOCAL LOAD: " << *LI << '\n');
1352 
1353     // Perform PHI construction.
1354     Value *V = ConstructSSAForLoadSet(LI, ValuesPerBlock, *this);
1355     LI->replaceAllUsesWith(V);
1356 
1357     if (isa<PHINode>(V))
1358       V->takeName(LI);
1359     if (Instruction *I = dyn_cast<Instruction>(V))
1360       // If instruction I has debug info, then we should not update it.
1361       // Also, if I has a null DebugLoc, then it is still potentially incorrect
1362       // to propagate LI's DebugLoc because LI may not post-dominate I.
1363       if (LI->getDebugLoc() && LI->getParent() == I->getParent())
1364         I->setDebugLoc(LI->getDebugLoc());
1365     if (V->getType()->isPtrOrPtrVectorTy())
1366       MD->invalidateCachedPointerInfo(V);
1367     markInstructionForDeletion(LI);
1368     ++NumGVNLoad;
1369     reportLoadElim(LI, V, ORE);
1370     return true;
1371   }
1372 
1373   // Step 4: Eliminate partial redundancy.
1374   if (!EnablePRE || !EnableLoadPRE)
1375     return false;
1376 
1377   return PerformLoadPRE(LI, ValuesPerBlock, UnavailableBlocks);
1378 }
1379 
1380 bool GVN::processAssumeIntrinsic(IntrinsicInst *IntrinsicI) {
1381   assert(IntrinsicI->getIntrinsicID() == Intrinsic::assume &&
1382          "This function can only be called with llvm.assume intrinsic");
1383   Value *V = IntrinsicI->getArgOperand(0);
1384 
1385   if (ConstantInt *Cond = dyn_cast<ConstantInt>(V)) {
1386     if (Cond->isZero()) {
1387       Type *Int8Ty = Type::getInt8Ty(V->getContext());
1388       // Insert a new store to null instruction before the load to indicate that
1389       // this code is not reachable.  FIXME: We could insert unreachable
1390       // instruction directly because we can modify the CFG.
1391       new StoreInst(UndefValue::get(Int8Ty),
1392                     Constant::getNullValue(Int8Ty->getPointerTo()),
1393                     IntrinsicI);
1394     }
1395     markInstructionForDeletion(IntrinsicI);
1396     return false;
1397   } else if (isa<Constant>(V)) {
1398     // If it's not false, and constant, it must evaluate to true. This means our
1399     // assume is assume(true), and thus, pointless, and we don't want to do
1400     // anything more here.
1401     return false;
1402   }
1403 
1404   Constant *True = ConstantInt::getTrue(V->getContext());
1405   bool Changed = false;
1406 
1407   for (BasicBlock *Successor : successors(IntrinsicI->getParent())) {
1408     BasicBlockEdge Edge(IntrinsicI->getParent(), Successor);
1409 
1410     // This property is only true in dominated successors, propagateEquality
1411     // will check dominance for us.
1412     Changed |= propagateEquality(V, True, Edge, false);
1413   }
1414 
1415   // We can replace assume value with true, which covers cases like this:
1416   // call void @llvm.assume(i1 %cmp)
1417   // br i1 %cmp, label %bb1, label %bb2 ; will change %cmp to true
1418   ReplaceWithConstMap[V] = True;
1419 
1420   // If one of *cmp *eq operand is const, adding it to map will cover this:
1421   // %cmp = fcmp oeq float 3.000000e+00, %0 ; const on lhs could happen
1422   // call void @llvm.assume(i1 %cmp)
1423   // ret float %0 ; will change it to ret float 3.000000e+00
1424   if (auto *CmpI = dyn_cast<CmpInst>(V)) {
1425     if (CmpI->getPredicate() == CmpInst::Predicate::ICMP_EQ ||
1426         CmpI->getPredicate() == CmpInst::Predicate::FCMP_OEQ ||
1427         (CmpI->getPredicate() == CmpInst::Predicate::FCMP_UEQ &&
1428          CmpI->getFastMathFlags().noNaNs())) {
1429       Value *CmpLHS = CmpI->getOperand(0);
1430       Value *CmpRHS = CmpI->getOperand(1);
1431       if (isa<Constant>(CmpLHS))
1432         std::swap(CmpLHS, CmpRHS);
1433       auto *RHSConst = dyn_cast<Constant>(CmpRHS);
1434 
1435       // If only one operand is constant.
1436       if (RHSConst != nullptr && !isa<Constant>(CmpLHS))
1437         ReplaceWithConstMap[CmpLHS] = RHSConst;
1438     }
1439   }
1440   return Changed;
1441 }
1442 
1443 static void patchAndReplaceAllUsesWith(Instruction *I, Value *Repl) {
1444   patchReplacementInstruction(I, Repl);
1445   I->replaceAllUsesWith(Repl);
1446 }
1447 
1448 /// Attempt to eliminate a load, first by eliminating it
1449 /// locally, and then attempting non-local elimination if that fails.
1450 bool GVN::processLoad(LoadInst *L) {
1451   if (!MD)
1452     return false;
1453 
1454   // This code hasn't been audited for ordered or volatile memory access
1455   if (!L->isUnordered())
1456     return false;
1457 
1458   if (L->use_empty()) {
1459     markInstructionForDeletion(L);
1460     return true;
1461   }
1462 
1463   // ... to a pointer that has been loaded from before...
1464   MemDepResult Dep = MD->getDependency(L);
1465 
1466   // If it is defined in another block, try harder.
1467   if (Dep.isNonLocal())
1468     return processNonLocalLoad(L);
1469 
1470   // Only handle the local case below
1471   if (!Dep.isDef() && !Dep.isClobber()) {
1472     // This might be a NonFuncLocal or an Unknown
1473     LLVM_DEBUG(
1474         // fast print dep, using operator<< on instruction is too slow.
1475         dbgs() << "GVN: load "; L->printAsOperand(dbgs());
1476         dbgs() << " has unknown dependence\n";);
1477     return false;
1478   }
1479 
1480   AvailableValue AV;
1481   if (AnalyzeLoadAvailability(L, Dep, L->getPointerOperand(), AV)) {
1482     Value *AvailableValue = AV.MaterializeAdjustedValue(L, L, *this);
1483 
1484     // Replace the load!
1485     patchAndReplaceAllUsesWith(L, AvailableValue);
1486     markInstructionForDeletion(L);
1487     ++NumGVNLoad;
1488     reportLoadElim(L, AvailableValue, ORE);
1489     // Tell MDA to rexamine the reused pointer since we might have more
1490     // information after forwarding it.
1491     if (MD && AvailableValue->getType()->isPtrOrPtrVectorTy())
1492       MD->invalidateCachedPointerInfo(AvailableValue);
1493     return true;
1494   }
1495 
1496   return false;
1497 }
1498 
1499 /// Return a pair the first field showing the value number of \p Exp and the
1500 /// second field showing whether it is a value number newly created.
