1 //===- GVN.cpp - Eliminate redundant values and loads ---------------------===//
2 //
3 //                     The LLVM Compiler Infrastructure
4 //
5 // This file is distributed under the University of Illinois Open Source
6 // License. See LICENSE.TXT for details.
7 //
8 //===----------------------------------------------------------------------===//
9 //
10 // This pass performs global value numbering to eliminate fully redundant
11 // instructions.  It also performs simple dead load elimination.
12 //
13 // Note that this pass does the value numbering itself; it does not use the
14 // ValueNumbering analysis passes.
15 //
16 //===----------------------------------------------------------------------===//
17 
18 #include "llvm/Transforms/Scalar/GVN.h"
19 #include "llvm/ADT/DenseMap.h"
20 #include "llvm/ADT/DepthFirstIterator.h"
21 #include "llvm/ADT/Hashing.h"
22 #include "llvm/ADT/MapVector.h"
23 #include "llvm/ADT/PointerIntPair.h"
24 #include "llvm/ADT/PostOrderIterator.h"
25 #include "llvm/ADT/STLExtras.h"
26 #include "llvm/ADT/SetVector.h"
27 #include "llvm/ADT/SmallPtrSet.h"
28 #include "llvm/ADT/SmallVector.h"
29 #include "llvm/ADT/Statistic.h"
30 #include "llvm/Analysis/AliasAnalysis.h"
31 #include "llvm/Analysis/AssumptionCache.h"
32 #include "llvm/Analysis/CFG.h"
33 #include "llvm/Analysis/GlobalsModRef.h"
34 #include "llvm/Analysis/InstructionSimplify.h"
35 #include "llvm/Analysis/LoopInfo.h"
36 #include "llvm/Analysis/MemoryBuiltins.h"
37 #include "llvm/Analysis/MemoryDependenceAnalysis.h"
38 #include "llvm/Analysis/OptimizationRemarkEmitter.h"
39 #include "llvm/Analysis/PHITransAddr.h"
40 #include "llvm/Analysis/TargetLibraryInfo.h"
41 #include "llvm/Analysis/ValueTracking.h"
42 #include "llvm/IR/Attributes.h"
43 #include "llvm/IR/BasicBlock.h"
44 #include "llvm/IR/CallSite.h"
45 #include "llvm/IR/Constant.h"
46 #include "llvm/IR/Constants.h"
47 #include "llvm/IR/DataLayout.h"
48 #include "llvm/IR/DebugLoc.h"
49 #include "llvm/IR/Dominators.h"
50 #include "llvm/IR/Function.h"
51 #include "llvm/IR/InstrTypes.h"
52 #include "llvm/IR/Instruction.h"
53 #include "llvm/IR/Instructions.h"
54 #include "llvm/IR/IntrinsicInst.h"
55 #include "llvm/IR/Intrinsics.h"
56 #include "llvm/IR/LLVMContext.h"
57 #include "llvm/IR/Metadata.h"
58 #include "llvm/IR/Module.h"
59 #include "llvm/IR/Operator.h"
60 #include "llvm/IR/PassManager.h"
61 #include "llvm/IR/PatternMatch.h"
62 #include "llvm/IR/Type.h"
63 #include "llvm/IR/Use.h"
64 #include "llvm/IR/Value.h"
65 #include "llvm/Pass.h"
66 #include "llvm/Support/Casting.h"
67 #include "llvm/Support/CommandLine.h"
68 #include "llvm/Support/Compiler.h"
69 #include "llvm/Support/Debug.h"
70 #include "llvm/Support/raw_ostream.h"
71 #include "llvm/Transforms/Utils/BasicBlockUtils.h"
72 #include "llvm/Transforms/Utils/Local.h"
73 #include "llvm/Transforms/Utils/SSAUpdater.h"
74 #include "llvm/Transforms/Utils/VNCoercion.h"
75 #include <algorithm>
76 #include <cassert>
77 #include <cstdint>
78 #include <utility>
79 #include <vector>
80 
81 using namespace llvm;
82 using namespace llvm::gvn;
83 using namespace llvm::VNCoercion;
84 using namespace PatternMatch;
85 
86 #define DEBUG_TYPE "gvn"
87 
88 STATISTIC(NumGVNInstr,  "Number of instructions deleted");
89 STATISTIC(NumGVNLoad,   "Number of loads deleted");
90 STATISTIC(NumGVNPRE,    "Number of instructions PRE'd");
91 STATISTIC(NumGVNBlocks, "Number of blocks merged");
92 STATISTIC(NumGVNSimpl,  "Number of instructions simplified");
93 STATISTIC(NumGVNEqProp, "Number of equalities propagated");
94 STATISTIC(NumPRELoad,   "Number of loads PRE'd");
95 
96 static cl::opt<bool> EnablePRE("enable-pre",
97                                cl::init(true), cl::Hidden);
98 static cl::opt<bool> EnableLoadPRE("enable-load-pre", cl::init(true));
99 
100 // Maximum allowed recursion depth.
101 static cl::opt<uint32_t>
102 MaxRecurseDepth("max-recurse-depth", cl::Hidden, cl::init(1000), cl::ZeroOrMore,
103                 cl::desc("Max recurse depth (default = 1000)"));
104 
105 struct llvm::GVN::Expression {
106   uint32_t opcode;
107   Type *type;
108   bool commutative = false;
109   SmallVector<uint32_t, 4> varargs;
110 
111   Expression(uint32_t o = ~2U) : opcode(o) {}
112 
113   bool operator==(const Expression &other) const {
114     if (opcode != other.opcode)
115       return false;
116     if (opcode == ~0U || opcode == ~1U)
117       return true;
118     if (type != other.type)
119       return false;
120     if (varargs != other.varargs)
121       return false;
122     return true;
123   }
124 
125   friend hash_code hash_value(const Expression &Value) {
126     return hash_combine(
127         Value.opcode, Value.type,
128         hash_combine_range(Value.varargs.begin(), Value.varargs.end()));
129   }
130 };
131 
132 namespace llvm {
133 
134 template <> struct DenseMapInfo<GVN::Expression> {
135   static inline GVN::Expression getEmptyKey() { return ~0U; }
136   static inline GVN::Expression getTombstoneKey() { return ~1U; }
137 
138   static unsigned getHashValue(const GVN::Expression &e) {
139     using llvm::hash_value;
140 
141     return static_cast<unsigned>(hash_value(e));
142   }
143 
144   static bool isEqual(const GVN::Expression &LHS, const GVN::Expression &RHS) {
145     return LHS == RHS;
146   }
147 };
148 
149 } // end namespace llvm
150 
151 /// Represents a particular available value that we know how to materialize.
152 /// Materialization of an AvailableValue never fails.  An AvailableValue is
153 /// implicitly associated with a rematerialization point which is the
154 /// location of the instruction from which it was formed.
155 struct llvm::gvn::AvailableValue {
156   enum ValType {
157     SimpleVal, // A simple offsetted value that is accessed.
158     LoadVal,   // A value produced by a load.
159     MemIntrin, // A memory intrinsic which is loaded from.
160     UndefVal   // A UndefValue representing a value from dead block (which
161                // is not yet physically removed from the CFG).
162   };
163 
164   /// V - The value that is live out of the block.
165   PointerIntPair<Value *, 2, ValType> Val;
166 
167   /// Offset - The byte offset in Val that is interesting for the load query.
168   unsigned Offset;
169 
170   static AvailableValue get(Value *V, unsigned Offset = 0) {
171     AvailableValue Res;
172     Res.Val.setPointer(V);
173     Res.Val.setInt(SimpleVal);
174     Res.Offset = Offset;
175     return Res;
176   }
177 
178   static AvailableValue getMI(MemIntrinsic *MI, unsigned Offset = 0) {
179     AvailableValue Res;
180     Res.Val.setPointer(MI);
181     Res.Val.setInt(MemIntrin);
182     Res.Offset = Offset;
183     return Res;
184   }
185 
186   static AvailableValue getLoad(LoadInst *LI, unsigned Offset = 0) {
187     AvailableValue Res;
188     Res.Val.setPointer(LI);
189     Res.Val.setInt(LoadVal);
190     Res.Offset = Offset;
191     return Res;
192   }
193 
194   static AvailableValue getUndef() {
195     AvailableValue Res;
196     Res.Val.setPointer(nullptr);
197     Res.Val.setInt(UndefVal);
198     Res.Offset = 0;
199     return Res;
200   }
201 
202   bool isSimpleValue() const { return Val.getInt() == SimpleVal; }
203   bool isCoercedLoadValue() const { return Val.getInt() == LoadVal; }
204   bool isMemIntrinValue() const { return Val.getInt() == MemIntrin; }
205   bool isUndefValue() const { return Val.getInt() == UndefVal; }
206 
207   Value *getSimpleValue() const {
208     assert(isSimpleValue() && "Wrong accessor");
209     return Val.getPointer();
210   }
211 
212   LoadInst *getCoercedLoadValue() const {
213     assert(isCoercedLoadValue() && "Wrong accessor");
214     return cast<LoadInst>(Val.getPointer());
215   }
216 
217   MemIntrinsic *getMemIntrinValue() const {
218     assert(isMemIntrinValue() && "Wrong accessor");
219     return cast<MemIntrinsic>(Val.getPointer());
220   }
221 
222   /// Emit code at the specified insertion point to adjust the value defined
223   /// here to the specified type. This handles various coercion cases.
224   Value *MaterializeAdjustedValue(LoadInst *LI, Instruction *InsertPt,
225                                   GVN &gvn) const;
226 };
227 
228 /// Represents an AvailableValue which can be rematerialized at the end of
229 /// the associated BasicBlock.
230 struct llvm::gvn::AvailableValueInBlock {
231   /// BB - The basic block in question.
232   BasicBlock *BB;
233 
234   /// AV - The actual available value
235   AvailableValue AV;
236 
237   static AvailableValueInBlock get(BasicBlock *BB, AvailableValue &&AV) {
238     AvailableValueInBlock Res;
239     Res.BB = BB;
240     Res.AV = std::move(AV);
241     return Res;
242   }
243 
244   static AvailableValueInBlock get(BasicBlock *BB, Value *V,
245                                    unsigned Offset = 0) {
246     return get(BB, AvailableValue::get(V, Offset));
247   }
248 
249   static AvailableValueInBlock getUndef(BasicBlock *BB) {
250     return get(BB, AvailableValue::getUndef());
251   }
252 
253   /// Emit code at the end of this block to adjust the value defined here to
254   /// the specified type. This handles various coercion cases.
255   Value *MaterializeAdjustedValue(LoadInst *LI, GVN &gvn) const {
256     return AV.MaterializeAdjustedValue(LI, BB->getTerminator(), gvn);
257   }
258 };
259 
260 //===----------------------------------------------------------------------===//
261 //                     ValueTable Internal Functions
262 //===----------------------------------------------------------------------===//
263 
264 GVN::Expression GVN::ValueTable::createExpr(Instruction *I) {
265   Expression e;
266   e.type = I->getType();
267   e.opcode = I->getOpcode();
268   for (Instruction::op_iterator OI = I->op_begin(), OE = I->op_end();
269        OI != OE; ++OI)
270     e.varargs.push_back(lookupOrAdd(*OI));
271   if (I->isCommutative()) {
272     // Ensure that commutative instructions that only differ by a permutation
273     // of their operands get the same value number by sorting the operand value
274     // numbers.  Since all commutative instructions have two operands it is more
275     // efficient to sort by hand rather than using, say, std::sort.
