1 //===- GVN.cpp - Eliminate redundant values and loads ---------------------===//
2 //
3 //                     The LLVM Compiler Infrastructure
4 //
5 // This file is distributed under the University of Illinois Open Source
6 // License. See LICENSE.TXT for details.
7 //
8 //===----------------------------------------------------------------------===//
9 //
10 // This pass performs global value numbering to eliminate fully redundant
11 // instructions.  It also performs simple dead load elimination.
12 //
13 // Note that this pass does the value numbering itself; it does not use the
14 // ValueNumbering analysis passes.
15 //
16 //===----------------------------------------------------------------------===//
17 
18 #include "llvm/Transforms/Scalar/GVN.h"
19 #include "llvm/ADT/DenseMap.h"
20 #include "llvm/ADT/DepthFirstIterator.h"
21 #include "llvm/ADT/Hashing.h"
22 #include "llvm/ADT/MapVector.h"
23 #include "llvm/ADT/PostOrderIterator.h"
24 #include "llvm/ADT/SetVector.h"
25 #include "llvm/ADT/SmallPtrSet.h"
26 #include "llvm/ADT/Statistic.h"
27 #include "llvm/Analysis/AliasAnalysis.h"
28 #include "llvm/Analysis/AssumptionCache.h"
29 #include "llvm/Analysis/CFG.h"
30 #include "llvm/Analysis/ConstantFolding.h"
31 #include "llvm/Analysis/GlobalsModRef.h"
32 #include "llvm/Analysis/InstructionSimplify.h"
33 #include "llvm/Analysis/Loads.h"
34 #include "llvm/Analysis/MemoryBuiltins.h"
35 #include "llvm/Analysis/MemoryDependenceAnalysis.h"
36 #include "llvm/Analysis/PHITransAddr.h"
37 #include "llvm/Analysis/TargetLibraryInfo.h"
38 #include "llvm/Analysis/ValueTracking.h"
39 #include "llvm/IR/DataLayout.h"
40 #include "llvm/IR/Dominators.h"
41 #include "llvm/IR/GlobalVariable.h"
42 #include "llvm/IR/IRBuilder.h"
43 #include "llvm/IR/IntrinsicInst.h"
44 #include "llvm/IR/LLVMContext.h"
45 #include "llvm/IR/Metadata.h"
46 #include "llvm/IR/PatternMatch.h"
47 #include "llvm/Support/CommandLine.h"
48 #include "llvm/Support/Debug.h"
49 #include "llvm/Support/raw_ostream.h"
50 #include "llvm/Transforms/Utils/BasicBlockUtils.h"
51 #include "llvm/Transforms/Utils/Local.h"
52 #include "llvm/Transforms/Utils/SSAUpdater.h"
53 #include <vector>
54 using namespace llvm;
55 using namespace llvm::gvn;
56 using namespace PatternMatch;
57 
58 #define DEBUG_TYPE "gvn"
59 
60 STATISTIC(NumGVNInstr,  "Number of instructions deleted");
61 STATISTIC(NumGVNLoad,   "Number of loads deleted");
62 STATISTIC(NumGVNPRE,    "Number of instructions PRE'd");
63 STATISTIC(NumGVNBlocks, "Number of blocks merged");
64 STATISTIC(NumGVNSimpl,  "Number of instructions simplified");
65 STATISTIC(NumGVNEqProp, "Number of equalities propagated");
66 STATISTIC(NumPRELoad,   "Number of loads PRE'd");
67 
68 static cl::opt<bool> EnablePRE("enable-pre",
69                                cl::init(true), cl::Hidden);
70 static cl::opt<bool> EnableLoadPRE("enable-load-pre", cl::init(true));
71 
72 // Maximum allowed recursion depth.
73 static cl::opt<uint32_t>
74 MaxRecurseDepth("max-recurse-depth", cl::Hidden, cl::init(1000), cl::ZeroOrMore,
75                 cl::desc("Max recurse depth (default = 1000)"));
76 
77 struct llvm::GVN::Expression {
78   uint32_t opcode;
79   Type *type;
80   SmallVector<uint32_t, 4> varargs;
81 
82   Expression(uint32_t o = ~2U) : opcode(o) {}
83 
84   bool operator==(const Expression &other) const {
85     if (opcode != other.opcode)
86       return false;
87     if (opcode == ~0U || opcode == ~1U)
88       return true;
89     if (type != other.type)
90       return false;
91     if (varargs != other.varargs)
92       return false;
93     return true;
94   }
95 
96   friend hash_code hash_value(const Expression &Value) {
97     return hash_combine(
98         Value.opcode, Value.type,
99         hash_combine_range(Value.varargs.begin(), Value.varargs.end()));
100   }
101 };
102 
103 namespace llvm {
104 template <> struct DenseMapInfo<GVN::Expression> {
105   static inline GVN::Expression getEmptyKey() { return ~0U; }
106 
107   static inline GVN::Expression getTombstoneKey() { return ~1U; }
108 
109   static unsigned getHashValue(const GVN::Expression e) {
110     using llvm::hash_value;
111     return static_cast<unsigned>(hash_value(e));
112   }
113   static bool isEqual(const GVN::Expression &LHS, const GVN::Expression &RHS) {
114     return LHS == RHS;
115   }
116 };
117 } // End llvm namespace.
118 
119 /// Represents a particular available value that we know how to materialize.
120 /// Materialization of an AvailableValue never fails.  An AvailableValue is
121 /// implicitly associated with a rematerialization point which is the
122 /// location of the instruction from which it was formed.
123 struct llvm::gvn::AvailableValue {
124   enum ValType {
125     SimpleVal, // A simple offsetted value that is accessed.
126     LoadVal,   // A value produced by a load.
127     MemIntrin, // A memory intrinsic which is loaded from.
128     UndefVal   // A UndefValue representing a value from dead block (which
129                // is not yet physically removed from the CFG).
130   };
131 
132   /// V - The value that is live out of the block.
133   PointerIntPair<Value *, 2, ValType> Val;
134 
135   /// Offset - The byte offset in Val that is interesting for the load query.
136   unsigned Offset;
137 
138   static AvailableValue get(Value *V, unsigned Offset = 0) {
139     AvailableValue Res;
140     Res.Val.setPointer(V);
141     Res.Val.setInt(SimpleVal);
142     Res.Offset = Offset;
143     return Res;
144   }
145 
146   static AvailableValue getMI(MemIntrinsic *MI, unsigned Offset = 0) {
147     AvailableValue Res;
148     Res.Val.setPointer(MI);
149     Res.Val.setInt(MemIntrin);
150     Res.Offset = Offset;
151     return Res;
152   }
153 
154   static AvailableValue getLoad(LoadInst *LI, unsigned Offset = 0) {
155     AvailableValue Res;
156     Res.Val.setPointer(LI);
157     Res.Val.setInt(LoadVal);
158     Res.Offset = Offset;
159     return Res;
160   }
161 
162   static AvailableValue getUndef() {
163     AvailableValue Res;
164     Res.Val.setPointer(nullptr);
165     Res.Val.setInt(UndefVal);
166     Res.Offset = 0;
167     return Res;
168   }
169 
170   bool isSimpleValue() const { return Val.getInt() == SimpleVal; }
171   bool isCoercedLoadValue() const { return Val.getInt() == LoadVal; }
172   bool isMemIntrinValue() const { return Val.getInt() == MemIntrin; }
173   bool isUndefValue() const { return Val.getInt() == UndefVal; }
174 
175   Value *getSimpleValue() const {
176     assert(isSimpleValue() && "Wrong accessor");
177     return Val.getPointer();
178   }
179 
180   LoadInst *getCoercedLoadValue() const {
181     assert(isCoercedLoadValue() && "Wrong accessor");
182     return cast<LoadInst>(Val.getPointer());
183   }
184 
185   MemIntrinsic *getMemIntrinValue() const {
186     assert(isMemIntrinValue() && "Wrong accessor");
187     return cast<MemIntrinsic>(Val.getPointer());
188   }
189 
190   /// Emit code at the specified insertion point to adjust the value defined
191   /// here to the specified type. This handles various coercion cases.
192   Value *MaterializeAdjustedValue(LoadInst *LI, Instruction *InsertPt,
193                                   GVN &gvn) const;
194 };
195 
196 /// Represents an AvailableValue which can be rematerialized at the end of
197 /// the associated BasicBlock.
198 struct llvm::gvn::AvailableValueInBlock {
199   /// BB - The basic block in question.
200   BasicBlock *BB;
201 
202   /// AV - The actual available value
203   AvailableValue AV;
204 
205   static AvailableValueInBlock get(BasicBlock *BB, AvailableValue &&AV) {
206     AvailableValueInBlock Res;
207     Res.BB = BB;
208     Res.AV = std::move(AV);
209     return Res;
210   }
211 
212   static AvailableValueInBlock get(BasicBlock *BB, Value *V,
213                                    unsigned Offset = 0) {
214     return get(BB, AvailableValue::get(V, Offset));
215   }
216   static AvailableValueInBlock getUndef(BasicBlock *BB) {
217     return get(BB, AvailableValue::getUndef());
218   }
219 
220   /// Emit code at the end of this block to adjust the value defined here to
221   /// the specified type. This handles various coercion cases.
222   Value *MaterializeAdjustedValue(LoadInst *LI, GVN &gvn) const {
223     return AV.MaterializeAdjustedValue(LI, BB->getTerminator(), gvn);
224   }
225 };
226 
227 //===----------------------------------------------------------------------===//
228 //                     ValueTable Internal Functions
229 //===----------------------------------------------------------------------===//
230 
231 GVN::Expression GVN::ValueTable::createExpr(Instruction *I) {
232   Expression e;
233   e.type = I->getType();
234   e.opcode = I->getOpcode();
235   for (Instruction::op_iterator OI = I->op_begin(), OE = I->op_end();
236        OI != OE; ++OI)
237     e.varargs.push_back(lookupOrAdd(*OI));
238   if (I->isCommutative()) {
239     // Ensure that commutative instructions that only differ by a permutation
240     // of their operands get the same value number by sorting the operand value
241     // numbers.  Since all commutative instructions have two operands it is more
242     // efficient to sort by hand rather than using, say, std::sort.
243     assert(I->getNumOperands() == 2 && "Unsupported commutative instruction!");
244     if (e.varargs[0] > e.varargs[1])
245       std::swap(e.varargs[0], e.varargs[1]);
246   }
247 
248   if (CmpInst *C = dyn_cast<CmpInst>(I)) {
249     // Sort the operand value numbers so x<y and y>x get the same value number.
250     CmpInst::Predicate Predicate = C->getPredicate();
251     if (e.varargs[0] > e.varargs[1]) {
252       std::swap(e.varargs[0], e.varargs[1]);
253       Predicate = CmpInst::getSwappedPredicate(Predicate);
254     }
255     e.opcode = (C->getOpcode() << 8) | Predicate;
256   } else if (InsertValueInst *E = dyn_cast<InsertValueInst>(I)) {
257     for (InsertValueInst::idx_iterator II = E->idx_begin(), IE = E->idx_end();
258          II != IE; ++II)
259       e.varargs.push_back(*II);
260   }
261 
262   return e;
263 }
264 
265 GVN::Expression GVN::ValueTable::createCmpExpr(unsigned Opcode,
266                                                CmpInst::Predicate Predicate,
267                                                Value *LHS, Value *RHS) {
268   assert((Opcode == Instruction::ICmp || Opcode == Instruction::FCmp) &&
269          "Not a comparison!");
270   Expression e;
271   e.type = CmpInst::makeCmpResultType(LHS->getType());
272   e.varargs.push_back(lookupOrAdd(LHS));
273   e.varargs.push_back(lookupOrAdd(RHS));
274 
275   // Sort the operand value numbers so x<y and y>x get the same value number.
276   if (e.varargs[0] > e.varargs[1]) {
277     std::swap(e.varargs[0], e.varargs[1]);
278     Predicate = CmpInst::getSwappedPredicate(Predicate);
279   }
280   e.opcode = (Opcode << 8) | Predicate;
281   return e;
282 }
283 
284 GVN::Expression GVN::ValueTable::createExtractvalueExpr(ExtractValueInst *EI) {
285   assert(EI && "Not an ExtractValueInst?");
286   Expression e;
287   e.type = EI->getType();
288   e.opcode = 0;
289 
290   IntrinsicInst *I = dyn_cast<IntrinsicInst>(EI->getAggregateOperand());
291   if (I != nullptr && EI->getNumIndices() == 1 && *EI->idx_begin() == 0 ) {
292     // EI might be an extract from one of our recognised intrinsics. If it
293     // is we'll synthesize a semantically equivalent expression instead on
294     // an extract value expression.
295     switch (I->getIntrinsicID()) {
296       case Intrinsic::sadd_with_overflow:
297       case Intrinsic::uadd_with_overflow:
298         e.opcode = Instruction::Add;
299         break;
300       case Intrinsic::ssub_with_overflow:
301       case Intrinsic::usub_with_overflow:
302         e.opcode = Instruction::Sub;
303         break;
304       case Intrinsic::smul_with_overflow:
305       case Intrinsic::umul_with_overflow:
306         e.opcode = Instruction::Mul;
307         break;
308       default:
309         break;
310     }
311 
312     if (e.opcode != 0) {
313       // Intrinsic recognized. Grab its args to finish building the expression.
314       assert(I->getNumArgOperands() == 2 &&
315              "Expect two args for recognised intrinsics.");
316       e.varargs.push_back(lookupOrAdd(I->getArgOperand(0)));
317       e.varargs.push_back(lookupOrAdd(I->getArgOperand(1)));
318       return e;
319     }
320   }
321 
322   // Not a recognised intrinsic. Fall back to producing an extract value
323   // expression.
324   e.opcode = EI->getOpcode();
325   for (Instruction::op_iterator OI = EI->op_begin(), OE = EI->op_end();
326        OI != OE; ++OI)
327     e.varargs.push_back(lookupOrAdd(*OI));
328 
329   for (ExtractValueInst::idx_iterator II = EI->idx_begin(), IE = EI->idx_end();
330          II != IE; ++II)
331     e.varargs.push_back(*II);
332 
333   return e;
334 }
335 
336 //===----------------------------------------------------------------------===//
337 //                     ValueTable External Functions
338 //===----------------------------------------------------------------------===//
339 
340 GVN::ValueTable::ValueTable() : nextValueNumber(1) {}
341 GVN::ValueTable::ValueTable(const ValueTable &Arg)
342     : valueNumbering(Arg.valueNumbering),
343       expressionNumbering(Arg.expressionNumbering), AA(Arg.AA), MD(Arg.MD),
344       DT(Arg.DT), nextValueNumber(Arg.nextValueNumber) {}
345 GVN::ValueTable::ValueTable(ValueTable &&Arg)
346     : valueNumbering(std::move(Arg.valueNumbering)),
347       expressionNumbering(std::move(Arg.expressionNumbering)),
348       AA(std::move(Arg.AA)), MD(std::move(Arg.MD)), DT(std::move(Arg.DT)),
349       nextValueNumber(std::move(Arg.nextValueNumber)) {}
350 GVN::ValueTable::~ValueTable() {}
351 
352 /// add - Insert a value into the table with a specified value number.