1501 std::pair<uint32_t, bool>
1502 GVN::ValueTable::assignExpNewValueNum(Expression &Exp) {
1503   uint32_t &e = expressionNumbering[Exp];
1504   bool CreateNewValNum = !e;
1505   if (CreateNewValNum) {
1506     Expressions.push_back(Exp);
1507     if (ExprIdx.size() < nextValueNumber + 1)
1508       ExprIdx.resize(nextValueNumber * 2);
1509     e = nextValueNumber;
1510     ExprIdx[nextValueNumber++] = nextExprNumber++;
1511   }
1512   return {e, CreateNewValNum};
1513 }
1514 
1515 /// Return whether all the values related with the same \p num are
1516 /// defined in \p BB.
1517 bool GVN::ValueTable::areAllValsInBB(uint32_t Num, const BasicBlock *BB,
1518                                      GVN &Gvn) {
1519   LeaderTableEntry *Vals = &Gvn.LeaderTable[Num];
1520   while (Vals && Vals->BB == BB)
1521     Vals = Vals->Next;
1522   return !Vals;
1523 }
1524 
1525 /// Wrap phiTranslateImpl to provide caching functionality.
1526 uint32_t GVN::ValueTable::phiTranslate(const BasicBlock *Pred,
1527                                        const BasicBlock *PhiBlock, uint32_t Num,
1528                                        GVN &Gvn) {
1529   auto FindRes = PhiTranslateTable.find({Num, Pred});
1530   if (FindRes != PhiTranslateTable.end())
1531     return FindRes->second;
1532   uint32_t NewNum = phiTranslateImpl(Pred, PhiBlock, Num, Gvn);
1533   PhiTranslateTable.insert({{Num, Pred}, NewNum});
1534   return NewNum;
1535 }
1536 
1537 /// Translate value number \p Num using phis, so that it has the values of
1538 /// the phis in BB.
1539 uint32_t GVN::ValueTable::phiTranslateImpl(const BasicBlock *Pred,
1540                                            const BasicBlock *PhiBlock,
1541                                            uint32_t Num, GVN &Gvn) {
1542   if (PHINode *PN = NumberingPhi[Num]) {
1543     for (unsigned i = 0; i != PN->getNumIncomingValues(); ++i) {
1544       if (PN->getParent() == PhiBlock && PN->getIncomingBlock(i) == Pred)
1545         if (uint32_t TransVal = lookup(PN->getIncomingValue(i), false))
1546           return TransVal;
1547     }
1548     return Num;
1549   }
1550 
1551   // If there is any value related with Num is defined in a BB other than
1552   // PhiBlock, it cannot depend on a phi in PhiBlock without going through
1553   // a backedge. We can do an early exit in that case to save compile time.
1554   if (!areAllValsInBB(Num, PhiBlock, Gvn))
1555     return Num;
1556 
1557   if (Num >= ExprIdx.size() || ExprIdx[Num] == 0)
1558     return Num;
1559   Expression Exp = Expressions[ExprIdx[Num]];
1560 
1561   for (unsigned i = 0; i < Exp.varargs.size(); i++) {
1562     // For InsertValue and ExtractValue, some varargs are index numbers
1563     // instead of value numbers. Those index numbers should not be
1564     // translated.
1565     if ((i > 1 && Exp.opcode == Instruction::InsertValue) ||
1566         (i > 0 && Exp.opcode == Instruction::ExtractValue))
1567       continue;
1568     Exp.varargs[i] = phiTranslate(Pred, PhiBlock, Exp.varargs[i], Gvn);
1569   }
1570 
1571   if (Exp.commutative) {
1572     assert(Exp.varargs.size() == 2 && "Unsupported commutative expression!");
1573     if (Exp.varargs[0] > Exp.varargs[1]) {
1574       std::swap(Exp.varargs[0], Exp.varargs[1]);
1575       uint32_t Opcode = Exp.opcode >> 8;
1576       if (Opcode == Instruction::ICmp || Opcode == Instruction::FCmp)
1577         Exp.opcode = (Opcode << 8) |
1578                      CmpInst::getSwappedPredicate(
1579                          static_cast<CmpInst::Predicate>(Exp.opcode & 255));
1580     }
1581   }
1582 
1583   if (uint32_t NewNum = expressionNumbering[Exp])
1584     return NewNum;
1585   return Num;
1586 }
1587 
1588 /// Erase stale entry from phiTranslate cache so phiTranslate can be computed
1589 /// again.
1590 void GVN::ValueTable::eraseTranslateCacheEntry(uint32_t Num,
1591                                                const BasicBlock &CurrBlock) {
1592   for (const BasicBlock *Pred : predecessors(&CurrBlock)) {
1593     auto FindRes = PhiTranslateTable.find({Num, Pred});
1594     if (FindRes != PhiTranslateTable.end())
1595       PhiTranslateTable.erase(FindRes);
1596   }
1597 }
1598 
1599 // In order to find a leader for a given value number at a
1600 // specific basic block, we first obtain the list of all Values for that number,
1601 // and then scan the list to find one whose block dominates the block in
1602 // question.  This is fast because dominator tree queries consist of only
1603 // a few comparisons of DFS numbers.
1604 Value *GVN::findLeader(const BasicBlock *BB, uint32_t num) {
1605   LeaderTableEntry Vals = LeaderTable[num];
1606   if (!Vals.Val) return nullptr;
1607 
1608   Value *Val = nullptr;
1609   if (DT->dominates(Vals.BB, BB)) {
1610     Val = Vals.Val;
1611     if (isa<Constant>(Val)) return Val;
1612   }
1613 
1614   LeaderTableEntry* Next = Vals.Next;
1615   while (Next) {
1616     if (DT->dominates(Next->BB, BB)) {
1617       if (isa<Constant>(Next->Val)) return Next->Val;
1618       if (!Val) Val = Next->Val;
1619     }
1620 
1621     Next = Next->Next;
1622   }
1623 
1624   return Val;
1625 }
1626 
1627 /// There is an edge from 'Src' to 'Dst'.  Return
1628 /// true if every path from the entry block to 'Dst' passes via this edge.  In
1629 /// particular 'Dst' must not be reachable via another edge from 'Src'.
1630 static bool isOnlyReachableViaThisEdge(const BasicBlockEdge &E,
1631                                        DominatorTree *DT) {
1632   // While in theory it is interesting to consider the case in which Dst has
1633   // more than one predecessor, because Dst might be part of a loop which is
1634   // only reachable from Src, in practice it is pointless since at the time
1635   // GVN runs all such loops have preheaders, which means that Dst will have
1636   // been changed to have only one predecessor, namely Src.
1637   const BasicBlock *Pred = E.getEnd()->getSinglePredecessor();
1638   assert((!Pred || Pred == E.getStart()) &&
1639          "No edge between these basic blocks!");
1640   return Pred != nullptr;
1641 }
1642 
1643 void GVN::assignBlockRPONumber(Function &F) {
1644   uint32_t NextBlockNumber = 1;
1645   ReversePostOrderTraversal<Function *> RPOT(&F);
1646   for (BasicBlock *BB : RPOT)
1647     BlockRPONumber[BB] = NextBlockNumber++;
1648 }
1649 
1650 // Tries to replace instruction with const, using information from
1651 // ReplaceWithConstMap.