276     assert(I->getNumOperands() == 2 && "Unsupported commutative instruction!");
277     if (e.varargs[0] > e.varargs[1])
278       std::swap(e.varargs[0], e.varargs[1]);
279     e.commutative = true;
280   }
281 
282   if (CmpInst *C = dyn_cast<CmpInst>(I)) {
283     // Sort the operand value numbers so x<y and y>x get the same value number.
284     CmpInst::Predicate Predicate = C->getPredicate();
285     if (e.varargs[0] > e.varargs[1]) {
286       std::swap(e.varargs[0], e.varargs[1]);
287       Predicate = CmpInst::getSwappedPredicate(Predicate);
288     }
289     e.opcode = (C->getOpcode() << 8) | Predicate;
290     e.commutative = true;
291   } else if (InsertValueInst *E = dyn_cast<InsertValueInst>(I)) {
292     for (InsertValueInst::idx_iterator II = E->idx_begin(), IE = E->idx_end();
293          II != IE; ++II)
294       e.varargs.push_back(*II);
295   }
296 
297   return e;
298 }
299 
300 GVN::Expression GVN::ValueTable::createCmpExpr(unsigned Opcode,
301                                                CmpInst::Predicate Predicate,
302                                                Value *LHS, Value *RHS) {
303   assert((Opcode == Instruction::ICmp || Opcode == Instruction::FCmp) &&
304          "Not a comparison!");
305   Expression e;
306   e.type = CmpInst::makeCmpResultType(LHS->getType());
307   e.varargs.push_back(lookupOrAdd(LHS));
308   e.varargs.push_back(lookupOrAdd(RHS));
309 
310   // Sort the operand value numbers so x<y and y>x get the same value number.
311   if (e.varargs[0] > e.varargs[1]) {
312     std::swap(e.varargs[0], e.varargs[1]);
313     Predicate = CmpInst::getSwappedPredicate(Predicate);
314   }
315   e.opcode = (Opcode << 8) | Predicate;
316   e.commutative = true;
317   return e;
318 }
319 
320 GVN::Expression GVN::ValueTable::createExtractvalueExpr(ExtractValueInst *EI) {
321   assert(EI && "Not an ExtractValueInst?");
322   Expression e;
323   e.type = EI->getType();
324   e.opcode = 0;
325 
326   IntrinsicInst *I = dyn_cast<IntrinsicInst>(EI->getAggregateOperand());
327   if (I != nullptr && EI->getNumIndices() == 1 && *EI->idx_begin() == 0 ) {
328     // EI might be an extract from one of our recognised intrinsics. If it
329     // is we'll synthesize a semantically equivalent expression instead on
330     // an extract value expression.
331     switch (I->getIntrinsicID()) {
332       case Intrinsic::sadd_with_overflow:
333       case Intrinsic::uadd_with_overflow:
334         e.opcode = Instruction::Add;
335         break;
336       case Intrinsic::ssub_with_overflow:
337       case Intrinsic::usub_with_overflow:
338         e.opcode = Instruction::Sub;
339         break;
340       case Intrinsic::smul_with_overflow:
341       case Intrinsic::umul_with_overflow:
342         e.opcode = Instruction::Mul;
343         break;
344       default:
345         break;
346     }
347 
348     if (e.opcode != 0) {
349       // Intrinsic recognized. Grab its args to finish building the expression.
350       assert(I->getNumArgOperands() == 2 &&
351              "Expect two args for recognised intrinsics.");
352       e.varargs.push_back(lookupOrAdd(I->getArgOperand(0)));
353       e.varargs.push_back(lookupOrAdd(I->getArgOperand(1)));
354       return e;
355     }
356   }
357 
358   // Not a recognised intrinsic. Fall back to producing an extract value
359   // expression.
360   e.opcode = EI->getOpcode();
361   for (Instruction::op_iterator OI = EI->op_begin(), OE = EI->op_end();
362        OI != OE; ++OI)
363     e.varargs.push_back(lookupOrAdd(*OI));
364 
365   for (ExtractValueInst::idx_iterator II = EI->idx_begin(), IE = EI->idx_end();
366          II != IE; ++II)
367     e.varargs.push_back(*II);
368 
369   return e;
370 }
371 
372 //===----------------------------------------------------------------------===//
373 //                     ValueTable External Functions
374 //===----------------------------------------------------------------------===//
375 
376 GVN::ValueTable::ValueTable() = default;
377 GVN::ValueTable::ValueTable(const ValueTable &) = default;
378 GVN::ValueTable::ValueTable(ValueTable &&) = default;
379 GVN::ValueTable::~ValueTable() = default;
380 
381 /// add - Insert a value into the table with a specified value number.
382 void GVN::ValueTable::add(Value *V, uint32_t num) {
383   valueNumbering.insert(std::make_pair(V, num));
384   if (PHINode *PN = dyn_cast<PHINode>(V))
385     NumberingPhi[num] = PN;
386 }
387 
388 uint32_t GVN::ValueTable::lookupOrAddCall(CallInst *C) {
389   if (AA->doesNotAccessMemory(C)) {
390     Expression exp = createExpr(C);
391     uint32_t e = assignExpNewValueNum(exp).first;
392     valueNumbering[C] = e;
393     return e;
394   } else if (AA->onlyReadsMemory(C)) {
395     Expression exp = createExpr(C);
396     auto ValNum = assignExpNewValueNum(exp);
397     if (ValNum.second) {
398       valueNumbering[C] = ValNum.first;
399       return ValNum.first;
400     }
401     if (!MD) {
402       uint32_t e = assignExpNewValueNum(exp).first;
403       valueNumbering[C] = e;
404       return e;
405     }
406 
407     MemDepResult local_dep = MD->getDependency(C);
408 
409     if (!local_dep.isDef() && !local_dep.isNonLocal()) {
410       valueNumbering[C] =  nextValueNumber;
411       return nextValueNumber++;
412     }
413 
414     if (local_dep.isDef()) {
415       CallInst* local_cdep = cast<CallInst>(local_dep.getInst());
416 
417       if (local_cdep->getNumArgOperands() != C->getNumArgOperands()) {
418         valueNumbering[C] = nextValueNumber;
419         return nextValueNumber++;
420       }
421 
422       for (unsigned i = 0, e = C->getNumArgOperands(); i < e; ++i) {
423         uint32_t c_vn = lookupOrAdd(C->getArgOperand(i));
424         uint32_t cd_vn = lookupOrAdd(local_cdep->getArgOperand(i));
425         if (c_vn != cd_vn) {
426           valueNumbering[C] = nextValueNumber;
427           return nextValueNumber++;
428         }
429       }
430 
431       uint32_t v = lookupOrAdd(local_cdep);
432       valueNumbering[C] = v;
433       return v;
434     }
435 
436     // Non-local case.
437     const MemoryDependenceResults::NonLocalDepInfo &deps =
438       MD->getNonLocalCallDependency(CallSite(C));
439     // FIXME: Move the checking logic to MemDep!
440     CallInst* cdep = nullptr;
441 
442     // Check to see if we have a single dominating call instruction that is
443     // identical to C.
444     for (unsigned i = 0, e = deps.size(); i != e; ++i) {
445       const NonLocalDepEntry *I = &deps[i];
446       if (I->getResult().isNonLocal())
447         continue;
448 
449       // We don't handle non-definitions.  If we already have a call, reject
450       // instruction dependencies.
451       if (!I->getResult().isDef() || cdep != nullptr) {
452         cdep = nullptr;
453         break;
454       }
455 
456       CallInst *NonLocalDepCall = dyn_cast<CallInst>(I->getResult().getInst());
457       // FIXME: All duplicated with non-local case.
458       if (NonLocalDepCall && DT->properlyDominates(I->getBB(), C->getParent())){
459         cdep = NonLocalDepCall;
460         continue;
461       }
462 
463       cdep = nullptr;
464       break;
465     }
466 
467     if (!cdep) {
468       valueNumbering[C] = nextValueNumber;
469       return nextValueNumber++;
470     }
471 
472     if (cdep->getNumArgOperands() != C->getNumArgOperands()) {
473       valueNumbering[C] = nextValueNumber;
474       return nextValueNumber++;
475     }
476     for (unsigned i = 0, e = C->getNumArgOperands(); i < e; ++i) {
477       uint32_t c_vn = lookupOrAdd(C->getArgOperand(i));
478       uint32_t cd_vn = lookupOrAdd(cdep->getArgOperand(i));
479       if (c_vn != cd_vn) {
480         valueNumbering[C] = nextValueNumber;
481         return nextValueNumber++;
482       }
483     }
484 
485     uint32_t v = lookupOrAdd(cdep);
486     valueNumbering[C] = v;
487     return v;
488   } else {
489     valueNumbering[C] = nextValueNumber;
490     return nextValueNumber++;
491   }
492 }
493 
494 /// Returns true if a value number exists for the specified value.
495 bool GVN::ValueTable::exists(Value *V) const { return valueNumbering.count(V) != 0; }
496 
497 /// lookup_or_add - Returns the value number for the specified value, assigning
498 /// it a new number if it did not have one before.
499 uint32_t GVN::ValueTable::lookupOrAdd(Value *V) {
500   DenseMap<Value*, uint32_t>::iterator VI = valueNumbering.find(V);
501   if (VI != valueNumbering.end())
502     return VI->second;
503 
504   if (!isa<Instruction>(V)) {
505     valueNumbering[V] = nextValueNumber;
506     return nextValueNumber++;
507   }
508 
509   Instruction* I = cast<Instruction>(V);
510   Expression exp;
511   switch (I->getOpcode()) {
512     case Instruction::Call:
513       return lookupOrAddCall(cast<CallInst>(I));
514     case Instruction::Add:
515     case Instruction::FAdd:
516     case Instruction::Sub:
517     case Instruction::FSub:
518     case Instruction::Mul:
519     case Instruction::FMul:
520     case Instruction::UDiv:
521     case Instruction::SDiv:
522     case Instruction::FDiv:
523     case Instruction::URem:
524     case Instruction::SRem:
525     case Instruction::FRem:
526     case Instruction::Shl:
527     case Instruction::LShr:
528     case Instruction::AShr:
529     case Instruction::And:
530     case Instruction::Or:
531     case Instruction::Xor:
532     case Instruction::ICmp:
533     case Instruction::FCmp:
534     case Instruction::Trunc:
535     case Instruction::ZExt:
536     case Instruction::SExt:
537     case Instruction::FPToUI:
538     case Instruction::FPToSI:
539     case Instruction::UIToFP:
540     case Instruction::SIToFP:
541     case Instruction::FPTrunc:
542     case Instruction::FPExt:
543     case Instruction::PtrToInt:
544     case Instruction::IntToPtr:
545     case Instruction::BitCast:
546     case Instruction::Select:
547     case Instruction::ExtractElement:
548     case Instruction::InsertElement:
549     case Instruction::ShuffleVector:
550     case Instruction::InsertValue:
551     case Instruction::GetElementPtr:
552       exp = createExpr(I);
553       break;
554     case Instruction::ExtractValue:
555       exp = createExtractvalueExpr(cast<ExtractValueInst>(I));
556       break;
557     case Instruction::PHI:
558       valueNumbering[V] = nextValueNumber;
559       NumberingPhi[nextValueNumber] = cast<PHINode>(V);
560       return nextValueNumber++;
561     default:
562       valueNumbering[V] = nextValueNumber;
563       return nextValueNumber++;
564   }
565 
566   uint32_t e = assignExpNewValueNum(exp).first;
567   valueNumbering[V] = e;
568   return e;
569 }
570 
571 /// Returns the value number of the specified value. Fails if
572 /// the value has not yet been numbered.
