1 //===- GVN.cpp - Eliminate redundant values and loads ---------------------===//
2 //
3 //                     The LLVM Compiler Infrastructure
4 //
5 // This file is distributed under the University of Illinois Open Source
6 // License. See LICENSE.TXT for details.
7 //
8 //===----------------------------------------------------------------------===//
9 //
10 // This pass performs global value numbering to eliminate fully redundant
11 // instructions.  It also performs simple dead load elimination.
12 //
13 // Note that this pass does the value numbering itself; it does not use the
14 // ValueNumbering analysis passes.
15 //
16 //===----------------------------------------------------------------------===//
17 
18 #include "llvm/Transforms/Scalar/GVN.h"
19 #include "llvm/ADT/DenseMap.h"
20 #include "llvm/ADT/DepthFirstIterator.h"
21 #include "llvm/ADT/Hashing.h"
22 #include "llvm/ADT/MapVector.h"
23 #include "llvm/ADT/PostOrderIterator.h"
24 #include "llvm/ADT/SetVector.h"
25 #include "llvm/ADT/SmallPtrSet.h"
26 #include "llvm/ADT/Statistic.h"
27 #include "llvm/Analysis/AliasAnalysis.h"
28 #include "llvm/Analysis/AssumptionCache.h"
29 #include "llvm/Analysis/CFG.h"
30 #include "llvm/Analysis/ConstantFolding.h"
31 #include "llvm/Analysis/GlobalsModRef.h"
32 #include "llvm/Analysis/InstructionSimplify.h"
33 #include "llvm/Analysis/Loads.h"
34 #include "llvm/Analysis/MemoryBuiltins.h"
35 #include "llvm/Analysis/MemoryDependenceAnalysis.h"
36 #include "llvm/Analysis/PHITransAddr.h"
37 #include "llvm/Analysis/TargetLibraryInfo.h"
38 #include "llvm/Analysis/ValueTracking.h"
39 #include "llvm/IR/DataLayout.h"
40 #include "llvm/IR/Dominators.h"
41 #include "llvm/IR/GlobalVariable.h"
42 #include "llvm/IR/IRBuilder.h"
43 #include "llvm/IR/IntrinsicInst.h"
44 #include "llvm/IR/LLVMContext.h"
45 #include "llvm/IR/Metadata.h"
46 #include "llvm/IR/PatternMatch.h"
47 #include "llvm/Support/CommandLine.h"
48 #include "llvm/Support/Debug.h"
49 #include "llvm/Support/raw_ostream.h"
50 #include "llvm/Transforms/Utils/BasicBlockUtils.h"
51 #include "llvm/Transforms/Utils/Local.h"
52 #include "llvm/Transforms/Utils/SSAUpdater.h"
53 #include <vector>
54 using namespace llvm;
55 using namespace llvm::gvn;
56 using namespace PatternMatch;
57 
58 #define DEBUG_TYPE "gvn"
59 
60 STATISTIC(NumGVNInstr,  "Number of instructions deleted");
61 STATISTIC(NumGVNLoad,   "Number of loads deleted");
62 STATISTIC(NumGVNPRE,    "Number of instructions PRE'd");
63 STATISTIC(NumGVNBlocks, "Number of blocks merged");
64 STATISTIC(NumGVNSimpl,  "Number of instructions simplified");
65 STATISTIC(NumGVNEqProp, "Number of equalities propagated");
66 STATISTIC(NumPRELoad,   "Number of loads PRE'd");
67 
68 static cl::opt<bool> EnablePRE("enable-pre",
69                                cl::init(true), cl::Hidden);
70 static cl::opt<bool> EnableLoadPRE("enable-load-pre", cl::init(true));
71 
72 // Maximum allowed recursion depth.
73 static cl::opt<uint32_t>
74 MaxRecurseDepth("max-recurse-depth", cl::Hidden, cl::init(1000), cl::ZeroOrMore,
75                 cl::desc("Max recurse depth (default = 1000)"));
76 
77 struct llvm::GVN::Expression {
78   uint32_t opcode;
79   Type *type;
80   SmallVector<uint32_t, 4> varargs;
81 
82   Expression(uint32_t o = ~2U) : opcode(o) {}
83 
84   bool operator==(const Expression &other) const {
85     if (opcode != other.opcode)
86       return false;
87     if (opcode == ~0U || opcode == ~1U)
88       return true;
89     if (type != other.type)
90       return false;
91     if (varargs != other.varargs)
92       return false;
93     return true;
94   }
95 
96   friend hash_code hash_value(const Expression &Value) {
97     return hash_combine(
98         Value.opcode, Value.type,
99         hash_combine_range(Value.varargs.begin(), Value.varargs.end()));
100   }
101 };
102 
103 namespace llvm {
104 template <> struct DenseMapInfo<GVN::Expression> {
105   static inline GVN::Expression getEmptyKey() { return ~0U; }
106 
107   static inline GVN::Expression getTombstoneKey() { return ~1U; }
108 
109   static unsigned getHashValue(const GVN::Expression e) {
110     using llvm::hash_value;
111     return static_cast<unsigned>(hash_value(e));
112   }
113   static bool isEqual(const GVN::Expression &LHS, const GVN::Expression &RHS) {
114     return LHS == RHS;
115   }
116 };
117 } // End llvm namespace.
118 
119 /// Represents a particular available value that we know how to materialize.
120 /// Materialization of an AvailableValue never fails.  An AvailableValue is
121 /// implicitly associated with a rematerialization point which is the
122 /// location of the instruction from which it was formed.
123 struct llvm::gvn::AvailableValue {
124   enum ValType {
125     SimpleVal, // A simple offsetted value that is accessed.
126     LoadVal,   // A value produced by a load.
127     MemIntrin, // A memory intrinsic which is loaded from.
128     UndefVal   // A UndefValue representing a value from dead block (which
129                // is not yet physically removed from the CFG).
130   };
131 
132   /// V - The value that is live out of the block.
133   PointerIntPair<Value *, 2, ValType> Val;
134 
135   /// Offset - The byte offset in Val that is interesting for the load query.
136   unsigned Offset;
137 
138   static AvailableValue get(Value *V, unsigned Offset = 0) {
139     AvailableValue Res;
140     Res.Val.setPointer(V);
141     Res.Val.setInt(SimpleVal);
142     Res.Offset = Offset;
143     return Res;
144   }
145 
146   static AvailableValue getMI(MemIntrinsic *MI, unsigned Offset = 0) {
147     AvailableValue Res;
148     Res.Val.setPointer(MI);
149     Res.Val.setInt(MemIntrin);
150     Res.Offset = Offset;
151     return Res;
152   }
153 
154   static AvailableValue getLoad(LoadInst *LI, unsigned Offset = 0) {
155     AvailableValue Res;
156     Res.Val.setPointer(LI);
157     Res.Val.setInt(LoadVal);
158     Res.Offset = Offset;
159     return Res;
160   }
161 
162   static AvailableValue getUndef() {
163     AvailableValue Res;
164     Res.Val.setPointer(nullptr);
165     Res.Val.setInt(UndefVal);
166     Res.Offset = 0;
167     return Res;
168   }
169 
170   bool isSimpleValue() const { return Val.getInt() == SimpleVal; }
171   bool isCoercedLoadValue() const { return Val.getInt() == LoadVal; }
172   bool isMemIntrinValue() const { return Val.getInt() == MemIntrin; }
173   bool isUndefValue() const { return Val.getInt() == UndefVal; }
174 
175   Value *getSimpleValue() const {
176     assert(isSimpleValue() && "Wrong accessor");
177     return Val.getPointer();
178   }
179 
180   LoadInst *getCoercedLoadValue() const {
181     assert(isCoercedLoadValue() && "Wrong accessor");
182     return cast<LoadInst>(Val.getPointer());
183   }
184 
185   MemIntrinsic *getMemIntrinValue() const {
186     assert(isMemIntrinValue() && "Wrong accessor");
187     return cast<MemIntrinsic>(Val.getPointer());
188   }
189 
190   /// Emit code at the specified insertion point to adjust the value defined
191   /// here to the specified type. This handles various coercion cases.
192   Value *MaterializeAdjustedValue(LoadInst *LI, Instruction *InsertPt,
193                                   GVN &gvn) const;
194 };
195 
196 /// Represents an AvailableValue which can be rematerialized at the end of
197 /// the associated BasicBlock.
198 struct llvm::gvn::AvailableValueInBlock {
199   /// BB - The basic block in question.
200   BasicBlock *BB;
201 
202   /// AV - The actual available value
203   AvailableValue AV;
204 
205   static AvailableValueInBlock get(BasicBlock *BB, AvailableValue &&AV) {
206     AvailableValueInBlock Res;
207     Res.BB = BB;
208     Res.AV = std::move(AV);
209     return Res;
210   }
211 
212   static AvailableValueInBlock get(BasicBlock *BB, Value *V,
213                                    unsigned Offset = 0) {
214     return get(BB, AvailableValue::get(V, Offset));
215   }
216   static AvailableValueInBlock getUndef(BasicBlock *BB) {
217     return get(BB, AvailableValue::getUndef());
218   }
219 
220   /// Emit code at the end of this block to adjust the value defined here to
221   /// the specified type. This handles various coercion cases.
222   Value *MaterializeAdjustedValue(LoadInst *LI, GVN &gvn) const {
223     return AV.MaterializeAdjustedValue(LI, BB->getTerminator(), gvn);
224   }
225 };
226 
227 //===----------------------------------------------------------------------===//
228 //                     ValueTable Internal Functions
229 //===----------------------------------------------------------------------===//
230 
231 GVN::Expression GVN::ValueTable::createExpr(Instruction *I) {
232   Expression e;
233   e.type = I->getType();
234   e.opcode = I->getOpcode();
235   for (Instruction::op_iterator OI = I->op_begin(), OE = I->op_end();
236        OI != OE; ++OI)
237     e.varargs.push_back(lookupOrAdd(*OI));
238   if (I->isCommutative()) {
239     // Ensure that commutative instructions that only differ by a permutation
240     // of their operands get the same value number by sorting the operand value
241     // numbers.  Since all commutative instructions have two operands it is more
242     // efficient to sort by hand rather than using, say, std::sort.
243     assert(I->getNumOperands() == 2 && "Unsupported commutative instruction!");
244     if (e.varargs[0] > e.varargs[1])
245       std::swap(e.varargs[0], e.varargs[1]);
246   }
247 
248   if (CmpInst *C = dyn_cast<CmpInst>(I)) {
249     // Sort the operand value numbers so x<y and y>x get the same value number.
250     CmpInst::Predicate Predicate = C->getPredicate();
251     if (e.varargs[0] > e.varargs[1]) {
252       std::swap(e.varargs[0], e.varargs[1]);
253       Predicate = CmpInst::getSwappedPredicate(Predicate);
254     }
255     e.opcode = (C->getOpcode() << 8) | Predicate;
256   } else if (InsertValueInst *E = dyn_cast<InsertValueInst>(I)) {
257     for (InsertValueInst::idx_iterator II = E->idx_begin(), IE = E->idx_end();
258          II != IE; ++II)
259       e.varargs.push_back(*II);
260   }
261 
262   return e;
263 }
264 
265 GVN::Expression GVN::ValueTable::createCmpExpr(unsigned Opcode,
266                                                CmpInst::Predicate Predicate,
267                                                Value *LHS, Value *RHS) {
268   assert((Opcode == Instruction::ICmp || Opcode == Instruction::FCmp) &&
269          "Not a comparison!");
270   Expression e;
271   e.type = CmpInst::makeCmpResultType(LHS->getType());
272   e.varargs.push_back(lookupOrAdd(LHS));
273   e.varargs.push_back(lookupOrAdd(RHS));
274 
275   // Sort the operand value numbers so x<y and y>x get the same value number.
276   if (e.varargs[0] > e.varargs[1]) {
277     std::swap(e.varargs[0], e.varargs[1]);
278     Predicate = CmpInst::getSwappedPredicate(Predicate);
279   }
280   e.opcode = (Opcode << 8) | Predicate;
281   return e;
282 }
283 
284 GVN::Expression GVN::ValueTable::createExtractvalueExpr(ExtractValueInst *EI) {
285   assert(EI && "Not an ExtractValueInst?");
286   Expression e;
287   e.type = EI->getType();
288   e.opcode = 0;
289 
290   IntrinsicInst *I = dyn_cast<IntrinsicInst>(EI->getAggregateOperand());
291   if (I != nullptr && EI->getNumIndices() == 1 && *EI->idx_begin() == 0 ) {
292     // EI might be an extract from one of our recognised intrinsics. If it
293     // is we'll synthesize a semantically equivalent expression instead on
294     // an extract value expression.
295     switch (I->getIntrinsicID()) {
296       case Intrinsic::sadd_with_overflow:
297       case Intrinsic::uadd_with_overflow:
298         e.opcode = Instruction::Add;
299         break;
300       case Intrinsic::ssub_with_overflow:
301       case Intrinsic::usub_with_overflow:
302         e.opcode = Instruction::Sub;
303         break;
304       case Intrinsic::smul_with_overflow:
305       case Intrinsic::umul_with_overflow:
306         e.opcode = Instruction::Mul;
307         break;
308       default:
309         break;
310     }
311 
312     if (e.opcode != 0) {
313       // Intrinsic recognized. Grab its args to finish building the expression.
314       assert(I->getNumArgOperands() == 2 &&
315              "Expect two args for recognised intrinsics.");
316       e.varargs.push_back(lookupOrAdd(I->getArgOperand(0)));
317       e.varargs.push_back(lookupOrAdd(I->getArgOperand(1)));
318       return e;
319     }
320   }
321 
322   // Not a recognised intrinsic. Fall back to producing an extract value
323   // expression.
324   e.opcode = EI->getOpcode();
325   for (Instruction::op_iterator OI = EI->op_begin(), OE = EI->op_end();
326        OI != OE; ++OI)
327     e.varargs.push_back(lookupOrAdd(*OI));
328 
329   for (ExtractValueInst::idx_iterator II = EI->idx_begin(), IE = EI->idx_end();
330          II != IE; ++II)
331     e.varargs.push_back(*II);
332 
333   return e;
334 }
335 
336 //===----------------------------------------------------------------------===//
337 //                     ValueTable External Functions
338 //===----------------------------------------------------------------------===//
339 
340 GVN::ValueTable::ValueTable() : nextValueNumber(1) {}
341 GVN::ValueTable::ValueTable(const ValueTable &Arg)
342     : valueNumbering(Arg.valueNumbering),
343       expressionNumbering(Arg.expressionNumbering), AA(Arg.AA), MD(Arg.MD),
344       DT(Arg.DT), nextValueNumber(Arg.nextValueNumber) {}
345 GVN::ValueTable::ValueTable(ValueTable &&Arg)
346     : valueNumbering(std::move(Arg.valueNumbering)),
347       expressionNumbering(std::move(Arg.expressionNumbering)),
348       AA(std::move(Arg.AA)), MD(std::move(Arg.MD)), DT(std::move(Arg.DT)),
349       nextValueNumber(std::move(Arg.nextValueNumber)) {}
350 GVN::ValueTable::~ValueTable() {}
351 
352 /// add - Insert a value into the table with a specified value number.