1652 bool GVN::replaceOperandsWithConsts(Instruction *Instr) const {
1653   bool Changed = false;
1654   for (unsigned OpNum = 0; OpNum < Instr->getNumOperands(); ++OpNum) {
1655     Value *Operand = Instr->getOperand(OpNum);
1656     auto it = ReplaceWithConstMap.find(Operand);
1657     if (it != ReplaceWithConstMap.end()) {
1658       assert(!isa<Constant>(Operand) &&
1659              "Replacing constants with constants is invalid");
1660       LLVM_DEBUG(dbgs() << "GVN replacing: " << *Operand << " with "
1661                         << *it->second << " in instruction " << *Instr << '\n');
1662       Instr->setOperand(OpNum, it->second);
1663       Changed = true;
1664     }
1665   }
1666   return Changed;
1667 }
1668 
1669 /// The given values are known to be equal in every block
1670 /// dominated by 'Root'.  Exploit this, for example by replacing 'LHS' with
1671 /// 'RHS' everywhere in the scope.  Returns whether a change was made.
1672 /// If DominatesByEdge is false, then it means that we will propagate the RHS
1673 /// value starting from the end of Root.Start.
1674 bool GVN::propagateEquality(Value *LHS, Value *RHS, const BasicBlockEdge &Root,
1675                             bool DominatesByEdge) {
1676   SmallVector<std::pair<Value*, Value*>, 4> Worklist;
1677   Worklist.push_back(std::make_pair(LHS, RHS));
1678   bool Changed = false;
1679   // For speed, compute a conservative fast approximation to
1680   // DT->dominates(Root, Root.getEnd());
1681   const bool RootDominatesEnd = isOnlyReachableViaThisEdge(Root, DT);
1682 
1683   while (!Worklist.empty()) {
1684     std::pair<Value*, Value*> Item = Worklist.pop_back_val();
1685     LHS = Item.first; RHS = Item.second;
1686 
1687     if (LHS == RHS)
1688       continue;
1689     assert(LHS->getType() == RHS->getType() && "Equality but unequal types!");
1690 
1691     // Don't try to propagate equalities between constants.
1692     if (isa<Constant>(LHS) && isa<Constant>(RHS))
1693       continue;
1694 
1695     // Prefer a constant on the right-hand side, or an Argument if no constants.
1696     if (isa<Constant>(LHS) || (isa<Argument>(LHS) && !isa<Constant>(RHS)))
1697       std::swap(LHS, RHS);
1698     assert((isa<Argument>(LHS) || isa<Instruction>(LHS)) && "Unexpected value!");
1699 
1700     // If there is no obvious reason to prefer the left-hand side over the
1701     // right-hand side, ensure the longest lived term is on the right-hand side,
1702     // so the shortest lived term will be replaced by the longest lived.
1703     // This tends to expose more simplifications.
1704     uint32_t LVN = VN.lookupOrAdd(LHS);
1705     if ((isa<Argument>(LHS) && isa<Argument>(RHS)) ||
1706         (isa<Instruction>(LHS) && isa<Instruction>(RHS))) {
1707       // Move the 'oldest' value to the right-hand side, using the value number
1708       // as a proxy for age.
1709       uint32_t RVN = VN.lookupOrAdd(RHS);
1710       if (LVN < RVN) {
1711         std::swap(LHS, RHS);
1712         LVN = RVN;
1713       }
1714     }
1715 
1716     // If value numbering later sees that an instruction in the scope is equal
1717     // to 'LHS' then ensure it will be turned into 'RHS'.  In order to preserve
1718     // the invariant that instructions only occur in the leader table for their
1719     // own value number (this is used by removeFromLeaderTable), do not do this
1720     // if RHS is an instruction (if an instruction in the scope is morphed into
1721     // LHS then it will be turned into RHS by the next GVN iteration anyway, so
1722     // using the leader table is about compiling faster, not optimizing better).
1723     // The leader table only tracks basic blocks, not edges. Only add to if we
1724     // have the simple case where the edge dominates the end.
1725     if (RootDominatesEnd && !isa<Instruction>(RHS))
1726       addToLeaderTable(LVN, RHS, Root.getEnd());
1727 
1728     // Replace all occurrences of 'LHS' with 'RHS' everywhere in the scope.  As
1729     // LHS always has at least one use that is not dominated by Root, this will
1730     // never do anything if LHS has only one use.
1731     if (!LHS->hasOneUse()) {
1732       unsigned NumReplacements =
1733           DominatesByEdge
1734               ? replaceDominatedUsesWith(LHS, RHS, *DT, Root)
1735               : replaceDominatedUsesWith(LHS, RHS, *DT, Root.getStart());
1736 
1737       Changed |= NumReplacements > 0;
1738       NumGVNEqProp += NumReplacements;
1739     }
1740 
1741     // Now try to deduce additional equalities from this one. For example, if
1742     // the known equality was "(A != B)" == "false" then it follows that A and B
1743     // are equal in the scope. Only boolean equalities with an explicit true or
1744     // false RHS are currently supported.
1745     if (!RHS->getType()->isIntegerTy(1))
1746       // Not a boolean equality - bail out.
1747       continue;
1748     ConstantInt *CI = dyn_cast<ConstantInt>(RHS);
1749     if (!CI)
1750       // RHS neither 'true' nor 'false' - bail out.
1751       continue;
1752     // Whether RHS equals 'true'.  Otherwise it equals 'false'.
1753     bool isKnownTrue = CI->isMinusOne();
1754     bool isKnownFalse = !isKnownTrue;
1755 
1756     // If "A && B" is known true then both A and B are known true.  If "A || B"
1757     // is known false then both A and B are known false.
1758     Value *A, *B;
1759     if ((isKnownTrue && match(LHS, m_And(m_Value(A), m_Value(B)))) ||
1760         (isKnownFalse && match(LHS, m_Or(m_Value(A), m_Value(B))))) {
1761       Worklist.push_back(std::make_pair(A, RHS));
1762       Worklist.push_back(std::make_pair(B, RHS));
1763       continue;
1764     }
1765 
1766     // If we are propagating an equality like "(A == B)" == "true" then also
1767     // propagate the equality A == B.  When propagating a comparison such as
1768     // "(A >= B)" == "true", replace all instances of "A < B" with "false".
1769     if (CmpInst *Cmp = dyn_cast<CmpInst>(LHS)) {
1770       Value *Op0 = Cmp->getOperand(0), *Op1 = Cmp->getOperand(1);
1771 
1772       // If "A == B" is known true, or "A != B" is known false, then replace
1773       // A with B everywhere in the scope.
1774       if ((isKnownTrue && Cmp->getPredicate() == CmpInst::ICMP_EQ) ||
1775           (isKnownFalse && Cmp->getPredicate() == CmpInst::ICMP_NE))
1776         Worklist.push_back(std::make_pair(Op0, Op1));
1777 
1778       // Handle the floating point versions of equality comparisons too.