573 uint32_t GVN::ValueTable::lookup(Value *V, bool Verify) const {
574   DenseMap<Value*, uint32_t>::const_iterator VI = valueNumbering.find(V);
575   if (Verify) {
576     assert(VI != valueNumbering.end() && "Value not numbered?");
577     return VI->second;
578   }
579   return (VI != valueNumbering.end()) ? VI->second : 0;
580 }
581 
582 /// Returns the value number of the given comparison,
583 /// assigning it a new number if it did not have one before.  Useful when
584 /// we deduced the result of a comparison, but don't immediately have an
585 /// instruction realizing that comparison to hand.
586 uint32_t GVN::ValueTable::lookupOrAddCmp(unsigned Opcode,
587                                          CmpInst::Predicate Predicate,
588                                          Value *LHS, Value *RHS) {
589   Expression exp = createCmpExpr(Opcode, Predicate, LHS, RHS);
590   return assignExpNewValueNum(exp).first;
591 }
592 
593 /// Remove all entries from the ValueTable.
594 void GVN::ValueTable::clear() {
595   valueNumbering.clear();
596   expressionNumbering.clear();
597   NumberingPhi.clear();
598   PhiTranslateTable.clear();
599   nextValueNumber = 1;
600   Expressions.clear();
601   ExprIdx.clear();
602   nextExprNumber = 0;
603 }
604 
605 /// Remove a value from the value numbering.
606 void GVN::ValueTable::erase(Value *V) {
607   uint32_t Num = valueNumbering.lookup(V);
608   valueNumbering.erase(V);
609   // If V is PHINode, V <--> value number is an one-to-one mapping.
610   if (isa<PHINode>(V))
611     NumberingPhi.erase(Num);
612 }
613 
614 /// verifyRemoved - Verify that the value is removed from all internal data
615 /// structures.
616 void GVN::ValueTable::verifyRemoved(const Value *V) const {
617   for (DenseMap<Value*, uint32_t>::const_iterator
618          I = valueNumbering.begin(), E = valueNumbering.end(); I != E; ++I) {
619     assert(I->first != V && "Inst still occurs in value numbering map!");
620   }
621 }
622 
623 //===----------------------------------------------------------------------===//
624 //                                GVN Pass
625 //===----------------------------------------------------------------------===//
626 
627 PreservedAnalyses GVN::run(Function &F, FunctionAnalysisManager &AM) {
628   // FIXME: The order of evaluation of these 'getResult' calls is very
629   // significant! Re-ordering these variables will cause GVN when run alone to
630   // be less effective! We should fix memdep and basic-aa to not exhibit this
631   // behavior, but until then don't change the order here.
632   auto &AC = AM.getResult<AssumptionAnalysis>(F);
633   auto &DT = AM.getResult<DominatorTreeAnalysis>(F);
634   auto &TLI = AM.getResult<TargetLibraryAnalysis>(F);
635   auto &AA = AM.getResult<AAManager>(F);
636   auto &MemDep = AM.getResult<MemoryDependenceAnalysis>(F);
637   auto *LI = AM.getCachedResult<LoopAnalysis>(F);
638   auto &ORE = AM.getResult<OptimizationRemarkEmitterAnalysis>(F);
639   bool Changed = runImpl(F, AC, DT, TLI, AA, &MemDep, LI, &ORE);
640   if (!Changed)
641     return PreservedAnalyses::all();
642   PreservedAnalyses PA;
643   PA.preserve<DominatorTreeAnalysis>();
644   PA.preserve<GlobalsAA>();
645   PA.preserve<TargetLibraryAnalysis>();
646   return PA;
647 }
648 
649 #if !defined(NDEBUG) || defined(LLVM_ENABLE_DUMP)
650 LLVM_DUMP_METHOD void GVN::dump(DenseMap<uint32_t, Value*>& d) const {
651   errs() << "{\n";
652   for (DenseMap<uint32_t, Value*>::iterator I = d.begin(),
653        E = d.end(); I != E; ++I) {
654       errs() << I->first << "\n";
655       I->second->dump();
656   }
657   errs() << "}\n";
658 }
659 #endif
660 
661 /// Return true if we can prove that the value
662 /// we're analyzing is fully available in the specified block.  As we go, keep
663 /// track of which blocks we know are fully alive in FullyAvailableBlocks.  This
664 /// map is actually a tri-state map with the following values:
665 ///   0) we know the block *is not* fully available.
666 ///   1) we know the block *is* fully available.
667 ///   2) we do not know whether the block is fully available or not, but we are
668 ///      currently speculating that it will be.
669 ///   3) we are speculating for this block and have used that to speculate for
670 ///      other blocks.
671 static bool IsValueFullyAvailableInBlock(BasicBlock *BB,
672                             DenseMap<BasicBlock*, char> &FullyAvailableBlocks,
673                             uint32_t RecurseDepth) {
674   if (RecurseDepth > MaxRecurseDepth)
675     return false;
676 
677   // Optimistically assume that the block is fully available and check to see
678   // if we already know about this block in one lookup.
679   std::pair<DenseMap<BasicBlock*, char>::iterator, char> IV =
680     FullyAvailableBlocks.insert(std::make_pair(BB, 2));
681 
682   // If the entry already existed for this block, return the precomputed value.
683   if (!IV.second) {
684     // If this is a speculative "available" value, mark it as being used for
685     // speculation of other blocks.
686     if (IV.first->second == 2)
687       IV.first->second = 3;
688     return IV.first->second != 0;
689   }
690 
691   // Otherwise, see if it is fully available in all predecessors.
692   pred_iterator PI = pred_begin(BB), PE = pred_end(BB);
693 
694   // If this block has no predecessors, it isn't live-in here.
695   if (PI == PE)
696     goto SpeculationFailure;
697 
698   for (; PI != PE; ++PI)
699     // If the value isn't fully available in one of our predecessors, then it
700     // isn't fully available in this block either.  Undo our previous
701     // optimistic assumption and bail out.
702     if (!IsValueFullyAvailableInBlock(*PI, FullyAvailableBlocks,RecurseDepth+1))
703       goto SpeculationFailure;
704 
705   return true;
706 
707 // If we get here, we found out that this is not, after
708 // all, a fully-available block.  We have a problem if we speculated on this and
709 // used the speculation to mark other blocks as available.
710 SpeculationFailure:
711   char &BBVal = FullyAvailableBlocks[BB];
712 
713   // If we didn't speculate on this, just return with it set to false.
714   if (BBVal == 2) {
715     BBVal = 0;
716     return false;
717   }
718 
719   // If we did speculate on this value, we could have blocks set to 1 that are
720   // incorrect.  Walk the (transitive) successors of this block and mark them as
721   // 0 if set to one.
722   SmallVector<BasicBlock*, 32> BBWorklist;
723   BBWorklist.push_back(BB);
724 
725   do {
726     BasicBlock *Entry = BBWorklist.pop_back_val();
727     // Note that this sets blocks to 0 (unavailable) if they happen to not
728     // already be in FullyAvailableBlocks.  This is safe.
729     char &EntryVal = FullyAvailableBlocks[Entry];
730     if (EntryVal == 0) continue;  // Already unavailable.
731 
732     // Mark as unavailable.
733     EntryVal = 0;
734 
735     BBWorklist.append(succ_begin(Entry), succ_end(Entry));
736   } while (!BBWorklist.empty());
737 
738   return false;
739 }
740 
741 /// Given a set of loads specified by ValuesPerBlock,
742 /// construct SSA form, allowing us to eliminate LI.  This returns the value
743 /// that should be used at LI's definition site.
744 static Value *ConstructSSAForLoadSet(LoadInst *LI,
745                          SmallVectorImpl<AvailableValueInBlock> &ValuesPerBlock,
746                                      GVN &gvn) {
747   // Check for the fully redundant, dominating load case.  In this case, we can
748   // just use the dominating value directly.
749   if (ValuesPerBlock.size() == 1 &&
750       gvn.getDominatorTree().properlyDominates(ValuesPerBlock[0].BB,
751                                                LI->getParent())) {
752     assert(!ValuesPerBlock[0].AV.isUndefValue() &&
753            "Dead BB dominate this block");
754     return ValuesPerBlock[0].MaterializeAdjustedValue(LI, gvn);
755   }
756 
757   // Otherwise, we have to construct SSA form.
758   SmallVector<PHINode*, 8> NewPHIs;
759   SSAUpdater SSAUpdate(&NewPHIs);
760   SSAUpdate.Initialize(LI->getType(), LI->getName());
761 
762   for (const AvailableValueInBlock &AV : ValuesPerBlock) {
763     BasicBlock *BB = AV.BB;
764 
765     if (SSAUpdate.HasValueForBlock(BB))
766       continue;
767 
768     SSAUpdate.AddAvailableValue(BB, AV.MaterializeAdjustedValue(LI, gvn));
769   }
770 
771   // Perform PHI construction.
772   return SSAUpdate.GetValueInMiddleOfBlock(LI->getParent());
773 }
774 
775 Value *AvailableValue::MaterializeAdjustedValue(LoadInst *LI,
776                                                 Instruction *InsertPt,
777                                                 GVN &gvn) const {
778   Value *Res;
779   Type *LoadTy = LI->getType();
780   const DataLayout &DL = LI->getModule()->getDataLayout();
781   if (isSimpleValue()) {
782     Res = getSimpleValue();
783     if (Res->getType() != LoadTy) {
784       Res = getStoreValueForLoad(Res, Offset, LoadTy, InsertPt, DL);
785 
786       DEBUG(dbgs() << "GVN COERCED NONLOCAL VAL:\nOffset: " << Offset << "  "
787                    << *getSimpleValue() << '\n'
788                    << *Res << '\n' << "\n\n\n");
789     }
790   } else if (isCoercedLoadValue()) {
791     LoadInst *Load = getCoercedLoadValue();
792     if (Load->getType() == LoadTy && Offset == 0) {
793       Res = Load;
794     } else {
795       Res = getLoadValueForLoad(Load, Offset, LoadTy, InsertPt, DL);
796       // We would like to use gvn.markInstructionForDeletion here, but we can't
797       // because the load is already memoized into the leader map table that GVN
798       // tracks.  It is potentially possible to remove the load from the table,
799       // but then there all of the operations based on it would need to be
800       // rehashed.  Just leave the dead load around.
801       gvn.getMemDep().removeInstruction(Load);
802       DEBUG(dbgs() << "GVN COERCED NONLOCAL LOAD:\nOffset: " << Offset << "  "
803                    << *getCoercedLoadValue() << '\n'
804                    << *Res << '\n'
805                    << "\n\n\n");
806     }
807   } else if (isMemIntrinValue()) {
808     Res = getMemInstValueForLoad(getMemIntrinValue(), Offset, LoadTy,
809                                  InsertPt, DL);
810     DEBUG(dbgs() << "GVN COERCED NONLOCAL MEM INTRIN:\nOffset: " << Offset
811                  << "  " << *getMemIntrinValue() << '\n'
812                  << *Res << '\n' << "\n\n\n");
813   } else {
814     assert(isUndefValue() && "Should be UndefVal");
815     DEBUG(dbgs() << "GVN COERCED NONLOCAL Undef:\n";);
816     return UndefValue::get(LoadTy);
817   }
818   assert(Res && "failed to materialize?");
819   return Res;
820 }
821 
822 static bool isLifetimeStart(const Instruction *Inst) {
823   if (const IntrinsicInst* II = dyn_cast<IntrinsicInst>(Inst))
824     return II->getIntrinsicID() == Intrinsic::lifetime_start;
825   return false;
826 }
827 
828 /// \brief Try to locate the three instruction involved in a missed
829 /// load-elimination case that is due to an intervening store.