353 void GVN::ValueTable::add(Value *V, uint32_t num) {
354   valueNumbering.insert(std::make_pair(V, num));
355 }
356 
357 uint32_t GVN::ValueTable::lookupOrAddCall(CallInst *C) {
358   if (AA->doesNotAccessMemory(C)) {
359     Expression exp = createExpr(C);
360     uint32_t &e = expressionNumbering[exp];
361     if (!e) e = nextValueNumber++;
362     valueNumbering[C] = e;
363     return e;
364   } else if (AA->onlyReadsMemory(C)) {
365     Expression exp = createExpr(C);
366     uint32_t &e = expressionNumbering[exp];
367     if (!e) {
368       e = nextValueNumber++;
369       valueNumbering[C] = e;
370       return e;
371     }
372     if (!MD) {
373       e = nextValueNumber++;
374       valueNumbering[C] = e;
375       return e;
376     }
377 
378     MemDepResult local_dep = MD->getDependency(C);
379 
380     if (!local_dep.isDef() && !local_dep.isNonLocal()) {
381       valueNumbering[C] =  nextValueNumber;
382       return nextValueNumber++;
383     }
384 
385     if (local_dep.isDef()) {
386       CallInst* local_cdep = cast<CallInst>(local_dep.getInst());
387 
388       if (local_cdep->getNumArgOperands() != C->getNumArgOperands()) {
389         valueNumbering[C] = nextValueNumber;
390         return nextValueNumber++;
391       }
392 
393       for (unsigned i = 0, e = C->getNumArgOperands(); i < e; ++i) {
394         uint32_t c_vn = lookupOrAdd(C->getArgOperand(i));
395         uint32_t cd_vn = lookupOrAdd(local_cdep->getArgOperand(i));
396         if (c_vn != cd_vn) {
397           valueNumbering[C] = nextValueNumber;
398           return nextValueNumber++;
399         }
400       }
401 
402       uint32_t v = lookupOrAdd(local_cdep);
403       valueNumbering[C] = v;
404       return v;
405     }
406 
407     // Non-local case.
408     const MemoryDependenceResults::NonLocalDepInfo &deps =
409       MD->getNonLocalCallDependency(CallSite(C));
410     // FIXME: Move the checking logic to MemDep!
411     CallInst* cdep = nullptr;
412 
413     // Check to see if we have a single dominating call instruction that is
414     // identical to C.
415     for (unsigned i = 0, e = deps.size(); i != e; ++i) {
416       const NonLocalDepEntry *I = &deps[i];
417       if (I->getResult().isNonLocal())
418         continue;
419 
420       // We don't handle non-definitions.  If we already have a call, reject
421       // instruction dependencies.
422       if (!I->getResult().isDef() || cdep != nullptr) {
423         cdep = nullptr;
424         break;
425       }
426 
427       CallInst *NonLocalDepCall = dyn_cast<CallInst>(I->getResult().getInst());
428       // FIXME: All duplicated with non-local case.
429       if (NonLocalDepCall && DT->properlyDominates(I->getBB(), C->getParent())){
430         cdep = NonLocalDepCall;
431         continue;
432       }
433 
434       cdep = nullptr;
435       break;
436     }
437 
438     if (!cdep) {
439       valueNumbering[C] = nextValueNumber;
440       return nextValueNumber++;
441     }
442 
443     if (cdep->getNumArgOperands() != C->getNumArgOperands()) {
444       valueNumbering[C] = nextValueNumber;
445       return nextValueNumber++;
446     }
447     for (unsigned i = 0, e = C->getNumArgOperands(); i < e; ++i) {
448       uint32_t c_vn = lookupOrAdd(C->getArgOperand(i));
449       uint32_t cd_vn = lookupOrAdd(cdep->getArgOperand(i));
450       if (c_vn != cd_vn) {
451         valueNumbering[C] = nextValueNumber;
452         return nextValueNumber++;
453       }
454     }
455 
456     uint32_t v = lookupOrAdd(cdep);
457     valueNumbering[C] = v;
458     return v;
459 
460   } else {
461     valueNumbering[C] = nextValueNumber;
462     return nextValueNumber++;
463   }
464 }
465 
466 /// Returns true if a value number exists for the specified value.
467 bool GVN::ValueTable::exists(Value *V) const { return valueNumbering.count(V) != 0; }
468 
469 /// lookup_or_add - Returns the value number for the specified value, assigning
470 /// it a new number if it did not have one before.
471 uint32_t GVN::ValueTable::lookupOrAdd(Value *V) {
472   DenseMap<Value*, uint32_t>::iterator VI = valueNumbering.find(V);
473   if (VI != valueNumbering.end())
474     return VI->second;
475 
476   if (!isa<Instruction>(V)) {
477     valueNumbering[V] = nextValueNumber;
478     return nextValueNumber++;
479   }
480 
481   Instruction* I = cast<Instruction>(V);
482   Expression exp;
483   switch (I->getOpcode()) {
484     case Instruction::Call:
485       return lookupOrAddCall(cast<CallInst>(I));
486     case Instruction::Add:
487     case Instruction::FAdd:
488     case Instruction::Sub:
489     case Instruction::FSub:
490     case Instruction::Mul:
491     case Instruction::FMul:
492     case Instruction::UDiv:
493     case Instruction::SDiv:
494     case Instruction::FDiv:
495     case Instruction::URem:
496     case Instruction::SRem:
497     case Instruction::FRem:
498     case Instruction::Shl:
499     case Instruction::LShr:
500     case Instruction::AShr:
501     case Instruction::And:
502     case Instruction::Or:
503     case Instruction::Xor:
504     case Instruction::ICmp:
505     case Instruction::FCmp:
506     case Instruction::Trunc:
507     case Instruction::ZExt:
508     case Instruction::SExt:
509     case Instruction::FPToUI:
510     case Instruction::FPToSI:
511     case Instruction::UIToFP:
512     case Instruction::SIToFP:
513     case Instruction::FPTrunc:
514     case Instruction::FPExt:
515     case Instruction::PtrToInt:
516     case Instruction::IntToPtr:
517     case Instruction::BitCast:
518     case Instruction::Select:
519     case Instruction::ExtractElement:
520     case Instruction::InsertElement:
521     case Instruction::ShuffleVector:
522     case Instruction::InsertValue:
523     case Instruction::GetElementPtr:
524       exp = createExpr(I);
525       break;
526     case Instruction::ExtractValue:
527       exp = createExtractvalueExpr(cast<ExtractValueInst>(I));
528       break;
529     default:
530       valueNumbering[V] = nextValueNumber;
531       return nextValueNumber++;
532   }
533 
534   uint32_t& e = expressionNumbering[exp];
535   if (!e) e = nextValueNumber++;
536   valueNumbering[V] = e;
537   return e;
538 }
539 
540 /// Returns the value number of the specified value. Fails if
541 /// the value has not yet been numbered.
542 uint32_t GVN::ValueTable::lookup(Value *V) const {
543   DenseMap<Value*, uint32_t>::const_iterator VI = valueNumbering.find(V);
544   assert(VI != valueNumbering.end() && "Value not numbered?");
545   return VI->second;
546 }
547 
548 /// Returns the value number of the given comparison,
549 /// assigning it a new number if it did not have one before.  Useful when
550 /// we deduced the result of a comparison, but don't immediately have an
551 /// instruction realizing that comparison to hand.
552 uint32_t GVN::ValueTable::lookupOrAddCmp(unsigned Opcode,
553                                          CmpInst::Predicate Predicate,
554                                          Value *LHS, Value *RHS) {
555   Expression exp = createCmpExpr(Opcode, Predicate, LHS, RHS);
556   uint32_t& e = expressionNumbering[exp];
557   if (!e) e = nextValueNumber++;
558   return e;
559 }
560 
561 /// Remove all entries from the ValueTable.
562 void GVN::ValueTable::clear() {
563   valueNumbering.clear();
564   expressionNumbering.clear();
565   nextValueNumber = 1;
566 }
567 
568 /// Remove a value from the value numbering.
569 void GVN::ValueTable::erase(Value *V) {
570   valueNumbering.erase(V);
571 }
572 
573 /// verifyRemoved - Verify that the value is removed from all internal data
574 /// structures.
575 void GVN::ValueTable::verifyRemoved(const Value *V) const {
576   for (DenseMap<Value*, uint32_t>::const_iterator
577          I = valueNumbering.begin(), E = valueNumbering.end(); I != E; ++I) {
578     assert(I->first != V && "Inst still occurs in value numbering map!");
579   }
580 }
581 
582 //===----------------------------------------------------------------------===//
583 //                                GVN Pass
584 //===----------------------------------------------------------------------===//
585 
586 PreservedAnalyses GVN::run(Function &F, AnalysisManager<Function> &AM) {
587   // FIXME: The order of evaluation of these 'getResult' calls is very
588   // significant! Re-ordering these variables will cause GVN when run alone to
589   // be less effective! We should fix memdep and basic-aa to not exhibit this
590   // behavior, but until then don't change the order here.
591   auto &AC = AM.getResult<AssumptionAnalysis>(F);
592   auto &DT = AM.getResult<DominatorTreeAnalysis>(F);
593   auto &TLI = AM.getResult<TargetLibraryAnalysis>(F);
594   auto &AA = AM.getResult<AAManager>(F);
595   auto &MemDep = AM.getResult<MemoryDependenceAnalysis>(F);
596   bool Changed = runImpl(F, AC, DT, TLI, AA, &MemDep);
597   return Changed ? PreservedAnalyses::none() : PreservedAnalyses::all();
598 }
599 
600 #if !defined(NDEBUG) || defined(LLVM_ENABLE_DUMP)
601 void GVN::dump(DenseMap<uint32_t, Value*>& d) {
602   errs() << "{\n";
603   for (DenseMap<uint32_t, Value*>::iterator I = d.begin(),
604        E = d.end(); I != E; ++I) {
605       errs() << I->first << "\n";
606       I->second->dump();
607   }
608   errs() << "}\n";
609 }
610 #endif
611 
612 /// Return true if we can prove that the value
613 /// we're analyzing is fully available in the specified block.  As we go, keep
614 /// track of which blocks we know are fully alive in FullyAvailableBlocks.  This
615 /// map is actually a tri-state map with the following values:
616 ///   0) we know the block *is not* fully available.
617 ///   1) we know the block *is* fully available.
618 ///   2) we do not know whether the block is fully available or not, but we are
619 ///      currently speculating that it will be.
620 ///   3) we are speculating for this block and have used that to speculate for
621 ///      other blocks.
622 static bool IsValueFullyAvailableInBlock(BasicBlock *BB,
623                             DenseMap<BasicBlock*, char> &FullyAvailableBlocks,
624                             uint32_t RecurseDepth) {
625   if (RecurseDepth > MaxRecurseDepth)
626     return false;
627 
628   // Optimistically assume that the block is fully available and check to see
629   // if we already know about this block in one lookup.
630   std::pair<DenseMap<BasicBlock*, char>::iterator, char> IV =
631     FullyAvailableBlocks.insert(std::make_pair(BB, 2));
632 
633   // If the entry already existed for this block, return the precomputed value.
634   if (!IV.second) {
635     // If this is a speculative "available" value, mark it as being used for
636     // speculation of other blocks.
637     if (IV.first->second == 2)
638       IV.first->second = 3;
639     return IV.first->second != 0;
640   }
641 
642   // Otherwise, see if it is fully available in all predecessors.
643   pred_iterator PI = pred_begin(BB), PE = pred_end(BB);
644 
645   // If this block has no predecessors, it isn't live-in here.
646   if (PI == PE)
647     goto SpeculationFailure;
648 
649   for (; PI != PE; ++PI)
650     // If the value isn't fully available in one of our predecessors, then it
651     // isn't fully available in this block either.  Undo our previous
652     // optimistic assumption and bail out.
653     if (!IsValueFullyAvailableInBlock(*PI, FullyAvailableBlocks,RecurseDepth+1))
654       goto SpeculationFailure;
655 
656   return true;
657 
658 // If we get here, we found out that this is not, after
659 // all, a fully-available block.  We have a problem if we speculated on this and
660 // used the speculation to mark other blocks as available.
661 SpeculationFailure:
662   char &BBVal = FullyAvailableBlocks[BB];
663 
664   // If we didn't speculate on this, just return with it set to false.
665   if (BBVal == 2) {
666     BBVal = 0;
667     return false;
668   }
669 
670   // If we did speculate on this value, we could have blocks set to 1 that are
671   // incorrect.  Walk the (transitive) successors of this block and mark them as
672   // 0 if set to one.
673   SmallVector<BasicBlock*, 32> BBWorklist;
674   BBWorklist.push_back(BB);
675 
676   do {
677     BasicBlock *Entry = BBWorklist.pop_back_val();
678     // Note that this sets blocks to 0 (unavailable) if they happen to not
679     // already be in FullyAvailableBlocks.  This is safe.
680     char &EntryVal = FullyAvailableBlocks[Entry];
681     if (EntryVal == 0) continue;  // Already unavailable.
682 
683     // Mark as unavailable.
684     EntryVal = 0;
685 
686     BBWorklist.append(succ_begin(Entry), succ_end(Entry));
687   } while (!BBWorklist.empty());
688 
689   return false;
690 }
691 
692 
693 /// Return true if CoerceAvailableValueToLoadType will succeed.
694 static bool CanCoerceMustAliasedValueToLoad(Value *StoredVal,
695                                             Type *LoadTy,
696                                             const DataLayout &DL) {
697   // If the loaded or stored value is an first class array or struct, don't try
698   // to transform them.  We need to be able to bitcast to integer.
699   if (LoadTy->isStructTy() || LoadTy->isArrayTy() ||
700       StoredVal->getType()->isStructTy() ||
701       StoredVal->getType()->isArrayTy())
702     return false;
703 
704   // The store has to be at least as big as the load.
705   if (DL.getTypeSizeInBits(StoredVal->getType()) <
706         DL.getTypeSizeInBits(LoadTy))
707     return false;
708 
709   return true;
710 }
711 
712 /// If we saw a store of a value to memory, and
713 /// then a load from a must-aliased pointer of a different type, try to coerce
714 /// the stored value.  LoadedTy is the type of the load we want to replace.
715 /// IRB is IRBuilder used to insert new instructions.
716 ///
717 /// If we can't do it, return null.
718 static Value *CoerceAvailableValueToLoadType(Value *StoredVal, Type *LoadedTy,
719                                              IRBuilder<> &IRB,
720                                              const DataLayout &DL) {
721   assert(CanCoerceMustAliasedValueToLoad(StoredVal, LoadedTy, DL) &&
722          "precondition violation - materialization can't fail");
723 
724   // If this is already the right type, just return it.
725   Type *StoredValTy = StoredVal->getType();
726 
727   uint64_t StoredValSize = DL.getTypeSizeInBits(StoredValTy);
728   uint64_t LoadedValSize = DL.getTypeSizeInBits(LoadedTy);
729 
730   // If the store and reload are the same size, we can always reuse it.
731   if (StoredValSize == LoadedValSize) {
732     // Pointer to Pointer -> use bitcast.
733     if (StoredValTy->getScalarType()->isPointerTy() &&
734         LoadedTy->getScalarType()->isPointerTy())
735       return IRB.CreateBitCast(StoredVal, LoadedTy);
736 
737     // Convert source pointers to integers, which can be bitcast.