1779       if ((isKnownTrue && Cmp->getPredicate() == CmpInst::FCMP_OEQ) ||
1780           (isKnownFalse && Cmp->getPredicate() == CmpInst::FCMP_UNE)) {
1781 
1782         // Floating point -0.0 and 0.0 compare equal, so we can only
1783         // propagate values if we know that we have a constant and that
1784         // its value is non-zero.
1785 
1786         // FIXME: We should do this optimization if 'no signed zeros' is
1787         // applicable via an instruction-level fast-math-flag or some other
1788         // indicator that relaxed FP semantics are being used.
1789 
1790         if (isa<ConstantFP>(Op1) && !cast<ConstantFP>(Op1)->isZero())
1791           Worklist.push_back(std::make_pair(Op0, Op1));
1792       }
1793 
1794       // If "A >= B" is known true, replace "A < B" with false everywhere.
1795       CmpInst::Predicate NotPred = Cmp->getInversePredicate();
1796       Constant *NotVal = ConstantInt::get(Cmp->getType(), isKnownFalse);
1797       // Since we don't have the instruction "A < B" immediately to hand, work
1798       // out the value number that it would have and use that to find an
1799       // appropriate instruction (if any).
1800       uint32_t NextNum = VN.getNextUnusedValueNumber();
1801       uint32_t Num = VN.lookupOrAddCmp(Cmp->getOpcode(), NotPred, Op0, Op1);
1802       // If the number we were assigned was brand new then there is no point in
1803       // looking for an instruction realizing it: there cannot be one!
1804       if (Num < NextNum) {
1805         Value *NotCmp = findLeader(Root.getEnd(), Num);
1806         if (NotCmp && isa<Instruction>(NotCmp)) {
1807           unsigned NumReplacements =
1808               DominatesByEdge
1809                   ? replaceDominatedUsesWith(NotCmp, NotVal, *DT, Root)
1810                   : replaceDominatedUsesWith(NotCmp, NotVal, *DT,
1811                                              Root.getStart());
1812           Changed |= NumReplacements > 0;
1813           NumGVNEqProp += NumReplacements;
1814         }
1815       }
1816       // Ensure that any instruction in scope that gets the "A < B" value number
1817       // is replaced with false.
1818       // The leader table only tracks basic blocks, not edges. Only add to if we
1819       // have the simple case where the edge dominates the end.
1820       if (RootDominatesEnd)
1821         addToLeaderTable(Num, NotVal, Root.getEnd());
1822 
1823       continue;
1824     }
1825   }
1826 
1827   return Changed;
1828 }
1829 
1830 /// When calculating availability, handle an instruction
1831 /// by inserting it into the appropriate sets
1832 bool GVN::processInstruction(Instruction *I) {
1833   // Ignore dbg info intrinsics.
1834   if (isa<DbgInfoIntrinsic>(I))
1835     return false;
1836 
1837   // If the instruction can be easily simplified then do so now in preference
1838   // to value numbering it.  Value numbering often exposes redundancies, for
1839   // example if it determines that %y is equal to %x then the instruction
1840   // "%z = and i32 %x, %y" becomes "%z = and i32 %x, %x" which we now simplify.
1841   const DataLayout &DL = I->getModule()->getDataLayout();
1842   if (Value *V = SimplifyInstruction(I, {DL, TLI, DT, AC})) {
1843     bool Changed = false;
1844     if (!I->use_empty()) {
1845       I->replaceAllUsesWith(V);
1846       Changed = true;
1847     }
1848     if (isInstructionTriviallyDead(I, TLI)) {
1849       markInstructionForDeletion(I);
1850       Changed = true;
1851     }
1852     if (Changed) {
1853       if (MD && V->getType()->isPtrOrPtrVectorTy())
1854         MD->invalidateCachedPointerInfo(V);
1855       ++NumGVNSimpl;
1856       return true;
1857     }
1858   }
1859 
1860   if (IntrinsicInst *IntrinsicI = dyn_cast<IntrinsicInst>(I))
1861     if (IntrinsicI->getIntrinsicID() == Intrinsic::assume)
1862       return processAssumeIntrinsic(IntrinsicI);
1863 
1864   if (LoadInst *LI = dyn_cast<LoadInst>(I)) {
1865     if (processLoad(LI))
1866       return true;
1867 
1868     unsigned Num = VN.lookupOrAdd(LI);
1869     addToLeaderTable(Num, LI, LI->getParent());
1870     return false;
1871   }
1872 
1873   // For conditional branches, we can perform simple conditional propagation on
1874   // the condition value itself.
1875   if (BranchInst *BI = dyn_cast<BranchInst>(I)) {
1876     if (!BI->isConditional())
1877       return false;
1878 
1879     if (isa<Constant>(BI->getCondition()))
1880       return processFoldableCondBr(BI);
1881 
1882     Value *BranchCond = BI->getCondition();
1883     BasicBlock *TrueSucc = BI->getSuccessor(0);
1884     BasicBlock *FalseSucc = BI->getSuccessor(1);
1885     // Avoid multiple edges early.
1886     if (TrueSucc == FalseSucc)
1887       return false;
1888 
1889     BasicBlock *Parent = BI->getParent();
1890     bool Changed = false;
1891 
1892     Value *TrueVal = ConstantInt::getTrue(TrueSucc->getContext());
1893     BasicBlockEdge TrueE(Parent, TrueSucc);
1894     Changed |= propagateEquality(BranchCond, TrueVal, TrueE, true);
1895 
1896     Value *FalseVal = ConstantInt::getFalse(FalseSucc->getContext());
1897     BasicBlockEdge FalseE(Parent, FalseSucc);
1898     Changed |= propagateEquality(BranchCond, FalseVal, FalseE, true);
1899 
1900     return Changed;
1901   }
1902 
1903   // For switches, propagate the case values into the case destinations.
1904   if (SwitchInst *SI = dyn_cast<SwitchInst>(I)) {
1905     Value *SwitchCond = SI->getCondition();
1906     BasicBlock *Parent = SI->getParent();
1907     bool Changed = false;
1908 
1909     // Remember how many outgoing edges there are to every successor.
1910     SmallDenseMap<BasicBlock *, unsigned, 16> SwitchEdges;
1911     for (unsigned i = 0, n = SI->getNumSuccessors(); i != n; ++i)
1912       ++SwitchEdges[SI->getSuccessor(i)];
1913 
1914     for (SwitchInst::CaseIt i = SI->case_begin(), e = SI->case_end();
1915          i != e; ++i) {
1916       BasicBlock *Dst = i->getCaseSuccessor();
1917       // If there is only a single edge, propagate the case value into it.
1918       if (SwitchEdges.lookup(Dst) == 1) {
1919         BasicBlockEdge E(Parent, Dst);
1920         Changed |= propagateEquality(SwitchCond, i->getCaseValue(), E, true);
1921       }
1922     }
1923     return Changed;
1924   }
1925 
1926   // Instructions with void type don't return a value, so there's
1927   // no point in trying to find redundancies in them.
1928   if (I->getType()->isVoidTy())
1929     return false;
1930 
1931   uint32_t NextNum = VN.getNextUnusedValueNumber();
1932   unsigned Num = VN.lookupOrAdd(I);
1933 
1934   // Allocations are always uniquely numbered, so we can save time and memory
1935   // by fast failing them.