830 static void reportMayClobberedLoad(LoadInst *LI, MemDepResult DepInfo,
831                                    DominatorTree *DT,
832                                    OptimizationRemarkEmitter *ORE) {
833   using namespace ore;
834 
835   User *OtherAccess = nullptr;
836 
837   OptimizationRemarkMissed R(DEBUG_TYPE, "LoadClobbered", LI);
838   R << "load of type " << NV("Type", LI->getType()) << " not eliminated"
839     << setExtraArgs();
840 
841   for (auto *U : LI->getPointerOperand()->users())
842     if (U != LI && (isa<LoadInst>(U) || isa<StoreInst>(U)) &&
843         DT->dominates(cast<Instruction>(U), LI)) {
844       // FIXME: for now give up if there are multiple memory accesses that
845       // dominate the load.  We need further analysis to decide which one is
846       // that we're forwarding from.
847       if (OtherAccess)
848         OtherAccess = nullptr;
849       else
850         OtherAccess = U;
851     }
852 
853   if (OtherAccess)
854     R << " in favor of " << NV("OtherAccess", OtherAccess);
855 
856   R << " because it is clobbered by " << NV("ClobberedBy", DepInfo.getInst());
857 
858   ORE->emit(R);
859 }
860 
861 bool GVN::AnalyzeLoadAvailability(LoadInst *LI, MemDepResult DepInfo,
862                                   Value *Address, AvailableValue &Res) {
863   assert((DepInfo.isDef() || DepInfo.isClobber()) &&
864          "expected a local dependence");
865   assert(LI->isUnordered() && "rules below are incorrect for ordered access");
866 
867   const DataLayout &DL = LI->getModule()->getDataLayout();
868 
869   if (DepInfo.isClobber()) {
870     // If the dependence is to a store that writes to a superset of the bits
871     // read by the load, we can extract the bits we need for the load from the
872     // stored value.
873     if (StoreInst *DepSI = dyn_cast<StoreInst>(DepInfo.getInst())) {
874       // Can't forward from non-atomic to atomic without violating memory model.
875       if (Address && LI->isAtomic() <= DepSI->isAtomic()) {
876         int Offset =
877           analyzeLoadFromClobberingStore(LI->getType(), Address, DepSI, DL);
878         if (Offset != -1) {
879           Res = AvailableValue::get(DepSI->getValueOperand(), Offset);
880           return true;
881         }
882       }
883     }
884 
885     // Check to see if we have something like this:
886     //    load i32* P
887     //    load i8* (P+1)
888     // if we have this, replace the later with an extraction from the former.
889     if (LoadInst *DepLI = dyn_cast<LoadInst>(DepInfo.getInst())) {
890       // If this is a clobber and L is the first instruction in its block, then
891       // we have the first instruction in the entry block.
892       // Can't forward from non-atomic to atomic without violating memory model.
893       if (DepLI != LI && Address && LI->isAtomic() <= DepLI->isAtomic()) {
894         int Offset =
895           analyzeLoadFromClobberingLoad(LI->getType(), Address, DepLI, DL);
896 
897         if (Offset != -1) {
898           Res = AvailableValue::getLoad(DepLI, Offset);
899           return true;
900         }
901       }
902     }
903 
904     // If the clobbering value is a memset/memcpy/memmove, see if we can
905     // forward a value on from it.
906     if (MemIntrinsic *DepMI = dyn_cast<MemIntrinsic>(DepInfo.getInst())) {
907       if (Address && !LI->isAtomic()) {
908         int Offset = analyzeLoadFromClobberingMemInst(LI->getType(), Address,
909                                                       DepMI, DL);
910         if (Offset != -1) {
911           Res = AvailableValue::getMI(DepMI, Offset);
912           return true;
913         }
914       }
915     }
916     // Nothing known about this clobber, have to be conservative
917     DEBUG(
918       // fast print dep, using operator<< on instruction is too slow.
919       dbgs() << "GVN: load ";
920       LI->printAsOperand(dbgs());
921       Instruction *I = DepInfo.getInst();
922       dbgs() << " is clobbered by " << *I << '\n';
923     );
924     if (ORE->allowExtraAnalysis(DEBUG_TYPE))
925       reportMayClobberedLoad(LI, DepInfo, DT, ORE);
926 
927     return false;
928   }
929   assert(DepInfo.isDef() && "follows from above");
930 
931   Instruction *DepInst = DepInfo.getInst();
932 
933   // Loading the allocation -> undef.
934   if (isa<AllocaInst>(DepInst) || isMallocLikeFn(DepInst, TLI) ||
935       // Loading immediately after lifetime begin -> undef.
936       isLifetimeStart(DepInst)) {
937     Res = AvailableValue::get(UndefValue::get(LI->getType()));
938     return true;
939   }
940 
941   // Loading from calloc (which zero initializes memory) -> zero
942   if (isCallocLikeFn(DepInst, TLI)) {
943     Res = AvailableValue::get(Constant::getNullValue(LI->getType()));
944     return true;
945   }
946 
947   if (StoreInst *S = dyn_cast<StoreInst>(DepInst)) {
948     // Reject loads and stores that are to the same address but are of
949     // different types if we have to. If the stored value is larger or equal to
950     // the loaded value, we can reuse it.
951     if (S->getValueOperand()->getType() != LI->getType() &&
952         !canCoerceMustAliasedValueToLoad(S->getValueOperand(),
953                                          LI->getType(), DL))
954       return false;
955 
956     // Can't forward from non-atomic to atomic without violating memory model.
957     if (S->isAtomic() < LI->isAtomic())
958       return false;
959 
960     Res = AvailableValue::get(S->getValueOperand());
961     return true;
962   }
963 
964   if (LoadInst *LD = dyn_cast<LoadInst>(DepInst)) {
965     // If the types mismatch and we can't handle it, reject reuse of the load.
966     // If the stored value is larger or equal to the loaded value, we can reuse
967     // it.
968     if (LD->getType() != LI->getType() &&
969         !canCoerceMustAliasedValueToLoad(LD, LI->getType(), DL))
970       return false;
971 
972     // Can't forward from non-atomic to atomic without violating memory model.
973     if (LD->isAtomic() < LI->isAtomic())
974       return false;
975 
976     Res = AvailableValue::getLoad(LD);
977     return true;
978   }
979 
980   // Unknown def - must be conservative
981   DEBUG(
982     // fast print dep, using operator<< on instruction is too slow.
983     dbgs() << "GVN: load ";
984     LI->printAsOperand(dbgs());
985     dbgs() << " has unknown def " << *DepInst << '\n';
986   );
987   return false;
988 }
989 
990 void GVN::AnalyzeLoadAvailability(LoadInst *LI, LoadDepVect &Deps,
991                                   AvailValInBlkVect &ValuesPerBlock,
992                                   UnavailBlkVect &UnavailableBlocks) {
993   // Filter out useless results (non-locals, etc).  Keep track of the blocks
994   // where we have a value available in repl, also keep track of whether we see
995   // dependencies that produce an unknown value for the load (such as a call
996   // that could potentially clobber the load).
997   unsigned NumDeps = Deps.size();
998   for (unsigned i = 0, e = NumDeps; i != e; ++i) {
999     BasicBlock *DepBB = Deps[i].getBB();
1000     MemDepResult DepInfo = Deps[i].getResult();
1001 
1002     if (DeadBlocks.count(DepBB)) {
1003       // Dead dependent mem-op disguise as a load evaluating the same value
1004       // as the load in question.
1005       ValuesPerBlock.push_back(AvailableValueInBlock::getUndef(DepBB));
1006       continue;
1007     }
1008 
1009     if (!DepInfo.isDef() && !DepInfo.isClobber()) {
1010       UnavailableBlocks.push_back(DepBB);
1011       continue;
1012     }
1013 
1014     // The address being loaded in this non-local block may not be the same as
1015     // the pointer operand of the load if PHI translation occurs.  Make sure
1016     // to consider the right address.
1017     Value *Address = Deps[i].getAddress();
1018 
1019     AvailableValue AV;
1020     if (AnalyzeLoadAvailability(LI, DepInfo, Address, AV)) {
1021       // subtlety: because we know this was a non-local dependency, we know
1022       // it's safe to materialize anywhere between the instruction within
1023       // DepInfo and the end of it's block.
1024       ValuesPerBlock.push_back(AvailableValueInBlock::get(DepBB,
1025                                                           std::move(AV)));
1026     } else {
1027       UnavailableBlocks.push_back(DepBB);
1028     }
1029   }
1030 
1031   assert(NumDeps == ValuesPerBlock.size() + UnavailableBlocks.size() &&
1032          "post condition violation");
1033 }
1034 
1035 bool GVN::PerformLoadPRE(LoadInst *LI, AvailValInBlkVect &ValuesPerBlock,
1036                          UnavailBlkVect &UnavailableBlocks) {
1037   // Okay, we have *some* definitions of the value.  This means that the value
1038   // is available in some of our (transitive) predecessors.  Lets think about
1039   // doing PRE of this load.  This will involve inserting a new load into the
1040   // predecessor when it's not available.  We could do this in general, but
1041   // prefer to not increase code size.  As such, we only do this when we know
1042   // that we only have to insert *one* load (which means we're basically moving
1043   // the load, not inserting a new one).
1044 
1045   SmallPtrSet<BasicBlock *, 4> Blockers(UnavailableBlocks.begin(),
1046                                         UnavailableBlocks.end());
1047 
1048   // Let's find the first basic block with more than one predecessor.  Walk
1049   // backwards through predecessors if needed.
1050   BasicBlock *LoadBB = LI->getParent();
1051   BasicBlock *TmpBB = LoadBB;
1052   bool IsSafeToSpeculativelyExecute = isSafeToSpeculativelyExecute(LI);
1053 
1054   // Check that there is no implicit control flow instructions above our load in
1055   // its block. If there is an instruction that doesn't always pass the
1056   // execution to the following instruction, then moving through it may become
1057   // invalid. For example:
1058   //
1059   // int arr[LEN];
1060   // int index = ???;
1061   // ...
1062   // guard(0 <= index && index < LEN);
1063   // use(arr[index]);
1064   //
1065   // It is illegal to move the array access to any point above the guard,
1066   // because if the index is out of bounds we should deoptimize rather than
1067   // access the array.
1068   // Check that there is no guard in this block above our intruction.
1069   if (!IsSafeToSpeculativelyExecute) {
1070     auto It = FirstImplicitControlFlowInsts.find(TmpBB);
1071     if (It != FirstImplicitControlFlowInsts.end()) {
1072       assert(It->second->getParent() == TmpBB &&
1073              "Implicit control flow map broken?");
1074       if (OI->dominates(It->second, LI))
1075         return false;
1076     }
1077   }
1078   while (TmpBB->getSinglePredecessor()) {
1079     TmpBB = TmpBB->getSinglePredecessor();
1080     if (TmpBB == LoadBB) // Infinite (unreachable) loop.
1081       return false;
1082     if (Blockers.count(TmpBB))
1083       return false;
1084 
1085     // If any of these blocks has more than one successor (i.e. if the edge we
1086     // just traversed was critical), then there are other paths through this
1087     // block along which the load may not be anticipated.  Hoisting the load
1088     // above this block would be adding the load to execution paths along
1089     // which it was not previously executed.
1090     if (TmpBB->getTerminator()->getNumSuccessors() != 1)
1091       return false;
1092 
1093     // Check that there is no implicit control flow in a block above.