738     if (StoredValTy->getScalarType()->isPointerTy()) {
739       StoredValTy = DL.getIntPtrType(StoredValTy);
740       StoredVal = IRB.CreatePtrToInt(StoredVal, StoredValTy);
741     }
742 
743     Type *TypeToCastTo = LoadedTy;
744     if (TypeToCastTo->getScalarType()->isPointerTy())
745       TypeToCastTo = DL.getIntPtrType(TypeToCastTo);
746 
747     if (StoredValTy != TypeToCastTo)
748       StoredVal = IRB.CreateBitCast(StoredVal, TypeToCastTo);
749 
750     // Cast to pointer if the load needs a pointer type.
751     if (LoadedTy->getScalarType()->isPointerTy())
752       StoredVal = IRB.CreateIntToPtr(StoredVal, LoadedTy);
753 
754     return StoredVal;
755   }
756 
757   // If the loaded value is smaller than the available value, then we can
758   // extract out a piece from it.  If the available value is too small, then we
759   // can't do anything.
760   assert(StoredValSize >= LoadedValSize &&
761          "CanCoerceMustAliasedValueToLoad fail");
762 
763   // Convert source pointers to integers, which can be manipulated.
764   if (StoredValTy->getScalarType()->isPointerTy()) {
765     StoredValTy = DL.getIntPtrType(StoredValTy);
766     StoredVal = IRB.CreatePtrToInt(StoredVal, StoredValTy);
767   }
768 
769   // Convert vectors and fp to integer, which can be manipulated.
770   if (!StoredValTy->isIntegerTy()) {
771     StoredValTy = IntegerType::get(StoredValTy->getContext(), StoredValSize);
772     StoredVal = IRB.CreateBitCast(StoredVal, StoredValTy);
773   }
774 
775   // If this is a big-endian system, we need to shift the value down to the low
776   // bits so that a truncate will work.
777   if (DL.isBigEndian()) {
778     uint64_t ShiftAmt = DL.getTypeStoreSizeInBits(StoredValTy) -
779                         DL.getTypeStoreSizeInBits(LoadedTy);
780     StoredVal = IRB.CreateLShr(StoredVal, ShiftAmt, "tmp");
781   }
782 
783   // Truncate the integer to the right size now.
784   Type *NewIntTy = IntegerType::get(StoredValTy->getContext(), LoadedValSize);
785   StoredVal  = IRB.CreateTrunc(StoredVal, NewIntTy, "trunc");
786 
787   if (LoadedTy == NewIntTy)
788     return StoredVal;
789 
790   // If the result is a pointer, inttoptr.
791   if (LoadedTy->getScalarType()->isPointerTy())
792     return IRB.CreateIntToPtr(StoredVal, LoadedTy, "inttoptr");
793 
794   // Otherwise, bitcast.
795   return IRB.CreateBitCast(StoredVal, LoadedTy, "bitcast");
796 }
797 
798 /// This function is called when we have a
799 /// memdep query of a load that ends up being a clobbering memory write (store,
800 /// memset, memcpy, memmove).  This means that the write *may* provide bits used
801 /// by the load but we can't be sure because the pointers don't mustalias.
802 ///
803 /// Check this case to see if there is anything more we can do before we give
804 /// up.  This returns -1 if we have to give up, or a byte number in the stored
805 /// value of the piece that feeds the load.
806 static int AnalyzeLoadFromClobberingWrite(Type *LoadTy, Value *LoadPtr,
807                                           Value *WritePtr,
808                                           uint64_t WriteSizeInBits,
809                                           const DataLayout &DL) {
810   // If the loaded or stored value is a first class array or struct, don't try
811   // to transform them.  We need to be able to bitcast to integer.
812   if (LoadTy->isStructTy() || LoadTy->isArrayTy())
813     return -1;
814 
815   int64_t StoreOffset = 0, LoadOffset = 0;
816   Value *StoreBase =
817       GetPointerBaseWithConstantOffset(WritePtr, StoreOffset, DL);
818   Value *LoadBase = GetPointerBaseWithConstantOffset(LoadPtr, LoadOffset, DL);
819   if (StoreBase != LoadBase)
820     return -1;
821 
822   // If the load and store are to the exact same address, they should have been
823   // a must alias.  AA must have gotten confused.
824   // FIXME: Study to see if/when this happens.  One case is forwarding a memset
825   // to a load from the base of the memset.
826 #if 0
827   if (LoadOffset == StoreOffset) {
828     dbgs() << "STORE/LOAD DEP WITH COMMON POINTER MISSED:\n"
829     << "Base       = " << *StoreBase << "\n"
830     << "Store Ptr  = " << *WritePtr << "\n"
831     << "Store Offs = " << StoreOffset << "\n"
832     << "Load Ptr   = " << *LoadPtr << "\n";
833     abort();
834   }
835 #endif
836 
837   // If the load and store don't overlap at all, the store doesn't provide
838   // anything to the load.  In this case, they really don't alias at all, AA
839   // must have gotten confused.
840   uint64_t LoadSize = DL.getTypeSizeInBits(LoadTy);
841 
842   if ((WriteSizeInBits & 7) | (LoadSize & 7))
843     return -1;
844   uint64_t StoreSize = WriteSizeInBits >> 3;  // Convert to bytes.
845   LoadSize >>= 3;
846 
847 
848   bool isAAFailure = false;
849   if (StoreOffset < LoadOffset)
850     isAAFailure = StoreOffset+int64_t(StoreSize) <= LoadOffset;
851   else
852     isAAFailure = LoadOffset+int64_t(LoadSize) <= StoreOffset;
853 
854   if (isAAFailure) {
855 #if 0
856     dbgs() << "STORE LOAD DEP WITH COMMON BASE:\n"
857     << "Base       = " << *StoreBase << "\n"
858     << "Store Ptr  = " << *WritePtr << "\n"
859     << "Store Offs = " << StoreOffset << "\n"
860     << "Load Ptr   = " << *LoadPtr << "\n";
861     abort();
862 #endif
863     return -1;
864   }
865 
866   // If the Load isn't completely contained within the stored bits, we don't
867   // have all the bits to feed it.  We could do something crazy in the future
868   // (issue a smaller load then merge the bits in) but this seems unlikely to be
869   // valuable.
870   if (StoreOffset > LoadOffset ||
871       StoreOffset+StoreSize < LoadOffset+LoadSize)
872     return -1;
873 
874   // Okay, we can do this transformation.  Return the number of bytes into the
875   // store that the load is.
876   return LoadOffset-StoreOffset;
877 }
878 
879 /// This function is called when we have a
880 /// memdep query of a load that ends up being a clobbering store.
881 static int AnalyzeLoadFromClobberingStore(Type *LoadTy, Value *LoadPtr,
882                                           StoreInst *DepSI) {
883   // Cannot handle reading from store of first-class aggregate yet.
884   if (DepSI->getValueOperand()->getType()->isStructTy() ||
885       DepSI->getValueOperand()->getType()->isArrayTy())
886     return -1;
887 
888   const DataLayout &DL = DepSI->getModule()->getDataLayout();
889   Value *StorePtr = DepSI->getPointerOperand();
890   uint64_t StoreSize =DL.getTypeSizeInBits(DepSI->getValueOperand()->getType());
891   return AnalyzeLoadFromClobberingWrite(LoadTy, LoadPtr,
892                                         StorePtr, StoreSize, DL);
893 }
894 
895 /// This function is called when we have a
896 /// memdep query of a load that ends up being clobbered by another load.  See if
897 /// the other load can feed into the second load.
898 static int AnalyzeLoadFromClobberingLoad(Type *LoadTy, Value *LoadPtr,
899                                          LoadInst *DepLI, const DataLayout &DL){
900   // Cannot handle reading from store of first-class aggregate yet.
901   if (DepLI->getType()->isStructTy() || DepLI->getType()->isArrayTy())
902     return -1;
903 
904   Value *DepPtr = DepLI->getPointerOperand();
905   uint64_t DepSize = DL.getTypeSizeInBits(DepLI->getType());
906   int R = AnalyzeLoadFromClobberingWrite(LoadTy, LoadPtr, DepPtr, DepSize, DL);
907   if (R != -1) return R;
908 
909   // If we have a load/load clobber an DepLI can be widened to cover this load,
910   // then we should widen it!
911   int64_t LoadOffs = 0;
912   const Value *LoadBase =
913       GetPointerBaseWithConstantOffset(LoadPtr, LoadOffs, DL);
914   unsigned LoadSize = DL.getTypeStoreSize(LoadTy);
915 
916   unsigned Size = MemoryDependenceResults::getLoadLoadClobberFullWidthSize(
917       LoadBase, LoadOffs, LoadSize, DepLI);
918   if (Size == 0) return -1;
919 
920   // Check non-obvious conditions enforced by MDA which we rely on for being
921   // able to materialize this potentially available value
922   assert(DepLI->isSimple() && "Cannot widen volatile/atomic load!");
923   assert(DepLI->getType()->isIntegerTy() && "Can't widen non-integer load");
924 
925   return AnalyzeLoadFromClobberingWrite(LoadTy, LoadPtr, DepPtr, Size*8, DL);
926 }
927 
928 
929 
930 static int AnalyzeLoadFromClobberingMemInst(Type *LoadTy, Value *LoadPtr,
931                                             MemIntrinsic *MI,
932                                             const DataLayout &DL) {
933   // If the mem operation is a non-constant size, we can't handle it.
934   ConstantInt *SizeCst = dyn_cast<ConstantInt>(MI->getLength());
935   if (!SizeCst) return -1;
936   uint64_t MemSizeInBits = SizeCst->getZExtValue()*8;
937 
938   // If this is memset, we just need to see if the offset is valid in the size
939   // of the memset..
940   if (MI->getIntrinsicID() == Intrinsic::memset)
941     return AnalyzeLoadFromClobberingWrite(LoadTy, LoadPtr, MI->getDest(),
942                                           MemSizeInBits, DL);
943 
944   // If we have a memcpy/memmove, the only case we can handle is if this is a
945   // copy from constant memory.  In that case, we can read directly from the
946   // constant memory.
947   MemTransferInst *MTI = cast<MemTransferInst>(MI);
948 
949   Constant *Src = dyn_cast<Constant>(MTI->getSource());
950   if (!Src) return -1;
951 
952   GlobalVariable *GV = dyn_cast<GlobalVariable>(GetUnderlyingObject(Src, DL));
953   if (!GV || !GV->isConstant()) return -1;
954 
955   // See if the access is within the bounds of the transfer.
956   int Offset = AnalyzeLoadFromClobberingWrite(LoadTy, LoadPtr,
957                                               MI->getDest(), MemSizeInBits, DL);
958   if (Offset == -1)
959     return Offset;
960 
961   unsigned AS = Src->getType()->getPointerAddressSpace();
962   // Otherwise, see if we can constant fold a load from the constant with the
963   // offset applied as appropriate.
964   Src = ConstantExpr::getBitCast(Src,
965                                  Type::getInt8PtrTy(Src->getContext(), AS));
966   Constant *OffsetCst =
967     ConstantInt::get(Type::getInt64Ty(Src->getContext()), (unsigned)Offset);
968   Src = ConstantExpr::getGetElementPtr(Type::getInt8Ty(Src->getContext()), Src,
969                                        OffsetCst);
970   Src = ConstantExpr::getBitCast(Src, PointerType::get(LoadTy, AS));
971   if (ConstantFoldLoadFromConstPtr(Src, LoadTy, DL))
972     return Offset;
973   return -1;
974 }
975 
976 
977 /// This function is called when we have a
978 /// memdep query of a load that ends up being a clobbering store.  This means
979 /// that the store provides bits used by the load but we the pointers don't
980 /// mustalias.  Check this case to see if there is anything more we can do
981 /// before we give up.
982 static Value *GetStoreValueForLoad(Value *SrcVal, unsigned Offset,
983                                    Type *LoadTy,
984                                    Instruction *InsertPt, const DataLayout &DL){
985   LLVMContext &Ctx = SrcVal->getType()->getContext();
986 
987   uint64_t StoreSize = (DL.getTypeSizeInBits(SrcVal->getType()) + 7) / 8;
988   uint64_t LoadSize = (DL.getTypeSizeInBits(LoadTy) + 7) / 8;
989 
990   IRBuilder<> Builder(InsertPt);
991 
992   // Compute which bits of the stored value are being used by the load.  Convert
993   // to an integer type to start with.
994   if (SrcVal->getType()->getScalarType()->isPointerTy())
995     SrcVal = Builder.CreatePtrToInt(SrcVal,
996         DL.getIntPtrType(SrcVal->getType()));
997   if (!SrcVal->getType()->isIntegerTy())
998     SrcVal = Builder.CreateBitCast(SrcVal, IntegerType::get(Ctx, StoreSize*8));
999 
1000   // Shift the bits to the least significant depending on endianness.
1001   unsigned ShiftAmt;
1002   if (DL.isLittleEndian())
1003     ShiftAmt = Offset*8;
1004   else
1005     ShiftAmt = (StoreSize-LoadSize-Offset)*8;
1006 
1007   if (ShiftAmt)
1008     SrcVal = Builder.CreateLShr(SrcVal, ShiftAmt);
1009 
1010   if (LoadSize != StoreSize)
1011     SrcVal = Builder.CreateTrunc(SrcVal, IntegerType::get(Ctx, LoadSize*8));
1012 
1013   return CoerceAvailableValueToLoadType(SrcVal, LoadTy, Builder, DL);
1014 }
1015 
1016 /// This function is called when we have a
1017 /// memdep query of a load that ends up being a clobbering load.  This means
1018 /// that the load *may* provide bits used by the load but we can't be sure
1019 /// because the pointers don't mustalias.  Check this case to see if there is
1020 /// anything more we can do before we give up.
1021 static Value *GetLoadValueForLoad(LoadInst *SrcVal, unsigned Offset,
1022                                   Type *LoadTy, Instruction *InsertPt,
1023                                   GVN &gvn) {
1024   const DataLayout &DL = SrcVal->getModule()->getDataLayout();
1025   // If Offset+LoadTy exceeds the size of SrcVal, then we must be wanting to
1026   // widen SrcVal out to a larger load.
1027   unsigned SrcValStoreSize = DL.getTypeStoreSize(SrcVal->getType());
1028   unsigned LoadSize = DL.getTypeStoreSize(LoadTy);
1029   if (Offset+LoadSize > SrcValStoreSize) {
1030     assert(SrcVal->isSimple() && "Cannot widen volatile/atomic load!");
1031     assert(SrcVal->getType()->isIntegerTy() && "Can't widen non-integer load");
1032     // If we have a load/load clobber an DepLI can be widened to cover this
1033     // load, then we should widen it to the next power of 2 size big enough!
1034     unsigned NewLoadSize = Offset+LoadSize;
1035     if (!isPowerOf2_32(NewLoadSize))
1036       NewLoadSize = NextPowerOf2(NewLoadSize);
1037 
1038     Value *PtrVal = SrcVal->getPointerOperand();
1039 
1040     // Insert the new load after the old load.  This ensures that subsequent
1041     // memdep queries will find the new load.  We can't easily remove the old
1042     // load completely because it is already in the value numbering table.