353 void GVN::ValueTable::add(Value *V, uint32_t num) {
354   valueNumbering.insert(std::make_pair(V, num));
355 }
356 
357 uint32_t GVN::ValueTable::lookupOrAddCall(CallInst *C) {
358   if (AA->doesNotAccessMemory(C)) {
359     Expression exp = createExpr(C);
360     uint32_t &e = expressionNumbering[exp];
361     if (!e) e = nextValueNumber++;
362     valueNumbering[C] = e;
363     return e;
364   } else if (AA->onlyReadsMemory(C)) {
365     Expression exp = createExpr(C);
366     uint32_t &e = expressionNumbering[exp];
367     if (!e) {
368       e = nextValueNumber++;
369       valueNumbering[C] = e;
370       return e;
371     }
372     if (!MD) {
373       e = nextValueNumber++;
374       valueNumbering[C] = e;
375       return e;
376     }
377 
378     MemDepResult local_dep = MD->getDependency(C);
379 
380     if (!local_dep.isDef() && !local_dep.isNonLocal()) {
381       valueNumbering[C] =  nextValueNumber;
382       return nextValueNumber++;
383     }
384 
385     if (local_dep.isDef()) {
386       CallInst* local_cdep = cast<CallInst>(local_dep.getInst());
387 
388       if (local_cdep->getNumArgOperands() != C->getNumArgOperands()) {
389         valueNumbering[C] = nextValueNumber;
390         return nextValueNumber++;
391       }
392 
393       for (unsigned i = 0, e = C->getNumArgOperands(); i < e; ++i) {
394         uint32_t c_vn = lookupOrAdd(C->getArgOperand(i));
395         uint32_t cd_vn = lookupOrAdd(local_cdep->getArgOperand(i));
396         if (c_vn != cd_vn) {
397           valueNumbering[C] = nextValueNumber;
398           return nextValueNumber++;
399         }
400       }
401 
402       uint32_t v = lookupOrAdd(local_cdep);
403       valueNumbering[C] = v;
404       return v;
405     }
406 
407     // Non-local case.
408     const MemoryDependenceResults::NonLocalDepInfo &deps =
409       MD->getNonLocalCallDependency(CallSite(C));
410     // FIXME: Move the checking logic to MemDep!
411     CallInst* cdep = nullptr;
412 
413     // Check to see if we have a single dominating call instruction that is
414     // identical to C.
415     for (unsigned i = 0, e = deps.size(); i != e; ++i) {
416       const NonLocalDepEntry *I = &deps[i];
417       if (I->getResult().isNonLocal())
418         continue;
419 
420       // We don't handle non-definitions.  If we already have a call, reject
421       // instruction dependencies.
422       if (!I->getResult().isDef() || cdep != nullptr) {
423         cdep = nullptr;
424         break;
425       }
426 
427       CallInst *NonLocalDepCall = dyn_cast<CallInst>(I->getResult().getInst());
428       // FIXME: All duplicated with non-local case.
429       if (NonLocalDepCall && DT->properlyDominates(I->getBB(), C->getParent())){
430         cdep = NonLocalDepCall;
431         continue;
432       }
433 
434       cdep = nullptr;
435       break;
436     }
437 
438     if (!cdep) {
439       valueNumbering[C] = nextValueNumber;
440       return nextValueNumber++;
441     }
442 
443     if (cdep->getNumArgOperands() != C->getNumArgOperands()) {
444       valueNumbering[C] = nextValueNumber;
445       return nextValueNumber++;
446     }
447     for (unsigned i = 0, e = C->getNumArgOperands(); i < e; ++i) {
448       uint32_t c_vn = lookupOrAdd(C->getArgOperand(i));
449       uint32_t cd_vn = lookupOrAdd(cdep->getArgOperand(i));
450       if (c_vn != cd_vn) {
451         valueNumbering[C] = nextValueNumber;
452         return nextValueNumber++;
453       }
454     }
455 
456     uint32_t v = lookupOrAdd(cdep);
457     valueNumbering[C] = v;
458     return v;
459 
460   } else {
461     valueNumbering[C] = nextValueNumber;
462     return nextValueNumber++;
463   }
464 }
465 
466 /// Returns true if a value number exists for the specified value.
467 bool GVN::ValueTable::exists(Value *V) const { return valueNumbering.count(V) != 0; }
468 
469 /// lookup_or_add - Returns the value number for the specified value, assigning
470 /// it a new number if it did not have one before.
471 uint32_t GVN::ValueTable::lookupOrAdd(Value *V) {
472   DenseMap<Value*, uint32_t>::iterator VI = valueNumbering.find(V);
473   if (VI != valueNumbering.end())
474     return VI->second;
475 
476   if (!isa<Instruction>(V)) {
477     valueNumbering[V] = nextValueNumber;
478     return nextValueNumber++;
479   }
480 
481   Instruction* I = cast<Instruction>(V);
482   Expression exp;
483   switch (I->getOpcode()) {
484     case Instruction::Call:
485       return lookupOrAddCall(cast<CallInst>(I));
486     case Instruction::Add:
487     case Instruction::FAdd:
488     case Instruction::Sub:
489     case Instruction::FSub:
490     case Instruction::Mul:
491     case Instruction::FMul:
492     case Instruction::UDiv:
493     case Instruction::SDiv:
494     case Instruction::FDiv:
495     case Instruction::URem:
496     case Instruction::SRem:
497     case Instruction::FRem:
498     case Instruction::Shl:
499     case Instruction::LShr:
500     case Instruction::AShr:
501     case Instruction::And:
502     case Instruction::Or:
503     case Instruction::Xor:
504     case Instruction::ICmp:
505     case Instruction::FCmp:
506     case Instruction::Trunc:
507     case Instruction::ZExt:
508     case Instruction::SExt:
509     case Instruction::FPToUI:
510     case Instruction::FPToSI:
511     case Instruction::UIToFP:
512     case Instruction::SIToFP:
513     case Instruction::FPTrunc:
514     case Instruction::FPExt:
515     case Instruction::PtrToInt:
516     case Instruction::IntToPtr:
517     case Instruction::BitCast:
518     case Instruction::Select:
519     case Instruction::ExtractElement:
520     case Instruction::InsertElement:
521     case Instruction::ShuffleVector:
522     case Instruction::InsertValue:
523     case Instruction::GetElementPtr:
524       exp = createExpr(I);
525       break;
526     case Instruction::ExtractValue:
527       exp = createExtractvalueExpr(cast<ExtractValueInst>(I));
528       break;
529     default:
530       valueNumbering[V] = nextValueNumber;
531       return nextValueNumber++;
532   }
533 
534   uint32_t& e = expressionNumbering[exp];
535   if (!e) e = nextValueNumber++;
536   valueNumbering[V] = e;
537   return e;
538 }
539 
540 /// Returns the value number of the specified value. Fails if
541 /// the value has not yet been numbered.
542 uint32_t GVN::ValueTable::lookup(Value *V) const {
543   DenseMap<Value*, uint32_t>::const_iterator VI = valueNumbering.find(V);
544   assert(VI != valueNumbering.end() && "Value not numbered?");
545   return VI->second;
546 }
547 
548 /// Returns the value number of the given comparison,
549 /// assigning it a new number if it did not have one before.  Useful when
550 /// we deduced the result of a comparison, but don't immediately have an
551 /// instruction realizing that comparison to hand.
552 uint32_t GVN::ValueTable::lookupOrAddCmp(unsigned Opcode,
553                                          CmpInst::Predicate Predicate,
554                                          Value *LHS, Value *RHS) {
555   Expression exp = createCmpExpr(Opcode, Predicate, LHS, RHS);
556   uint32_t& e = expressionNumbering[exp];
557   if (!e) e = nextValueNumber++;
558   return e;
559 }
560 
561 /// Remove all entries from the ValueTable.
562 void GVN::ValueTable::clear() {
563   valueNumbering.clear();
564   expressionNumbering.clear();
565   nextValueNumber = 1;
566 }
567 
568 /// Remove a value from the value numbering.
569 void GVN::ValueTable::erase(Value *V) {
570   valueNumbering.erase(V);
571 }
572 
573 /// verifyRemoved - Verify that the value is removed from all internal data
574 /// structures.
575 void GVN::ValueTable::verifyRemoved(const Value *V) const {
576   for (DenseMap<Value*, uint32_t>::const_iterator
577          I = valueNumbering.begin(), E = valueNumbering.end(); I != E; ++I) {
578     assert(I->first != V && "Inst still occurs in value numbering map!");
579   }
580 }
581 
582 //===----------------------------------------------------------------------===//
583 //                                GVN Pass
584 //===----------------------------------------------------------------------===//
585 
586 PreservedAnalyses GVN::run(Function &F, AnalysisManager<Function> &AM) {
587   // FIXME: The order of evaluation of these 'getResult' calls is very
588   // significant! Re-ordering these variables will cause GVN when run alone to
589   // be less effective! We should fix memdep and basic-aa to not exhibit this
590   // behavior, but until then don't change the order here.
591   auto &AC = AM.getResult<AssumptionAnalysis>(F);
592   auto &DT = AM.getResult<DominatorTreeAnalysis>(F);
593   auto &TLI = AM.getResult<TargetLibraryAnalysis>(F);
594   auto &AA = AM.getResult<AAManager>(F);
595   auto &MemDep = AM.getResult<MemoryDependenceAnalysis>(F);
596   bool Changed = runImpl(F, AC, DT, TLI, AA, &MemDep);
597   return Changed ? PreservedAnalyses::none() : PreservedAnalyses::all();
598 }
599 
600 #if !defined(NDEBUG) || defined(LLVM_ENABLE_DUMP)
601 void GVN::dump(DenseMap<uint32_t, Value*>& d) {
602   errs() << "{\n";
603   for (DenseMap<uint32_t, Value*>::iterator I = d.begin(),
604        E = d.end(); I != E; ++I) {
605       errs() << I->first << "\n";
606       I->second->dump();
607   }
608   errs() << "}\n";
609 }
610 #endif
611 
612 /// Return true if we can prove that the value
613 /// we're analyzing is fully available in the specified block.  As we go, keep
614 /// track of which blocks we know are fully alive in FullyAvailableBlocks.  This
615 /// map is actually a tri-state map with the following values:
616 ///   0) we know the block *is not* fully available.
617 ///   1) we know the block *is* fully available.
618 ///   2) we do not know whether the block is fully available or not, but we are
619 ///      currently speculating that it will be.
620 ///   3) we are speculating for this block and have used that to speculate for
621 ///      other blocks.
622 static bool IsValueFullyAvailableInBlock(BasicBlock *BB,
623                             DenseMap<BasicBlock*, char> &FullyAvailableBlocks,
624                             uint32_t RecurseDepth) {
625   if (RecurseDepth > MaxRecurseDepth)
626     return false;
627 
628   // Optimistically assume that the block is fully available and check to see
629   // if we already know about this block in one lookup.
630   std::pair<DenseMap<BasicBlock*, char>::iterator, char> IV =
631     FullyAvailableBlocks.insert(std::make_pair(BB, 2));
632 
633   // If the entry already existed for this block, return the precomputed value.
634   if (!IV.second) {
635     // If this is a speculative "available" value, mark it as being used for
636     // speculation of other blocks.
637     if (IV.first->second == 2)
638       IV.first->second = 3;
639     return IV.first->second != 0;
640   }
641 
642   // Otherwise, see if it is fully available in all predecessors.
643   pred_iterator PI = pred_begin(BB), PE = pred_end(BB);
644 
645   // If this block has no predecessors, it isn't live-in here.
646   if (PI == PE)
647     goto SpeculationFailure;
648 
649   for (; PI != PE; ++PI)
650     // If the value isn't fully available in one of our predecessors, then it
651     // isn't fully available in this block either.  Undo our previous
652     // optimistic assumption and bail out.
653     if (!IsValueFullyAvailableInBlock(*PI, FullyAvailableBlocks,RecurseDepth+1))
654       goto SpeculationFailure;
655 
656   return true;
657 
658 // If we get here, we found out that this is not, after
659 // all, a fully-available block.  We have a problem if we speculated on this and
660 // used the speculation to mark other blocks as available.
661 SpeculationFailure:
662   char &BBVal = FullyAvailableBlocks[BB];
663 
664   // If we didn't speculate on this, just return with it set to false.
665   if (BBVal == 2) {
666     BBVal = 0;
667     return false;
668   }
669 
670   // If we did speculate on this value, we could have blocks set to 1 that are
671   // incorrect.  Walk the (transitive) successors of this block and mark them as
672   // 0 if set to one.
673   SmallVector<BasicBlock*, 32> BBWorklist;
674   BBWorklist.push_back(BB);
675 
676   do {
677     BasicBlock *Entry = BBWorklist.pop_back_val();
678     // Note that this sets blocks to 0 (unavailable) if they happen to not
679     // already be in FullyAvailableBlocks.  This is safe.
680     char &EntryVal = FullyAvailableBlocks[Entry];
681     if (EntryVal == 0) continue;  // Already unavailable.
682 
683     // Mark as unavailable.
684     EntryVal = 0;
685 
686     BBWorklist.append(succ_begin(Entry), succ_end(Entry));
687   } while (!BBWorklist.empty());
688 
689   return false;
690 }
691 
692 
693 /// Return true if CoerceAvailableValueToLoadType will succeed.
694 static bool CanCoerceMustAliasedValueToLoad(Value *StoredVal,
695                                             Type *LoadTy,
696                                             const DataLayout &DL) {
697   // If the loaded or stored value is an first class array or struct, don't try
698   // to transform them.  We need to be able to bitcast to integer.
699   if (LoadTy->isStructTy() || LoadTy->isArrayTy() ||
700       StoredVal->getType()->isStructTy() ||
701       StoredVal->getType()->isArrayTy())
702     return false;
703 
704   // The store has to be at least as big as the load.
705   if (DL.getTypeSizeInBits(StoredVal->getType()) <
706         DL.getTypeSizeInBits(LoadTy))
707     return false;
708 
709   return true;
710 }
711 
712 /// If we saw a store of a value to memory, and
713 /// then a load from a must-aliased pointer of a different type, try to coerce
714 /// the stored value.  LoadedTy is the type of the load we want to replace.
715 /// IRB is IRBuilder used to insert new instructions.
716 ///
717 /// If we can't do it, return null.
718 static Value *CoerceAvailableValueToLoadType(Value *StoredVal, Type *LoadedTy,
719                                              IRBuilder<> &IRB,
720                                              const DataLayout &DL) {
721   assert(CanCoerceMustAliasedValueToLoad(StoredVal, LoadedTy, DL) &&
722          "precondition violation - materialization can't fail");
723 
724   // If this is already the right type, just return it.
725   Type *StoredValTy = StoredVal->getType();
726 
727   uint64_t StoredValSize = DL.getTypeSizeInBits(StoredValTy);
728   uint64_t LoadedValSize = DL.getTypeSizeInBits(LoadedTy);
729 
730   // If the store and reload are the same size, we can always reuse it.
731   if (StoredValSize == LoadedValSize) {
732     // Pointer to Pointer -> use bitcast.
733     if (StoredValTy->getScalarType()->isPointerTy() &&
734         LoadedTy->getScalarType()->isPointerTy())
735       return IRB.CreateBitCast(StoredVal, LoadedTy);
736 
737     // Convert source pointers to integers, which can be bitcast.