1094     if (!IsSafeToSpeculativelyExecute &&
1095         FirstImplicitControlFlowInsts.count(TmpBB))
1096       return false;
1097   }
1098 
1099   assert(TmpBB);
1100   LoadBB = TmpBB;
1101 
1102   // Check to see how many predecessors have the loaded value fully
1103   // available.
1104   MapVector<BasicBlock *, Value *> PredLoads;
1105   DenseMap<BasicBlock*, char> FullyAvailableBlocks;
1106   for (const AvailableValueInBlock &AV : ValuesPerBlock)
1107     FullyAvailableBlocks[AV.BB] = true;
1108   for (BasicBlock *UnavailableBB : UnavailableBlocks)
1109     FullyAvailableBlocks[UnavailableBB] = false;
1110 
1111   SmallVector<BasicBlock *, 4> CriticalEdgePred;
1112   for (BasicBlock *Pred : predecessors(LoadBB)) {
1113     // If any predecessor block is an EH pad that does not allow non-PHI
1114     // instructions before the terminator, we can't PRE the load.
1115     if (Pred->getTerminator()->isEHPad()) {
1116       DEBUG(dbgs()
1117             << "COULD NOT PRE LOAD BECAUSE OF AN EH PAD PREDECESSOR '"
1118             << Pred->getName() << "': " << *LI << '\n');
1119       return false;
1120     }
1121 
1122     if (IsValueFullyAvailableInBlock(Pred, FullyAvailableBlocks, 0)) {
1123       continue;
1124     }
1125 
1126     if (Pred->getTerminator()->getNumSuccessors() != 1) {
1127       if (isa<IndirectBrInst>(Pred->getTerminator())) {
1128         DEBUG(dbgs() << "COULD NOT PRE LOAD BECAUSE OF INDBR CRITICAL EDGE '"
1129               << Pred->getName() << "': " << *LI << '\n');
1130         return false;
1131       }
1132 
1133       if (LoadBB->isEHPad()) {
1134         DEBUG(dbgs()
1135               << "COULD NOT PRE LOAD BECAUSE OF AN EH PAD CRITICAL EDGE '"
1136               << Pred->getName() << "': " << *LI << '\n');
1137         return false;
1138       }
1139 
1140       CriticalEdgePred.push_back(Pred);
1141     } else {
1142       // Only add the predecessors that will not be split for now.
1143       PredLoads[Pred] = nullptr;
1144     }
1145   }
1146 
1147   // Decide whether PRE is profitable for this load.
1148   unsigned NumUnavailablePreds = PredLoads.size() + CriticalEdgePred.size();
1149   assert(NumUnavailablePreds != 0 &&
1150          "Fully available value should already be eliminated!");
1151 
1152   // If this load is unavailable in multiple predecessors, reject it.
1153   // FIXME: If we could restructure the CFG, we could make a common pred with
1154   // all the preds that don't have an available LI and insert a new load into
1155   // that one block.
1156   if (NumUnavailablePreds != 1)
1157       return false;
1158 
1159   // Split critical edges, and update the unavailable predecessors accordingly.
1160   for (BasicBlock *OrigPred : CriticalEdgePred) {
1161     BasicBlock *NewPred = splitCriticalEdges(OrigPred, LoadBB);
1162     assert(!PredLoads.count(OrigPred) && "Split edges shouldn't be in map!");
1163     PredLoads[NewPred] = nullptr;
1164     DEBUG(dbgs() << "Split critical edge " << OrigPred->getName() << "->"
1165                  << LoadBB->getName() << '\n');
1166   }
1167 
1168   // Check if the load can safely be moved to all the unavailable predecessors.
1169   bool CanDoPRE = true;
1170   const DataLayout &DL = LI->getModule()->getDataLayout();
1171   SmallVector<Instruction*, 8> NewInsts;
1172   for (auto &PredLoad : PredLoads) {
1173     BasicBlock *UnavailablePred = PredLoad.first;
1174 
1175     // Do PHI translation to get its value in the predecessor if necessary.  The
1176     // returned pointer (if non-null) is guaranteed to dominate UnavailablePred.
1177 
1178     // If all preds have a single successor, then we know it is safe to insert
1179     // the load on the pred (?!?), so we can insert code to materialize the
1180     // pointer if it is not available.
1181     PHITransAddr Address(LI->getPointerOperand(), DL, AC);
1182     Value *LoadPtr = nullptr;
1183     LoadPtr = Address.PHITranslateWithInsertion(LoadBB, UnavailablePred,
1184                                                 *DT, NewInsts);
1185 
1186     // If we couldn't find or insert a computation of this phi translated value,
1187     // we fail PRE.
1188     if (!LoadPtr) {
1189       DEBUG(dbgs() << "COULDN'T INSERT PHI TRANSLATED VALUE OF: "
1190             << *LI->getPointerOperand() << "\n");
1191       CanDoPRE = false;
1192       break;
1193     }
1194 
1195     PredLoad.second = LoadPtr;
1196   }
1197 
1198   if (!CanDoPRE) {
1199     while (!NewInsts.empty()) {
1200       Instruction *I = NewInsts.pop_back_val();
1201       if (MD) MD->removeInstruction(I);
1202       I->eraseFromParent();
1203     }
1204     // HINT: Don't revert the edge-splitting as following transformation may
1205     // also need to split these critical edges.
1206     return !CriticalEdgePred.empty();
1207   }
1208 
1209   // Okay, we can eliminate this load by inserting a reload in the predecessor
1210   // and using PHI construction to get the value in the other predecessors, do
1211   // it.
1212   DEBUG(dbgs() << "GVN REMOVING PRE LOAD: " << *LI << '\n');
1213   DEBUG(if (!NewInsts.empty())
1214           dbgs() << "INSERTED " << NewInsts.size() << " INSTS: "
1215                  << *NewInsts.back() << '\n');
1216 
1217   // Assign value numbers to the new instructions.
1218   for (Instruction *I : NewInsts) {
1219     // Instructions that have been inserted in predecessor(s) to materialize
1220     // the load address do not retain their original debug locations. Doing
1221     // so could lead to confusing (but correct) source attributions.
1222     // FIXME: How do we retain source locations without causing poor debugging
1223     // behavior?
1224     I->setDebugLoc(DebugLoc());
1225 
1226     // FIXME: We really _ought_ to insert these value numbers into their
1227     // parent's availability map.  However, in doing so, we risk getting into
1228     // ordering issues.  If a block hasn't been processed yet, we would be
1229     // marking a value as AVAIL-IN, which isn't what we intend.
1230     VN.lookupOrAdd(I);
1231   }
1232 
1233   for (const auto &PredLoad : PredLoads) {
1234     BasicBlock *UnavailablePred = PredLoad.first;
1235     Value *LoadPtr = PredLoad.second;
1236 
1237     auto *NewLoad = new LoadInst(LoadPtr, LI->getName()+".pre",
1238                                  LI->isVolatile(), LI->getAlignment(),
1239                                  LI->getOrdering(), LI->getSyncScopeID(),
1240                                  UnavailablePred->getTerminator());
1241     NewLoad->setDebugLoc(LI->getDebugLoc());
1242 
1243     // Transfer the old load's AA tags to the new load.
1244     AAMDNodes Tags;
1245     LI->getAAMetadata(Tags);
1246     if (Tags)
1247       NewLoad->setAAMetadata(Tags);
1248 
1249     if (auto *MD = LI->getMetadata(LLVMContext::MD_invariant_load))
1250       NewLoad->setMetadata(LLVMContext::MD_invariant_load, MD);
1251     if (auto *InvGroupMD = LI->getMetadata(LLVMContext::MD_invariant_group))
1252       NewLoad->setMetadata(LLVMContext::MD_invariant_group, InvGroupMD);
1253     if (auto *RangeMD = LI->getMetadata(LLVMContext::MD_range))
1254       NewLoad->setMetadata(LLVMContext::MD_range, RangeMD);
1255 
1256     // We do not propagate the old load's debug location, because the new
1257     // load now lives in a different BB, and we want to avoid a jumpy line
1258     // table.
1259     // FIXME: How do we retain source locations without causing poor debugging
1260     // behavior?
1261 
1262     // Add the newly created load.
1263     ValuesPerBlock.push_back(AvailableValueInBlock::get(UnavailablePred,
1264                                                         NewLoad));
1265     MD->invalidateCachedPointerInfo(LoadPtr);
1266     DEBUG(dbgs() << "GVN INSERTED " << *NewLoad << '\n');
1267   }
1268 
1269   // Perform PHI construction.
1270   Value *V = ConstructSSAForLoadSet(LI, ValuesPerBlock, *this);
1271   LI->replaceAllUsesWith(V);
1272   if (isa<PHINode>(V))
1273     V->takeName(LI);
1274   if (Instruction *I = dyn_cast<Instruction>(V))
1275     I->setDebugLoc(LI->getDebugLoc());
1276   if (V->getType()->isPtrOrPtrVectorTy())
1277     MD->invalidateCachedPointerInfo(V);
1278   markInstructionForDeletion(LI);
1279   ORE->emit([&]() {
1280     return OptimizationRemark(DEBUG_TYPE, "LoadPRE", LI)
1281            << "load eliminated by PRE";
1282   });
1283   ++NumPRELoad;
1284   return true;
1285 }
1286 
1287 static void reportLoadElim(LoadInst *LI, Value *AvailableValue,
1288                            OptimizationRemarkEmitter *ORE) {
1289   using namespace ore;
1290 
1291   ORE->emit([&]() {
1292     return OptimizationRemark(DEBUG_TYPE, "LoadElim", LI)
1293            << "load of type " << NV("Type", LI->getType()) << " eliminated"
1294            << setExtraArgs() << " in favor of "
1295            << NV("InfavorOfValue", AvailableValue);
1296   });
1297 }
1298 
1299 /// Attempt to eliminate a load whose dependencies are
1300 /// non-local by performing PHI construction.
1301 bool GVN::processNonLocalLoad(LoadInst *LI) {
1302   // non-local speculations are not allowed under asan.
1303   if (LI->getParent()->getParent()->hasFnAttribute(Attribute::SanitizeAddress))
1304     return false;
1305 
1306   // Step 1: Find the non-local dependencies of the load.
1307   LoadDepVect Deps;
1308   MD->getNonLocalPointerDependency(LI, Deps);
1309 
1310   // If we had to process more than one hundred blocks to find the
1311   // dependencies, this load isn't worth worrying about.  Optimizing
1312   // it will be too expensive.
1313   unsigned NumDeps = Deps.size();
1314   if (NumDeps > 100)
1315     return false;
1316 
1317   // If we had a phi translation failure, we'll have a single entry which is a
1318   // clobber in the current block.  Reject this early.
1319   if (NumDeps == 1 &&
1320       !Deps[0].getResult().isDef() && !Deps[0].getResult().isClobber()) {
1321     DEBUG(
1322       dbgs() << "GVN: non-local load ";
1323       LI->printAsOperand(dbgs());
1324       dbgs() << " has unknown dependencies\n";
1325     );
1326     return false;
1327   }
1328 
1329   // If this load follows a GEP, see if we can PRE the indices before analyzing.