1043     IRBuilder<> Builder(SrcVal->getParent(), ++BasicBlock::iterator(SrcVal));
1044     Type *DestPTy =
1045       IntegerType::get(LoadTy->getContext(), NewLoadSize*8);
1046     DestPTy = PointerType::get(DestPTy,
1047                                PtrVal->getType()->getPointerAddressSpace());
1048     Builder.SetCurrentDebugLocation(SrcVal->getDebugLoc());
1049     PtrVal = Builder.CreateBitCast(PtrVal, DestPTy);
1050     LoadInst *NewLoad = Builder.CreateLoad(PtrVal);
1051     NewLoad->takeName(SrcVal);
1052     NewLoad->setAlignment(SrcVal->getAlignment());
1053 
1054     DEBUG(dbgs() << "GVN WIDENED LOAD: " << *SrcVal << "\n");
1055     DEBUG(dbgs() << "TO: " << *NewLoad << "\n");
1056 
1057     // Replace uses of the original load with the wider load.  On a big endian
1058     // system, we need to shift down to get the relevant bits.
1059     Value *RV = NewLoad;
1060     if (DL.isBigEndian())
1061       RV = Builder.CreateLShr(RV, (NewLoadSize - SrcValStoreSize) * 8);
1062     RV = Builder.CreateTrunc(RV, SrcVal->getType());
1063     SrcVal->replaceAllUsesWith(RV);
1064 
1065     // We would like to use gvn.markInstructionForDeletion here, but we can't
1066     // because the load is already memoized into the leader map table that GVN
1067     // tracks.  It is potentially possible to remove the load from the table,
1068     // but then there all of the operations based on it would need to be
1069     // rehashed.  Just leave the dead load around.
1070     gvn.getMemDep().removeInstruction(SrcVal);
1071     SrcVal = NewLoad;
1072   }
1073 
1074   return GetStoreValueForLoad(SrcVal, Offset, LoadTy, InsertPt, DL);
1075 }
1076 
1077 
1078 /// This function is called when we have a
1079 /// memdep query of a load that ends up being a clobbering mem intrinsic.
1080 static Value *GetMemInstValueForLoad(MemIntrinsic *SrcInst, unsigned Offset,
1081                                      Type *LoadTy, Instruction *InsertPt,
1082                                      const DataLayout &DL){
1083   LLVMContext &Ctx = LoadTy->getContext();
1084   uint64_t LoadSize = DL.getTypeSizeInBits(LoadTy)/8;
1085 
1086   IRBuilder<> Builder(InsertPt);
1087 
1088   // We know that this method is only called when the mem transfer fully
1089   // provides the bits for the load.
1090   if (MemSetInst *MSI = dyn_cast<MemSetInst>(SrcInst)) {
1091     // memset(P, 'x', 1234) -> splat('x'), even if x is a variable, and
1092     // independently of what the offset is.
1093     Value *Val = MSI->getValue();
1094     if (LoadSize != 1)
1095       Val = Builder.CreateZExt(Val, IntegerType::get(Ctx, LoadSize*8));
1096 
1097     Value *OneElt = Val;
1098 
1099     // Splat the value out to the right number of bits.
1100     for (unsigned NumBytesSet = 1; NumBytesSet != LoadSize; ) {
1101       // If we can double the number of bytes set, do it.
1102       if (NumBytesSet*2 <= LoadSize) {
1103         Value *ShVal = Builder.CreateShl(Val, NumBytesSet*8);
1104         Val = Builder.CreateOr(Val, ShVal);
1105         NumBytesSet <<= 1;
1106         continue;
1107       }
1108 
1109       // Otherwise insert one byte at a time.
1110       Value *ShVal = Builder.CreateShl(Val, 1*8);
1111       Val = Builder.CreateOr(OneElt, ShVal);
1112       ++NumBytesSet;
1113     }
1114 
1115     return CoerceAvailableValueToLoadType(Val, LoadTy, Builder, DL);
1116   }
1117 
1118   // Otherwise, this is a memcpy/memmove from a constant global.
1119   MemTransferInst *MTI = cast<MemTransferInst>(SrcInst);
1120   Constant *Src = cast<Constant>(MTI->getSource());
1121   unsigned AS = Src->getType()->getPointerAddressSpace();
1122 
1123   // Otherwise, see if we can constant fold a load from the constant with the
1124   // offset applied as appropriate.
1125   Src = ConstantExpr::getBitCast(Src,
1126                                  Type::getInt8PtrTy(Src->getContext(), AS));
1127   Constant *OffsetCst =
1128     ConstantInt::get(Type::getInt64Ty(Src->getContext()), (unsigned)Offset);
1129   Src = ConstantExpr::getGetElementPtr(Type::getInt8Ty(Src->getContext()), Src,
1130                                        OffsetCst);
1131   Src = ConstantExpr::getBitCast(Src, PointerType::get(LoadTy, AS));
1132   return ConstantFoldLoadFromConstPtr(Src, LoadTy, DL);
1133 }
1134 
1135 
1136 /// Given a set of loads specified by ValuesPerBlock,
1137 /// construct SSA form, allowing us to eliminate LI.  This returns the value
1138 /// that should be used at LI's definition site.
1139 static Value *ConstructSSAForLoadSet(LoadInst *LI,
1140                          SmallVectorImpl<AvailableValueInBlock> &ValuesPerBlock,
1141                                      GVN &gvn) {
1142   // Check for the fully redundant, dominating load case.  In this case, we can
1143   // just use the dominating value directly.
1144   if (ValuesPerBlock.size() == 1 &&
1145       gvn.getDominatorTree().properlyDominates(ValuesPerBlock[0].BB,
1146                                                LI->getParent())) {
1147     assert(!ValuesPerBlock[0].AV.isUndefValue() &&
1148            "Dead BB dominate this block");
1149     return ValuesPerBlock[0].MaterializeAdjustedValue(LI, gvn);
1150   }
1151 
1152   // Otherwise, we have to construct SSA form.
1153   SmallVector<PHINode*, 8> NewPHIs;
1154   SSAUpdater SSAUpdate(&NewPHIs);
1155   SSAUpdate.Initialize(LI->getType(), LI->getName());
1156 
1157   for (const AvailableValueInBlock &AV : ValuesPerBlock) {
1158     BasicBlock *BB = AV.BB;
1159 
1160     if (SSAUpdate.HasValueForBlock(BB))
1161       continue;
1162 
1163     SSAUpdate.AddAvailableValue(BB, AV.MaterializeAdjustedValue(LI, gvn));
1164   }
1165 
1166   // Perform PHI construction.
1167   return SSAUpdate.GetValueInMiddleOfBlock(LI->getParent());
1168 }
1169 
1170 Value *AvailableValue::MaterializeAdjustedValue(LoadInst *LI,
1171                                                 Instruction *InsertPt,
1172                                                 GVN &gvn) const {
1173   Value *Res;
1174   Type *LoadTy = LI->getType();
1175   const DataLayout &DL = LI->getModule()->getDataLayout();
1176   if (isSimpleValue()) {
1177     Res = getSimpleValue();
1178     if (Res->getType() != LoadTy) {
1179       Res = GetStoreValueForLoad(Res, Offset, LoadTy, InsertPt, DL);
1180 
1181       DEBUG(dbgs() << "GVN COERCED NONLOCAL VAL:\nOffset: " << Offset << "  "
1182                    << *getSimpleValue() << '\n'
1183                    << *Res << '\n' << "\n\n\n");
1184     }
1185   } else if (isCoercedLoadValue()) {
1186     LoadInst *Load = getCoercedLoadValue();
1187     if (Load->getType() == LoadTy && Offset == 0) {
1188       Res = Load;
1189     } else {
1190       Res = GetLoadValueForLoad(Load, Offset, LoadTy, InsertPt, gvn);
1191 
1192       DEBUG(dbgs() << "GVN COERCED NONLOCAL LOAD:\nOffset: " << Offset << "  "
1193                    << *getCoercedLoadValue() << '\n'
1194                    << *Res << '\n' << "\n\n\n");
1195     }
1196   } else if (isMemIntrinValue()) {
1197     Res = GetMemInstValueForLoad(getMemIntrinValue(), Offset, LoadTy,
1198                                  InsertPt, DL);
1199     DEBUG(dbgs() << "GVN COERCED NONLOCAL MEM INTRIN:\nOffset: " << Offset
1200                  << "  " << *getMemIntrinValue() << '\n'
1201                  << *Res << '\n' << "\n\n\n");
1202   } else {
1203     assert(isUndefValue() && "Should be UndefVal");
1204     DEBUG(dbgs() << "GVN COERCED NONLOCAL Undef:\n";);
1205     return UndefValue::get(LoadTy);
1206   }
1207   assert(Res && "failed to materialize?");
1208   return Res;
1209 }
1210 
1211 static bool isLifetimeStart(const Instruction *Inst) {
1212   if (const IntrinsicInst* II = dyn_cast<IntrinsicInst>(Inst))
1213     return II->getIntrinsicID() == Intrinsic::lifetime_start;
1214   return false;
1215 }
1216 
1217 bool GVN::AnalyzeLoadAvailability(LoadInst *LI, MemDepResult DepInfo,
1218                                   Value *Address, AvailableValue &Res) {
1219 
1220   assert((DepInfo.isDef() || DepInfo.isClobber()) &&
1221          "expected a local dependence");
1222   assert(LI->isUnordered() && "rules below are incorrect for ordered access");
1223 
1224   const DataLayout &DL = LI->getModule()->getDataLayout();
1225 
1226   if (DepInfo.isClobber()) {
1227     // If the dependence is to a store that writes to a superset of the bits
1228     // read by the load, we can extract the bits we need for the load from the
1229     // stored value.
1230     if (StoreInst *DepSI = dyn_cast<StoreInst>(DepInfo.getInst())) {
1231       // Can't forward from non-atomic to atomic without violating memory model.
1232       if (Address && LI->isAtomic() <= DepSI->isAtomic()) {
1233         int Offset =
1234           AnalyzeLoadFromClobberingStore(LI->getType(), Address, DepSI);
1235         if (Offset != -1) {
1236           Res = AvailableValue::get(DepSI->getValueOperand(), Offset);
1237           return true;
1238         }
1239       }
1240     }
1241 
1242     // Check to see if we have something like this:
1243     //    load i32* P
1244     //    load i8* (P+1)
1245     // if we have this, replace the later with an extraction from the former.
1246     if (LoadInst *DepLI = dyn_cast<LoadInst>(DepInfo.getInst())) {
1247       // If this is a clobber and L is the first instruction in its block, then
1248       // we have the first instruction in the entry block.
1249       // Can't forward from non-atomic to atomic without violating memory model.
1250       if (DepLI != LI && Address && LI->isAtomic() <= DepLI->isAtomic()) {
1251         int Offset =
1252           AnalyzeLoadFromClobberingLoad(LI->getType(), Address, DepLI, DL);
1253 
1254         if (Offset != -1) {
1255           Res = AvailableValue::getLoad(DepLI, Offset);
1256           return true;
1257         }
1258       }
1259     }
1260 
1261     // If the clobbering value is a memset/memcpy/memmove, see if we can
1262     // forward a value on from it.
1263     if (MemIntrinsic *DepMI = dyn_cast<MemIntrinsic>(DepInfo.getInst())) {
1264       if (Address && !LI->isAtomic()) {
1265         int Offset = AnalyzeLoadFromClobberingMemInst(LI->getType(), Address,
1266                                                       DepMI, DL);
1267         if (Offset != -1) {
1268           Res = AvailableValue::getMI(DepMI, Offset);
1269           return true;
1270         }
1271       }
1272     }
1273     // Nothing known about this clobber, have to be conservative
1274     DEBUG(
1275       // fast print dep, using operator<< on instruction is too slow.
1276       dbgs() << "GVN: load ";
1277       LI->printAsOperand(dbgs());
1278       Instruction *I = DepInfo.getInst();
1279       dbgs() << " is clobbered by " << *I << '\n';
1280     );
1281     return false;
1282   }
1283   assert(DepInfo.isDef() && "follows from above");
1284 
1285   Instruction *DepInst = DepInfo.getInst();
1286 
1287   // Loading the allocation -> undef.
1288   if (isa<AllocaInst>(DepInst) || isMallocLikeFn(DepInst, TLI) ||
1289       // Loading immediately after lifetime begin -> undef.
1290       isLifetimeStart(DepInst)) {
1291     Res = AvailableValue::get(UndefValue::get(LI->getType()));
1292     return true;
1293   }
1294 
1295   // Loading from calloc (which zero initializes memory) -> zero
1296   if (isCallocLikeFn(DepInst, TLI)) {
1297     Res = AvailableValue::get(Constant::getNullValue(LI->getType()));
1298     return true;
1299   }
1300 
1301   if (StoreInst *S = dyn_cast<StoreInst>(DepInst)) {
1302     // Reject loads and stores that are to the same address but are of
1303     // different types if we have to. If the stored value is larger or equal to
1304     // the loaded value, we can reuse it.
1305     if (S->getValueOperand()->getType() != LI->getType() &&
1306         !CanCoerceMustAliasedValueToLoad(S->getValueOperand(),
1307                                          LI->getType(), DL))
1308       return false;
1309 
1310     // Can't forward from non-atomic to atomic without violating memory model.
1311     if (S->isAtomic() < LI->isAtomic())
1312       return false;
1313 
1314     Res = AvailableValue::get(S->getValueOperand());
1315     return true;
1316   }
1317 
1318   if (LoadInst *LD = dyn_cast<LoadInst>(DepInst)) {
1319     // If the types mismatch and we can't handle it, reject reuse of the load.
1320     // If the stored value is larger or equal to the loaded value, we can reuse
1321     // it.
1322     if (LD->getType() != LI->getType() &&
1323         !CanCoerceMustAliasedValueToLoad(LD, LI->getType(), DL))
1324       return false;
1325 
1326     // Can't forward from non-atomic to atomic without violating memory model.
1327     if (LD->isAtomic() < LI->isAtomic())
1328       return false;
1329 
1330     Res = AvailableValue::getLoad(LD);
1331     return true;
1332   }
1333 
1334   // Unknown def - must be conservative
1335   DEBUG(
1336     // fast print dep, using operator<< on instruction is too slow.
1337     dbgs() << "GVN: load ";
1338     LI->printAsOperand(dbgs());
1339     dbgs() << " has unknown def " << *DepInst << '\n';
1340   );
1341   return false;
1342 }
1343 
1344 void GVN::AnalyzeLoadAvailability(LoadInst *LI, LoadDepVect &Deps,
1345                                   AvailValInBlkVect &ValuesPerBlock,
1346                                   UnavailBlkVect &UnavailableBlocks) {
1347 
1348   // Filter out useless results (non-locals, etc).  Keep track of the blocks
1349   // where we have a value available in repl, also keep track of whether we see
1350   // dependencies that produce an unknown value for the load (such as a call
1351   // that could potentially clobber the load).
1352   unsigned NumDeps = Deps.size();
1353   for (unsigned i = 0, e = NumDeps; i != e; ++i) {
1354     BasicBlock *DepBB = Deps[i].getBB();
1355     MemDepResult DepInfo = Deps[i].getResult();
1356 
1357     if (DeadBlocks.count(DepBB)) {
1358       // Dead dependent mem-op disguise as a load evaluating the same value
1359       // as the load in question.
1360       ValuesPerBlock.push_back(AvailableValueInBlock::getUndef(DepBB));
1361       continue;
1362     }
1363 
1364     if (!DepInfo.isDef() && !DepInfo.isClobber()) {
1365       UnavailableBlocks.push_back(DepBB);
1366       continue;
1367     }
1368 
1369     // The address being loaded in this non-local block may not be the same as
1370     // the pointer operand of the load if PHI translation occurs.  Make sure
1371     // to consider the right address.