738     if (StoredValTy->getScalarType()->isPointerTy()) {
739       StoredValTy = DL.getIntPtrType(StoredValTy);
740       StoredVal = IRB.CreatePtrToInt(StoredVal, StoredValTy);
741     }
742 
743     Type *TypeToCastTo = LoadedTy;
744     if (TypeToCastTo->getScalarType()->isPointerTy())
745       TypeToCastTo = DL.getIntPtrType(TypeToCastTo);
746 
747     if (StoredValTy != TypeToCastTo)
748       StoredVal = IRB.CreateBitCast(StoredVal, TypeToCastTo);
749 
750     // Cast to pointer if the load needs a pointer type.
751     if (LoadedTy->getScalarType()->isPointerTy())
752       StoredVal = IRB.CreateIntToPtr(StoredVal, LoadedTy);
753 
754     return StoredVal;
755   }
756 
757   // If the loaded value is smaller than the available value, then we can
758   // extract out a piece from it.  If the available value is too small, then we
759   // can't do anything.
760   assert(StoredValSize >= LoadedValSize &&
761          "CanCoerceMustAliasedValueToLoad fail");
762 
763   // Convert source pointers to integers, which can be manipulated.
764   if (StoredValTy->getScalarType()->isPointerTy()) {
765     StoredValTy = DL.getIntPtrType(StoredValTy);
766     StoredVal = IRB.CreatePtrToInt(StoredVal, StoredValTy);
767   }
768 
769   // Convert vectors and fp to integer, which can be manipulated.
770   if (!StoredValTy->isIntegerTy()) {
771     StoredValTy = IntegerType::get(StoredValTy->getContext(), StoredValSize);
772     StoredVal = IRB.CreateBitCast(StoredVal, StoredValTy);
773   }
774 
775   // If this is a big-endian system, we need to shift the value down to the low
776   // bits so that a truncate will work.
777   if (DL.isBigEndian()) {
778     uint64_t ShiftAmt = DL.getTypeStoreSizeInBits(StoredValTy) -
779                         DL.getTypeStoreSizeInBits(LoadedTy);
780     StoredVal = IRB.CreateLShr(StoredVal, ShiftAmt, "tmp");
781   }
782 
783   // Truncate the integer to the right size now.
784   Type *NewIntTy = IntegerType::get(StoredValTy->getContext(), LoadedValSize);
785   StoredVal  = IRB.CreateTrunc(StoredVal, NewIntTy, "trunc");
786 
787   if (LoadedTy == NewIntTy)
788     return StoredVal;
789 
790   // If the result is a pointer, inttoptr.
791   if (LoadedTy->getScalarType()->isPointerTy())
792     return IRB.CreateIntToPtr(StoredVal, LoadedTy, "inttoptr");
793 
794   // Otherwise, bitcast.
795   return IRB.CreateBitCast(StoredVal, LoadedTy, "bitcast");
796 }
797 
798 /// This function is called when we have a
799 /// memdep query of a load that ends up being a clobbering memory write (store,
800 /// memset, memcpy, memmove).  This means that the write *may* provide bits used
801 /// by the load but we can't be sure because the pointers don't mustalias.
802 ///
803 /// Check this case to see if there is anything more we can do before we give
804 /// up.  This returns -1 if we have to give up, or a byte number in the stored
805 /// value of the piece that feeds the load.
806 static int AnalyzeLoadFromClobberingWrite(Type *LoadTy, Value *LoadPtr,
807                                           Value *WritePtr,
808                                           uint64_t WriteSizeInBits,
809                                           const DataLayout &DL) {
810   // If the loaded or stored value is a first class array or struct, don't try
811   // to transform them.  We need to be able to bitcast to integer.
812   if (LoadTy->isStructTy() || LoadTy->isArrayTy())
813     return -1;
814 
815   int64_t StoreOffset = 0, LoadOffset = 0;
816   Value *StoreBase =
817       GetPointerBaseWithConstantOffset(WritePtr, StoreOffset, DL);
818   Value *LoadBase = GetPointerBaseWithConstantOffset(LoadPtr, LoadOffset, DL);
819   if (StoreBase != LoadBase)
820     return -1;
821 
822   // If the load and store are to the exact same address, they should have been
823   // a must alias.  AA must have gotten confused.
824   // FIXME: Study to see if/when this happens.  One case is forwarding a memset
825   // to a load from the base of the memset.
826 #if 0
827   if (LoadOffset == StoreOffset) {
828     dbgs() << "STORE/LOAD DEP WITH COMMON POINTER MISSED:\n"
829     << "Base       = " << *StoreBase << "\n"
830     << "Store Ptr  = " << *WritePtr << "\n"
831     << "Store Offs = " << StoreOffset << "\n"
832     << "Load Ptr   = " << *LoadPtr << "\n";
833     abort();
834   }
835 #endif
836 
837   // If the load and store don't overlap at all, the store doesn't provide
838   // anything to the load.  In this case, they really don't alias at all, AA
839   // must have gotten confused.
840   uint64_t LoadSize = DL.getTypeSizeInBits(LoadTy);
841 
842   if ((WriteSizeInBits & 7) | (LoadSize & 7))
843     return -1;
844   uint64_t StoreSize = WriteSizeInBits >> 3;  // Convert to bytes.
845   LoadSize >>= 3;
846 
847 
848   bool isAAFailure = false;
849   if (StoreOffset < LoadOffset)
850     isAAFailure = StoreOffset+int64_t(StoreSize) <= LoadOffset;
851   else
852     isAAFailure = LoadOffset+int64_t(LoadSize) <= StoreOffset;
853 
854   if (isAAFailure) {
855 #if 0
856     dbgs() << "STORE LOAD DEP WITH COMMON BASE:\n"
857     << "Base       = " << *StoreBase << "\n"
858     << "Store Ptr  = " << *WritePtr << "\n"
859     << "Store Offs = " << StoreOffset << "\n"
860     << "Load Ptr   = " << *LoadPtr << "\n";
861     abort();
862 #endif
863     return -1;
864   }
865 
866   // If the Load isn't completely contained within the stored bits, we don't
867   // have all the bits to feed it.  We could do something crazy in the future
868   // (issue a smaller load then merge the bits in) but this seems unlikely to be
869   // valuable.
870   if (StoreOffset > LoadOffset ||
871       StoreOffset+StoreSize < LoadOffset+LoadSize)
872     return -1;
873 
874   // Okay, we can do this transformation.  Return the number of bytes into the
875   // store that the load is.
876   return LoadOffset-StoreOffset;
877 }
878 
879 /// This function is called when we have a
880 /// memdep query of a load that ends up being a clobbering store.
881 static int AnalyzeLoadFromClobberingStore(Type *LoadTy, Value *LoadPtr,
882                                           StoreInst *DepSI) {
883   // Cannot handle reading from store of first-class aggregate yet.
884   if (DepSI->getValueOperand()->getType()->isStructTy() ||
885       DepSI->getValueOperand()->getType()->isArrayTy())
886     return -1;
887 
888   const DataLayout &DL = DepSI->getModule()->getDataLayout();
889   Value *StorePtr = DepSI->getPointerOperand();
890   uint64_t StoreSize =DL.getTypeSizeInBits(DepSI->getValueOperand()->getType());
891   return AnalyzeLoadFromClobberingWrite(LoadTy, LoadPtr,
892                                         StorePtr, StoreSize, DL);
893 }
894 
895 /// This function is called when we have a
896 /// memdep query of a load that ends up being clobbered by another load.  See if
897 /// the other load can feed into the second load.
898 static int AnalyzeLoadFromClobberingLoad(Type *LoadTy, Value *LoadPtr,
899                                          LoadInst *DepLI, const DataLayout &DL){
900   // Cannot handle reading from store of first-class aggregate yet.
901   if (DepLI->getType()->isStructTy() || DepLI->getType()->isArrayTy())
902     return -1;
903 
904   Value *DepPtr = DepLI->getPointerOperand();
905   uint64_t DepSize = DL.getTypeSizeInBits(DepLI->getType());
906   int R = AnalyzeLoadFromClobberingWrite(LoadTy, LoadPtr, DepPtr, DepSize, DL);
907   if (R != -1) return R;
908 
909   // If we have a load/load clobber an DepLI can be widened to cover this load,
910   // then we should widen it!
911   int64_t LoadOffs = 0;
912   const Value *LoadBase =
913       GetPointerBaseWithConstantOffset(LoadPtr, LoadOffs, DL);
914   unsigned LoadSize = DL.getTypeStoreSize(LoadTy);
915 
916   unsigned Size = MemoryDependenceResults::getLoadLoadClobberFullWidthSize(
917       LoadBase, LoadOffs, LoadSize, DepLI);
918   if (Size == 0) return -1;
919 
920   // Check non-obvious conditions enforced by MDA which we rely on for being
921   // able to materialize this potentially available value
922   assert(DepLI->isSimple() && "Cannot widen volatile/atomic load!");
923   assert(DepLI->getType()->isIntegerTy() && "Can't widen non-integer load");
924 
925   return AnalyzeLoadFromClobberingWrite(LoadTy, LoadPtr, DepPtr, Size*8, DL);
926 }
927 
928 
929 
930 static int AnalyzeLoadFromClobberingMemInst(Type *LoadTy, Value *LoadPtr,
931                                             MemIntrinsic *MI,
932                                             const DataLayout &DL) {
933   // If the mem operation is a non-constant size, we can't handle it.
934   ConstantInt *SizeCst = dyn_cast<ConstantInt>(MI->getLength());
935   if (!SizeCst) return -1;
936   uint64_t MemSizeInBits = SizeCst->getZExtValue()*8;
937 
938   // If this is memset, we just need to see if the offset is valid in the size
939   // of the memset..
940   if (MI->getIntrinsicID() == Intrinsic::memset)
941     return AnalyzeLoadFromClobberingWrite(LoadTy, LoadPtr, MI->getDest(),
942                                           MemSizeInBits, DL);
943 
944   // If we have a memcpy/memmove, the only case we can handle is if this is a
945   // copy from constant memory.  In that case, we can read directly from the
946   // constant memory.
947   MemTransferInst *MTI = cast<MemTransferInst>(MI);
948 
949   Constant *Src = dyn_cast<Constant>(MTI->getSource());
950   if (!Src) return -1;
951 
952   GlobalVariable *GV = dyn_cast<GlobalVariable>(GetUnderlyingObject(Src, DL));
953   if (!GV || !GV->isConstant()) return -1;
954 
955   // See if the access is within the bounds of the transfer.
956   int Offset = AnalyzeLoadFromClobberingWrite(LoadTy, LoadPtr,
957                                               MI->getDest(), MemSizeInBits, DL);
958   if (Offset == -1)
959     return Offset;
960 
961   unsigned AS = Src->getType()->getPointerAddressSpace();
962   // Otherwise, see if we can constant fold a load from the constant with the
963   // offset applied as appropriate.
964   Src = ConstantExpr::getBitCast(Src,
965                                  Type::getInt8PtrTy(Src->getContext(), AS));
966   Constant *OffsetCst =
967     ConstantInt::get(Type::getInt64Ty(Src->getContext()), (unsigned)Offset);
968   Src = ConstantExpr::getGetElementPtr(Type::getInt8Ty(Src->getContext()), Src,
969                                        OffsetCst);
970   Src = ConstantExpr::getBitCast(Src, PointerType::get(LoadTy, AS));
971   if (ConstantFoldLoadFromConstPtr(Src, LoadTy, DL))
972     return Offset;
973   return -1;
974 }
975 
976 
977 /// This function is called when we have a
978 /// memdep query of a load that ends up being a clobbering store.  This means
979 /// that the store provides bits used by the load but we the pointers don't
980 /// mustalias.  Check this case to see if there is anything more we can do
981 /// before we give up.
982 static Value *GetStoreValueForLoad(Value *SrcVal, unsigned Offset,
983                                    Type *LoadTy,
984                                    Instruction *InsertPt, const DataLayout &DL){
985   LLVMContext &Ctx = SrcVal->getType()->getContext();
986 
987   uint64_t StoreSize = (DL.getTypeSizeInBits(SrcVal->getType()) + 7) / 8;
988   uint64_t LoadSize = (DL.getTypeSizeInBits(LoadTy) + 7) / 8;
989 
990   IRBuilder<> Builder(InsertPt);
991 
992   // Compute which bits of the stored value are being used by the load.  Convert
993   // to an integer type to start with.
994   if (SrcVal->getType()->getScalarType()->isPointerTy())
995     SrcVal = Builder.CreatePtrToInt(SrcVal,
996         DL.getIntPtrType(SrcVal->getType()));
997   if (!SrcVal->getType()->isIntegerTy())
998     SrcVal = Builder.CreateBitCast(SrcVal, IntegerType::get(Ctx, StoreSize*8));
999 
1000   // Shift the bits to the least significant depending on endianness.
1001   unsigned ShiftAmt;
1002   if (DL.isLittleEndian())
1003     ShiftAmt = Offset*8;
1004   else
1005     ShiftAmt = (StoreSize-LoadSize-Offset)*8;
1006 
1007   if (ShiftAmt)
1008     SrcVal = Builder.CreateLShr(SrcVal, ShiftAmt);
1009 
1010   if (LoadSize != StoreSize)
1011     SrcVal = Builder.CreateTrunc(SrcVal, IntegerType::get(Ctx, LoadSize*8));
1012 
1013   return CoerceAvailableValueToLoadType(SrcVal, LoadTy, Builder, DL);
1014 }
1015 
1016 /// This function is called when we have a
1017 /// memdep query of a load that ends up being a clobbering load.  This means
1018 /// that the load *may* provide bits used by the load but we can't be sure
1019 /// because the pointers don't mustalias.  Check this case to see if there is
1020 /// anything more we can do before we give up.
1021 static Value *GetLoadValueForLoad(LoadInst *SrcVal, unsigned Offset,
1022                                   Type *LoadTy, Instruction *InsertPt,
1023                                   GVN &gvn) {
1024   const DataLayout &DL = SrcVal->getModule()->getDataLayout();
1025   // If Offset+LoadTy exceeds the size of SrcVal, then we must be wanting to
1026   // widen SrcVal out to a larger load.
1027   unsigned SrcValStoreSize = DL.getTypeStoreSize(SrcVal->getType());
1028   unsigned LoadSize = DL.getTypeStoreSize(LoadTy);
1029   if (Offset+LoadSize > SrcValStoreSize) {
1030     assert(SrcVal->isSimple() && "Cannot widen volatile/atomic load!");
1031     assert(SrcVal->getType()->isIntegerTy() && "Can't widen non-integer load");
1032     // If we have a load/load clobber an DepLI can be widened to cover this
1033     // load, then we should widen it to the next power of 2 size big enough!
1034     unsigned NewLoadSize = Offset+LoadSize;
1035     if (!isPowerOf2_32(NewLoadSize))
1036       NewLoadSize = NextPowerOf2(NewLoadSize);
1037 
1038     Value *PtrVal = SrcVal->getPointerOperand();
1039 
1040     // Insert the new load after the old load.  This ensures that subsequent
1041     // memdep queries will find the new load.  We can't easily remove the old
1042     // load completely because it is already in the value numbering table.