1330   if (GetElementPtrInst *GEP = dyn_cast<GetElementPtrInst>(LI->getOperand(0))) {
1331     for (GetElementPtrInst::op_iterator OI = GEP->idx_begin(),
1332                                         OE = GEP->idx_end();
1333          OI != OE; ++OI)
1334       if (Instruction *I = dyn_cast<Instruction>(OI->get()))
1335         performScalarPRE(I);
1336   }
1337 
1338   // Step 2: Analyze the availability of the load
1339   AvailValInBlkVect ValuesPerBlock;
1340   UnavailBlkVect UnavailableBlocks;
1341   AnalyzeLoadAvailability(LI, Deps, ValuesPerBlock, UnavailableBlocks);
1342 
1343   // If we have no predecessors that produce a known value for this load, exit
1344   // early.
1345   if (ValuesPerBlock.empty())
1346     return false;
1347 
1348   // Step 3: Eliminate fully redundancy.
1349   //
1350   // If all of the instructions we depend on produce a known value for this
1351   // load, then it is fully redundant and we can use PHI insertion to compute
1352   // its value.  Insert PHIs and remove the fully redundant value now.
1353   if (UnavailableBlocks.empty()) {
1354     DEBUG(dbgs() << "GVN REMOVING NONLOCAL LOAD: " << *LI << '\n');
1355 
1356     // Perform PHI construction.
1357     Value *V = ConstructSSAForLoadSet(LI, ValuesPerBlock, *this);
1358     LI->replaceAllUsesWith(V);
1359 
1360     if (isa<PHINode>(V))
1361       V->takeName(LI);
1362     if (Instruction *I = dyn_cast<Instruction>(V))
1363       // If instruction I has debug info, then we should not update it.
1364       // Also, if I has a null DebugLoc, then it is still potentially incorrect
1365       // to propagate LI's DebugLoc because LI may not post-dominate I.
1366       if (LI->getDebugLoc() && LI->getParent() == I->getParent())
1367         I->setDebugLoc(LI->getDebugLoc());
1368     if (V->getType()->isPtrOrPtrVectorTy())
1369       MD->invalidateCachedPointerInfo(V);
1370     markInstructionForDeletion(LI);
1371     ++NumGVNLoad;
1372     reportLoadElim(LI, V, ORE);
1373     return true;
1374   }
1375 
1376   // Step 4: Eliminate partial redundancy.
1377   if (!EnablePRE || !EnableLoadPRE)
1378     return false;
1379 
1380   return PerformLoadPRE(LI, ValuesPerBlock, UnavailableBlocks);
1381 }
1382 
1383 bool GVN::processAssumeIntrinsic(IntrinsicInst *IntrinsicI) {
1384   assert(IntrinsicI->getIntrinsicID() == Intrinsic::assume &&
1385          "This function can only be called with llvm.assume intrinsic");
1386   Value *V = IntrinsicI->getArgOperand(0);
1387 
1388   if (ConstantInt *Cond = dyn_cast<ConstantInt>(V)) {
1389     if (Cond->isZero()) {
1390       Type *Int8Ty = Type::getInt8Ty(V->getContext());
1391       // Insert a new store to null instruction before the load to indicate that
1392       // this code is not reachable.  FIXME: We could insert unreachable
1393       // instruction directly because we can modify the CFG.
1394       new StoreInst(UndefValue::get(Int8Ty),
1395                     Constant::getNullValue(Int8Ty->getPointerTo()),
1396                     IntrinsicI);
1397     }
1398     markInstructionForDeletion(IntrinsicI);
1399     return false;
1400   } else if (isa<Constant>(V)) {
1401     // If it's not false, and constant, it must evaluate to true. This means our
1402     // assume is assume(true), and thus, pointless, and we don't want to do
1403     // anything more here.
1404     return false;
1405   }
1406 
1407   Constant *True = ConstantInt::getTrue(V->getContext());
1408   bool Changed = false;
1409 
1410   for (BasicBlock *Successor : successors(IntrinsicI->getParent())) {
1411     BasicBlockEdge Edge(IntrinsicI->getParent(), Successor);
1412 
1413     // This property is only true in dominated successors, propagateEquality
1414     // will check dominance for us.
1415     Changed |= propagateEquality(V, True, Edge, false);
1416   }
1417 
1418   // We can replace assume value with true, which covers cases like this:
1419   // call void @llvm.assume(i1 %cmp)
1420   // br i1 %cmp, label %bb1, label %bb2 ; will change %cmp to true
1421   ReplaceWithConstMap[V] = True;
1422 
1423   // If one of *cmp *eq operand is const, adding it to map will cover this:
1424   // %cmp = fcmp oeq float 3.000000e+00, %0 ; const on lhs could happen
1425   // call void @llvm.assume(i1 %cmp)
1426   // ret float %0 ; will change it to ret float 3.000000e+00
1427   if (auto *CmpI = dyn_cast<CmpInst>(V)) {
1428     if (CmpI->getPredicate() == CmpInst::Predicate::ICMP_EQ ||
1429         CmpI->getPredicate() == CmpInst::Predicate::FCMP_OEQ ||
1430         (CmpI->getPredicate() == CmpInst::Predicate::FCMP_UEQ &&
1431          CmpI->getFastMathFlags().noNaNs())) {
1432       Value *CmpLHS = CmpI->getOperand(0);
1433       Value *CmpRHS = CmpI->getOperand(1);
1434       if (isa<Constant>(CmpLHS))
1435         std::swap(CmpLHS, CmpRHS);
1436       auto *RHSConst = dyn_cast<Constant>(CmpRHS);
1437 
1438       // If only one operand is constant.
1439       if (RHSConst != nullptr && !isa<Constant>(CmpLHS))
1440         ReplaceWithConstMap[CmpLHS] = RHSConst;
1441     }
1442   }
1443   return Changed;
1444 }
1445 
1446 static void patchReplacementInstruction(Instruction *I, Value *Repl) {
1447   auto *ReplInst = dyn_cast<Instruction>(Repl);
1448   if (!ReplInst)
1449     return;
1450 
1451   // Patch the replacement so that it is not more restrictive than the value
1452   // being replaced.
1453   // Note that if 'I' is a load being replaced by some operation,
1454   // for example, by an arithmetic operation, then andIRFlags()
1455   // would just erase all math flags from the original arithmetic
1456   // operation, which is clearly not wanted and not needed.
1457   if (!isa<LoadInst>(I))
1458     ReplInst->andIRFlags(I);
1459 
1460   // FIXME: If both the original and replacement value are part of the
1461   // same control-flow region (meaning that the execution of one
1462   // guarantees the execution of the other), then we can combine the
1463   // noalias scopes here and do better than the general conservative
1464   // answer used in combineMetadata().
1465 
1466   // In general, GVN unifies expressions over different control-flow
1467   // regions, and so we need a conservative combination of the noalias
1468   // scopes.
1469   static const unsigned KnownIDs[] = {
1470       LLVMContext::MD_tbaa,           LLVMContext::MD_alias_scope,
1471       LLVMContext::MD_noalias,        LLVMContext::MD_range,
1472       LLVMContext::MD_fpmath,         LLVMContext::MD_invariant_load,
1473       LLVMContext::MD_invariant_group};
1474   combineMetadata(ReplInst, I, KnownIDs);
1475 }
1476 
1477 static void patchAndReplaceAllUsesWith(Instruction *I, Value *Repl) {
1478   patchReplacementInstruction(I, Repl);
1479   I->replaceAllUsesWith(Repl);
1480 }
1481 
1482 /// Attempt to eliminate a load, first by eliminating it
1483 /// locally, and then attempting non-local elimination if that fails.
1484 bool GVN::processLoad(LoadInst *L) {
1485   if (!MD)
1486     return false;
1487 
1488   // This code hasn't been audited for ordered or volatile memory access
1489   if (!L->isUnordered())
1490     return false;
1491 
1492   if (L->use_empty()) {
1493     markInstructionForDeletion(L);
1494     return true;
1495   }
1496 
1497   // ... to a pointer that has been loaded from before...
1498   MemDepResult Dep = MD->getDependency(L);
1499 
1500   // If it is defined in another block, try harder.
1501   if (Dep.isNonLocal())
1502     return processNonLocalLoad(L);
1503 
1504   // Only handle the local case below
1505   if (!Dep.isDef() && !Dep.isClobber()) {
1506     // This might be a NonFuncLocal or an Unknown
1507     DEBUG(
1508       // fast print dep, using operator<< on instruction is too slow.
1509       dbgs() << "GVN: load ";
1510       L->printAsOperand(dbgs());
1511       dbgs() << " has unknown dependence\n";
1512     );
1513     return false;
1514   }
1515 
1516   AvailableValue AV;
1517   if (AnalyzeLoadAvailability(L, Dep, L->getPointerOperand(), AV)) {
1518     Value *AvailableValue = AV.MaterializeAdjustedValue(L, L, *this);
1519 
1520     // Replace the load!
1521     patchAndReplaceAllUsesWith(L, AvailableValue);
1522     markInstructionForDeletion(L);
1523     ++NumGVNLoad;
1524     reportLoadElim(L, AvailableValue, ORE);
1525     // Tell MDA to rexamine the reused pointer since we might have more
1526     // information after forwarding it.
1527     if (MD && AvailableValue->getType()->isPtrOrPtrVectorTy())
1528       MD->invalidateCachedPointerInfo(AvailableValue);
1529     return true;
1530   }
1531 
1532   return false;
1533 }
1534 
1535 /// Return a pair the first field showing the value number of \p Exp and the
1536 /// second field showing whether it is a value number newly created.
1537 std::pair<uint32_t, bool>
1538 GVN::ValueTable::assignExpNewValueNum(Expression &Exp) {
1539   uint32_t &e = expressionNumbering[Exp];
1540   bool CreateNewValNum = !e;
1541   if (CreateNewValNum) {
1542     Expressions.push_back(Exp);
1543     if (ExprIdx.size() < nextValueNumber + 1)
1544       ExprIdx.resize(nextValueNumber * 2);
1545     e = nextValueNumber;
1546     ExprIdx[nextValueNumber++] = nextExprNumber++;
1547   }
1548   return {e, CreateNewValNum};
1549 }
1550 
1551 /// Return whether all the values related with the same \p num are
1552 /// defined in \p BB.
1553 bool GVN::ValueTable::areAllValsInBB(uint32_t Num, const BasicBlock *BB,
1554                                      GVN &Gvn) {
1555   LeaderTableEntry *Vals = &Gvn.LeaderTable[Num];
1556   while (Vals && Vals->BB == BB)
1557     Vals = Vals->Next;
1558   return !Vals;
1559 }
1560 
1561 /// Wrap phiTranslateImpl to provide caching functionality.
1562 uint32_t GVN::ValueTable::phiTranslate(const BasicBlock *Pred,
1563                                        const BasicBlock *PhiBlock, uint32_t Num,
1564                                        GVN &Gvn) {
1565   auto FindRes = PhiTranslateTable.find({Num, Pred});
1566   if (FindRes != PhiTranslateTable.end())
1567     return FindRes->second;
1568   uint32_t NewNum = phiTranslateImpl(Pred, PhiBlock, Num, Gvn);
1569   PhiTranslateTable.insert({{Num, Pred}, NewNum});
1570   return NewNum;
1571 }
1572 
1573 /// Translate value number \p Num using phis, so that it has the values of
1574 /// the phis in BB.
1575 uint32_t GVN::ValueTable::phiTranslateImpl(const BasicBlock *Pred,
1576                                            const BasicBlock *PhiBlock,
1577                                            uint32_t Num, GVN &Gvn) {
1578   if (PHINode *PN = NumberingPhi[Num]) {
1579     for (unsigned i = 0; i != PN->getNumIncomingValues(); ++i) {
1580       if (PN->getParent() == PhiBlock && PN->getIncomingBlock(i) == Pred)
1581         if (uint32_t TransVal = lookup(PN->getIncomingValue(i), false))
1582           return TransVal;
1583     }
1584     return Num;
1585   }
1586 
1587   // If there is any value related with Num is defined in a BB other than
1588   // PhiBlock, it cannot depend on a phi in PhiBlock without going through
1589   // a backedge. We can do an early exit in that case to save compile time.