1372     Value *Address = Deps[i].getAddress();
1373 
1374     AvailableValue AV;
1375     if (AnalyzeLoadAvailability(LI, DepInfo, Address, AV)) {
1376       // subtlety: because we know this was a non-local dependency, we know
1377       // it's safe to materialize anywhere between the instruction within
1378       // DepInfo and the end of it's block.
1379       ValuesPerBlock.push_back(AvailableValueInBlock::get(DepBB,
1380                                                           std::move(AV)));
1381     } else {
1382       UnavailableBlocks.push_back(DepBB);
1383     }
1384   }
1385 
1386   assert(NumDeps == ValuesPerBlock.size() + UnavailableBlocks.size() &&
1387          "post condition violation");
1388 }
1389 
1390 bool GVN::PerformLoadPRE(LoadInst *LI, AvailValInBlkVect &ValuesPerBlock,
1391                          UnavailBlkVect &UnavailableBlocks) {
1392   // Okay, we have *some* definitions of the value.  This means that the value
1393   // is available in some of our (transitive) predecessors.  Lets think about
1394   // doing PRE of this load.  This will involve inserting a new load into the
1395   // predecessor when it's not available.  We could do this in general, but
1396   // prefer to not increase code size.  As such, we only do this when we know
1397   // that we only have to insert *one* load (which means we're basically moving
1398   // the load, not inserting a new one).
1399 
1400   SmallPtrSet<BasicBlock *, 4> Blockers(UnavailableBlocks.begin(),
1401                                         UnavailableBlocks.end());
1402 
1403   // Let's find the first basic block with more than one predecessor.  Walk
1404   // backwards through predecessors if needed.
1405   BasicBlock *LoadBB = LI->getParent();
1406   BasicBlock *TmpBB = LoadBB;
1407 
1408   while (TmpBB->getSinglePredecessor()) {
1409     TmpBB = TmpBB->getSinglePredecessor();
1410     if (TmpBB == LoadBB) // Infinite (unreachable) loop.
1411       return false;
1412     if (Blockers.count(TmpBB))
1413       return false;
1414 
1415     // If any of these blocks has more than one successor (i.e. if the edge we
1416     // just traversed was critical), then there are other paths through this
1417     // block along which the load may not be anticipated.  Hoisting the load
1418     // above this block would be adding the load to execution paths along
1419     // which it was not previously executed.
1420     if (TmpBB->getTerminator()->getNumSuccessors() != 1)
1421       return false;
1422   }
1423 
1424   assert(TmpBB);
1425   LoadBB = TmpBB;
1426 
1427   // Check to see how many predecessors have the loaded value fully
1428   // available.
1429   MapVector<BasicBlock *, Value *> PredLoads;
1430   DenseMap<BasicBlock*, char> FullyAvailableBlocks;
1431   for (const AvailableValueInBlock &AV : ValuesPerBlock)
1432     FullyAvailableBlocks[AV.BB] = true;
1433   for (BasicBlock *UnavailableBB : UnavailableBlocks)
1434     FullyAvailableBlocks[UnavailableBB] = false;
1435 
1436   SmallVector<BasicBlock *, 4> CriticalEdgePred;
1437   for (BasicBlock *Pred : predecessors(LoadBB)) {
1438     // If any predecessor block is an EH pad that does not allow non-PHI
1439     // instructions before the terminator, we can't PRE the load.
1440     if (Pred->getTerminator()->isEHPad()) {
1441       DEBUG(dbgs()
1442             << "COULD NOT PRE LOAD BECAUSE OF AN EH PAD PREDECESSOR '"
1443             << Pred->getName() << "': " << *LI << '\n');
1444       return false;
1445     }
1446 
1447     if (IsValueFullyAvailableInBlock(Pred, FullyAvailableBlocks, 0)) {
1448       continue;
1449     }
1450 
1451     if (Pred->getTerminator()->getNumSuccessors() != 1) {
1452       if (isa<IndirectBrInst>(Pred->getTerminator())) {
1453         DEBUG(dbgs() << "COULD NOT PRE LOAD BECAUSE OF INDBR CRITICAL EDGE '"
1454               << Pred->getName() << "': " << *LI << '\n');
1455         return false;
1456       }
1457 
1458       if (LoadBB->isEHPad()) {
1459         DEBUG(dbgs()
1460               << "COULD NOT PRE LOAD BECAUSE OF AN EH PAD CRITICAL EDGE '"
1461               << Pred->getName() << "': " << *LI << '\n');
1462         return false;
1463       }
1464 
1465       CriticalEdgePred.push_back(Pred);
1466     } else {
1467       // Only add the predecessors that will not be split for now.
1468       PredLoads[Pred] = nullptr;
1469     }
1470   }
1471 
1472   // Decide whether PRE is profitable for this load.
1473   unsigned NumUnavailablePreds = PredLoads.size() + CriticalEdgePred.size();
1474   assert(NumUnavailablePreds != 0 &&
1475          "Fully available value should already be eliminated!");
1476 
1477   // If this load is unavailable in multiple predecessors, reject it.
1478   // FIXME: If we could restructure the CFG, we could make a common pred with
1479   // all the preds that don't have an available LI and insert a new load into
1480   // that one block.
1481   if (NumUnavailablePreds != 1)
1482       return false;
1483 
1484   // Split critical edges, and update the unavailable predecessors accordingly.
1485   for (BasicBlock *OrigPred : CriticalEdgePred) {
1486     BasicBlock *NewPred = splitCriticalEdges(OrigPred, LoadBB);
1487     assert(!PredLoads.count(OrigPred) && "Split edges shouldn't be in map!");
1488     PredLoads[NewPred] = nullptr;
1489     DEBUG(dbgs() << "Split critical edge " << OrigPred->getName() << "->"
1490                  << LoadBB->getName() << '\n');
1491   }
1492 
1493   // Check if the load can safely be moved to all the unavailable predecessors.
1494   bool CanDoPRE = true;
1495   const DataLayout &DL = LI->getModule()->getDataLayout();
1496   SmallVector<Instruction*, 8> NewInsts;
1497   for (auto &PredLoad : PredLoads) {
1498     BasicBlock *UnavailablePred = PredLoad.first;
1499 
1500     // Do PHI translation to get its value in the predecessor if necessary.  The
1501     // returned pointer (if non-null) is guaranteed to dominate UnavailablePred.
1502 
1503     // If all preds have a single successor, then we know it is safe to insert
1504     // the load on the pred (?!?), so we can insert code to materialize the
1505     // pointer if it is not available.
1506     PHITransAddr Address(LI->getPointerOperand(), DL, AC);
1507     Value *LoadPtr = nullptr;
1508     LoadPtr = Address.PHITranslateWithInsertion(LoadBB, UnavailablePred,
1509                                                 *DT, NewInsts);
1510 
1511     // If we couldn't find or insert a computation of this phi translated value,
1512     // we fail PRE.
1513     if (!LoadPtr) {
1514       DEBUG(dbgs() << "COULDN'T INSERT PHI TRANSLATED VALUE OF: "
1515             << *LI->getPointerOperand() << "\n");
1516       CanDoPRE = false;
1517       break;
1518     }
1519 
1520     PredLoad.second = LoadPtr;
1521   }
1522 
1523   if (!CanDoPRE) {
1524     while (!NewInsts.empty()) {
1525       Instruction *I = NewInsts.pop_back_val();
1526       if (MD) MD->removeInstruction(I);
1527       I->eraseFromParent();
1528     }
1529     // HINT: Don't revert the edge-splitting as following transformation may
1530     // also need to split these critical edges.
1531     return !CriticalEdgePred.empty();
1532   }
1533 
1534   // Okay, we can eliminate this load by inserting a reload in the predecessor
1535   // and using PHI construction to get the value in the other predecessors, do
1536   // it.
1537   DEBUG(dbgs() << "GVN REMOVING PRE LOAD: " << *LI << '\n');
1538   DEBUG(if (!NewInsts.empty())
1539           dbgs() << "INSERTED " << NewInsts.size() << " INSTS: "
1540                  << *NewInsts.back() << '\n');
1541 
1542   // Assign value numbers to the new instructions.
1543   for (Instruction *I : NewInsts) {
1544     // FIXME: We really _ought_ to insert these value numbers into their
1545     // parent's availability map.  However, in doing so, we risk getting into
1546     // ordering issues.  If a block hasn't been processed yet, we would be
1547     // marking a value as AVAIL-IN, which isn't what we intend.
1548     VN.lookupOrAdd(I);
1549   }
1550 
1551   for (const auto &PredLoad : PredLoads) {
1552     BasicBlock *UnavailablePred = PredLoad.first;
1553     Value *LoadPtr = PredLoad.second;
1554 
1555     auto *NewLoad = new LoadInst(LoadPtr, LI->getName()+".pre",
1556                                  LI->isVolatile(), LI->getAlignment(),
1557                                  LI->getOrdering(), LI->getSynchScope(),
1558                                  UnavailablePred->getTerminator());
1559 
1560     // Transfer the old load's AA tags to the new load.
1561     AAMDNodes Tags;
1562     LI->getAAMetadata(Tags);
1563     if (Tags)
1564       NewLoad->setAAMetadata(Tags);
1565 
1566     if (auto *MD = LI->getMetadata(LLVMContext::MD_invariant_load))
1567       NewLoad->setMetadata(LLVMContext::MD_invariant_load, MD);
1568     if (auto *InvGroupMD = LI->getMetadata(LLVMContext::MD_invariant_group))
1569       NewLoad->setMetadata(LLVMContext::MD_invariant_group, InvGroupMD);
1570     if (auto *RangeMD = LI->getMetadata(LLVMContext::MD_range))
1571       NewLoad->setMetadata(LLVMContext::MD_range, RangeMD);
1572 
1573     // Transfer DebugLoc.
1574     NewLoad->setDebugLoc(LI->getDebugLoc());
1575 
1576     // Add the newly created load.
1577     ValuesPerBlock.push_back(AvailableValueInBlock::get(UnavailablePred,
1578                                                         NewLoad));
1579     MD->invalidateCachedPointerInfo(LoadPtr);
1580     DEBUG(dbgs() << "GVN INSERTED " << *NewLoad << '\n');
1581   }
1582 
1583   // Perform PHI construction.
1584   Value *V = ConstructSSAForLoadSet(LI, ValuesPerBlock, *this);
1585   LI->replaceAllUsesWith(V);
1586   if (isa<PHINode>(V))
1587     V->takeName(LI);
1588   if (Instruction *I = dyn_cast<Instruction>(V))
1589     I->setDebugLoc(LI->getDebugLoc());
1590   if (V->getType()->getScalarType()->isPointerTy())
1591     MD->invalidateCachedPointerInfo(V);
1592   markInstructionForDeletion(LI);
1593   ++NumPRELoad;
1594   return true;
1595 }
1596 
1597 /// Attempt to eliminate a load whose dependencies are
1598 /// non-local by performing PHI construction.
1599 bool GVN::processNonLocalLoad(LoadInst *LI) {
1600   // non-local speculations are not allowed under asan.
1601   if (LI->getParent()->getParent()->hasFnAttribute(Attribute::SanitizeAddress))
1602     return false;
1603 
1604   // Step 1: Find the non-local dependencies of the load.
1605   LoadDepVect Deps;
1606   MD->getNonLocalPointerDependency(LI, Deps);
1607 
1608   // If we had to process more than one hundred blocks to find the
1609   // dependencies, this load isn't worth worrying about.  Optimizing
1610   // it will be too expensive.
1611   unsigned NumDeps = Deps.size();
1612   if (NumDeps > 100)
1613     return false;
1614 
1615   // If we had a phi translation failure, we'll have a single entry which is a
1616   // clobber in the current block.  Reject this early.
1617   if (NumDeps == 1 &&
1618       !Deps[0].getResult().isDef() && !Deps[0].getResult().isClobber()) {
1619     DEBUG(
1620       dbgs() << "GVN: non-local load ";
1621       LI->printAsOperand(dbgs());
1622       dbgs() << " has unknown dependencies\n";
1623     );
1624     return false;
1625   }
1626 
1627   // If this load follows a GEP, see if we can PRE the indices before analyzing.
1628   if (GetElementPtrInst *GEP = dyn_cast<GetElementPtrInst>(LI->getOperand(0))) {
1629     for (GetElementPtrInst::op_iterator OI = GEP->idx_begin(),
1630                                         OE = GEP->idx_end();
1631          OI != OE; ++OI)
1632       if (Instruction *I = dyn_cast<Instruction>(OI->get()))
1633         performScalarPRE(I);
1634   }
1635 
1636   // Step 2: Analyze the availability of the load
1637   AvailValInBlkVect ValuesPerBlock;
1638   UnavailBlkVect UnavailableBlocks;
1639   AnalyzeLoadAvailability(LI, Deps, ValuesPerBlock, UnavailableBlocks);
1640 
1641   // If we have no predecessors that produce a known value for this load, exit
1642   // early.
1643   if (ValuesPerBlock.empty())
1644     return false;
1645 
1646   // Step 3: Eliminate fully redundancy.
1647   //
1648   // If all of the instructions we depend on produce a known value for this
1649   // load, then it is fully redundant and we can use PHI insertion to compute
1650   // its value.  Insert PHIs and remove the fully redundant value now.
1651   if (UnavailableBlocks.empty()) {
1652     DEBUG(dbgs() << "GVN REMOVING NONLOCAL LOAD: " << *LI << '\n');
1653 
1654     // Perform PHI construction.
1655     Value *V = ConstructSSAForLoadSet(LI, ValuesPerBlock, *this);
1656     LI->replaceAllUsesWith(V);
1657 
1658     if (isa<PHINode>(V))
1659       V->takeName(LI);
1660     if (Instruction *I = dyn_cast<Instruction>(V))
1661       if (LI->getDebugLoc())
1662         I->setDebugLoc(LI->getDebugLoc());
1663     if (V->getType()->getScalarType()->isPointerTy())
1664       MD->invalidateCachedPointerInfo(V);
1665     markInstructionForDeletion(LI);
1666     ++NumGVNLoad;
1667     return true;
1668   }
1669 
1670   // Step 4: Eliminate partial redundancy.
1671   if (!EnablePRE || !EnableLoadPRE)
1672     return false;
1673 
1674   return PerformLoadPRE(LI, ValuesPerBlock, UnavailableBlocks);
1675 }
1676 
1677 bool GVN::processAssumeIntrinsic(IntrinsicInst *IntrinsicI) {
1678   assert(IntrinsicI->getIntrinsicID() == Intrinsic::assume &&
1679          "This function can only be called with llvm.assume intrinsic");
1680   Value *V = IntrinsicI->getArgOperand(0);
1681 
1682   if (ConstantInt *Cond = dyn_cast<ConstantInt>(V)) {
1683     if (Cond->isZero()) {
1684       Type *Int8Ty = Type::getInt8Ty(V->getContext());
1685       // Insert a new store to null instruction before the load to indicate that
1686       // this code is not reachable.  FIXME: We could insert unreachable
1687       // instruction directly because we can modify the CFG.