1043     IRBuilder<> Builder(SrcVal->getParent(), ++BasicBlock::iterator(SrcVal));
1044     Type *DestPTy =
1045       IntegerType::get(LoadTy->getContext(), NewLoadSize*8);
1046     DestPTy = PointerType::get(DestPTy,
1047                                PtrVal->getType()->getPointerAddressSpace());
1048     Builder.SetCurrentDebugLocation(SrcVal->getDebugLoc());
1049     PtrVal = Builder.CreateBitCast(PtrVal, DestPTy);
1050     LoadInst *NewLoad = Builder.CreateLoad(PtrVal);
1051     NewLoad->takeName(SrcVal);
1052     NewLoad->setAlignment(SrcVal->getAlignment());
1053 
1054     DEBUG(dbgs() << "GVN WIDENED LOAD: " << *SrcVal << "\n");
1055     DEBUG(dbgs() << "TO: " << *NewLoad << "\n");
1056 
1057     // Replace uses of the original load with the wider load.  On a big endian
1058     // system, we need to shift down to get the relevant bits.
1059     Value *RV = NewLoad;
1060     if (DL.isBigEndian())
1061       RV = Builder.CreateLShr(RV, (NewLoadSize - SrcValStoreSize) * 8);
1062     RV = Builder.CreateTrunc(RV, SrcVal->getType());
1063     SrcVal->replaceAllUsesWith(RV);
1064 
1065     // We would like to use gvn.markInstructionForDeletion here, but we can't
1066     // because the load is already memoized into the leader map table that GVN
1067     // tracks.  It is potentially possible to remove the load from the table,
1068     // but then there all of the operations based on it would need to be
1069     // rehashed.  Just leave the dead load around.
1070     gvn.getMemDep().removeInstruction(SrcVal);
1071     SrcVal = NewLoad;
1072   }
1073 
1074   return GetStoreValueForLoad(SrcVal, Offset, LoadTy, InsertPt, DL);
1075 }
1076 
1077 
1078 /// This function is called when we have a
1079 /// memdep query of a load that ends up being a clobbering mem intrinsic.
1080 static Value *GetMemInstValueForLoad(MemIntrinsic *SrcInst, unsigned Offset,
1081                                      Type *LoadTy, Instruction *InsertPt,
1082                                      const DataLayout &DL){
1083   LLVMContext &Ctx = LoadTy->getContext();
1084   uint64_t LoadSize = DL.getTypeSizeInBits(LoadTy)/8;
1085 
1086   IRBuilder<> Builder(InsertPt);
1087 
1088   // We know that this method is only called when the mem transfer fully
1089   // provides the bits for the load.
1090   if (MemSetInst *MSI = dyn_cast<MemSetInst>(SrcInst)) {
1091     // memset(P, 'x', 1234) -> splat('x'), even if x is a variable, and
1092     // independently of what the offset is.
1093     Value *Val = MSI->getValue();
1094     if (LoadSize != 1)
1095       Val = Builder.CreateZExt(Val, IntegerType::get(Ctx, LoadSize*8));
1096 
1097     Value *OneElt = Val;
1098 
1099     // Splat the value out to the right number of bits.
1100     for (unsigned NumBytesSet = 1; NumBytesSet != LoadSize; ) {
1101       // If we can double the number of bytes set, do it.
1102       if (NumBytesSet*2 <= LoadSize) {
1103         Value *ShVal = Builder.CreateShl(Val, NumBytesSet*8);
1104         Val = Builder.CreateOr(Val, ShVal);
1105         NumBytesSet <<= 1;
1106         continue;
1107       }
1108 
1109       // Otherwise insert one byte at a time.
1110       Value *ShVal = Builder.CreateShl(Val, 1*8);
1111       Val = Builder.CreateOr(OneElt, ShVal);
1112       ++NumBytesSet;
1113     }
1114 
1115     return CoerceAvailableValueToLoadType(Val, LoadTy, Builder, DL);
1116   }
1117 
1118   // Otherwise, this is a memcpy/memmove from a constant global.
1119   MemTransferInst *MTI = cast<MemTransferInst>(SrcInst);
1120   Constant *Src = cast<Constant>(MTI->getSource());
1121   unsigned AS = Src->getType()->getPointerAddressSpace();
1122 
1123   // Otherwise, see if we can constant fold a load from the constant with the
1124   // offset applied as appropriate.
1125   Src = ConstantExpr::getBitCast(Src,
1126                                  Type::getInt8PtrTy(Src->getContext(), AS));
1127   Constant *OffsetCst =
1128     ConstantInt::get(Type::getInt64Ty(Src->getContext()), (unsigned)Offset);
1129   Src = ConstantExpr::getGetElementPtr(Type::getInt8Ty(Src->getContext()), Src,
1130                                        OffsetCst);
1131   Src = ConstantExpr::getBitCast(Src, PointerType::get(LoadTy, AS));
1132   return ConstantFoldLoadFromConstPtr(Src, LoadTy, DL);
1133 }
1134 
1135 
1136 /// Given a set of loads specified by ValuesPerBlock,
1137 /// construct SSA form, allowing us to eliminate LI.  This returns the value
1138 /// that should be used at LI's definition site.
1139 static Value *ConstructSSAForLoadSet(LoadInst *LI,
1140                          SmallVectorImpl<AvailableValueInBlock> &ValuesPerBlock,
1141                                      GVN &gvn) {
1142   // Check for the fully redundant, dominating load case.  In this case, we can
1143   // just use the dominating value directly.
1144   if (ValuesPerBlock.size() == 1 &&
1145       gvn.getDominatorTree().properlyDominates(ValuesPerBlock[0].BB,
1146                                                LI->getParent())) {
1147     assert(!ValuesPerBlock[0].AV.isUndefValue() &&
1148            "Dead BB dominate this block");
1149     return ValuesPerBlock[0].MaterializeAdjustedValue(LI, gvn);
1150   }
1151 
1152   // Otherwise, we have to construct SSA form.
1153   SmallVector<PHINode*, 8> NewPHIs;
1154   SSAUpdater SSAUpdate(&NewPHIs);
1155   SSAUpdate.Initialize(LI->getType(), LI->getName());
1156 
1157   for (const AvailableValueInBlock &AV : ValuesPerBlock) {
1158     BasicBlock *BB = AV.BB;
1159 
1160     if (SSAUpdate.HasValueForBlock(BB))
1161       continue;
1162 
1163     SSAUpdate.AddAvailableValue(BB, AV.MaterializeAdjustedValue(LI, gvn));
1164   }
1165 
1166   // Perform PHI construction.
1167   return SSAUpdate.GetValueInMiddleOfBlock(LI->getParent());
1168 }
1169 
1170 Value *AvailableValue::MaterializeAdjustedValue(LoadInst *LI,
1171                                                 Instruction *InsertPt,
1172                                                 GVN &gvn) const {
1173   Value *Res;
1174   Type *LoadTy = LI->getType();
1175   const DataLayout &DL = LI->getModule()->getDataLayout();
1176   if (isSimpleValue()) {
1177     Res = getSimpleValue();
1178     if (Res->getType() != LoadTy) {
1179       Res = GetStoreValueForLoad(Res, Offset, LoadTy, InsertPt, DL);
1180 
1181       DEBUG(dbgs() << "GVN COERCED NONLOCAL VAL:\nOffset: " << Offset << "  "
1182                    << *getSimpleValue() << '\n'
1183                    << *Res << '\n' << "\n\n\n");
1184     }
1185   } else if (isCoercedLoadValue()) {
1186     LoadInst *Load = getCoercedLoadValue();
1187     if (Load->getType() == LoadTy && Offset == 0) {
1188       Res = Load;
1189     } else {
1190       Res = GetLoadValueForLoad(Load, Offset, LoadTy, InsertPt, gvn);
1191 
1192       DEBUG(dbgs() << "GVN COERCED NONLOCAL LOAD:\nOffset: " << Offset << "  "
1193                    << *getCoercedLoadValue() << '\n'
1194                    << *Res << '\n' << "\n\n\n");
1195     }
1196   } else if (isMemIntrinValue()) {
1197     Res = GetMemInstValueForLoad(getMemIntrinValue(), Offset, LoadTy,
1198                                  InsertPt, DL);
1199     DEBUG(dbgs() << "GVN COERCED NONLOCAL MEM INTRIN:\nOffset: " << Offset
1200                  << "  " << *getMemIntrinValue() << '\n'
1201                  << *Res << '\n' << "\n\n\n");
1202   } else {
1203     assert(isUndefValue() && "Should be UndefVal");
1204     DEBUG(dbgs() << "GVN COERCED NONLOCAL Undef:\n";);
1205     return UndefValue::get(LoadTy);
1206   }
1207   assert(Res && "failed to materialize?");
1208   return Res;
1209 }
1210 
1211 static bool isLifetimeStart(const Instruction *Inst) {
1212   if (const IntrinsicInst* II = dyn_cast<IntrinsicInst>(Inst))
1213     return II->getIntrinsicID() == Intrinsic::lifetime_start;
1214   return false;
1215 }
1216 
1217 bool GVN::AnalyzeLoadAvailability(LoadInst *LI, MemDepResult DepInfo,
1218                                   Value *Address, AvailableValue &Res) {
1219 
1220   assert((DepInfo.isDef() || DepInfo.isClobber()) &&
1221          "expected a local dependence");
1222 
1223   const DataLayout &DL = LI->getModule()->getDataLayout();
1224 
1225   if (DepInfo.isClobber()) {
1226     // If the dependence is to a store that writes to a superset of the bits
1227     // read by the load, we can extract the bits we need for the load from the
1228     // stored value.
1229     if (StoreInst *DepSI = dyn_cast<StoreInst>(DepInfo.getInst())) {
1230       if (Address) {
1231         int Offset =
1232           AnalyzeLoadFromClobberingStore(LI->getType(), Address, DepSI);
1233         if (Offset != -1) {
1234           Res = AvailableValue::get(DepSI->getValueOperand(), Offset);
1235           return true;
1236         }
1237       }
1238     }
1239 
1240     // Check to see if we have something like this:
1241     //    load i32* P
1242     //    load i8* (P+1)
1243     // if we have this, replace the later with an extraction from the former.
1244     if (LoadInst *DepLI = dyn_cast<LoadInst>(DepInfo.getInst())) {
1245       // If this is a clobber and L is the first instruction in its block, then
1246       // we have the first instruction in the entry block.
1247       if (DepLI != LI && Address) {
1248         int Offset =
1249           AnalyzeLoadFromClobberingLoad(LI->getType(), Address, DepLI, DL);
1250 
1251         if (Offset != -1) {
1252           Res = AvailableValue::getLoad(DepLI, Offset);
1253           return true;
1254         }
1255       }
1256     }
1257 
1258     // If the clobbering value is a memset/memcpy/memmove, see if we can
1259     // forward a value on from it.
1260     if (MemIntrinsic *DepMI = dyn_cast<MemIntrinsic>(DepInfo.getInst())) {
1261       if (Address) {
1262         int Offset = AnalyzeLoadFromClobberingMemInst(LI->getType(), Address,
1263                                                       DepMI, DL);
1264         if (Offset != -1) {
1265           Res = AvailableValue::getMI(DepMI, Offset);
1266           return true;
1267         }
1268       }
1269     }
1270     // Nothing known about this clobber, have to be conservative
1271     DEBUG(
1272       // fast print dep, using operator<< on instruction is too slow.
1273       dbgs() << "GVN: load ";
1274       LI->printAsOperand(dbgs());
1275       Instruction *I = DepInfo.getInst();
1276       dbgs() << " is clobbered by " << *I << '\n';
1277     );
1278     return false;
1279   }
1280   assert(DepInfo.isDef() && "follows from above");
1281 
1282   Instruction *DepInst = DepInfo.getInst();
1283 
1284   // Loading the allocation -> undef.
1285   if (isa<AllocaInst>(DepInst) || isMallocLikeFn(DepInst, TLI) ||
1286       // Loading immediately after lifetime begin -> undef.
1287       isLifetimeStart(DepInst)) {
1288     Res = AvailableValue::get(UndefValue::get(LI->getType()));
1289     return true;
1290   }
1291 
1292   // Loading from calloc (which zero initializes memory) -> zero
1293   if (isCallocLikeFn(DepInst, TLI)) {
1294     Res = AvailableValue::get(Constant::getNullValue(LI->getType()));
1295     return true;
1296   }
1297 
1298   if (StoreInst *S = dyn_cast<StoreInst>(DepInst)) {
1299     // Reject loads and stores that are to the same address but are of
1300     // different types if we have to. If the stored value is larger or equal to
1301     // the loaded value, we can reuse it.
1302     if (S->getValueOperand()->getType() != LI->getType() &&
1303         !CanCoerceMustAliasedValueToLoad(S->getValueOperand(),
1304                                          LI->getType(), DL))
1305       return false;
1306 
1307     Res = AvailableValue::get(S->getValueOperand());
1308     return true;
1309   }
1310 
1311   if (LoadInst *LD = dyn_cast<LoadInst>(DepInst)) {
1312     // If the types mismatch and we can't handle it, reject reuse of the load.
1313     // If the stored value is larger or equal to the loaded value, we can reuse
1314     // it.
1315     if (LD->getType() != LI->getType() &&
1316         !CanCoerceMustAliasedValueToLoad(LD, LI->getType(), DL))
1317       return false;
1318 
1319     Res = AvailableValue::getLoad(LD);
1320     return true;
1321   }
1322 
1323   // Unknown def - must be conservative
1324   DEBUG(
1325     // fast print dep, using operator<< on instruction is too slow.
1326     dbgs() << "GVN: load ";
1327     LI->printAsOperand(dbgs());
1328     dbgs() << " has unknown def " << *DepInst << '\n';
1329   );
1330   return false;
1331 }
1332 
1333 void GVN::AnalyzeLoadAvailability(LoadInst *LI, LoadDepVect &Deps,
1334                                   AvailValInBlkVect &ValuesPerBlock,
1335                                   UnavailBlkVect &UnavailableBlocks) {
1336 
1337   // Filter out useless results (non-locals, etc).  Keep track of the blocks
1338   // where we have a value available in repl, also keep track of whether we see
1339   // dependencies that produce an unknown value for the load (such as a call
1340   // that could potentially clobber the load).
1341   unsigned NumDeps = Deps.size();
1342   for (unsigned i = 0, e = NumDeps; i != e; ++i) {
1343     BasicBlock *DepBB = Deps[i].getBB();
1344     MemDepResult DepInfo = Deps[i].getResult();
1345 
1346     if (DeadBlocks.count(DepBB)) {
1347       // Dead dependent mem-op disguise as a load evaluating the same value
1348       // as the load in question.
1349       ValuesPerBlock.push_back(AvailableValueInBlock::getUndef(DepBB));
1350       continue;
1351     }
1352 
1353     if (!DepInfo.isDef() && !DepInfo.isClobber()) {
1354       UnavailableBlocks.push_back(DepBB);
1355       continue;
1356     }
1357 
1358     // The address being loaded in this non-local block may not be the same as
1359     // the pointer operand of the load if PHI translation occurs.  Make sure
1360     // to consider the right address.