1936   if (isa<AllocaInst>(I) || isa<TerminatorInst>(I) || isa<PHINode>(I)) {
1937     addToLeaderTable(Num, I, I->getParent());
1938     return false;
1939   }
1940 
1941   // If the number we were assigned was a brand new VN, then we don't
1942   // need to do a lookup to see if the number already exists
1943   // somewhere in the domtree: it can't!
1944   if (Num >= NextNum) {
1945     addToLeaderTable(Num, I, I->getParent());
1946     return false;
1947   }
1948 
1949   // Perform fast-path value-number based elimination of values inherited from
1950   // dominators.
1951   Value *Repl = findLeader(I->getParent(), Num);
1952   if (!Repl) {
1953     // Failure, just remember this instance for future use.
1954     addToLeaderTable(Num, I, I->getParent());
1955     return false;
1956   } else if (Repl == I) {
1957     // If I was the result of a shortcut PRE, it might already be in the table
1958     // and the best replacement for itself. Nothing to do.
1959     return false;
1960   }
1961 
1962   // Remove it!
1963   patchAndReplaceAllUsesWith(I, Repl);
1964   if (MD && Repl->getType()->isPtrOrPtrVectorTy())
1965     MD->invalidateCachedPointerInfo(Repl);
1966   markInstructionForDeletion(I);
1967   return true;
1968 }
1969 
1970 /// runOnFunction - This is the main transformation entry point for a function.
1971 bool GVN::runImpl(Function &F, AssumptionCache &RunAC, DominatorTree &RunDT,
1972                   const TargetLibraryInfo &RunTLI, AAResults &RunAA,
1973                   MemoryDependenceResults *RunMD, LoopInfo *LI,
1974                   OptimizationRemarkEmitter *RunORE) {
1975   AC = &RunAC;
1976   DT = &RunDT;
1977   VN.setDomTree(DT);
1978   TLI = &RunTLI;
1979   VN.setAliasAnalysis(&RunAA);
1980   MD = RunMD;
1981   ImplicitControlFlowTracking ImplicitCFT(DT);
1982   ICF = &ImplicitCFT;
1983   VN.setMemDep(MD);
1984   ORE = RunORE;
1985 
1986   bool Changed = false;
1987   bool ShouldContinue = true;
1988 
1989   DomTreeUpdater DTU(DT, DomTreeUpdater::UpdateStrategy::Eager);
1990   // Merge unconditional branches, allowing PRE to catch more
1991   // optimization opportunities.
1992   for (Function::iterator FI = F.begin(), FE = F.end(); FI != FE; ) {
1993     BasicBlock *BB = &*FI++;
1994 
1995     bool removedBlock = MergeBlockIntoPredecessor(BB, &DTU, LI, nullptr, MD);
1996     if (removedBlock)
1997       ++NumGVNBlocks;
1998 
1999     Changed |= removedBlock;
2000   }
2001 
2002   unsigned Iteration = 0;
2003   while (ShouldContinue) {
2004     LLVM_DEBUG(dbgs() << "GVN iteration: " << Iteration << "\n");
2005     ShouldContinue = iterateOnFunction(F);
2006     Changed |= ShouldContinue;
2007     ++Iteration;
2008   }
2009 
2010   if (EnablePRE) {
2011     // Fabricate val-num for dead-code in order to suppress assertion in
2012     // performPRE().
2013     assignValNumForDeadCode();
2014     assignBlockRPONumber(F);
2015     bool PREChanged = true;
2016     while (PREChanged) {
2017       PREChanged = performPRE(F);
2018       Changed |= PREChanged;
2019     }
2020   }
2021 
2022   // FIXME: Should perform GVN again after PRE does something.  PRE can move
2023   // computations into blocks where they become fully redundant.  Note that
2024   // we can't do this until PRE's critical edge splitting updates memdep.
2025   // Actually, when this happens, we should just fully integrate PRE into GVN.
2026 
2027   cleanupGlobalSets();
2028   // Do not cleanup DeadBlocks in cleanupGlobalSets() as it's called for each
2029   // iteration.
2030   DeadBlocks.clear();
2031 
2032   return Changed;
2033 }
2034 
2035 bool GVN::processBlock(BasicBlock *BB) {
2036   // FIXME: Kill off InstrsToErase by doing erasing eagerly in a helper function
2037   // (and incrementing BI before processing an instruction).
2038   assert(InstrsToErase.empty() &&
2039          "We expect InstrsToErase to be empty across iterations");
2040   if (DeadBlocks.count(BB))
2041     return false;
2042 
2043   // Clearing map before every BB because it can be used only for single BB.
2044   ReplaceWithConstMap.clear();
2045   bool ChangedFunction = false;
2046 
2047   for (BasicBlock::iterator BI = BB->begin(), BE = BB->end();
2048        BI != BE;) {
2049     if (!ReplaceWithConstMap.empty())
2050       ChangedFunction |= replaceOperandsWithConsts(&*BI);
2051     ChangedFunction |= processInstruction(&*BI);
2052 
2053     if (InstrsToErase.empty()) {
2054       ++BI;
2055       continue;
2056     }
2057 
2058     // If we need some instructions deleted, do it now.
2059     NumGVNInstr += InstrsToErase.size();
2060 
2061     // Avoid iterator invalidation.
2062     bool AtStart = BI == BB->begin();
2063     if (!AtStart)
2064       --BI;
2065 
2066     const Instruction *MaybeFirstICF = ICF->getFirstICFI(BB);
2067     for (auto *I : InstrsToErase) {
2068       assert(I->getParent() == BB && "Removing instruction from wrong block?");
2069       LLVM_DEBUG(dbgs() << "GVN removed: " << *I << '\n');
2070       salvageDebugInfo(*I);
2071       if (MD) MD->removeInstruction(I);
2072       LLVM_DEBUG(verifyRemoved(I));
2073       if (MaybeFirstICF == I) {
2074         // We have erased the first ICF in block. The map needs to be updated.
2075         // Do not keep dangling pointer on the erased instruction.
2076         MaybeFirstICF = nullptr;
2077       }
2078       I->eraseFromParent();
2079     }
2080 
2081     ICF->invalidateBlock(BB);
2082     InstrsToErase.clear();
2083 
2084     if (AtStart)
2085       BI = BB->begin();
2086     else
2087       ++BI;
2088   }
2089 
2090   return ChangedFunction;
2091 }
2092 
2093 // Instantiate an expression in a predecessor that lacked it.
2094 bool GVN::performScalarPREInsertion(Instruction *Instr, BasicBlock *Pred,
2095                                     BasicBlock *Curr, unsigned int ValNo) {
2096   // Because we are going top-down through the block, all value numbers
2097   // will be available in the predecessor by the time we need them.  Any
2098   // that weren't originally present will have been instantiated earlier
2099   // in this loop.
2100   bool success = true;
2101   for (unsigned i = 0, e = Instr->getNumOperands(); i != e; ++i) {
2102     Value *Op = Instr->getOperand(i);
2103     if (isa<Argument>(Op) || isa<Constant>(Op) || isa<GlobalValue>(Op))
2104       continue;
2105     // This could be a newly inserted instruction, in which case, we won't
2106     // find a value number, and should give up before we hurt ourselves.