1688       new StoreInst(UndefValue::get(Int8Ty),
1689                     Constant::getNullValue(Int8Ty->getPointerTo()),
1690                     IntrinsicI);
1691     }
1692     markInstructionForDeletion(IntrinsicI);
1693     return false;
1694   }
1695 
1696   Constant *True = ConstantInt::getTrue(V->getContext());
1697   bool Changed = false;
1698 
1699   for (BasicBlock *Successor : successors(IntrinsicI->getParent())) {
1700     BasicBlockEdge Edge(IntrinsicI->getParent(), Successor);
1701 
1702     // This property is only true in dominated successors, propagateEquality
1703     // will check dominance for us.
1704     Changed |= propagateEquality(V, True, Edge, false);
1705   }
1706 
1707   // We can replace assume value with true, which covers cases like this:
1708   // call void @llvm.assume(i1 %cmp)
1709   // br i1 %cmp, label %bb1, label %bb2 ; will change %cmp to true
1710   ReplaceWithConstMap[V] = True;
1711 
1712   // If one of *cmp *eq operand is const, adding it to map will cover this:
1713   // %cmp = fcmp oeq float 3.000000e+00, %0 ; const on lhs could happen
1714   // call void @llvm.assume(i1 %cmp)
1715   // ret float %0 ; will change it to ret float 3.000000e+00
1716   if (auto *CmpI = dyn_cast<CmpInst>(V)) {
1717     if (CmpI->getPredicate() == CmpInst::Predicate::ICMP_EQ ||
1718         CmpI->getPredicate() == CmpInst::Predicate::FCMP_OEQ ||
1719         (CmpI->getPredicate() == CmpInst::Predicate::FCMP_UEQ &&
1720          CmpI->getFastMathFlags().noNaNs())) {
1721       Value *CmpLHS = CmpI->getOperand(0);
1722       Value *CmpRHS = CmpI->getOperand(1);
1723       if (isa<Constant>(CmpLHS))
1724         std::swap(CmpLHS, CmpRHS);
1725       auto *RHSConst = dyn_cast<Constant>(CmpRHS);
1726 
1727       // If only one operand is constant.
1728       if (RHSConst != nullptr && !isa<Constant>(CmpLHS))
1729         ReplaceWithConstMap[CmpLHS] = RHSConst;
1730     }
1731   }
1732   return Changed;
1733 }
1734 
1735 static void patchReplacementInstruction(Instruction *I, Value *Repl) {
1736   auto *ReplInst = dyn_cast<Instruction>(Repl);
1737   if (!ReplInst)
1738     return;
1739 
1740   // Patch the replacement so that it is not more restrictive than the value
1741   // being replaced.
1742   ReplInst->andIRFlags(I);
1743 
1744   // FIXME: If both the original and replacement value are part of the
1745   // same control-flow region (meaning that the execution of one
1746   // guarantees the execution of the other), then we can combine the
1747   // noalias scopes here and do better than the general conservative
1748   // answer used in combineMetadata().
1749 
1750   // In general, GVN unifies expressions over different control-flow
1751   // regions, and so we need a conservative combination of the noalias
1752   // scopes.
1753   static const unsigned KnownIDs[] = {
1754       LLVMContext::MD_tbaa,           LLVMContext::MD_alias_scope,
1755       LLVMContext::MD_noalias,        LLVMContext::MD_range,
1756       LLVMContext::MD_fpmath,         LLVMContext::MD_invariant_load,
1757       LLVMContext::MD_invariant_group};
1758   combineMetadata(ReplInst, I, KnownIDs);
1759 }
1760 
1761 static void patchAndReplaceAllUsesWith(Instruction *I, Value *Repl) {
1762   patchReplacementInstruction(I, Repl);
1763   I->replaceAllUsesWith(Repl);
1764 }
1765 
1766 /// Attempt to eliminate a load, first by eliminating it
1767 /// locally, and then attempting non-local elimination if that fails.
1768 bool GVN::processLoad(LoadInst *L) {
1769   if (!MD)
1770     return false;
1771 
1772   // This code hasn't been audited for ordered or volatile memory access
1773   if (!L->isUnordered())
1774     return false;
1775 
1776   if (L->use_empty()) {
1777     markInstructionForDeletion(L);
1778     return true;
1779   }
1780 
1781   // ... to a pointer that has been loaded from before...
1782   MemDepResult Dep = MD->getDependency(L);
1783 
1784   // If it is defined in another block, try harder.
1785   if (Dep.isNonLocal())
1786     return processNonLocalLoad(L);
1787 
1788   // Only handle the local case below
1789   if (!Dep.isDef() && !Dep.isClobber()) {
1790     // This might be a NonFuncLocal or an Unknown
1791     DEBUG(
1792       // fast print dep, using operator<< on instruction is too slow.
1793       dbgs() << "GVN: load ";
1794       L->printAsOperand(dbgs());
1795       dbgs() << " has unknown dependence\n";
1796     );
1797     return false;
1798   }
1799 
1800   AvailableValue AV;
1801   if (AnalyzeLoadAvailability(L, Dep, L->getPointerOperand(), AV)) {
1802     Value *AvailableValue = AV.MaterializeAdjustedValue(L, L, *this);
1803 
1804     // Replace the load!
1805     patchAndReplaceAllUsesWith(L, AvailableValue);
1806     markInstructionForDeletion(L);
1807     ++NumGVNLoad;
1808     // Tell MDA to rexamine the reused pointer since we might have more
1809     // information after forwarding it.
1810     if (MD && AvailableValue->getType()->getScalarType()->isPointerTy())
1811       MD->invalidateCachedPointerInfo(AvailableValue);
1812     return true;
1813   }
1814 
1815   return false;
1816 }
1817 
1818 // In order to find a leader for a given value number at a
1819 // specific basic block, we first obtain the list of all Values for that number,
1820 // and then scan the list to find one whose block dominates the block in
1821 // question.  This is fast because dominator tree queries consist of only
1822 // a few comparisons of DFS numbers.
1823 Value *GVN::findLeader(const BasicBlock *BB, uint32_t num) {
1824   LeaderTableEntry Vals = LeaderTable[num];
1825   if (!Vals.Val) return nullptr;
1826 
1827   Value *Val = nullptr;
1828   if (DT->dominates(Vals.BB, BB)) {
1829     Val = Vals.Val;
1830     if (isa<Constant>(Val)) return Val;
1831   }
1832 
1833   LeaderTableEntry* Next = Vals.Next;
1834   while (Next) {
1835     if (DT->dominates(Next->BB, BB)) {
1836       if (isa<Constant>(Next->Val)) return Next->Val;
1837       if (!Val) Val = Next->Val;
1838     }
1839 
1840     Next = Next->Next;
1841   }
1842 
1843   return Val;
1844 }
1845 
1846 /// There is an edge from 'Src' to 'Dst'.  Return
1847 /// true if every path from the entry block to 'Dst' passes via this edge.  In
1848 /// particular 'Dst' must not be reachable via another edge from 'Src'.
1849 static bool isOnlyReachableViaThisEdge(const BasicBlockEdge &E,
1850                                        DominatorTree *DT) {
1851   // While in theory it is interesting to consider the case in which Dst has
1852   // more than one predecessor, because Dst might be part of a loop which is
1853   // only reachable from Src, in practice it is pointless since at the time
1854   // GVN runs all such loops have preheaders, which means that Dst will have
1855   // been changed to have only one predecessor, namely Src.
1856   const BasicBlock *Pred = E.getEnd()->getSinglePredecessor();
1857   assert((!Pred || Pred == E.getStart()) &&
1858          "No edge between these basic blocks!");
1859   return Pred != nullptr;
1860 }
1861 
1862 // Tries to replace instruction with const, using information from
1863 // ReplaceWithConstMap.
1864 bool GVN::replaceOperandsWithConsts(Instruction *Instr) const {
1865   bool Changed = false;
1866   for (unsigned OpNum = 0; OpNum < Instr->getNumOperands(); ++OpNum) {
1867     Value *Operand = Instr->getOperand(OpNum);
1868     auto it = ReplaceWithConstMap.find(Operand);
1869     if (it != ReplaceWithConstMap.end()) {
1870       assert(!isa<Constant>(Operand) &&
1871              "Replacing constants with constants is invalid");
1872       DEBUG(dbgs() << "GVN replacing: " << *Operand << " with " << *it->second
1873                    << " in instruction " << *Instr << '\n');
1874       Instr->setOperand(OpNum, it->second);
1875       Changed = true;
1876     }
1877   }
1878   return Changed;
1879 }
1880 
1881 /// The given values are known to be equal in every block
1882 /// dominated by 'Root'.  Exploit this, for example by replacing 'LHS' with
1883 /// 'RHS' everywhere in the scope.  Returns whether a change was made.
1884 /// If DominatesByEdge is false, then it means that we will propagate the RHS
1885 /// value starting from the end of Root.Start.
1886 bool GVN::propagateEquality(Value *LHS, Value *RHS, const BasicBlockEdge &Root,
1887                             bool DominatesByEdge) {
1888   SmallVector<std::pair<Value*, Value*>, 4> Worklist;
1889   Worklist.push_back(std::make_pair(LHS, RHS));
1890   bool Changed = false;
1891   // For speed, compute a conservative fast approximation to
1892   // DT->dominates(Root, Root.getEnd());
1893   const bool RootDominatesEnd = isOnlyReachableViaThisEdge(Root, DT);
1894 
1895   while (!Worklist.empty()) {
1896     std::pair<Value*, Value*> Item = Worklist.pop_back_val();
1897     LHS = Item.first; RHS = Item.second;
1898 
1899     if (LHS == RHS)
1900       continue;
1901     assert(LHS->getType() == RHS->getType() && "Equality but unequal types!");
1902 
1903     // Don't try to propagate equalities between constants.
1904     if (isa<Constant>(LHS) && isa<Constant>(RHS))
1905       continue;
1906 
1907     // Prefer a constant on the right-hand side, or an Argument if no constants.
1908     if (isa<Constant>(LHS) || (isa<Argument>(LHS) && !isa<Constant>(RHS)))
1909       std::swap(LHS, RHS);
1910     assert((isa<Argument>(LHS) || isa<Instruction>(LHS)) && "Unexpected value!");
1911 
1912     // If there is no obvious reason to prefer the left-hand side over the
1913     // right-hand side, ensure the longest lived term is on the right-hand side,
1914     // so the shortest lived term will be replaced by the longest lived.
1915     // This tends to expose more simplifications.
1916     uint32_t LVN = VN.lookupOrAdd(LHS);
1917     if ((isa<Argument>(LHS) && isa<Argument>(RHS)) ||
1918         (isa<Instruction>(LHS) && isa<Instruction>(RHS))) {
1919       // Move the 'oldest' value to the right-hand side, using the value number
1920       // as a proxy for age.
1921       uint32_t RVN = VN.lookupOrAdd(RHS);
1922       if (LVN < RVN) {
1923         std::swap(LHS, RHS);
1924         LVN = RVN;
1925       }
1926     }
1927 
1928     // If value numbering later sees that an instruction in the scope is equal
1929     // to 'LHS' then ensure it will be turned into 'RHS'.  In order to preserve
1930     // the invariant that instructions only occur in the leader table for their
1931     // own value number (this is used by removeFromLeaderTable), do not do this
1932     // if RHS is an instruction (if an instruction in the scope is morphed into
1933     // LHS then it will be turned into RHS by the next GVN iteration anyway, so
1934     // using the leader table is about compiling faster, not optimizing better).
1935     // The leader table only tracks basic blocks, not edges. Only add to if we
1936     // have the simple case where the edge dominates the end.
1937     if (RootDominatesEnd && !isa<Instruction>(RHS))
1938       addToLeaderTable(LVN, RHS, Root.getEnd());
1939 
1940     // Replace all occurrences of 'LHS' with 'RHS' everywhere in the scope.  As
1941     // LHS always has at least one use that is not dominated by Root, this will
1942     // never do anything if LHS has only one use.
1943     if (!LHS->hasOneUse()) {
1944       unsigned NumReplacements =
1945           DominatesByEdge
1946               ? replaceDominatedUsesWith(LHS, RHS, *DT, Root)
1947               : replaceDominatedUsesWith(LHS, RHS, *DT, Root.getStart());
1948 
1949       Changed |= NumReplacements > 0;
1950       NumGVNEqProp += NumReplacements;
1951     }
1952 
1953     // Now try to deduce additional equalities from this one. For example, if
1954     // the known equality was "(A != B)" == "false" then it follows that A and B
1955     // are equal in the scope. Only boolean equalities with an explicit true or
1956     // false RHS are currently supported.
1957     if (!RHS->getType()->isIntegerTy(1))
1958       // Not a boolean equality - bail out.
1959       continue;
1960     ConstantInt *CI = dyn_cast<ConstantInt>(RHS);
1961     if (!CI)
1962       // RHS neither 'true' nor 'false' - bail out.
1963       continue;
1964     // Whether RHS equals 'true'.  Otherwise it equals 'false'.
1965     bool isKnownTrue = CI->isAllOnesValue();
1966     bool isKnownFalse = !isKnownTrue;
1967 
1968     // If "A && B" is known true then both A and B are known true.  If "A || B"
1969     // is known false then both A and B are known false.
1970     Value *A, *B;
1971     if ((isKnownTrue && match(LHS, m_And(m_Value(A), m_Value(B)))) ||
1972         (isKnownFalse && match(LHS, m_Or(m_Value(A), m_Value(B))))) {
1973       Worklist.push_back(std::make_pair(A, RHS));
1974       Worklist.push_back(std::make_pair(B, RHS));
1975       continue;
1976     }
1977 
1978     // If we are propagating an equality like "(A == B)" == "true" then also
1979     // propagate the equality A == B.  When propagating a comparison such as
1980     // "(A >= B)" == "true", replace all instances of "A < B" with "false".
1981     if (CmpInst *Cmp = dyn_cast<CmpInst>(LHS)) {
1982       Value *Op0 = Cmp->getOperand(0), *Op1 = Cmp->getOperand(1);
1983 
1984       // If "A == B" is known true, or "A != B" is known false, then replace
1985       // A with B everywhere in the scope.
1986       if ((isKnownTrue && Cmp->getPredicate() == CmpInst::ICMP_EQ) ||
1987           (isKnownFalse && Cmp->getPredicate() == CmpInst::ICMP_NE))
1988         Worklist.push_back(std::make_pair(Op0, Op1));
1989 
1990       // Handle the floating point versions of equality comparisons too.
1991       if ((isKnownTrue && Cmp->getPredicate() == CmpInst::FCMP_OEQ) ||
1992           (isKnownFalse && Cmp->getPredicate() == CmpInst::FCMP_UNE)) {
1993 
1994         // Floating point -0.0 and 0.0 compare equal, so we can only
1995         // propagate values if we know that we have a constant and that
1996         // its value is non-zero.
1997 
1998         // FIXME: We should do this optimization if 'no signed zeros' is
1999         // applicable via an instruction-level fast-math-flag or some other
2000         // indicator that relaxed FP semantics are being used.
2001 
2002         if (isa<ConstantFP>(Op1) && !cast<ConstantFP>(Op1)->isZero())
2003           Worklist.push_back(std::make_pair(Op0, Op1));
2004       }
2005 
2006       // If "A >= B" is known true, replace "A < B" with false everywhere.
2007       CmpInst::Predicate NotPred = Cmp->getInversePredicate();
2008       Constant *NotVal = ConstantInt::get(Cmp->getType(), isKnownFalse);
2009       // Since we don't have the instruction "A < B" immediately to hand, work
2010       // out the value number that it would have and use that to find an
2011       // appropriate instruction (if any).