1361     Value *Address = Deps[i].getAddress();
1362 
1363     AvailableValue AV;
1364     if (AnalyzeLoadAvailability(LI, DepInfo, Address, AV)) {
1365       // subtlety: because we know this was a non-local dependency, we know
1366       // it's safe to materialize anywhere between the instruction within
1367       // DepInfo and the end of it's block.
1368       ValuesPerBlock.push_back(AvailableValueInBlock::get(DepBB,
1369                                                           std::move(AV)));
1370     } else {
1371       UnavailableBlocks.push_back(DepBB);
1372     }
1373   }
1374 
1375   assert(NumDeps == ValuesPerBlock.size() + UnavailableBlocks.size() &&
1376          "post condition violation");
1377 }
1378 
1379 bool GVN::PerformLoadPRE(LoadInst *LI, AvailValInBlkVect &ValuesPerBlock,
1380                          UnavailBlkVect &UnavailableBlocks) {
1381   // Okay, we have *some* definitions of the value.  This means that the value
1382   // is available in some of our (transitive) predecessors.  Lets think about
1383   // doing PRE of this load.  This will involve inserting a new load into the
1384   // predecessor when it's not available.  We could do this in general, but
1385   // prefer to not increase code size.  As such, we only do this when we know
1386   // that we only have to insert *one* load (which means we're basically moving
1387   // the load, not inserting a new one).
1388 
1389   SmallPtrSet<BasicBlock *, 4> Blockers(UnavailableBlocks.begin(),
1390                                         UnavailableBlocks.end());
1391 
1392   // Let's find the first basic block with more than one predecessor.  Walk
1393   // backwards through predecessors if needed.
1394   BasicBlock *LoadBB = LI->getParent();
1395   BasicBlock *TmpBB = LoadBB;
1396 
1397   while (TmpBB->getSinglePredecessor()) {
1398     TmpBB = TmpBB->getSinglePredecessor();
1399     if (TmpBB == LoadBB) // Infinite (unreachable) loop.
1400       return false;
1401     if (Blockers.count(TmpBB))
1402       return false;
1403 
1404     // If any of these blocks has more than one successor (i.e. if the edge we
1405     // just traversed was critical), then there are other paths through this
1406     // block along which the load may not be anticipated.  Hoisting the load
1407     // above this block would be adding the load to execution paths along
1408     // which it was not previously executed.
1409     if (TmpBB->getTerminator()->getNumSuccessors() != 1)
1410       return false;
1411   }
1412 
1413   assert(TmpBB);
1414   LoadBB = TmpBB;
1415 
1416   // Check to see how many predecessors have the loaded value fully
1417   // available.
1418   MapVector<BasicBlock *, Value *> PredLoads;
1419   DenseMap<BasicBlock*, char> FullyAvailableBlocks;
1420   for (const AvailableValueInBlock &AV : ValuesPerBlock)
1421     FullyAvailableBlocks[AV.BB] = true;
1422   for (BasicBlock *UnavailableBB : UnavailableBlocks)
1423     FullyAvailableBlocks[UnavailableBB] = false;
1424 
1425   SmallVector<BasicBlock *, 4> CriticalEdgePred;
1426   for (BasicBlock *Pred : predecessors(LoadBB)) {
1427     // If any predecessor block is an EH pad that does not allow non-PHI
1428     // instructions before the terminator, we can't PRE the load.
1429     if (Pred->getTerminator()->isEHPad()) {
1430       DEBUG(dbgs()
1431             << "COULD NOT PRE LOAD BECAUSE OF AN EH PAD PREDECESSOR '"
1432             << Pred->getName() << "': " << *LI << '\n');
1433       return false;
1434     }
1435 
1436     if (IsValueFullyAvailableInBlock(Pred, FullyAvailableBlocks, 0)) {
1437       continue;
1438     }
1439 
1440     if (Pred->getTerminator()->getNumSuccessors() != 1) {
1441       if (isa<IndirectBrInst>(Pred->getTerminator())) {
1442         DEBUG(dbgs() << "COULD NOT PRE LOAD BECAUSE OF INDBR CRITICAL EDGE '"
1443               << Pred->getName() << "': " << *LI << '\n');
1444         return false;
1445       }
1446 
1447       if (LoadBB->isEHPad()) {
1448         DEBUG(dbgs()
1449               << "COULD NOT PRE LOAD BECAUSE OF AN EH PAD CRITICAL EDGE '"
1450               << Pred->getName() << "': " << *LI << '\n');
1451         return false;
1452       }
1453 
1454       CriticalEdgePred.push_back(Pred);
1455     } else {
1456       // Only add the predecessors that will not be split for now.
1457       PredLoads[Pred] = nullptr;
1458     }
1459   }
1460 
1461   // Decide whether PRE is profitable for this load.
1462   unsigned NumUnavailablePreds = PredLoads.size() + CriticalEdgePred.size();
1463   assert(NumUnavailablePreds != 0 &&
1464          "Fully available value should already be eliminated!");
1465 
1466   // If this load is unavailable in multiple predecessors, reject it.
1467   // FIXME: If we could restructure the CFG, we could make a common pred with
1468   // all the preds that don't have an available LI and insert a new load into
1469   // that one block.
1470   if (NumUnavailablePreds != 1)
1471       return false;
1472 
1473   // Split critical edges, and update the unavailable predecessors accordingly.
1474   for (BasicBlock *OrigPred : CriticalEdgePred) {
1475     BasicBlock *NewPred = splitCriticalEdges(OrigPred, LoadBB);
1476     assert(!PredLoads.count(OrigPred) && "Split edges shouldn't be in map!");
1477     PredLoads[NewPred] = nullptr;
1478     DEBUG(dbgs() << "Split critical edge " << OrigPred->getName() << "->"
1479                  << LoadBB->getName() << '\n');
1480   }
1481 
1482   // Check if the load can safely be moved to all the unavailable predecessors.
1483   bool CanDoPRE = true;
1484   const DataLayout &DL = LI->getModule()->getDataLayout();
1485   SmallVector<Instruction*, 8> NewInsts;
1486   for (auto &PredLoad : PredLoads) {
1487     BasicBlock *UnavailablePred = PredLoad.first;
1488 
1489     // Do PHI translation to get its value in the predecessor if necessary.  The
1490     // returned pointer (if non-null) is guaranteed to dominate UnavailablePred.
1491 
1492     // If all preds have a single successor, then we know it is safe to insert
1493     // the load on the pred (?!?), so we can insert code to materialize the
1494     // pointer if it is not available.
1495     PHITransAddr Address(LI->getPointerOperand(), DL, AC);
1496     Value *LoadPtr = nullptr;
1497     LoadPtr = Address.PHITranslateWithInsertion(LoadBB, UnavailablePred,
1498                                                 *DT, NewInsts);
1499 
1500     // If we couldn't find or insert a computation of this phi translated value,
1501     // we fail PRE.
1502     if (!LoadPtr) {
1503       DEBUG(dbgs() << "COULDN'T INSERT PHI TRANSLATED VALUE OF: "
1504             << *LI->getPointerOperand() << "\n");
1505       CanDoPRE = false;
1506       break;
1507     }
1508 
1509     PredLoad.second = LoadPtr;
1510   }
1511 
1512   if (!CanDoPRE) {
1513     while (!NewInsts.empty()) {
1514       Instruction *I = NewInsts.pop_back_val();
1515       if (MD) MD->removeInstruction(I);
1516       I->eraseFromParent();
1517     }
1518     // HINT: Don't revert the edge-splitting as following transformation may
1519     // also need to split these critical edges.
1520     return !CriticalEdgePred.empty();
1521   }
1522 
1523   // Okay, we can eliminate this load by inserting a reload in the predecessor
1524   // and using PHI construction to get the value in the other predecessors, do
1525   // it.
1526   DEBUG(dbgs() << "GVN REMOVING PRE LOAD: " << *LI << '\n');
1527   DEBUG(if (!NewInsts.empty())
1528           dbgs() << "INSERTED " << NewInsts.size() << " INSTS: "
1529                  << *NewInsts.back() << '\n');
1530 
1531   // Assign value numbers to the new instructions.
1532   for (Instruction *I : NewInsts) {
1533     // FIXME: We really _ought_ to insert these value numbers into their
1534     // parent's availability map.  However, in doing so, we risk getting into
1535     // ordering issues.  If a block hasn't been processed yet, we would be
1536     // marking a value as AVAIL-IN, which isn't what we intend.
1537     VN.lookupOrAdd(I);
1538   }
1539 
1540   for (const auto &PredLoad : PredLoads) {
1541     BasicBlock *UnavailablePred = PredLoad.first;
1542     Value *LoadPtr = PredLoad.second;
1543 
1544     Instruction *NewLoad = new LoadInst(LoadPtr, LI->getName()+".pre", false,
1545                                         LI->getAlignment(),
1546                                         UnavailablePred->getTerminator());
1547 
1548     // Transfer the old load's AA tags to the new load.
1549     AAMDNodes Tags;
1550     LI->getAAMetadata(Tags);
1551     if (Tags)
1552       NewLoad->setAAMetadata(Tags);
1553 
1554     if (auto *MD = LI->getMetadata(LLVMContext::MD_invariant_load))
1555       NewLoad->setMetadata(LLVMContext::MD_invariant_load, MD);
1556     if (auto *InvGroupMD = LI->getMetadata(LLVMContext::MD_invariant_group))
1557       NewLoad->setMetadata(LLVMContext::MD_invariant_group, InvGroupMD);
1558 
1559     // Transfer DebugLoc.
1560     NewLoad->setDebugLoc(LI->getDebugLoc());
1561 
1562     // Add the newly created load.
1563     ValuesPerBlock.push_back(AvailableValueInBlock::get(UnavailablePred,
1564                                                         NewLoad));
1565     MD->invalidateCachedPointerInfo(LoadPtr);
1566     DEBUG(dbgs() << "GVN INSERTED " << *NewLoad << '\n');
1567   }
1568 
1569   // Perform PHI construction.
1570   Value *V = ConstructSSAForLoadSet(LI, ValuesPerBlock, *this);
1571   LI->replaceAllUsesWith(V);
1572   if (isa<PHINode>(V))
1573     V->takeName(LI);
1574   if (Instruction *I = dyn_cast<Instruction>(V))
1575     I->setDebugLoc(LI->getDebugLoc());
1576   if (V->getType()->getScalarType()->isPointerTy())
1577     MD->invalidateCachedPointerInfo(V);
1578   markInstructionForDeletion(LI);
1579   ++NumPRELoad;
1580   return true;
1581 }
1582 
1583 /// Attempt to eliminate a load whose dependencies are
1584 /// non-local by performing PHI construction.
1585 bool GVN::processNonLocalLoad(LoadInst *LI) {
1586   // non-local speculations are not allowed under asan.
1587   if (LI->getParent()->getParent()->hasFnAttribute(Attribute::SanitizeAddress))
1588     return false;
1589 
1590   // Step 1: Find the non-local dependencies of the load.
1591   LoadDepVect Deps;
1592   MD->getNonLocalPointerDependency(LI, Deps);
1593 
1594   // If we had to process more than one hundred blocks to find the
1595   // dependencies, this load isn't worth worrying about.  Optimizing
1596   // it will be too expensive.
1597   unsigned NumDeps = Deps.size();
1598   if (NumDeps > 100)
1599     return false;
1600 
1601   // If we had a phi translation failure, we'll have a single entry which is a
1602   // clobber in the current block.  Reject this early.
1603   if (NumDeps == 1 &&
1604       !Deps[0].getResult().isDef() && !Deps[0].getResult().isClobber()) {
1605     DEBUG(
1606       dbgs() << "GVN: non-local load ";
1607       LI->printAsOperand(dbgs());
1608       dbgs() << " has unknown dependencies\n";
1609     );
1610     return false;
1611   }
1612 
1613   // If this load follows a GEP, see if we can PRE the indices before analyzing.
1614   if (GetElementPtrInst *GEP = dyn_cast<GetElementPtrInst>(LI->getOperand(0))) {
1615     for (GetElementPtrInst::op_iterator OI = GEP->idx_begin(),
1616                                         OE = GEP->idx_end();
1617          OI != OE; ++OI)
1618       if (Instruction *I = dyn_cast<Instruction>(OI->get()))
1619         performScalarPRE(I);
1620   }
1621 
1622   // Step 2: Analyze the availability of the load
1623   AvailValInBlkVect ValuesPerBlock;
1624   UnavailBlkVect UnavailableBlocks;
1625   AnalyzeLoadAvailability(LI, Deps, ValuesPerBlock, UnavailableBlocks);
1626 
1627   // If we have no predecessors that produce a known value for this load, exit
1628   // early.
1629   if (ValuesPerBlock.empty())
1630     return false;
1631 
1632   // Step 3: Eliminate fully redundancy.
1633   //
1634   // If all of the instructions we depend on produce a known value for this
1635   // load, then it is fully redundant and we can use PHI insertion to compute
1636   // its value.  Insert PHIs and remove the fully redundant value now.
1637   if (UnavailableBlocks.empty()) {
1638     DEBUG(dbgs() << "GVN REMOVING NONLOCAL LOAD: " << *LI << '\n');
1639 
1640     // Perform PHI construction.
1641     Value *V = ConstructSSAForLoadSet(LI, ValuesPerBlock, *this);
1642     LI->replaceAllUsesWith(V);
1643 
1644     if (isa<PHINode>(V))
1645       V->takeName(LI);
1646     if (Instruction *I = dyn_cast<Instruction>(V))
1647       if (LI->getDebugLoc())
1648         I->setDebugLoc(LI->getDebugLoc());
1649     if (V->getType()->getScalarType()->isPointerTy())
1650       MD->invalidateCachedPointerInfo(V);
1651     markInstructionForDeletion(LI);
1652     ++NumGVNLoad;
1653     return true;
1654   }
1655 
1656   // Step 4: Eliminate partial redundancy.
1657   if (!EnablePRE || !EnableLoadPRE)
1658     return false;
1659 
1660   return PerformLoadPRE(LI, ValuesPerBlock, UnavailableBlocks);
1661 }
1662 
1663 bool GVN::processAssumeIntrinsic(IntrinsicInst *IntrinsicI) {
1664   assert(IntrinsicI->getIntrinsicID() == Intrinsic::assume &&
1665          "This function can only be called with llvm.assume intrinsic");
1666   Value *V = IntrinsicI->getArgOperand(0);
1667 
1668   if (ConstantInt *Cond = dyn_cast<ConstantInt>(V)) {
1669     if (Cond->isZero()) {
1670       Type *Int8Ty = Type::getInt8Ty(V->getContext());
1671       // Insert a new store to null instruction before the load to indicate that
1672       // this code is not reachable.  FIXME: We could insert unreachable
1673       // instruction directly because we can modify the CFG.
1674       new StoreInst(UndefValue::get(Int8Ty),
1675                     Constant::getNullValue(Int8Ty->getPointerTo()),
1676                     IntrinsicI);
1677     }
1678     markInstructionForDeletion(IntrinsicI);
1679     return false;
1680   }
1681 
1682   Constant *True = ConstantInt::getTrue(V->getContext());
1683   bool Changed = false;
1684 
1685   for (BasicBlock *Successor : successors(IntrinsicI->getParent())) {
1686     BasicBlockEdge Edge(IntrinsicI->getParent(), Successor);
1687 
1688     // This property is only true in dominated successors, propagateEquality
1689     // will check dominance for us.