2107     // FIXME: Rewrite the infrastructure to let it easier to value number
2108     // and process newly inserted instructions.
2109     if (!VN.exists(Op)) {
2110       success = false;
2111       break;
2112     }
2113     uint32_t TValNo =
2114         VN.phiTranslate(Pred, Curr, VN.lookup(Op), *this);
2115     if (Value *V = findLeader(Pred, TValNo)) {
2116       Instr->setOperand(i, V);
2117     } else {
2118       success = false;
2119       break;
2120     }
2121   }
2122 
2123   // Fail out if we encounter an operand that is not available in
2124   // the PRE predecessor.  This is typically because of loads which
2125   // are not value numbered precisely.
2126   if (!success)
2127     return false;
2128 
2129   Instr->insertBefore(Pred->getTerminator());
2130   Instr->setName(Instr->getName() + ".pre");
2131   Instr->setDebugLoc(Instr->getDebugLoc());
2132 
2133   unsigned Num = VN.lookupOrAdd(Instr);
2134   VN.add(Instr, Num);
2135 
2136   // Update the availability map to include the new instruction.
2137   addToLeaderTable(Num, Instr, Pred);
2138   return true;
2139 }
2140 
2141 bool GVN::performScalarPRE(Instruction *CurInst) {
2142   if (isa<AllocaInst>(CurInst) || isa<TerminatorInst>(CurInst) ||
2143       isa<PHINode>(CurInst) || CurInst->getType()->isVoidTy() ||
2144       CurInst->mayReadFromMemory() || CurInst->mayHaveSideEffects() ||
2145       isa<DbgInfoIntrinsic>(CurInst))
2146     return false;
2147 
2148   // Don't do PRE on compares. The PHI would prevent CodeGenPrepare from
2149   // sinking the compare again, and it would force the code generator to
2150   // move the i1 from processor flags or predicate registers into a general
2151   // purpose register.
2152   if (isa<CmpInst>(CurInst))
2153     return false;
2154 
2155   // We don't currently value number ANY inline asm calls.
2156   if (CallInst *CallI = dyn_cast<CallInst>(CurInst))
2157     if (CallI->isInlineAsm())
2158       return false;
2159 
2160   uint32_t ValNo = VN.lookup(CurInst);
2161 
2162   // Look for the predecessors for PRE opportunities.  We're
2163   // only trying to solve the basic diamond case, where
2164   // a value is computed in the successor and one predecessor,
2165   // but not the other.  We also explicitly disallow cases
2166   // where the successor is its own predecessor, because they're
2167   // more complicated to get right.
2168   unsigned NumWith = 0;
2169   unsigned NumWithout = 0;
2170   BasicBlock *PREPred = nullptr;
2171   BasicBlock *CurrentBlock = CurInst->getParent();
2172 
2173   SmallVector<std::pair<Value *, BasicBlock *>, 8> predMap;
2174   for (BasicBlock *P : predecessors(CurrentBlock)) {
2175     // We're not interested in PRE where blocks with predecessors that are
2176     // not reachable.
2177     if (!DT->isReachableFromEntry(P)) {
2178       NumWithout = 2;
2179       break;
2180     }
2181     // It is not safe to do PRE when P->CurrentBlock is a loop backedge, and
2182     // when CurInst has operand defined in CurrentBlock (so it may be defined
2183     // by phi in the loop header).
2184     if (BlockRPONumber[P] >= BlockRPONumber[CurrentBlock] &&
2185         llvm::any_of(CurInst->operands(), [&](const Use &U) {
2186           if (auto *Inst = dyn_cast<Instruction>(U.get()))
2187             return Inst->getParent() == CurrentBlock;
2188           return false;
2189         })) {
2190       NumWithout = 2;
2191       break;
2192     }
2193 
2194     uint32_t TValNo = VN.phiTranslate(P, CurrentBlock, ValNo, *this);
2195     Value *predV = findLeader(P, TValNo);
2196     if (!predV) {
2197       predMap.push_back(std::make_pair(static_cast<Value *>(nullptr), P));
2198       PREPred = P;
2199       ++NumWithout;
2200     } else if (predV == CurInst) {
2201       /* CurInst dominates this predecessor. */
2202       NumWithout = 2;
2203       break;
2204     } else {
2205       predMap.push_back(std::make_pair(predV, P));
2206       ++NumWith;
2207     }
2208   }
2209 
2210   // Don't do PRE when it might increase code size, i.e. when
2211   // we would need to insert instructions in more than one pred.
2212   if (NumWithout > 1 || NumWith == 0)
2213     return false;
2214 
2215   // We may have a case where all predecessors have the instruction,
2216   // and we just need to insert a phi node. Otherwise, perform
2217   // insertion.
2218   Instruction *PREInstr = nullptr;
2219 
2220   if (NumWithout != 0) {
2221     if (!isSafeToSpeculativelyExecute(CurInst)) {
2222       // It is only valid to insert a new instruction if the current instruction
2223       // is always executed. An instruction with implicit control flow could
2224       // prevent us from doing it. If we cannot speculate the execution, then
2225       // PRE should be prohibited.
2226       if (ICF->isDominatedByICFIFromSameBlock(CurInst))
2227         return false;
2228     }
2229 
2230     // Don't do PRE across indirect branch.
2231     if (isa<IndirectBrInst>(PREPred->getTerminator()))
2232       return false;
2233 
2234     // We can't do PRE safely on a critical edge, so instead we schedule
2235     // the edge to be split and perform the PRE the next time we iterate
2236     // on the function.
2237     unsigned SuccNum = GetSuccessorNumber(PREPred, CurrentBlock);
2238     if (isCriticalEdge(PREPred->getTerminator(), SuccNum)) {
2239       toSplit.push_back(std::make_pair(PREPred->getTerminator(), SuccNum));
2240       return false;
2241     }
2242     // We need to insert somewhere, so let's give it a shot
2243     PREInstr = CurInst->clone();
2244     if (!performScalarPREInsertion(PREInstr, PREPred, CurrentBlock, ValNo)) {
2245       // If we failed insertion, make sure we remove the instruction.
2246       LLVM_DEBUG(verifyRemoved(PREInstr));
2247       PREInstr->deleteValue();
2248       return false;
2249     }
2250   }
2251 
2252   // Either we should have filled in the PRE instruction, or we should
2253   // not have needed insertions.
2254   assert(PREInstr != nullptr || NumWithout == 0);
2255 
2256   ++NumGVNPRE;
2257 
2258   // Create a PHI to make the value available in this block.
2259   PHINode *Phi =
2260       PHINode::Create(CurInst->getType(), predMap.size(),
2261                       CurInst->getName() + ".pre-phi", &CurrentBlock->front());
2262   for (unsigned i = 0, e = predMap.size(); i != e; ++i) {
2263     if (Value *V = predMap[i].first) {
2264       // If we use an existing value in this phi, we have to patch the original
2265       // value because the phi will be used to replace a later value.