2012       uint32_t NextNum = VN.getNextUnusedValueNumber();
2013       uint32_t Num = VN.lookupOrAddCmp(Cmp->getOpcode(), NotPred, Op0, Op1);
2014       // If the number we were assigned was brand new then there is no point in
2015       // looking for an instruction realizing it: there cannot be one!
2016       if (Num < NextNum) {
2017         Value *NotCmp = findLeader(Root.getEnd(), Num);
2018         if (NotCmp && isa<Instruction>(NotCmp)) {
2019           unsigned NumReplacements =
2020               DominatesByEdge
2021                   ? replaceDominatedUsesWith(NotCmp, NotVal, *DT, Root)
2022                   : replaceDominatedUsesWith(NotCmp, NotVal, *DT,
2023                                              Root.getStart());
2024           Changed |= NumReplacements > 0;
2025           NumGVNEqProp += NumReplacements;
2026         }
2027       }
2028       // Ensure that any instruction in scope that gets the "A < B" value number
2029       // is replaced with false.
2030       // The leader table only tracks basic blocks, not edges. Only add to if we
2031       // have the simple case where the edge dominates the end.
2032       if (RootDominatesEnd)
2033         addToLeaderTable(Num, NotVal, Root.getEnd());
2034 
2035       continue;
2036     }
2037   }
2038 
2039   return Changed;
2040 }
2041 
2042 /// When calculating availability, handle an instruction
2043 /// by inserting it into the appropriate sets
2044 bool GVN::processInstruction(Instruction *I) {
2045   // Ignore dbg info intrinsics.
2046   if (isa<DbgInfoIntrinsic>(I))
2047     return false;
2048 
2049   // If the instruction can be easily simplified then do so now in preference
2050   // to value numbering it.  Value numbering often exposes redundancies, for
2051   // example if it determines that %y is equal to %x then the instruction
2052   // "%z = and i32 %x, %y" becomes "%z = and i32 %x, %x" which we now simplify.
2053   const DataLayout &DL = I->getModule()->getDataLayout();
2054   if (Value *V = SimplifyInstruction(I, DL, TLI, DT, AC)) {
2055     I->replaceAllUsesWith(V);
2056     if (MD && V->getType()->getScalarType()->isPointerTy())
2057       MD->invalidateCachedPointerInfo(V);
2058     markInstructionForDeletion(I);
2059     ++NumGVNSimpl;
2060     return true;
2061   }
2062 
2063   if (IntrinsicInst *IntrinsicI = dyn_cast<IntrinsicInst>(I))
2064     if (IntrinsicI->getIntrinsicID() == Intrinsic::assume)
2065       return processAssumeIntrinsic(IntrinsicI);
2066 
2067   if (LoadInst *LI = dyn_cast<LoadInst>(I)) {
2068     if (processLoad(LI))
2069       return true;
2070 
2071     unsigned Num = VN.lookupOrAdd(LI);
2072     addToLeaderTable(Num, LI, LI->getParent());
2073     return false;
2074   }
2075 
2076   // For conditional branches, we can perform simple conditional propagation on
2077   // the condition value itself.
2078   if (BranchInst *BI = dyn_cast<BranchInst>(I)) {
2079     if (!BI->isConditional())
2080       return false;
2081 
2082     if (isa<Constant>(BI->getCondition()))
2083       return processFoldableCondBr(BI);
2084 
2085     Value *BranchCond = BI->getCondition();
2086     BasicBlock *TrueSucc = BI->getSuccessor(0);
2087     BasicBlock *FalseSucc = BI->getSuccessor(1);
2088     // Avoid multiple edges early.
2089     if (TrueSucc == FalseSucc)
2090       return false;
2091 
2092     BasicBlock *Parent = BI->getParent();
2093     bool Changed = false;
2094 
2095     Value *TrueVal = ConstantInt::getTrue(TrueSucc->getContext());
2096     BasicBlockEdge TrueE(Parent, TrueSucc);
2097     Changed |= propagateEquality(BranchCond, TrueVal, TrueE, true);
2098 
2099     Value *FalseVal = ConstantInt::getFalse(FalseSucc->getContext());
2100     BasicBlockEdge FalseE(Parent, FalseSucc);
2101     Changed |= propagateEquality(BranchCond, FalseVal, FalseE, true);
2102 
2103     return Changed;
2104   }
2105 
2106   // For switches, propagate the case values into the case destinations.
2107   if (SwitchInst *SI = dyn_cast<SwitchInst>(I)) {
2108     Value *SwitchCond = SI->getCondition();
2109     BasicBlock *Parent = SI->getParent();
2110     bool Changed = false;
2111 
2112     // Remember how many outgoing edges there are to every successor.
2113     SmallDenseMap<BasicBlock *, unsigned, 16> SwitchEdges;
2114     for (unsigned i = 0, n = SI->getNumSuccessors(); i != n; ++i)
2115       ++SwitchEdges[SI->getSuccessor(i)];
2116 
2117     for (SwitchInst::CaseIt i = SI->case_begin(), e = SI->case_end();
2118          i != e; ++i) {
2119       BasicBlock *Dst = i.getCaseSuccessor();
2120       // If there is only a single edge, propagate the case value into it.
2121       if (SwitchEdges.lookup(Dst) == 1) {
2122         BasicBlockEdge E(Parent, Dst);
2123         Changed |= propagateEquality(SwitchCond, i.getCaseValue(), E, true);
2124       }
2125     }
2126     return Changed;
2127   }
2128 
2129   // Instructions with void type don't return a value, so there's
2130   // no point in trying to find redundancies in them.
2131   if (I->getType()->isVoidTy())
2132     return false;
2133 
2134   uint32_t NextNum = VN.getNextUnusedValueNumber();
2135   unsigned Num = VN.lookupOrAdd(I);
2136 
2137   // Allocations are always uniquely numbered, so we can save time and memory
2138   // by fast failing them.
2139   if (isa<AllocaInst>(I) || isa<TerminatorInst>(I) || isa<PHINode>(I)) {
2140     addToLeaderTable(Num, I, I->getParent());
2141     return false;
2142   }
2143 
2144   // If the number we were assigned was a brand new VN, then we don't
2145   // need to do a lookup to see if the number already exists
2146   // somewhere in the domtree: it can't!
2147   if (Num >= NextNum) {
2148     addToLeaderTable(Num, I, I->getParent());
2149     return false;
2150   }
2151 
2152   // Perform fast-path value-number based elimination of values inherited from
2153   // dominators.
2154   Value *Repl = findLeader(I->getParent(), Num);
2155   if (!Repl) {
2156     // Failure, just remember this instance for future use.
2157     addToLeaderTable(Num, I, I->getParent());
2158     return false;
2159   } else if (Repl == I) {
2160     // If I was the result of a shortcut PRE, it might already be in the table
2161     // and the best replacement for itself. Nothing to do.
2162     return false;
2163   }
2164 
2165   // Remove it!
2166   patchAndReplaceAllUsesWith(I, Repl);
2167   if (MD && Repl->getType()->getScalarType()->isPointerTy())
2168     MD->invalidateCachedPointerInfo(Repl);
2169   markInstructionForDeletion(I);
2170   return true;
2171 }
2172 
2173 /// runOnFunction - This is the main transformation entry point for a function.
2174 bool GVN::runImpl(Function &F, AssumptionCache &RunAC, DominatorTree &RunDT,
2175                   const TargetLibraryInfo &RunTLI, AAResults &RunAA,
2176                   MemoryDependenceResults *RunMD) {
2177   AC = &RunAC;
2178   DT = &RunDT;
2179   VN.setDomTree(DT);
2180   TLI = &RunTLI;
2181   VN.setAliasAnalysis(&RunAA);
2182   MD = RunMD;
2183   VN.setMemDep(MD);
2184 
2185   bool Changed = false;
2186   bool ShouldContinue = true;
2187 
2188   // Merge unconditional branches, allowing PRE to catch more
2189   // optimization opportunities.
2190   for (Function::iterator FI = F.begin(), FE = F.end(); FI != FE; ) {
2191     BasicBlock *BB = &*FI++;
2192 
2193     bool removedBlock =
2194         MergeBlockIntoPredecessor(BB, DT, /* LoopInfo */ nullptr, MD);
2195     if (removedBlock) ++NumGVNBlocks;
2196 
2197     Changed |= removedBlock;
2198   }
2199 
2200   unsigned Iteration = 0;
2201   while (ShouldContinue) {
2202     DEBUG(dbgs() << "GVN iteration: " << Iteration << "\n");
2203     ShouldContinue = iterateOnFunction(F);
2204     Changed |= ShouldContinue;
2205     ++Iteration;
2206   }
2207 
2208   if (EnablePRE) {
2209     // Fabricate val-num for dead-code in order to suppress assertion in
2210     // performPRE().
2211     assignValNumForDeadCode();
2212     bool PREChanged = true;
2213     while (PREChanged) {
2214       PREChanged = performPRE(F);
2215       Changed |= PREChanged;
2216     }
2217   }
2218 
2219   // FIXME: Should perform GVN again after PRE does something.  PRE can move
2220   // computations into blocks where they become fully redundant.  Note that
2221   // we can't do this until PRE's critical edge splitting updates memdep.
2222   // Actually, when this happens, we should just fully integrate PRE into GVN.
2223 
2224   cleanupGlobalSets();
2225   // Do not cleanup DeadBlocks in cleanupGlobalSets() as it's called for each
2226   // iteration.
2227   DeadBlocks.clear();
2228 
2229   return Changed;
2230 }
2231 
2232 bool GVN::processBlock(BasicBlock *BB) {
2233   // FIXME: Kill off InstrsToErase by doing erasing eagerly in a helper function
2234   // (and incrementing BI before processing an instruction).
2235   assert(InstrsToErase.empty() &&
2236          "We expect InstrsToErase to be empty across iterations");
2237   if (DeadBlocks.count(BB))
2238     return false;
2239 
2240   // Clearing map before every BB because it can be used only for single BB.
2241   ReplaceWithConstMap.clear();
2242   bool ChangedFunction = false;
2243 
2244   for (BasicBlock::iterator BI = BB->begin(), BE = BB->end();
2245        BI != BE;) {
2246     if (!ReplaceWithConstMap.empty())
2247       ChangedFunction |= replaceOperandsWithConsts(&*BI);
2248     ChangedFunction |= processInstruction(&*BI);
2249 
2250     if (InstrsToErase.empty()) {
2251       ++BI;
2252       continue;
2253     }
2254 
2255     // If we need some instructions deleted, do it now.
2256     NumGVNInstr += InstrsToErase.size();
2257 
2258     // Avoid iterator invalidation.
2259     bool AtStart = BI == BB->begin();
2260     if (!AtStart)
2261       --BI;
2262 
2263     for (SmallVectorImpl<Instruction *>::iterator I = InstrsToErase.begin(),
2264          E = InstrsToErase.end(); I != E; ++I) {
2265       DEBUG(dbgs() << "GVN removed: " << **I << '\n');
2266       if (MD) MD->removeInstruction(*I);
2267       DEBUG(verifyRemoved(*I));
2268       (*I)->eraseFromParent();
2269     }
2270     InstrsToErase.clear();
2271 
2272     if (AtStart)
2273       BI = BB->begin();
2274     else
2275       ++BI;
2276   }
2277 
2278   return ChangedFunction;
2279 }
2280 
2281 // Instantiate an expression in a predecessor that lacked it.
2282 bool GVN::performScalarPREInsertion(Instruction *Instr, BasicBlock *Pred,
2283                                     unsigned int ValNo) {
2284   // Because we are going top-down through the block, all value numbers
2285   // will be available in the predecessor by the time we need them.  Any
2286   // that weren't originally present will have been instantiated earlier
2287   // in this loop.
2288   bool success = true;
2289   for (unsigned i = 0, e = Instr->getNumOperands(); i != e; ++i) {
2290     Value *Op = Instr->getOperand(i);
2291     if (isa<Argument>(Op) || isa<Constant>(Op) || isa<GlobalValue>(Op))
2292       continue;
2293     // This could be a newly inserted instruction, in which case, we won't
2294     // find a value number, and should give up before we hurt ourselves.
2295     // FIXME: Rewrite the infrastructure to let it easier to value number
2296     // and process newly inserted instructions.
2297     if (!VN.exists(Op)) {
2298       success = false;
2299       break;
2300     }
2301     if (Value *V = findLeader(Pred, VN.lookup(Op))) {
2302       Instr->setOperand(i, V);
2303     } else {
2304       success = false;
2305       break;
2306     }
2307   }
2308 
2309   // Fail out if we encounter an operand that is not available in
2310   // the PRE predecessor.  This is typically because of loads which
2311   // are not value numbered precisely.
2312   if (!success)
2313     return false;
2314 
2315   Instr->insertBefore(Pred->getTerminator());
2316   Instr->setName(Instr->getName() + ".pre");
2317   Instr->setDebugLoc(Instr->getDebugLoc());
2318   VN.add(Instr, ValNo);
2319 
2320   // Update the availability map to include the new instruction.
2321   addToLeaderTable(ValNo, Instr, Pred);
2322   return true;
2323 }
2324 
2325 bool GVN::performScalarPRE(Instruction *CurInst) {
2326   if (isa<AllocaInst>(CurInst) || isa<TerminatorInst>(CurInst) ||
2327       isa<PHINode>(CurInst) || CurInst->getType()->isVoidTy() ||
2328       CurInst->mayReadFromMemory() || CurInst->mayHaveSideEffects() ||
2329       isa<DbgInfoIntrinsic>(CurInst))
2330     return false;
2331 
2332   // Don't do PRE on compares. The PHI would prevent CodeGenPrepare from
2333   // sinking the compare again, and it would force the code generator to
2334   // move the i1 from processor flags or predicate registers into a general
2335   // purpose register.
2336   if (isa<CmpInst>(CurInst))
2337     return false;
2338 
2339   // We don't currently value number ANY inline asm calls.
2340   if (CallInst *CallI = dyn_cast<CallInst>(CurInst))
2341     if (CallI->isInlineAsm())
2342       return false;
2343 
2344   uint32_t ValNo = VN.lookup(CurInst);
2345 
2346   // Look for the predecessors for PRE opportunities.  We're
2347   // only trying to solve the basic diamond case, where
2348   // a value is computed in the successor and one predecessor,
2349   // but not the other.  We also explicitly disallow cases
2350   // where the successor is its own predecessor, because they're
2351   // more complicated to get right.
2352   unsigned NumWith = 0;
2353   unsigned NumWithout = 0;
2354   BasicBlock *PREPred = nullptr;
2355   BasicBlock *CurrentBlock = CurInst->getParent();
2356 
2357   SmallVector<std::pair<Value *, BasicBlock *>, 8> predMap;
2358   for (BasicBlock *P : predecessors(CurrentBlock)) {
2359     // We're not interested in PRE where the block is its
2360     // own predecessor, or in blocks with predecessors
2361     // that are not reachable.
2362     if (P == CurrentBlock) {
2363       NumWithout = 2;
2364       break;
2365     } else if (!DT->isReachableFromEntry(P)) {
2366       NumWithout = 2;
2367       break;
2368     }
2369 
2370     Value *predV = findLeader(P, ValNo);
2371     if (!predV) {
2372       predMap.push_back(std::make_pair(static_cast<Value *>(nullptr), P));
2373       PREPred = P;
2374       ++NumWithout;
2375     } else if (predV == CurInst) {
2376       /* CurInst dominates this predecessor. */
2377       NumWithout = 2;
2378       break;
2379     } else {
2380       predMap.push_back(std::make_pair(predV, P));
2381       ++NumWith;
2382     }
2383   }
2384 
2385   // Don't do PRE when it might increase code size, i.e. when
2386   // we would need to insert instructions in more than one pred.