1690     Changed |= propagateEquality(V, True, Edge, false);
1691   }
1692 
1693   // We can replace assume value with true, which covers cases like this:
1694   // call void @llvm.assume(i1 %cmp)
1695   // br i1 %cmp, label %bb1, label %bb2 ; will change %cmp to true
1696   ReplaceWithConstMap[V] = True;
1697 
1698   // If one of *cmp *eq operand is const, adding it to map will cover this:
1699   // %cmp = fcmp oeq float 3.000000e+00, %0 ; const on lhs could happen
1700   // call void @llvm.assume(i1 %cmp)
1701   // ret float %0 ; will change it to ret float 3.000000e+00
1702   if (auto *CmpI = dyn_cast<CmpInst>(V)) {
1703     if (CmpI->getPredicate() == CmpInst::Predicate::ICMP_EQ ||
1704         CmpI->getPredicate() == CmpInst::Predicate::FCMP_OEQ ||
1705         (CmpI->getPredicate() == CmpInst::Predicate::FCMP_UEQ &&
1706          CmpI->getFastMathFlags().noNaNs())) {
1707       Value *CmpLHS = CmpI->getOperand(0);
1708       Value *CmpRHS = CmpI->getOperand(1);
1709       if (isa<Constant>(CmpLHS))
1710         std::swap(CmpLHS, CmpRHS);
1711       auto *RHSConst = dyn_cast<Constant>(CmpRHS);
1712 
1713       // If only one operand is constant.
1714       if (RHSConst != nullptr && !isa<Constant>(CmpLHS))
1715         ReplaceWithConstMap[CmpLHS] = RHSConst;
1716     }
1717   }
1718   return Changed;
1719 }
1720 
1721 static void patchReplacementInstruction(Instruction *I, Value *Repl) {
1722   auto *ReplInst = dyn_cast<Instruction>(Repl);
1723   if (!ReplInst)
1724     return;
1725 
1726   // Patch the replacement so that it is not more restrictive than the value
1727   // being replaced.
1728   ReplInst->andIRFlags(I);
1729 
1730   // FIXME: If both the original and replacement value are part of the
1731   // same control-flow region (meaning that the execution of one
1732   // guarantees the execution of the other), then we can combine the
1733   // noalias scopes here and do better than the general conservative
1734   // answer used in combineMetadata().
1735 
1736   // In general, GVN unifies expressions over different control-flow
1737   // regions, and so we need a conservative combination of the noalias
1738   // scopes.
1739   static const unsigned KnownIDs[] = {
1740       LLVMContext::MD_tbaa,           LLVMContext::MD_alias_scope,
1741       LLVMContext::MD_noalias,        LLVMContext::MD_range,
1742       LLVMContext::MD_fpmath,         LLVMContext::MD_invariant_load,
1743       LLVMContext::MD_invariant_group};
1744   combineMetadata(ReplInst, I, KnownIDs);
1745 }
1746 
1747 static void patchAndReplaceAllUsesWith(Instruction *I, Value *Repl) {
1748   patchReplacementInstruction(I, Repl);
1749   I->replaceAllUsesWith(Repl);
1750 }
1751 
1752 /// Attempt to eliminate a load, first by eliminating it
1753 /// locally, and then attempting non-local elimination if that fails.
1754 bool GVN::processLoad(LoadInst *L) {
1755   if (!MD)
1756     return false;
1757 
1758   if (!L->isSimple())
1759     return false;
1760 
1761   if (L->use_empty()) {
1762     markInstructionForDeletion(L);
1763     return true;
1764   }
1765 
1766   // ... to a pointer that has been loaded from before...
1767   MemDepResult Dep = MD->getDependency(L);
1768 
1769   // If it is defined in another block, try harder.
1770   if (Dep.isNonLocal())
1771     return processNonLocalLoad(L);
1772 
1773   // Only handle the local case below
1774   if (!Dep.isDef() && !Dep.isClobber()) {
1775     // This might be a NonFuncLocal or an Unknown
1776     DEBUG(
1777       // fast print dep, using operator<< on instruction is too slow.
1778       dbgs() << "GVN: load ";
1779       L->printAsOperand(dbgs());
1780       dbgs() << " has unknown dependence\n";
1781     );
1782     return false;
1783   }
1784 
1785   AvailableValue AV;
1786   if (AnalyzeLoadAvailability(L, Dep, L->getPointerOperand(), AV)) {
1787     Value *AvailableValue = AV.MaterializeAdjustedValue(L, L, *this);
1788 
1789     // Replace the load!
1790     patchAndReplaceAllUsesWith(L, AvailableValue);
1791     markInstructionForDeletion(L);
1792     ++NumGVNLoad;
1793     // Tell MDA to rexamine the reused pointer since we might have more
1794     // information after forwarding it.
1795     if (MD && AvailableValue->getType()->getScalarType()->isPointerTy())
1796       MD->invalidateCachedPointerInfo(AvailableValue);
1797     return true;
1798   }
1799 
1800   return false;
1801 }
1802 
1803 // In order to find a leader for a given value number at a
1804 // specific basic block, we first obtain the list of all Values for that number,
1805 // and then scan the list to find one whose block dominates the block in
1806 // question.  This is fast because dominator tree queries consist of only
1807 // a few comparisons of DFS numbers.
1808 Value *GVN::findLeader(const BasicBlock *BB, uint32_t num) {
1809   LeaderTableEntry Vals = LeaderTable[num];
1810   if (!Vals.Val) return nullptr;
1811 
1812   Value *Val = nullptr;
1813   if (DT->dominates(Vals.BB, BB)) {
1814     Val = Vals.Val;
1815     if (isa<Constant>(Val)) return Val;
1816   }
1817 
1818   LeaderTableEntry* Next = Vals.Next;
1819   while (Next) {
1820     if (DT->dominates(Next->BB, BB)) {
1821       if (isa<Constant>(Next->Val)) return Next->Val;
1822       if (!Val) Val = Next->Val;
1823     }
1824 
1825     Next = Next->Next;
1826   }
1827 
1828   return Val;
1829 }
1830 
1831 /// There is an edge from 'Src' to 'Dst'.  Return
1832 /// true if every path from the entry block to 'Dst' passes via this edge.  In
1833 /// particular 'Dst' must not be reachable via another edge from 'Src'.
1834 static bool isOnlyReachableViaThisEdge(const BasicBlockEdge &E,
1835                                        DominatorTree *DT) {
1836   // While in theory it is interesting to consider the case in which Dst has
1837   // more than one predecessor, because Dst might be part of a loop which is
1838   // only reachable from Src, in practice it is pointless since at the time
1839   // GVN runs all such loops have preheaders, which means that Dst will have
1840   // been changed to have only one predecessor, namely Src.
1841   const BasicBlock *Pred = E.getEnd()->getSinglePredecessor();
1842   assert((!Pred || Pred == E.getStart()) &&
1843          "No edge between these basic blocks!");
1844   return Pred != nullptr;
1845 }
1846 
1847 // Tries to replace instruction with const, using information from
1848 // ReplaceWithConstMap.
1849 bool GVN::replaceOperandsWithConsts(Instruction *Instr) const {
1850   bool Changed = false;
1851   for (unsigned OpNum = 0; OpNum < Instr->getNumOperands(); ++OpNum) {
1852     Value *Operand = Instr->getOperand(OpNum);
1853     auto it = ReplaceWithConstMap.find(Operand);
1854     if (it != ReplaceWithConstMap.end()) {
1855       assert(!isa<Constant>(Operand) &&
1856              "Replacing constants with constants is invalid");
1857       DEBUG(dbgs() << "GVN replacing: " << *Operand << " with " << *it->second
1858                    << " in instruction " << *Instr << '\n');
1859       Instr->setOperand(OpNum, it->second);
1860       Changed = true;
1861     }
1862   }
1863   return Changed;
1864 }
1865 
1866 /// The given values are known to be equal in every block
1867 /// dominated by 'Root'.  Exploit this, for example by replacing 'LHS' with
1868 /// 'RHS' everywhere in the scope.  Returns whether a change was made.
1869 /// If DominatesByEdge is false, then it means that we will propagate the RHS
1870 /// value starting from the end of Root.Start.
1871 bool GVN::propagateEquality(Value *LHS, Value *RHS, const BasicBlockEdge &Root,
1872                             bool DominatesByEdge) {
1873   SmallVector<std::pair<Value*, Value*>, 4> Worklist;
1874   Worklist.push_back(std::make_pair(LHS, RHS));
1875   bool Changed = false;
1876   // For speed, compute a conservative fast approximation to
1877   // DT->dominates(Root, Root.getEnd());
1878   const bool RootDominatesEnd = isOnlyReachableViaThisEdge(Root, DT);
1879 
1880   while (!Worklist.empty()) {
1881     std::pair<Value*, Value*> Item = Worklist.pop_back_val();
1882     LHS = Item.first; RHS = Item.second;
1883 
1884     if (LHS == RHS)
1885       continue;
1886     assert(LHS->getType() == RHS->getType() && "Equality but unequal types!");
1887 
1888     // Don't try to propagate equalities between constants.
1889     if (isa<Constant>(LHS) && isa<Constant>(RHS))
1890       continue;
1891 
1892     // Prefer a constant on the right-hand side, or an Argument if no constants.
1893     if (isa<Constant>(LHS) || (isa<Argument>(LHS) && !isa<Constant>(RHS)))
1894       std::swap(LHS, RHS);
1895     assert((isa<Argument>(LHS) || isa<Instruction>(LHS)) && "Unexpected value!");
1896 
1897     // If there is no obvious reason to prefer the left-hand side over the
1898     // right-hand side, ensure the longest lived term is on the right-hand side,
1899     // so the shortest lived term will be replaced by the longest lived.
1900     // This tends to expose more simplifications.
1901     uint32_t LVN = VN.lookupOrAdd(LHS);
1902     if ((isa<Argument>(LHS) && isa<Argument>(RHS)) ||
1903         (isa<Instruction>(LHS) && isa<Instruction>(RHS))) {
1904       // Move the 'oldest' value to the right-hand side, using the value number
1905       // as a proxy for age.
1906       uint32_t RVN = VN.lookupOrAdd(RHS);
1907       if (LVN < RVN) {
1908         std::swap(LHS, RHS);
1909         LVN = RVN;
1910       }
1911     }
1912 
1913     // If value numbering later sees that an instruction in the scope is equal
1914     // to 'LHS' then ensure it will be turned into 'RHS'.  In order to preserve
1915     // the invariant that instructions only occur in the leader table for their
1916     // own value number (this is used by removeFromLeaderTable), do not do this
1917     // if RHS is an instruction (if an instruction in the scope is morphed into
1918     // LHS then it will be turned into RHS by the next GVN iteration anyway, so
1919     // using the leader table is about compiling faster, not optimizing better).
1920     // The leader table only tracks basic blocks, not edges. Only add to if we
1921     // have the simple case where the edge dominates the end.
1922     if (RootDominatesEnd && !isa<Instruction>(RHS))
1923       addToLeaderTable(LVN, RHS, Root.getEnd());
1924 
1925     // Replace all occurrences of 'LHS' with 'RHS' everywhere in the scope.  As
1926     // LHS always has at least one use that is not dominated by Root, this will
1927     // never do anything if LHS has only one use.
1928     if (!LHS->hasOneUse()) {
1929       unsigned NumReplacements =
1930           DominatesByEdge
1931               ? replaceDominatedUsesWith(LHS, RHS, *DT, Root)
1932               : replaceDominatedUsesWith(LHS, RHS, *DT, Root.getStart());
1933 
1934       Changed |= NumReplacements > 0;
1935       NumGVNEqProp += NumReplacements;
1936     }
1937 
1938     // Now try to deduce additional equalities from this one. For example, if
1939     // the known equality was "(A != B)" == "false" then it follows that A and B
1940     // are equal in the scope. Only boolean equalities with an explicit true or
1941     // false RHS are currently supported.
1942     if (!RHS->getType()->isIntegerTy(1))
1943       // Not a boolean equality - bail out.
1944       continue;
1945     ConstantInt *CI = dyn_cast<ConstantInt>(RHS);
1946     if (!CI)
1947       // RHS neither 'true' nor 'false' - bail out.
1948       continue;
1949     // Whether RHS equals 'true'.  Otherwise it equals 'false'.
1950     bool isKnownTrue = CI->isAllOnesValue();
1951     bool isKnownFalse = !isKnownTrue;
1952 
1953     // If "A && B" is known true then both A and B are known true.  If "A || B"
1954     // is known false then both A and B are known false.
1955     Value *A, *B;
1956     if ((isKnownTrue && match(LHS, m_And(m_Value(A), m_Value(B)))) ||
1957         (isKnownFalse && match(LHS, m_Or(m_Value(A), m_Value(B))))) {
1958       Worklist.push_back(std::make_pair(A, RHS));
1959       Worklist.push_back(std::make_pair(B, RHS));
1960       continue;
1961     }
1962 
1963     // If we are propagating an equality like "(A == B)" == "true" then also
1964     // propagate the equality A == B.  When propagating a comparison such as
1965     // "(A >= B)" == "true", replace all instances of "A < B" with "false".
1966     if (CmpInst *Cmp = dyn_cast<CmpInst>(LHS)) {
1967       Value *Op0 = Cmp->getOperand(0), *Op1 = Cmp->getOperand(1);
1968 
1969       // If "A == B" is known true, or "A != B" is known false, then replace
1970       // A with B everywhere in the scope.
1971       if ((isKnownTrue && Cmp->getPredicate() == CmpInst::ICMP_EQ) ||
1972           (isKnownFalse && Cmp->getPredicate() == CmpInst::ICMP_NE))
1973         Worklist.push_back(std::make_pair(Op0, Op1));
1974 
1975       // Handle the floating point versions of equality comparisons too.
1976       if ((isKnownTrue && Cmp->getPredicate() == CmpInst::FCMP_OEQ) ||
1977           (isKnownFalse && Cmp->getPredicate() == CmpInst::FCMP_UNE)) {
1978 
1979         // Floating point -0.0 and 0.0 compare equal, so we can only
1980         // propagate values if we know that we have a constant and that
1981         // its value is non-zero.
1982 
1983         // FIXME: We should do this optimization if 'no signed zeros' is
1984         // applicable via an instruction-level fast-math-flag or some other
1985         // indicator that relaxed FP semantics are being used.
1986 
1987         if (isa<ConstantFP>(Op1) && !cast<ConstantFP>(Op1)->isZero())
1988           Worklist.push_back(std::make_pair(Op0, Op1));
1989       }
1990 
1991       // If "A >= B" is known true, replace "A < B" with false everywhere.
1992       CmpInst::Predicate NotPred = Cmp->getInversePredicate();
1993       Constant *NotVal = ConstantInt::get(Cmp->getType(), isKnownFalse);
1994       // Since we don't have the instruction "A < B" immediately to hand, work
1995       // out the value number that it would have and use that to find an
1996       // appropriate instruction (if any).
1997       uint32_t NextNum = VN.getNextUnusedValueNumber();
1998       uint32_t Num = VN.lookupOrAddCmp(Cmp->getOpcode(), NotPred, Op0, Op1);
1999       // If the number we were assigned was brand new then there is no point in
2000       // looking for an instruction realizing it: there cannot be one!