2266       patchReplacementInstruction(CurInst, V);
2267       Phi->addIncoming(V, predMap[i].second);
2268     } else
2269       Phi->addIncoming(PREInstr, PREPred);
2270   }
2271 
2272   VN.add(Phi, ValNo);
2273   // After creating a new PHI for ValNo, the phi translate result for ValNo will
2274   // be changed, so erase the related stale entries in phi translate cache.
2275   VN.eraseTranslateCacheEntry(ValNo, *CurrentBlock);
2276   addToLeaderTable(ValNo, Phi, CurrentBlock);
2277   Phi->setDebugLoc(CurInst->getDebugLoc());
2278   CurInst->replaceAllUsesWith(Phi);
2279   if (MD && Phi->getType()->isPtrOrPtrVectorTy())
2280     MD->invalidateCachedPointerInfo(Phi);
2281   VN.erase(CurInst);
2282   removeFromLeaderTable(ValNo, CurInst, CurrentBlock);
2283 
2284   LLVM_DEBUG(dbgs() << "GVN PRE removed: " << *CurInst << '\n');
2285   if (MD)
2286     MD->removeInstruction(CurInst);
2287   LLVM_DEBUG(verifyRemoved(CurInst));
2288   // FIXME: Intended to be markInstructionForDeletion(CurInst), but it causes
2289   // some assertion failures.
2290   ICF->invalidateBlock(CurrentBlock);
2291   CurInst->eraseFromParent();
2292   ++NumGVNInstr;
2293 
2294   return true;
2295 }
2296 
2297 /// Perform a purely local form of PRE that looks for diamond
2298 /// control flow patterns and attempts to perform simple PRE at the join point.
2299 bool GVN::performPRE(Function &F) {
2300   bool Changed = false;
2301   for (BasicBlock *CurrentBlock : depth_first(&F.getEntryBlock())) {
2302     // Nothing to PRE in the entry block.
2303     if (CurrentBlock == &F.getEntryBlock())
2304       continue;
2305 
2306     // Don't perform PRE on an EH pad.
2307     if (CurrentBlock->isEHPad())
2308       continue;
2309 
2310     for (BasicBlock::iterator BI = CurrentBlock->begin(),
2311                               BE = CurrentBlock->end();
2312          BI != BE;) {
2313       Instruction *CurInst = &*BI++;
2314       Changed |= performScalarPRE(CurInst);
2315     }
2316   }
2317 
2318   if (splitCriticalEdges())
2319     Changed = true;
2320 
2321   return Changed;
2322 }
2323 
2324 /// Split the critical edge connecting the given two blocks, and return
2325 /// the block inserted to the critical edge.
2326 BasicBlock *GVN::splitCriticalEdges(BasicBlock *Pred, BasicBlock *Succ) {
2327   BasicBlock *BB =
2328       SplitCriticalEdge(Pred, Succ, CriticalEdgeSplittingOptions(DT));
2329   if (MD)
2330     MD->invalidateCachedPredecessors();
2331   return BB;
2332 }
2333 
2334 /// Split critical edges found during the previous
2335 /// iteration that may enable further optimization.
2336 bool GVN::splitCriticalEdges() {
2337   if (toSplit.empty())
2338     return false;
2339   do {
2340     std::pair<TerminatorInst*, unsigned> Edge = toSplit.pop_back_val();
2341     SplitCriticalEdge(Edge.first, Edge.second,
2342                       CriticalEdgeSplittingOptions(DT));
2343   } while (!toSplit.empty());
2344   if (MD) MD->invalidateCachedPredecessors();
2345   return true;
2346 }
2347 
2348 /// Executes one iteration of GVN
2349 bool GVN::iterateOnFunction(Function &F) {
2350   cleanupGlobalSets();
2351 
2352   // Top-down walk of the dominator tree
2353   bool Changed = false;
2354   // Needed for value numbering with phi construction to work.
2355   // RPOT walks the graph in its constructor and will not be invalidated during
2356   // processBlock.
2357   ReversePostOrderTraversal<Function *> RPOT(&F);
2358 
2359   for (BasicBlock *BB : RPOT)
2360     Changed |= processBlock(BB);
2361 
2362   return Changed;
2363 }
2364 
2365 void GVN::cleanupGlobalSets() {
2366   VN.clear();
2367   LeaderTable.clear();
2368   BlockRPONumber.clear();
2369   TableAllocator.Reset();
2370   ICF->clear();
2371 }
2372 
2373 /// Verify that the specified instruction does not occur in our
2374 /// internal data structures.
2375 void GVN::verifyRemoved(const Instruction *Inst) const {
2376   VN.verifyRemoved(Inst);
2377 
2378   // Walk through the value number scope to make sure the instruction isn't
2379   // ferreted away in it.
2380   for (DenseMap<uint32_t, LeaderTableEntry>::const_iterator
2381        I = LeaderTable.begin(), E = LeaderTable.end(); I != E; ++I) {
2382     const LeaderTableEntry *Node = &I->second;
2383     assert(Node->Val != Inst && "Inst still in value numbering scope!");
2384 
2385     while (Node->Next) {
2386       Node = Node->Next;
2387       assert(Node->Val != Inst && "Inst still in value numbering scope!");
2388     }
2389   }
2390 }
2391 
2392 /// BB is declared dead, which implied other blocks become dead as well. This
2393 /// function is to add all these blocks to "DeadBlocks". For the dead blocks'
2394 /// live successors, update their phi nodes by replacing the operands
2395 /// corresponding to dead blocks with UndefVal.
2396 void GVN::addDeadBlock(BasicBlock *BB) {
2397   SmallVector<BasicBlock *, 4> NewDead;
2398   SmallSetVector<BasicBlock *, 4> DF;
2399 
2400   NewDead.push_back(BB);
2401   while (!NewDead.empty()) {
2402     BasicBlock *D = NewDead.pop_back_val();
2403     if (DeadBlocks.count(D))
2404       continue;
2405 
2406     // All blocks dominated by D are dead.
2407     SmallVector<BasicBlock *, 8> Dom;
2408     DT->getDescendants(D, Dom);
2409     DeadBlocks.insert(Dom.begin(), Dom.end());
2410 
2411     // Figure out the dominance-frontier(D).
2412     for (BasicBlock *B : Dom) {
2413       for (BasicBlock *S : successors(B)) {
2414         if (DeadBlocks.count(S))
2415           continue;
2416 
2417         bool AllPredDead = true;
2418         for (BasicBlock *P : predecessors(S))
2419           if (!DeadBlocks.count(P)) {
2420             AllPredDead = false;
2421             break;
2422           }
2423 
2424         if (!AllPredDead) {
2425           // S could be proved dead later on. That is why we don't update phi
2426           // operands at this moment.
2427           DF.insert(S);
2428         } else {
2429           // While S is not dominated by D, it is dead by now. This could take
2430           // place if S already have a dead predecessor before D is declared
2431           // dead.
2432           NewDead.push_back(S);
2433         }
2434       }
2435     }
2436   }
2437 
2438   // For the dead blocks' live successors, update their phi nodes by replacing
2439   // the operands corresponding to dead blocks with UndefVal.