2387   if (NumWithout > 1 || NumWith == 0)
2388     return false;
2389 
2390   // We may have a case where all predecessors have the instruction,
2391   // and we just need to insert a phi node. Otherwise, perform
2392   // insertion.
2393   Instruction *PREInstr = nullptr;
2394 
2395   if (NumWithout != 0) {
2396     // Don't do PRE across indirect branch.
2397     if (isa<IndirectBrInst>(PREPred->getTerminator()))
2398       return false;
2399 
2400     // We can't do PRE safely on a critical edge, so instead we schedule
2401     // the edge to be split and perform the PRE the next time we iterate
2402     // on the function.
2403     unsigned SuccNum = GetSuccessorNumber(PREPred, CurrentBlock);
2404     if (isCriticalEdge(PREPred->getTerminator(), SuccNum)) {
2405       toSplit.push_back(std::make_pair(PREPred->getTerminator(), SuccNum));
2406       return false;
2407     }
2408     // We need to insert somewhere, so let's give it a shot
2409     PREInstr = CurInst->clone();
2410     if (!performScalarPREInsertion(PREInstr, PREPred, ValNo)) {
2411       // If we failed insertion, make sure we remove the instruction.
2412       DEBUG(verifyRemoved(PREInstr));
2413       delete PREInstr;
2414       return false;
2415     }
2416   }
2417 
2418   // Either we should have filled in the PRE instruction, or we should
2419   // not have needed insertions.
2420   assert (PREInstr != nullptr || NumWithout == 0);
2421 
2422   ++NumGVNPRE;
2423 
2424   // Create a PHI to make the value available in this block.
2425   PHINode *Phi =
2426       PHINode::Create(CurInst->getType(), predMap.size(),
2427                       CurInst->getName() + ".pre-phi", &CurrentBlock->front());
2428   for (unsigned i = 0, e = predMap.size(); i != e; ++i) {
2429     if (Value *V = predMap[i].first)
2430       Phi->addIncoming(V, predMap[i].second);
2431     else
2432       Phi->addIncoming(PREInstr, PREPred);
2433   }
2434 
2435   VN.add(Phi, ValNo);
2436   addToLeaderTable(ValNo, Phi, CurrentBlock);
2437   Phi->setDebugLoc(CurInst->getDebugLoc());
2438   CurInst->replaceAllUsesWith(Phi);
2439   if (MD && Phi->getType()->getScalarType()->isPointerTy())
2440     MD->invalidateCachedPointerInfo(Phi);
2441   VN.erase(CurInst);
2442   removeFromLeaderTable(ValNo, CurInst, CurrentBlock);
2443 
2444   DEBUG(dbgs() << "GVN PRE removed: " << *CurInst << '\n');
2445   if (MD)
2446     MD->removeInstruction(CurInst);
2447   DEBUG(verifyRemoved(CurInst));
2448   CurInst->eraseFromParent();
2449   ++NumGVNInstr;
2450 
2451   return true;
2452 }
2453 
2454 /// Perform a purely local form of PRE that looks for diamond
2455 /// control flow patterns and attempts to perform simple PRE at the join point.
2456 bool GVN::performPRE(Function &F) {
2457   bool Changed = false;
2458   for (BasicBlock *CurrentBlock : depth_first(&F.getEntryBlock())) {
2459     // Nothing to PRE in the entry block.
2460     if (CurrentBlock == &F.getEntryBlock())
2461       continue;
2462 
2463     // Don't perform PRE on an EH pad.
2464     if (CurrentBlock->isEHPad())
2465       continue;
2466 
2467     for (BasicBlock::iterator BI = CurrentBlock->begin(),
2468                               BE = CurrentBlock->end();
2469          BI != BE;) {
2470       Instruction *CurInst = &*BI++;
2471       Changed |= performScalarPRE(CurInst);
2472     }
2473   }
2474 
2475   if (splitCriticalEdges())
2476     Changed = true;
2477 
2478   return Changed;
2479 }
2480 
2481 /// Split the critical edge connecting the given two blocks, and return
2482 /// the block inserted to the critical edge.
2483 BasicBlock *GVN::splitCriticalEdges(BasicBlock *Pred, BasicBlock *Succ) {
2484   BasicBlock *BB =
2485       SplitCriticalEdge(Pred, Succ, CriticalEdgeSplittingOptions(DT));
2486   if (MD)
2487     MD->invalidateCachedPredecessors();
2488   return BB;
2489 }
2490 
2491 /// Split critical edges found during the previous
2492 /// iteration that may enable further optimization.
2493 bool GVN::splitCriticalEdges() {
2494   if (toSplit.empty())
2495     return false;
2496   do {
2497     std::pair<TerminatorInst*, unsigned> Edge = toSplit.pop_back_val();
2498     SplitCriticalEdge(Edge.first, Edge.second,
2499                       CriticalEdgeSplittingOptions(DT));
2500   } while (!toSplit.empty());
2501   if (MD) MD->invalidateCachedPredecessors();
2502   return true;
2503 }
2504 
2505 /// Executes one iteration of GVN
2506 bool GVN::iterateOnFunction(Function &F) {
2507   cleanupGlobalSets();
2508 
2509   // Top-down walk of the dominator tree
2510   bool Changed = false;
2511   // Save the blocks this function have before transformation begins. GVN may
2512   // split critical edge, and hence may invalidate the RPO/DT iterator.
2513   //
2514   std::vector<BasicBlock *> BBVect;
2515   BBVect.reserve(256);
2516   // Needed for value numbering with phi construction to work.
2517   ReversePostOrderTraversal<Function *> RPOT(&F);
2518   for (ReversePostOrderTraversal<Function *>::rpo_iterator RI = RPOT.begin(),
2519                                                            RE = RPOT.end();
2520        RI != RE; ++RI)
2521     BBVect.push_back(*RI);
2522 
2523   for (std::vector<BasicBlock *>::iterator I = BBVect.begin(), E = BBVect.end();
2524        I != E; I++)
2525     Changed |= processBlock(*I);
2526 
2527   return Changed;
2528 }
2529 
2530 void GVN::cleanupGlobalSets() {
2531   VN.clear();
2532   LeaderTable.clear();
2533   TableAllocator.Reset();
2534 }
2535 
2536 /// Verify that the specified instruction does not occur in our
2537 /// internal data structures.
2538 void GVN::verifyRemoved(const Instruction *Inst) const {
2539   VN.verifyRemoved(Inst);
2540 
2541   // Walk through the value number scope to make sure the instruction isn't
2542   // ferreted away in it.
2543   for (DenseMap<uint32_t, LeaderTableEntry>::const_iterator
2544        I = LeaderTable.begin(), E = LeaderTable.end(); I != E; ++I) {
2545     const LeaderTableEntry *Node = &I->second;
2546     assert(Node->Val != Inst && "Inst still in value numbering scope!");
2547 
2548     while (Node->Next) {
2549       Node = Node->Next;
2550       assert(Node->Val != Inst && "Inst still in value numbering scope!");
2551     }
2552   }
2553 }
2554 
2555 /// BB is declared dead, which implied other blocks become dead as well. This
2556 /// function is to add all these blocks to "DeadBlocks". For the dead blocks'
2557 /// live successors, update their phi nodes by replacing the operands
2558 /// corresponding to dead blocks with UndefVal.
2559 void GVN::addDeadBlock(BasicBlock *BB) {
2560   SmallVector<BasicBlock *, 4> NewDead;
2561   SmallSetVector<BasicBlock *, 4> DF;
2562 
2563   NewDead.push_back(BB);
2564   while (!NewDead.empty()) {
2565     BasicBlock *D = NewDead.pop_back_val();
2566     if (DeadBlocks.count(D))
2567       continue;
2568 
2569     // All blocks dominated by D are dead.
2570     SmallVector<BasicBlock *, 8> Dom;
2571     DT->getDescendants(D, Dom);
2572     DeadBlocks.insert(Dom.begin(), Dom.end());
2573 
2574     // Figure out the dominance-frontier(D).
2575     for (BasicBlock *B : Dom) {
2576       for (BasicBlock *S : successors(B)) {
2577         if (DeadBlocks.count(S))
2578           continue;
2579 
2580         bool AllPredDead = true;
2581         for (BasicBlock *P : predecessors(S))
2582           if (!DeadBlocks.count(P)) {
2583             AllPredDead = false;
2584             break;
2585           }
2586 
2587         if (!AllPredDead) {
2588           // S could be proved dead later on. That is why we don't update phi
2589           // operands at this moment.
2590           DF.insert(S);
2591         } else {
2592           // While S is not dominated by D, it is dead by now. This could take
2593           // place if S already have a dead predecessor before D is declared
2594           // dead.
2595           NewDead.push_back(S);
2596         }
2597       }
2598     }
2599   }
2600 
2601   // For the dead blocks' live successors, update their phi nodes by replacing
2602   // the operands corresponding to dead blocks with UndefVal.
2603   for(SmallSetVector<BasicBlock *, 4>::iterator I = DF.begin(), E = DF.end();
2604         I != E; I++) {
2605     BasicBlock *B = *I;
2606     if (DeadBlocks.count(B))
2607       continue;
2608 
2609     SmallVector<BasicBlock *, 4> Preds(pred_begin(B), pred_end(B));
2610     for (BasicBlock *P : Preds) {
2611       if (!DeadBlocks.count(P))
2612         continue;
2613 
2614       if (isCriticalEdge(P->getTerminator(), GetSuccessorNumber(P, B))) {
2615         if (BasicBlock *S = splitCriticalEdges(P, B))
2616           DeadBlocks.insert(P = S);
2617       }
2618 
2619       for (BasicBlock::iterator II = B->begin(); isa<PHINode>(II); ++II) {
2620         PHINode &Phi = cast<PHINode>(*II);
2621         Phi.setIncomingValue(Phi.getBasicBlockIndex(P),
2622                              UndefValue::get(Phi.getType()));
2623       }
2624     }
2625   }
2626 }
2627 
2628 // If the given branch is recognized as a foldable branch (i.e. conditional
2629 // branch with constant condition), it will perform following analyses and
2630 // transformation.
2631 //  1) If the dead out-coming edge is a critical-edge, split it. Let
2632 //     R be the target of the dead out-coming edge.
2633 //  1) Identify the set of dead blocks implied by the branch's dead outcoming
2634 //     edge. The result of this step will be {X| X is dominated by R}
2635 //  2) Identify those blocks which haves at least one dead predecessor. The
2636 //     result of this step will be dominance-frontier(R).
2637 //  3) Update the PHIs in DF(R) by replacing the operands corresponding to
2638 //     dead blocks with "UndefVal" in an hope these PHIs will optimized away.
2639 //
2640 // Return true iff *NEW* dead code are found.
2641 bool GVN::processFoldableCondBr(BranchInst *BI) {
2642   if (!BI || BI->isUnconditional())
2643     return false;
2644 
2645   // If a branch has two identical successors, we cannot declare either dead.
2646   if (BI->getSuccessor(0) == BI->getSuccessor(1))
2647     return false;
2648 
2649   ConstantInt *Cond = dyn_cast<ConstantInt>(BI->getCondition());
2650   if (!Cond)
2651     return false;
2652 
2653   BasicBlock *DeadRoot =
2654       Cond->getZExtValue() ? BI->getSuccessor(1) : BI->getSuccessor(0);
2655   if (DeadBlocks.count(DeadRoot))
2656     return false;
2657 
2658   if (!DeadRoot->getSinglePredecessor())
2659     DeadRoot = splitCriticalEdges(BI->getParent(), DeadRoot);
2660 
2661   addDeadBlock(DeadRoot);
2662   return true;
2663 }
2664 
2665 // performPRE() will trigger assert if it comes across an instruction without
2666 // associated val-num. As it normally has far more live instructions than dead
2667 // instructions, it makes more sense just to "fabricate" a val-number for the
2668 // dead code than checking if instruction involved is dead or not.
2669 void GVN::assignValNumForDeadCode() {
2670   for (BasicBlock *BB : DeadBlocks) {
2671     for (Instruction &Inst : *BB) {
2672       unsigned ValNum = VN.lookupOrAdd(&Inst);
2673       addToLeaderTable(ValNum, &Inst, BB);
2674     }
2675   }
2676 }
2677 
2678 class llvm::gvn::GVNLegacyPass : public FunctionPass {
2679 public:
2680   static char ID; // Pass identification, replacement for typeid
2681   explicit GVNLegacyPass(bool NoLoads = false)
2682       : FunctionPass(ID), NoLoads(NoLoads) {
2683     initializeGVNLegacyPassPass(*PassRegistry::getPassRegistry());
2684   }
2685 
2686   bool runOnFunction(Function &F) override {
2687     if (skipFunction(F))
2688       return false;
2689 
2690     return Impl.runImpl(
2691         F, getAnalysis<AssumptionCacheTracker>().getAssumptionCache(F),
2692         getAnalysis<DominatorTreeWrapperPass>().getDomTree(),
2693         getAnalysis<TargetLibraryInfoWrapperPass>().getTLI(),
2694         getAnalysis<AAResultsWrapperPass>().getAAResults(),
2695         NoLoads ? nullptr
2696                 : &getAnalysis<MemoryDependenceWrapperPass>().getMemDep());
2697   }
2698 
2699   void getAnalysisUsage(AnalysisUsage &AU) const override {
2700     AU.addRequired<AssumptionCacheTracker>();
2701     AU.addRequired<DominatorTreeWrapperPass>();
2702     AU.addRequired<TargetLibraryInfoWrapperPass>();
2703     if (!NoLoads)
2704       AU.addRequired<MemoryDependenceWrapperPass>();
2705     AU.addRequired<AAResultsWrapperPass>();
2706 
2707     AU.addPreserved<DominatorTreeWrapperPass>();
2708     AU.addPreserved<GlobalsAAWrapperPass>();
2709   }
2710 
2711 private:
2712   bool NoLoads;
2713   GVN Impl;
2714 };
2715 
2716 char GVNLegacyPass::ID = 0;
2717 
2718 // The public interface to this file...
2719 FunctionPass *llvm::createGVNPass(bool NoLoads) {
2720   return new GVNLegacyPass(NoLoads);
2721 }
2722 
2723 INITIALIZE_PASS_BEGIN(GVNLegacyPass, "gvn", "Global Value Numbering", false, false)
2724 INITIALIZE_PASS_DEPENDENCY(AssumptionCacheTracker)
2725 INITIALIZE_PASS_DEPENDENCY(MemoryDependenceWrapperPass)
2726 INITIALIZE_PASS_DEPENDENCY(DominatorTreeWrapperPass)
2727 INITIALIZE_PASS_DEPENDENCY(TargetLibraryInfoWrapperPass)
2728 INITIALIZE_PASS_DEPENDENCY(AAResultsWrapperPass)
2729 INITIALIZE_PASS_DEPENDENCY(GlobalsAAWrapperPass)
2730 INITIALIZE_PASS_END(GVNLegacyPass, "gvn", "Global Value Numbering", false, false)
2731