1590   if (!areAllValsInBB(Num, PhiBlock, Gvn))
1591     return Num;
1592 
1593   if (Num >= ExprIdx.size() || ExprIdx[Num] == 0)
1594     return Num;
1595   Expression Exp = Expressions[ExprIdx[Num]];
1596 
1597   for (unsigned i = 0; i < Exp.varargs.size(); i++) {
1598     // For InsertValue and ExtractValue, some varargs are index numbers
1599     // instead of value numbers. Those index numbers should not be
1600     // translated.
1601     if ((i > 1 && Exp.opcode == Instruction::InsertValue) ||
1602         (i > 0 && Exp.opcode == Instruction::ExtractValue))
1603       continue;
1604     Exp.varargs[i] = phiTranslate(Pred, PhiBlock, Exp.varargs[i], Gvn);
1605   }
1606 
1607   if (Exp.commutative) {
1608     assert(Exp.varargs.size() == 2 && "Unsupported commutative expression!");
1609     if (Exp.varargs[0] > Exp.varargs[1]) {
1610       std::swap(Exp.varargs[0], Exp.varargs[1]);
1611       uint32_t Opcode = Exp.opcode >> 8;
1612       if (Opcode == Instruction::ICmp || Opcode == Instruction::FCmp)
1613         Exp.opcode = (Opcode << 8) |
1614                      CmpInst::getSwappedPredicate(
1615                          static_cast<CmpInst::Predicate>(Exp.opcode & 255));
1616     }
1617   }
1618 
1619   if (uint32_t NewNum = expressionNumbering[Exp])
1620     return NewNum;
1621   return Num;
1622 }
1623 
1624 /// Erase stale entry from phiTranslate cache so phiTranslate can be computed
1625 /// again.
1626 void GVN::ValueTable::eraseTranslateCacheEntry(uint32_t Num,
1627                                                const BasicBlock &CurrBlock) {
1628   for (const BasicBlock *Pred : predecessors(&CurrBlock)) {
1629     auto FindRes = PhiTranslateTable.find({Num, Pred});
1630     if (FindRes != PhiTranslateTable.end())
1631       PhiTranslateTable.erase(FindRes);
1632   }
1633 }
1634 
1635 // In order to find a leader for a given value number at a
1636 // specific basic block, we first obtain the list of all Values for that number,
1637 // and then scan the list to find one whose block dominates the block in
1638 // question.  This is fast because dominator tree queries consist of only
1639 // a few comparisons of DFS numbers.
1640 Value *GVN::findLeader(const BasicBlock *BB, uint32_t num) {
1641   LeaderTableEntry Vals = LeaderTable[num];
1642   if (!Vals.Val) return nullptr;
1643 
1644   Value *Val = nullptr;
1645   if (DT->dominates(Vals.BB, BB)) {
1646     Val = Vals.Val;
1647     if (isa<Constant>(Val)) return Val;
1648   }
1649 
1650   LeaderTableEntry* Next = Vals.Next;
1651   while (Next) {
1652     if (DT->dominates(Next->BB, BB)) {
1653       if (isa<Constant>(Next->Val)) return Next->Val;
1654       if (!Val) Val = Next->Val;
1655     }
1656 
1657     Next = Next->Next;
1658   }
1659 
1660   return Val;
1661 }
1662 
1663 /// There is an edge from 'Src' to 'Dst'.  Return
1664 /// true if every path from the entry block to 'Dst' passes via this edge.  In
1665 /// particular 'Dst' must not be reachable via another edge from 'Src'.
1666 static bool isOnlyReachableViaThisEdge(const BasicBlockEdge &E,
1667                                        DominatorTree *DT) {
1668   // While in theory it is interesting to consider the case in which Dst has
1669   // more than one predecessor, because Dst might be part of a loop which is
1670   // only reachable from Src, in practice it is pointless since at the time
1671   // GVN runs all such loops have preheaders, which means that Dst will have
1672   // been changed to have only one predecessor, namely Src.
1673   const BasicBlock *Pred = E.getEnd()->getSinglePredecessor();
1674   assert((!Pred || Pred == E.getStart()) &&
1675          "No edge between these basic blocks!");
1676   return Pred != nullptr;
1677 }
1678 
1679 void GVN::assignBlockRPONumber(Function &F) {
1680   uint32_t NextBlockNumber = 1;
1681   ReversePostOrderTraversal<Function *> RPOT(&F);
1682   for (BasicBlock *BB : RPOT)
1683     BlockRPONumber[BB] = NextBlockNumber++;
1684 }
1685 
1686 // Tries to replace instruction with const, using information from
1687 // ReplaceWithConstMap.
1688 bool GVN::replaceOperandsWithConsts(Instruction *Instr) const {
1689   bool Changed = false;
1690   for (unsigned OpNum = 0; OpNum < Instr->getNumOperands(); ++OpNum) {
1691     Value *Operand = Instr->getOperand(OpNum);
1692     auto it = ReplaceWithConstMap.find(Operand);
1693     if (it != ReplaceWithConstMap.end()) {
1694       assert(!isa<Constant>(Operand) &&
1695              "Replacing constants with constants is invalid");
1696       DEBUG(dbgs() << "GVN replacing: " << *Operand << " with " << *it->second
1697                    << " in instruction " << *Instr << '\n');
1698       Instr->setOperand(OpNum, it->second);
1699       Changed = true;
1700     }
1701   }
1702   return Changed;
1703 }
1704 
1705 /// The given values are known to be equal in every block
1706 /// dominated by 'Root'.  Exploit this, for example by replacing 'LHS' with
1707 /// 'RHS' everywhere in the scope.  Returns whether a change was made.
1708 /// If DominatesByEdge is false, then it means that we will propagate the RHS
1709 /// value starting from the end of Root.Start.
1710 bool GVN::propagateEquality(Value *LHS, Value *RHS, const BasicBlockEdge &Root,
1711                             bool DominatesByEdge) {
1712   SmallVector<std::pair<Value*, Value*>, 4> Worklist;
1713   Worklist.push_back(std::make_pair(LHS, RHS));
1714   bool Changed = false;
1715   // For speed, compute a conservative fast approximation to
1716   // DT->dominates(Root, Root.getEnd());
1717   const bool RootDominatesEnd = isOnlyReachableViaThisEdge(Root, DT);
1718 
1719   while (!Worklist.empty()) {
1720     std::pair<Value*, Value*> Item = Worklist.pop_back_val();
1721     LHS = Item.first; RHS = Item.second;
1722 
1723     if (LHS == RHS)
1724       continue;
1725     assert(LHS->getType() == RHS->getType() && "Equality but unequal types!");
1726 
1727     // Don't try to propagate equalities between constants.
1728     if (isa<Constant>(LHS) && isa<Constant>(RHS))
1729       continue;
1730 
1731     // Prefer a constant on the right-hand side, or an Argument if no constants.
1732     if (isa<Constant>(LHS) || (isa<Argument>(LHS) && !isa<Constant>(RHS)))
1733       std::swap(LHS, RHS);
1734     assert((isa<Argument>(LHS) || isa<Instruction>(LHS)) && "Unexpected value!");
1735 
1736     // If there is no obvious reason to prefer the left-hand side over the
1737     // right-hand side, ensure the longest lived term is on the right-hand side,
1738     // so the shortest lived term will be replaced by the longest lived.
1739     // This tends to expose more simplifications.
1740     uint32_t LVN = VN.lookupOrAdd(LHS);
1741     if ((isa<Argument>(LHS) && isa<Argument>(RHS)) ||
1742         (isa<Instruction>(LHS) && isa<Instruction>(RHS))) {
1743       // Move the 'oldest' value to the right-hand side, using the value number
1744       // as a proxy for age.
1745       uint32_t RVN = VN.lookupOrAdd(RHS);
1746       if (LVN < RVN) {
1747         std::swap(LHS, RHS);
1748         LVN = RVN;
1749       }
1750     }
1751 
1752     // If value numbering later sees that an instruction in the scope is equal
1753     // to 'LHS' then ensure it will be turned into 'RHS'.  In order to preserve
1754     // the invariant that instructions only occur in the leader table for their
1755     // own value number (this is used by removeFromLeaderTable), do not do this
1756     // if RHS is an instruction (if an instruction in the scope is morphed into
1757     // LHS then it will be turned into RHS by the next GVN iteration anyway, so
1758     // using the leader table is about compiling faster, not optimizing better).
1759     // The leader table only tracks basic blocks, not edges. Only add to if we
1760     // have the simple case where the edge dominates the end.
1761     if (RootDominatesEnd && !isa<Instruction>(RHS))
1762       addToLeaderTable(LVN, RHS, Root.getEnd());
1763 
1764     // Replace all occurrences of 'LHS' with 'RHS' everywhere in the scope.  As
1765     // LHS always has at least one use that is not dominated by Root, this will
1766     // never do anything if LHS has only one use.
1767     if (!LHS->hasOneUse()) {
1768       unsigned NumReplacements =
1769           DominatesByEdge
1770               ? replaceDominatedUsesWith(LHS, RHS, *DT, Root)
1771               : replaceDominatedUsesWith(LHS, RHS, *DT, Root.getStart());
1772 
1773       Changed |= NumReplacements > 0;
1774       NumGVNEqProp += NumReplacements;
1775     }
1776 
1777     // Now try to deduce additional equalities from this one. For example, if
1778     // the known equality was "(A != B)" == "false" then it follows that A and B
1779     // are equal in the scope. Only boolean equalities with an explicit true or
1780     // false RHS are currently supported.
1781     if (!RHS->getType()->isIntegerTy(1))
1782       // Not a boolean equality - bail out.
1783       continue;
1784     ConstantInt *CI = dyn_cast<ConstantInt>(RHS);
1785     if (!CI)
1786       // RHS neither 'true' nor 'false' - bail out.
1787       continue;
1788     // Whether RHS equals 'true'.  Otherwise it equals 'false'.
1789     bool isKnownTrue = CI->isMinusOne();
1790     bool isKnownFalse = !isKnownTrue;
1791 
1792     // If "A && B" is known true then both A and B are known true.  If "A || B"
1793     // is known false then both A and B are known false.
1794     Value *A, *B;
1795     if ((isKnownTrue && match(LHS, m_And(m_Value(A), m_Value(B)))) ||
1796         (isKnownFalse && match(LHS, m_Or(m_Value(A), m_Value(B))))) {
1797       Worklist.push_back(std::make_pair(A, RHS));
1798       Worklist.push_back(std::make_pair(B, RHS));
1799       continue;
1800     }
1801 
1802     // If we are propagating an equality like "(A == B)" == "true" then also
1803     // propagate the equality A == B.  When propagating a comparison such as
1804     // "(A >= B)" == "true", replace all instances of "A < B" with "false".
1805     if (CmpInst *Cmp = dyn_cast<CmpInst>(LHS)) {
1806       Value *Op0 = Cmp->getOperand(0), *Op1 = Cmp->getOperand(1);
1807 
1808       // If "A == B" is known true, or "A != B" is known false, then replace
1809       // A with B everywhere in the scope.
1810       if ((isKnownTrue && Cmp->getPredicate() == CmpInst::ICMP_EQ) ||
1811           (isKnownFalse && Cmp->getPredicate() == CmpInst::ICMP_NE))
1812         Worklist.push_back(std::make_pair(Op0, Op1));
1813 
1814       // Handle the floating point versions of equality comparisons too.