2440   for(SmallSetVector<BasicBlock *, 4>::iterator I = DF.begin(), E = DF.end();
2441         I != E; I++) {
2442     BasicBlock *B = *I;
2443     if (DeadBlocks.count(B))
2444       continue;
2445 
2446     SmallVector<BasicBlock *, 4> Preds(pred_begin(B), pred_end(B));
2447     for (BasicBlock *P : Preds) {
2448       if (!DeadBlocks.count(P))
2449         continue;
2450 
2451       if (isCriticalEdge(P->getTerminator(), GetSuccessorNumber(P, B))) {
2452         if (BasicBlock *S = splitCriticalEdges(P, B))
2453           DeadBlocks.insert(P = S);
2454       }
2455 
2456       for (BasicBlock::iterator II = B->begin(); isa<PHINode>(II); ++II) {
2457         PHINode &Phi = cast<PHINode>(*II);
2458         Phi.setIncomingValue(Phi.getBasicBlockIndex(P),
2459                              UndefValue::get(Phi.getType()));
2460         if (MD)
2461           MD->invalidateCachedPointerInfo(&Phi);
2462       }
2463     }
2464   }
2465 }
2466 
2467 // If the given branch is recognized as a foldable branch (i.e. conditional
2468 // branch with constant condition), it will perform following analyses and
2469 // transformation.
2470 //  1) If the dead out-coming edge is a critical-edge, split it. Let
2471 //     R be the target of the dead out-coming edge.
2472 //  1) Identify the set of dead blocks implied by the branch's dead outcoming
2473 //     edge. The result of this step will be {X| X is dominated by R}
2474 //  2) Identify those blocks which haves at least one dead predecessor. The
2475 //     result of this step will be dominance-frontier(R).
2476 //  3) Update the PHIs in DF(R) by replacing the operands corresponding to
2477 //     dead blocks with "UndefVal" in an hope these PHIs will optimized away.
2478 //
2479 // Return true iff *NEW* dead code are found.
2480 bool GVN::processFoldableCondBr(BranchInst *BI) {
2481   if (!BI || BI->isUnconditional())
2482     return false;
2483 
2484   // If a branch has two identical successors, we cannot declare either dead.
2485   if (BI->getSuccessor(0) == BI->getSuccessor(1))
2486     return false;
2487 
2488   ConstantInt *Cond = dyn_cast<ConstantInt>(BI->getCondition());
2489   if (!Cond)
2490     return false;
2491 
2492   BasicBlock *DeadRoot =
2493       Cond->getZExtValue() ? BI->getSuccessor(1) : BI->getSuccessor(0);
2494   if (DeadBlocks.count(DeadRoot))
2495     return false;
2496 
2497   if (!DeadRoot->getSinglePredecessor())
2498     DeadRoot = splitCriticalEdges(BI->getParent(), DeadRoot);
2499 
2500   addDeadBlock(DeadRoot);
2501   return true;
2502 }
2503 
2504 // performPRE() will trigger assert if it comes across an instruction without
2505 // associated val-num. As it normally has far more live instructions than dead
2506 // instructions, it makes more sense just to "fabricate" a val-number for the
2507 // dead code than checking if instruction involved is dead or not.
2508 void GVN::assignValNumForDeadCode() {
2509   for (BasicBlock *BB : DeadBlocks) {
2510     for (Instruction &Inst : *BB) {
2511       unsigned ValNum = VN.lookupOrAdd(&Inst);
2512       addToLeaderTable(ValNum, &Inst, BB);
2513     }
2514   }
2515 }
2516 
2517 class llvm::gvn::GVNLegacyPass : public FunctionPass {
2518 public:
2519   static char ID; // Pass identification, replacement for typeid
2520 
2521   explicit GVNLegacyPass(bool NoMemDepAnalysis = !EnableMemDep)
2522       : FunctionPass(ID), NoMemDepAnalysis(NoMemDepAnalysis) {
2523     initializeGVNLegacyPassPass(*PassRegistry::getPassRegistry());
2524   }
2525 
2526   bool runOnFunction(Function &F) override {
2527     if (skipFunction(F))
2528       return false;
2529 
2530     auto *LIWP = getAnalysisIfAvailable<LoopInfoWrapperPass>();
2531 
2532     return Impl.runImpl(
2533         F, getAnalysis<AssumptionCacheTracker>().getAssumptionCache(F),
2534         getAnalysis<DominatorTreeWrapperPass>().getDomTree(),
2535         getAnalysis<TargetLibraryInfoWrapperPass>().getTLI(),
2536         getAnalysis<AAResultsWrapperPass>().getAAResults(),
2537         NoMemDepAnalysis ? nullptr
2538                 : &getAnalysis<MemoryDependenceWrapperPass>().getMemDep(),
2539         LIWP ? &LIWP->getLoopInfo() : nullptr,
2540         &getAnalysis<OptimizationRemarkEmitterWrapperPass>().getORE());
2541   }
2542 
2543   void getAnalysisUsage(AnalysisUsage &AU) const override {
2544     AU.addRequired<AssumptionCacheTracker>();
2545     AU.addRequired<DominatorTreeWrapperPass>();
2546     AU.addRequired<TargetLibraryInfoWrapperPass>();
2547     if (!NoMemDepAnalysis)
2548       AU.addRequired<MemoryDependenceWrapperPass>();
2549     AU.addRequired<AAResultsWrapperPass>();
2550 
2551     AU.addPreserved<DominatorTreeWrapperPass>();
2552     AU.addPreserved<GlobalsAAWrapperPass>();
2553     AU.addPreserved<TargetLibraryInfoWrapperPass>();
2554     AU.addRequired<OptimizationRemarkEmitterWrapperPass>();
2555   }
2556 
2557 private:
2558   bool NoMemDepAnalysis;
2559   GVN Impl;
2560 };
2561 
2562 char GVNLegacyPass::ID = 0;
2563 
2564 INITIALIZE_PASS_BEGIN(GVNLegacyPass, "gvn", "Global Value Numbering", false, false)
2565 INITIALIZE_PASS_DEPENDENCY(AssumptionCacheTracker)
2566 INITIALIZE_PASS_DEPENDENCY(MemoryDependenceWrapperPass)
2567 INITIALIZE_PASS_DEPENDENCY(DominatorTreeWrapperPass)
2568 INITIALIZE_PASS_DEPENDENCY(TargetLibraryInfoWrapperPass)
2569 INITIALIZE_PASS_DEPENDENCY(AAResultsWrapperPass)
2570 INITIALIZE_PASS_DEPENDENCY(GlobalsAAWrapperPass)
2571 INITIALIZE_PASS_DEPENDENCY(OptimizationRemarkEmitterWrapperPass)
2572 INITIALIZE_PASS_END(GVNLegacyPass, "gvn", "Global Value Numbering", false, false)
2573 
2574 // The public interface to this file...
2575 FunctionPass *llvm::createGVNPass(bool NoMemDepAnalysis) {
2576   return new GVNLegacyPass(NoMemDepAnalysis);
2577 }
2578