2001       if (Num < NextNum) {
2002         Value *NotCmp = findLeader(Root.getEnd(), Num);
2003         if (NotCmp && isa<Instruction>(NotCmp)) {
2004           unsigned NumReplacements =
2005               DominatesByEdge
2006                   ? replaceDominatedUsesWith(NotCmp, NotVal, *DT, Root)
2007                   : replaceDominatedUsesWith(NotCmp, NotVal, *DT,
2008                                              Root.getStart());
2009           Changed |= NumReplacements > 0;
2010           NumGVNEqProp += NumReplacements;
2011         }
2012       }
2013       // Ensure that any instruction in scope that gets the "A < B" value number
2014       // is replaced with false.
2015       // The leader table only tracks basic blocks, not edges. Only add to if we
2016       // have the simple case where the edge dominates the end.
2017       if (RootDominatesEnd)
2018         addToLeaderTable(Num, NotVal, Root.getEnd());
2019 
2020       continue;
2021     }
2022   }
2023 
2024   return Changed;
2025 }
2026 
2027 /// When calculating availability, handle an instruction
2028 /// by inserting it into the appropriate sets
2029 bool GVN::processInstruction(Instruction *I) {
2030   // Ignore dbg info intrinsics.
2031   if (isa<DbgInfoIntrinsic>(I))
2032     return false;
2033 
2034   // If the instruction can be easily simplified then do so now in preference
2035   // to value numbering it.  Value numbering often exposes redundancies, for
2036   // example if it determines that %y is equal to %x then the instruction
2037   // "%z = and i32 %x, %y" becomes "%z = and i32 %x, %x" which we now simplify.
2038   const DataLayout &DL = I->getModule()->getDataLayout();
2039   if (Value *V = SimplifyInstruction(I, DL, TLI, DT, AC)) {
2040     I->replaceAllUsesWith(V);
2041     if (MD && V->getType()->getScalarType()->isPointerTy())
2042       MD->invalidateCachedPointerInfo(V);
2043     markInstructionForDeletion(I);
2044     ++NumGVNSimpl;
2045     return true;
2046   }
2047 
2048   if (IntrinsicInst *IntrinsicI = dyn_cast<IntrinsicInst>(I))
2049     if (IntrinsicI->getIntrinsicID() == Intrinsic::assume)
2050       return processAssumeIntrinsic(IntrinsicI);
2051 
2052   if (LoadInst *LI = dyn_cast<LoadInst>(I)) {
2053     if (processLoad(LI))
2054       return true;
2055 
2056     unsigned Num = VN.lookupOrAdd(LI);
2057     addToLeaderTable(Num, LI, LI->getParent());
2058     return false;
2059   }
2060 
2061   // For conditional branches, we can perform simple conditional propagation on
2062   // the condition value itself.
2063   if (BranchInst *BI = dyn_cast<BranchInst>(I)) {
2064     if (!BI->isConditional())
2065       return false;
2066 
2067     if (isa<Constant>(BI->getCondition()))
2068       return processFoldableCondBr(BI);
2069 
2070     Value *BranchCond = BI->getCondition();
2071     BasicBlock *TrueSucc = BI->getSuccessor(0);
2072     BasicBlock *FalseSucc = BI->getSuccessor(1);
2073     // Avoid multiple edges early.
2074     if (TrueSucc == FalseSucc)
2075       return false;
2076 
2077     BasicBlock *Parent = BI->getParent();
2078     bool Changed = false;
2079 
2080     Value *TrueVal = ConstantInt::getTrue(TrueSucc->getContext());
2081     BasicBlockEdge TrueE(Parent, TrueSucc);
2082     Changed |= propagateEquality(BranchCond, TrueVal, TrueE, true);
2083 
2084     Value *FalseVal = ConstantInt::getFalse(FalseSucc->getContext());
2085     BasicBlockEdge FalseE(Parent, FalseSucc);
2086     Changed |= propagateEquality(BranchCond, FalseVal, FalseE, true);
2087 
2088     return Changed;
2089   }
2090 
2091   // For switches, propagate the case values into the case destinations.
2092   if (SwitchInst *SI = dyn_cast<SwitchInst>(I)) {
2093     Value *SwitchCond = SI->getCondition();
2094     BasicBlock *Parent = SI->getParent();
2095     bool Changed = false;
2096 
2097     // Remember how many outgoing edges there are to every successor.
2098     SmallDenseMap<BasicBlock *, unsigned, 16> SwitchEdges;
2099     for (unsigned i = 0, n = SI->getNumSuccessors(); i != n; ++i)
2100       ++SwitchEdges[SI->getSuccessor(i)];
2101 
2102     for (SwitchInst::CaseIt i = SI->case_begin(), e = SI->case_end();
2103          i != e; ++i) {
2104       BasicBlock *Dst = i.getCaseSuccessor();
2105       // If there is only a single edge, propagate the case value into it.
2106       if (SwitchEdges.lookup(Dst) == 1) {
2107         BasicBlockEdge E(Parent, Dst);
2108         Changed |= propagateEquality(SwitchCond, i.getCaseValue(), E, true);
2109       }
2110     }
2111     return Changed;
2112   }
2113 
2114   // Instructions with void type don't return a value, so there's
2115   // no point in trying to find redundancies in them.
2116   if (I->getType()->isVoidTy())
2117     return false;
2118 
2119   uint32_t NextNum = VN.getNextUnusedValueNumber();
2120   unsigned Num = VN.lookupOrAdd(I);
2121 
2122   // Allocations are always uniquely numbered, so we can save time and memory
2123   // by fast failing them.
2124   if (isa<AllocaInst>(I) || isa<TerminatorInst>(I) || isa<PHINode>(I)) {
2125     addToLeaderTable(Num, I, I->getParent());
2126     return false;
2127   }
2128 
2129   // If the number we were assigned was a brand new VN, then we don't
2130   // need to do a lookup to see if the number already exists
2131   // somewhere in the domtree: it can't!
2132   if (Num >= NextNum) {
2133     addToLeaderTable(Num, I, I->getParent());
2134     return false;
2135   }
2136 
2137   // Perform fast-path value-number based elimination of values inherited from
2138   // dominators.
2139   Value *Repl = findLeader(I->getParent(), Num);
2140   if (!Repl) {
2141     // Failure, just remember this instance for future use.
2142     addToLeaderTable(Num, I, I->getParent());
2143     return false;
2144   } else if (Repl == I) {
2145     // If I was the result of a shortcut PRE, it might already be in the table
2146     // and the best replacement for itself. Nothing to do.
2147     return false;
2148   }
2149 
2150   // Remove it!
2151   patchAndReplaceAllUsesWith(I, Repl);
2152   if (MD && Repl->getType()->getScalarType()->isPointerTy())
2153     MD->invalidateCachedPointerInfo(Repl);
2154   markInstructionForDeletion(I);
2155   return true;
2156 }
2157 
2158 /// runOnFunction - This is the main transformation entry point for a function.
2159 bool GVN::runImpl(Function &F, AssumptionCache &RunAC, DominatorTree &RunDT,
2160                   const TargetLibraryInfo &RunTLI, AAResults &RunAA,
2161                   MemoryDependenceResults *RunMD) {
2162   AC = &RunAC;
2163   DT = &RunDT;
2164   VN.setDomTree(DT);
2165   TLI = &RunTLI;
2166   VN.setAliasAnalysis(&RunAA);
2167   MD = RunMD;
2168   VN.setMemDep(MD);
2169 
2170   bool Changed = false;
2171   bool ShouldContinue = true;
2172 
2173   // Merge unconditional branches, allowing PRE to catch more
2174   // optimization opportunities.
2175   for (Function::iterator FI = F.begin(), FE = F.end(); FI != FE; ) {
2176     BasicBlock *BB = &*FI++;
2177 
2178     bool removedBlock =
2179         MergeBlockIntoPredecessor(BB, DT, /* LoopInfo */ nullptr, MD);
2180     if (removedBlock) ++NumGVNBlocks;
2181 
2182     Changed |= removedBlock;
2183   }
2184 
2185   unsigned Iteration = 0;
2186   while (ShouldContinue) {
2187     DEBUG(dbgs() << "GVN iteration: " << Iteration << "\n");
2188     ShouldContinue = iterateOnFunction(F);
2189     Changed |= ShouldContinue;
2190     ++Iteration;
2191   }
2192 
2193   if (EnablePRE) {
2194     // Fabricate val-num for dead-code in order to suppress assertion in
2195     // performPRE().
2196     assignValNumForDeadCode();
2197     bool PREChanged = true;
2198     while (PREChanged) {
2199       PREChanged = performPRE(F);
2200       Changed |= PREChanged;
2201     }
2202   }
2203 
2204   // FIXME: Should perform GVN again after PRE does something.  PRE can move
2205   // computations into blocks where they become fully redundant.  Note that
2206   // we can't do this until PRE's critical edge splitting updates memdep.
2207   // Actually, when this happens, we should just fully integrate PRE into GVN.
2208 
2209   cleanupGlobalSets();
2210   // Do not cleanup DeadBlocks in cleanupGlobalSets() as it's called for each
2211   // iteration.
2212   DeadBlocks.clear();
2213 
2214   return Changed;
2215 }
2216 
2217 bool GVN::processBlock(BasicBlock *BB) {
2218   // FIXME: Kill off InstrsToErase by doing erasing eagerly in a helper function
2219   // (and incrementing BI before processing an instruction).
2220   assert(InstrsToErase.empty() &&
2221          "We expect InstrsToErase to be empty across iterations");
2222   if (DeadBlocks.count(BB))
2223     return false;
2224 
2225   // Clearing map before every BB because it can be used only for single BB.
2226   ReplaceWithConstMap.clear();
2227   bool ChangedFunction = false;
2228 
2229   for (BasicBlock::iterator BI = BB->begin(), BE = BB->end();
2230        BI != BE;) {
2231     if (!ReplaceWithConstMap.empty())
2232       ChangedFunction |= replaceOperandsWithConsts(&*BI);
2233     ChangedFunction |= processInstruction(&*BI);
2234 
2235     if (InstrsToErase.empty()) {
2236       ++BI;
2237       continue;
2238     }
2239 
2240     // If we need some instructions deleted, do it now.
2241     NumGVNInstr += InstrsToErase.size();
2242 
2243     // Avoid iterator invalidation.
2244     bool AtStart = BI == BB->begin();
2245     if (!AtStart)
2246       --BI;
2247 
2248     for (SmallVectorImpl<Instruction *>::iterator I = InstrsToErase.begin(),
2249          E = InstrsToErase.end(); I != E; ++I) {
2250       DEBUG(dbgs() << "GVN removed: " << **I << '\n');
2251       if (MD) MD->removeInstruction(*I);
2252       DEBUG(verifyRemoved(*I));
2253       (*I)->eraseFromParent();
2254     }
2255     InstrsToErase.clear();
2256 
2257     if (AtStart)
2258       BI = BB->begin();
2259     else
2260       ++BI;
2261   }
2262 
2263   return ChangedFunction;
2264 }
2265 
2266 // Instantiate an expression in a predecessor that lacked it.
2267 bool GVN::performScalarPREInsertion(Instruction *Instr, BasicBlock *Pred,
2268                                     unsigned int ValNo) {
2269   // Because we are going top-down through the block, all value numbers
2270   // will be available in the predecessor by the time we need them.  Any
2271   // that weren't originally present will have been instantiated earlier
2272   // in this loop.
2273   bool success = true;
2274   for (unsigned i = 0, e = Instr->getNumOperands(); i != e; ++i) {
2275     Value *Op = Instr->getOperand(i);
2276     if (isa<Argument>(Op) || isa<Constant>(Op) || isa<GlobalValue>(Op))
2277       continue;
2278     // This could be a newly inserted instruction, in which case, we won't
2279     // find a value number, and should give up before we hurt ourselves.
2280     // FIXME: Rewrite the infrastructure to let it easier to value number
2281     // and process newly inserted instructions.
2282     if (!VN.exists(Op)) {
2283       success = false;
2284       break;
2285     }
2286     if (Value *V = findLeader(Pred, VN.lookup(Op))) {
2287       Instr->setOperand(i, V);
2288     } else {
2289       success = false;
2290       break;
2291     }
2292   }
2293 
2294   // Fail out if we encounter an operand that is not available in
2295   // the PRE predecessor.  This is typically because of loads which
2296   // are not value numbered precisely.
2297   if (!success)
2298     return false;
2299 
2300   Instr->insertBefore(Pred->getTerminator());
2301   Instr->setName(Instr->getName() + ".pre");
2302   Instr->setDebugLoc(Instr->getDebugLoc());
2303   VN.add(Instr, ValNo);
2304 
2305   // Update the availability map to include the new instruction.
2306   addToLeaderTable(ValNo, Instr, Pred);
2307   return true;
2308 }
2309 
2310 bool GVN::performScalarPRE(Instruction *CurInst) {
2311   if (isa<AllocaInst>(CurInst) || isa<TerminatorInst>(CurInst) ||
2312       isa<PHINode>(CurInst) || CurInst->getType()->isVoidTy() ||
2313       CurInst->mayReadFromMemory() || CurInst->mayHaveSideEffects() ||
2314       isa<DbgInfoIntrinsic>(CurInst))
2315     return false;
2316 
2317   // Don't do PRE on compares. The PHI would prevent CodeGenPrepare from
2318   // sinking the compare again, and it would force the code generator to
2319   // move the i1 from processor flags or predicate registers into a general
2320   // purpose register.
2321   if (isa<CmpInst>(CurInst))
2322     return false;
2323 
2324   // We don't currently value number ANY inline asm calls.
2325   if (CallInst *CallI = dyn_cast<CallInst>(CurInst))
2326     if (CallI->isInlineAsm())
2327       return false;
2328 
2329   uint32_t ValNo = VN.lookup(CurInst);
2330 
2331   // Look for the predecessors for PRE opportunities.  We're
2332   // only trying to solve the basic diamond case, where
2333   // a value is computed in the successor and one predecessor,
2334   // but not the other.  We also explicitly disallow cases
2335   // where the successor is its own predecessor, because they're
2336   // more complicated to get right.
2337   unsigned NumWith = 0;
2338   unsigned NumWithout = 0;
2339   BasicBlock *PREPred = nullptr;
2340   BasicBlock *CurrentBlock = CurInst->getParent();
2341 
2342   SmallVector<std::pair<Value *, BasicBlock *>, 8> predMap;
2343   for (BasicBlock *P : predecessors(CurrentBlock)) {
2344     // We're not interested in PRE where the block is its
2345     // own predecessor, or in blocks with predecessors
2346     // that are not reachable.
2347     if (P == CurrentBlock) {
2348       NumWithout = 2;
2349       break;
2350     } else if (!DT->isReachableFromEntry(P)) {
2351       NumWithout = 2;
2352       break;
2353     }
2354 
2355     Value *predV = findLeader(P, ValNo);
2356     if (!predV) {
2357       predMap.push_back(std::make_pair(static_cast<Value *>(nullptr), P));
2358       PREPred = P;
2359       ++NumWithout;
2360     } else if (predV == CurInst) {
2361       /* CurInst dominates this predecessor. */
2362       NumWithout = 2;
2363       break;
2364     } else {
2365       predMap.push_back(std::make_pair(predV, P));
2366       ++NumWith;
2367     }
2368   }
2369 
2370   // Don't do PRE when it might increase code size, i.e. when
2371   // we would need to insert instructions in more than one pred.
2372   if (NumWithout > 1 || NumWith == 0)
2373     return false;
2374 
2375   // We may have a case where all predecessors have the instruction,
2376   // and we just need to insert a phi node. Otherwise, perform
2377   // insertion.
2378   Instruction *PREInstr = nullptr;
2379 
2380   if (NumWithout != 0) {
2381     // Don't do PRE across indirect branch.
2382     if (isa<IndirectBrInst>(PREPred->getTerminator()))
2383       return false;
2384 
2385     // We can't do PRE safely on a critical edge, so instead we schedule
2386     // the edge to be split and perform the PRE the next time we iterate
2387     // on the function.
2388     unsigned SuccNum = GetSuccessorNumber(PREPred, CurrentBlock);
2389     if (isCriticalEdge(PREPred->getTerminator(), SuccNum)) {
2390       toSplit.push_back(std::make_pair(PREPred->getTerminator(), SuccNum));
2391       return false;
2392     }
2393     // We need to insert somewhere, so let's give it a shot
2394     PREInstr = CurInst->clone();
2395     if (!performScalarPREInsertion(PREInstr, PREPred, ValNo)) {
2396       // If we failed insertion, make sure we remove the instruction.
2397       DEBUG(verifyRemoved(PREInstr));
2398       delete PREInstr;
2399       return false;
2400     }
2401   }
2402 
2403   // Either we should have filled in the PRE instruction, or we should
2404   // not have needed insertions.
2405   assert (PREInstr != nullptr || NumWithout == 0);
2406 
2407   ++NumGVNPRE;
2408 
2409   // Create a PHI to make the value available in this block.
2410   PHINode *Phi =
2411       PHINode::Create(CurInst->getType(), predMap.size(),
2412                       CurInst->getName() + ".pre-phi", &CurrentBlock->front());
2413   for (unsigned i = 0, e = predMap.size(); i != e; ++i) {
2414     if (Value *V = predMap[i].first)
2415       Phi->addIncoming(V, predMap[i].second);
2416     else
2417       Phi->addIncoming(PREInstr, PREPred);
2418   }
2419 
2420   VN.add(Phi, ValNo);
2421   addToLeaderTable(ValNo, Phi, CurrentBlock);
2422   Phi->setDebugLoc(CurInst->getDebugLoc());
2423   CurInst->replaceAllUsesWith(Phi);
2424   if (MD && Phi->getType()->getScalarType()->isPointerTy())
2425     MD->invalidateCachedPointerInfo(Phi);
2426   VN.erase(CurInst);
2427   removeFromLeaderTable(ValNo, CurInst, CurrentBlock);
2428 
2429   DEBUG(dbgs() << "GVN PRE removed: " << *CurInst << '\n');
2430   if (MD)
2431     MD->removeInstruction(CurInst);
2432   DEBUG(verifyRemoved(CurInst));
2433   CurInst->eraseFromParent();
2434   ++NumGVNInstr;
2435 
2436   return true;
2437 }
2438 
2439 /// Perform a purely local form of PRE that looks for diamond
2440 /// control flow patterns and attempts to perform simple PRE at the join point.
2441 bool GVN::performPRE(Function &F) {
2442   bool Changed = false;
2443   for (BasicBlock *CurrentBlock : depth_first(&F.getEntryBlock())) {
2444     // Nothing to PRE in the entry block.
2445     if (CurrentBlock == &F.getEntryBlock())
2446       continue;
2447 
2448     // Don't perform PRE on an EH pad.
2449     if (CurrentBlock->isEHPad())
2450       continue;
2451 
2452     for (BasicBlock::iterator BI = CurrentBlock->begin(),
2453                               BE = CurrentBlock->end();
2454          BI != BE;) {
2455       Instruction *CurInst = &*BI++;
2456       Changed |= performScalarPRE(CurInst);
2457     }
2458   }
2459 
2460   if (splitCriticalEdges())
2461     Changed = true;
2462 
2463   return Changed;
2464 }
2465 
2466 /// Split the critical edge connecting the given two blocks, and return
2467 /// the block inserted to the critical edge.
2468 BasicBlock *GVN::splitCriticalEdges(BasicBlock *Pred, BasicBlock *Succ) {
2469   BasicBlock *BB =
2470       SplitCriticalEdge(Pred, Succ, CriticalEdgeSplittingOptions(DT));
2471   if (MD)
2472     MD->invalidateCachedPredecessors();
2473   return BB;
2474 }
2475 
2476 /// Split critical edges found during the previous
2477 /// iteration that may enable further optimization.
2478 bool GVN::splitCriticalEdges() {
2479   if (toSplit.empty())
2480     return false;
2481   do {
2482     std::pair<TerminatorInst*, unsigned> Edge = toSplit.pop_back_val();
2483     SplitCriticalEdge(Edge.first, Edge.second,
2484                       CriticalEdgeSplittingOptions(DT));
2485   } while (!toSplit.empty());
2486   if (MD) MD->invalidateCachedPredecessors();
2487   return true;
2488 }
2489 
2490 /// Executes one iteration of GVN
2491 bool GVN::iterateOnFunction(Function &F) {
2492   cleanupGlobalSets();
2493 
2494   // Top-down walk of the dominator tree
2495   bool Changed = false;
2496   // Save the blocks this function have before transformation begins. GVN may
2497   // split critical edge, and hence may invalidate the RPO/DT iterator.
2498   //
2499   std::vector<BasicBlock *> BBVect;
2500   BBVect.reserve(256);
2501   // Needed for value numbering with phi construction to work.
2502   ReversePostOrderTraversal<Function *> RPOT(&F);
2503   for (ReversePostOrderTraversal<Function *>::rpo_iterator RI = RPOT.begin(),
2504                                                            RE = RPOT.end();
2505        RI != RE; ++RI)
2506     BBVect.push_back(*RI);
2507 
2508   for (std::vector<BasicBlock *>::iterator I = BBVect.begin(), E = BBVect.end();
2509        I != E; I++)
2510     Changed |= processBlock(*I);
2511 
2512   return Changed;
2513 }
2514 
2515 void GVN::cleanupGlobalSets() {
2516   VN.clear();
2517   LeaderTable.clear();
2518   TableAllocator.Reset();
2519 }
2520 
2521 /// Verify that the specified instruction does not occur in our
2522 /// internal data structures.
2523 void GVN::verifyRemoved(const Instruction *Inst) const {
2524   VN.verifyRemoved(Inst);
2525 
2526   // Walk through the value number scope to make sure the instruction isn't
2527   // ferreted away in it.
2528   for (DenseMap<uint32_t, LeaderTableEntry>::const_iterator
2529        I = LeaderTable.begin(), E = LeaderTable.end(); I != E; ++I) {
2530     const LeaderTableEntry *Node = &I->second;
2531     assert(Node->Val != Inst && "Inst still in value numbering scope!");
2532 
2533     while (Node->Next) {
2534       Node = Node->Next;
2535       assert(Node->Val != Inst && "Inst still in value numbering scope!");
2536     }
2537   }
2538 }
2539 
2540 /// BB is declared dead, which implied other blocks become dead as well. This
2541 /// function is to add all these blocks to "DeadBlocks". For the dead blocks'
2542 /// live successors, update their phi nodes by replacing the operands
2543 /// corresponding to dead blocks with UndefVal.
2544 void GVN::addDeadBlock(BasicBlock *BB) {
2545   SmallVector<BasicBlock *, 4> NewDead;
2546   SmallSetVector<BasicBlock *, 4> DF;
2547 
2548   NewDead.push_back(BB);
2549   while (!NewDead.empty()) {
2550     BasicBlock *D = NewDead.pop_back_val();
2551     if (DeadBlocks.count(D))
2552       continue;
2553 
2554     // All blocks dominated by D are dead.
2555     SmallVector<BasicBlock *, 8> Dom;
2556     DT->getDescendants(D, Dom);
2557     DeadBlocks.insert(Dom.begin(), Dom.end());
2558 
2559     // Figure out the dominance-frontier(D).
2560     for (BasicBlock *B : Dom) {
2561       for (BasicBlock *S : successors(B)) {
2562         if (DeadBlocks.count(S))
2563           continue;
2564 
2565         bool AllPredDead = true;
2566         for (BasicBlock *P : predecessors(S))
2567           if (!DeadBlocks.count(P)) {
2568             AllPredDead = false;
2569             break;
2570           }
2571 
2572         if (!AllPredDead) {
2573           // S could be proved dead later on. That is why we don't update phi
2574           // operands at this moment.
2575           DF.insert(S);
2576         } else {
2577           // While S is not dominated by D, it is dead by now. This could take
2578           // place if S already have a dead predecessor before D is declared
2579           // dead.
2580           NewDead.push_back(S);
2581         }
2582       }
2583     }
2584   }
2585 
2586   // For the dead blocks' live successors, update their phi nodes by replacing
2587   // the operands corresponding to dead blocks with UndefVal.
2588   for(SmallSetVector<BasicBlock *, 4>::iterator I = DF.begin(), E = DF.end();
2589         I != E; I++) {
2590     BasicBlock *B = *I;
2591     if (DeadBlocks.count(B))
2592       continue;
2593 
2594     SmallVector<BasicBlock *, 4> Preds(pred_begin(B), pred_end(B));
2595     for (BasicBlock *P : Preds) {
2596       if (!DeadBlocks.count(P))
2597         continue;
2598 
2599       if (isCriticalEdge(P->getTerminator(), GetSuccessorNumber(P, B))) {
2600         if (BasicBlock *S = splitCriticalEdges(P, B))
2601           DeadBlocks.insert(P = S);
2602       }
2603 
2604       for (BasicBlock::iterator II = B->begin(); isa<PHINode>(II); ++II) {
2605         PHINode &Phi = cast<PHINode>(*II);
2606         Phi.setIncomingValue(Phi.getBasicBlockIndex(P),
2607                              UndefValue::get(Phi.getType()));
2608       }
2609     }
2610   }
2611 }
2612 
2613 // If the given branch is recognized as a foldable branch (i.e. conditional
2614 // branch with constant condition), it will perform following analyses and
2615 // transformation.
2616 //  1) If the dead out-coming edge is a critical-edge, split it. Let
2617 //     R be the target of the dead out-coming edge.
2618 //  1) Identify the set of dead blocks implied by the branch's dead outcoming
2619 //     edge. The result of this step will be {X| X is dominated by R}
2620 //  2) Identify those blocks which haves at least one dead predecessor. The
2621 //     result of this step will be dominance-frontier(R).
2622 //  3) Update the PHIs in DF(R) by replacing the operands corresponding to
2623 //     dead blocks with "UndefVal" in an hope these PHIs will optimized away.
2624 //
2625 // Return true iff *NEW* dead code are found.
2626 bool GVN::processFoldableCondBr(BranchInst *BI) {
2627   if (!BI || BI->isUnconditional())
2628     return false;
2629 
2630   // If a branch has two identical successors, we cannot declare either dead.
2631   if (BI->getSuccessor(0) == BI->getSuccessor(1))
2632     return false;
2633 
2634   ConstantInt *Cond = dyn_cast<ConstantInt>(BI->getCondition());
2635   if (!Cond)
2636     return false;
2637 
2638   BasicBlock *DeadRoot =
2639       Cond->getZExtValue() ? BI->getSuccessor(1) : BI->getSuccessor(0);
2640   if (DeadBlocks.count(DeadRoot))
2641     return false;
2642 
2643   if (!DeadRoot->getSinglePredecessor())
2644     DeadRoot = splitCriticalEdges(BI->getParent(), DeadRoot);
2645 
2646   addDeadBlock(DeadRoot);
2647   return true;
2648 }
2649 
2650 // performPRE() will trigger assert if it comes across an instruction without
2651 // associated val-num. As it normally has far more live instructions than dead
2652 // instructions, it makes more sense just to "fabricate" a val-number for the
2653 // dead code than checking if instruction involved is dead or not.
2654 void GVN::assignValNumForDeadCode() {
2655   for (BasicBlock *BB : DeadBlocks) {
2656     for (Instruction &Inst : *BB) {
2657       unsigned ValNum = VN.lookupOrAdd(&Inst);
2658       addToLeaderTable(ValNum, &Inst, BB);
2659     }
2660   }
2661 }
2662 
2663 class llvm::gvn::GVNLegacyPass : public FunctionPass {
2664 public:
2665   static char ID; // Pass identification, replacement for typeid
2666   explicit GVNLegacyPass(bool NoLoads = false)
2667       : FunctionPass(ID), NoLoads(NoLoads) {
2668     initializeGVNLegacyPassPass(*PassRegistry::getPassRegistry());
2669   }
2670 
2671   bool runOnFunction(Function &F) override {
2672     if (skipFunction(F))
2673       return false;
2674 
2675     return Impl.runImpl(
2676         F, getAnalysis<AssumptionCacheTracker>().getAssumptionCache(F),
2677         getAnalysis<DominatorTreeWrapperPass>().getDomTree(),
2678         getAnalysis<TargetLibraryInfoWrapperPass>().getTLI(),
2679         getAnalysis<AAResultsWrapperPass>().getAAResults(),
2680         NoLoads ? nullptr
2681                 : &getAnalysis<MemoryDependenceWrapperPass>().getMemDep());
2682   }
2683 
2684   void getAnalysisUsage(AnalysisUsage &AU) const override {
2685     AU.addRequired<AssumptionCacheTracker>();
2686     AU.addRequired<DominatorTreeWrapperPass>();
2687     AU.addRequired<TargetLibraryInfoWrapperPass>();
2688     if (!NoLoads)
2689       AU.addRequired<MemoryDependenceWrapperPass>();
2690     AU.addRequired<AAResultsWrapperPass>();
2691 
2692     AU.addPreserved<DominatorTreeWrapperPass>();
2693     AU.addPreserved<GlobalsAAWrapperPass>();
2694   }
2695 
2696 private:
2697   bool NoLoads;
2698   GVN Impl;
2699 };
2700 
2701 char GVNLegacyPass::ID = 0;
2702 
2703 // The public interface to this file...
2704 FunctionPass *llvm::createGVNPass(bool NoLoads) {
2705   return new GVNLegacyPass(NoLoads);
2706 }
2707 
2708 INITIALIZE_PASS_BEGIN(GVNLegacyPass, "gvn", "Global Value Numbering", false, false)
2709 INITIALIZE_PASS_DEPENDENCY(AssumptionCacheTracker)
2710 INITIALIZE_PASS_DEPENDENCY(MemoryDependenceWrapperPass)
2711 INITIALIZE_PASS_DEPENDENCY(DominatorTreeWrapperPass)
2712 INITIALIZE_PASS_DEPENDENCY(TargetLibraryInfoWrapperPass)
2713 INITIALIZE_PASS_DEPENDENCY(AAResultsWrapperPass)
2714 INITIALIZE_PASS_DEPENDENCY(GlobalsAAWrapperPass)
2715 INITIALIZE_PASS_END(GVNLegacyPass, "gvn", "Global Value Numbering", false, false)
2716