1815       if ((isKnownTrue && Cmp->getPredicate() == CmpInst::FCMP_OEQ) ||
1816           (isKnownFalse && Cmp->getPredicate() == CmpInst::FCMP_UNE)) {
1817 
1818         // Floating point -0.0 and 0.0 compare equal, so we can only
1819         // propagate values if we know that we have a constant and that
1820         // its value is non-zero.
1821 
1822         // FIXME: We should do this optimization if 'no signed zeros' is
1823         // applicable via an instruction-level fast-math-flag or some other
1824         // indicator that relaxed FP semantics are being used.
1825 
1826         if (isa<ConstantFP>(Op1) && !cast<ConstantFP>(Op1)->isZero())
1827           Worklist.push_back(std::make_pair(Op0, Op1));
1828       }
1829 
1830       // If "A >= B" is known true, replace "A < B" with false everywhere.
1831       CmpInst::Predicate NotPred = Cmp->getInversePredicate();
1832       Constant *NotVal = ConstantInt::get(Cmp->getType(), isKnownFalse);
1833       // Since we don't have the instruction "A < B" immediately to hand, work
1834       // out the value number that it would have and use that to find an
1835       // appropriate instruction (if any).
1836       uint32_t NextNum = VN.getNextUnusedValueNumber();
1837       uint32_t Num = VN.lookupOrAddCmp(Cmp->getOpcode(), NotPred, Op0, Op1);
1838       // If the number we were assigned was brand new then there is no point in
1839       // looking for an instruction realizing it: there cannot be one!
1840       if (Num < NextNum) {
1841         Value *NotCmp = findLeader(Root.getEnd(), Num);
1842         if (NotCmp && isa<Instruction>(NotCmp)) {
1843           unsigned NumReplacements =
1844               DominatesByEdge
1845                   ? replaceDominatedUsesWith(NotCmp, NotVal, *DT, Root)
1846                   : replaceDominatedUsesWith(NotCmp, NotVal, *DT,
1847                                              Root.getStart());
1848           Changed |= NumReplacements > 0;
1849           NumGVNEqProp += NumReplacements;
1850         }
1851       }
1852       // Ensure that any instruction in scope that gets the "A < B" value number
1853       // is replaced with false.
1854       // The leader table only tracks basic blocks, not edges. Only add to if we
1855       // have the simple case where the edge dominates the end.
1856       if (RootDominatesEnd)
1857         addToLeaderTable(Num, NotVal, Root.getEnd());
1858 
1859       continue;
1860     }
1861   }
1862 
1863   return Changed;
1864 }
1865 
1866 /// When calculating availability, handle an instruction
1867 /// by inserting it into the appropriate sets
1868 bool GVN::processInstruction(Instruction *I) {
1869   // Ignore dbg info intrinsics.
1870   if (isa<DbgInfoIntrinsic>(I))
1871     return false;
1872 
1873   // If the instruction can be easily simplified then do so now in preference
1874   // to value numbering it.  Value numbering often exposes redundancies, for
1875   // example if it determines that %y is equal to %x then the instruction
1876   // "%z = and i32 %x, %y" becomes "%z = and i32 %x, %x" which we now simplify.
1877   const DataLayout &DL = I->getModule()->getDataLayout();
1878   if (Value *V = SimplifyInstruction(I, {DL, TLI, DT, AC})) {
1879     bool Changed = false;
1880     if (!I->use_empty()) {
1881       I->replaceAllUsesWith(V);
1882       Changed = true;
1883     }
1884     if (isInstructionTriviallyDead(I, TLI)) {
1885       markInstructionForDeletion(I);
1886       Changed = true;
1887     }
1888     if (Changed) {
1889       if (MD && V->getType()->isPtrOrPtrVectorTy())
1890         MD->invalidateCachedPointerInfo(V);
1891       ++NumGVNSimpl;
1892       return true;
1893     }
1894   }
1895 
1896   if (IntrinsicInst *IntrinsicI = dyn_cast<IntrinsicInst>(I))
1897     if (IntrinsicI->getIntrinsicID() == Intrinsic::assume)
1898       return processAssumeIntrinsic(IntrinsicI);
1899 
1900   if (LoadInst *LI = dyn_cast<LoadInst>(I)) {
1901     if (processLoad(LI))
1902       return true;
1903 
1904     unsigned Num = VN.lookupOrAdd(LI);
1905     addToLeaderTable(Num, LI, LI->getParent());
1906     return false;
1907   }
1908 
1909   // For conditional branches, we can perform simple conditional propagation on
1910   // the condition value itself.
1911   if (BranchInst *BI = dyn_cast<BranchInst>(I)) {
1912     if (!BI->isConditional())
1913       return false;
1914 
1915     if (isa<Constant>(BI->getCondition()))
1916       return processFoldableCondBr(BI);
1917 
1918     Value *BranchCond = BI->getCondition();
1919     BasicBlock *TrueSucc = BI->getSuccessor(0);
1920     BasicBlock *FalseSucc = BI->getSuccessor(1);
1921     // Avoid multiple edges early.
1922     if (TrueSucc == FalseSucc)
1923       return false;
1924 
1925     BasicBlock *Parent = BI->getParent();
1926     bool Changed = false;
1927 
1928     Value *TrueVal = ConstantInt::getTrue(TrueSucc->getContext());
1929     BasicBlockEdge TrueE(Parent, TrueSucc);
1930     Changed |= propagateEquality(BranchCond, TrueVal, TrueE, true);
1931 
1932     Value *FalseVal = ConstantInt::getFalse(FalseSucc->getContext());
1933     BasicBlockEdge FalseE(Parent, FalseSucc);
1934     Changed |= propagateEquality(BranchCond, FalseVal, FalseE, true);
1935 
1936     return Changed;
1937   }
1938 
1939   // For switches, propagate the case values into the case destinations.
1940   if (SwitchInst *SI = dyn_cast<SwitchInst>(I)) {
1941     Value *SwitchCond = SI->getCondition();
1942     BasicBlock *Parent = SI->getParent();
1943     bool Changed = false;
1944 
1945     // Remember how many outgoing edges there are to every successor.
1946     SmallDenseMap<BasicBlock *, unsigned, 16> SwitchEdges;
1947     for (unsigned i = 0, n = SI->getNumSuccessors(); i != n; ++i)
1948       ++SwitchEdges[SI->getSuccessor(i)];
1949 
1950     for (SwitchInst::CaseIt i = SI->case_begin(), e = SI->case_end();
1951          i != e; ++i) {
1952       BasicBlock *Dst = i->getCaseSuccessor();
1953       // If there is only a single edge, propagate the case value into it.
1954       if (SwitchEdges.lookup(Dst) == 1) {
1955         BasicBlockEdge E(Parent, Dst);
1956         Changed |= propagateEquality(SwitchCond, i->getCaseValue(), E, true);
1957       }
1958     }
1959     return Changed;
1960   }
1961 
1962   // Instructions with void type don't return a value, so there's
1963   // no point in trying to find redundancies in them.
1964   if (I->getType()->isVoidTy())
1965     return false;
1966 
1967   uint32_t NextNum = VN.getNextUnusedValueNumber();
1968   unsigned Num = VN.lookupOrAdd(I);
1969 
1970   // Allocations are always uniquely numbered, so we can save time and memory
1971   // by fast failing them.
1972   if (isa<AllocaInst>(I) || isa<TerminatorInst>(I) || isa<PHINode>(I)) {
1973     addToLeaderTable(Num, I, I->getParent());
1974     return false;
1975   }
1976 
1977   // If the number we were assigned was a brand new VN, then we don't
1978   // need to do a lookup to see if the number already exists
1979   // somewhere in the domtree: it can't!
1980   if (Num >= NextNum) {
1981     addToLeaderTable(Num, I, I->getParent());
1982     return false;
1983   }
1984 
1985   // Perform fast-path value-number based elimination of values inherited from
1986   // dominators.
1987   Value *Repl = findLeader(I->getParent(), Num);
1988   if (!Repl) {
1989     // Failure, just remember this instance for future use.
1990     addToLeaderTable(Num, I, I->getParent());
1991     return false;
1992   } else if (Repl == I) {
1993     // If I was the result of a shortcut PRE, it might already be in the table
1994     // and the best replacement for itself. Nothing to do.
1995     return false;
1996   }
1997 
1998   // Remove it!
1999   patchAndReplaceAllUsesWith(I, Repl);
2000   if (MD && Repl->getType()->isPtrOrPtrVectorTy())
2001     MD->invalidateCachedPointerInfo(Repl);
2002   markInstructionForDeletion(I);
2003   return true;
2004 }
2005 
2006 /// runOnFunction - This is the main transformation entry point for a function.
2007 bool GVN::runImpl(Function &F, AssumptionCache &RunAC, DominatorTree &RunDT,
2008                   const TargetLibraryInfo &RunTLI, AAResults &RunAA,
2009                   MemoryDependenceResults *RunMD, LoopInfo *LI,
2010                   OptimizationRemarkEmitter *RunORE) {
2011   AC = &RunAC;
2012   DT = &RunDT;
2013   VN.setDomTree(DT);
2014   TLI = &RunTLI;
2015   VN.setAliasAnalysis(&RunAA);
2016   MD = RunMD;
2017   OrderedInstructions OrderedInstrs(DT);
2018   OI = &OrderedInstrs;
2019   VN.setMemDep(MD);
2020   ORE = RunORE;
2021 
2022   bool Changed = false;
2023   bool ShouldContinue = true;
2024 
2025   // Merge unconditional branches, allowing PRE to catch more
2026   // optimization opportunities.
2027   for (Function::iterator FI = F.begin(), FE = F.end(); FI != FE; ) {
2028     BasicBlock *BB = &*FI++;
2029 
2030     bool removedBlock = MergeBlockIntoPredecessor(BB, DT, LI, MD);
2031     if (removedBlock)
2032       ++NumGVNBlocks;
2033 
2034     Changed |= removedBlock;
2035   }
2036 
2037   unsigned Iteration = 0;
2038   while (ShouldContinue) {
2039     DEBUG(dbgs() << "GVN iteration: " << Iteration << "\n");
2040     ShouldContinue = iterateOnFunction(F);
2041     Changed |= ShouldContinue;
2042     ++Iteration;
2043   }
2044 
2045   if (EnablePRE) {
2046     // Fabricate val-num for dead-code in order to suppress assertion in
2047     // performPRE().
2048     assignValNumForDeadCode();
2049     assignBlockRPONumber(F);
2050     bool PREChanged = true;
2051     while (PREChanged) {
2052       PREChanged = performPRE(F);
2053       Changed |= PREChanged;
2054     }
2055   }
2056 
2057   // FIXME: Should perform GVN again after PRE does something.  PRE can move
2058   // computations into blocks where they become fully redundant.  Note that
2059   // we can't do this until PRE's critical edge splitting updates memdep.
2060   // Actually, when this happens, we should just fully integrate PRE into GVN.
2061 
2062   cleanupGlobalSets();
2063   // Do not cleanup DeadBlocks in cleanupGlobalSets() as it's called for each
2064   // iteration.
2065   DeadBlocks.clear();
2066 
2067   return Changed;
2068 }
2069 
2070 bool GVN::processBlock(BasicBlock *BB) {
2071   // FIXME: Kill off InstrsToErase by doing erasing eagerly in a helper function
2072   // (and incrementing BI before processing an instruction).
2073   assert(InstrsToErase.empty() &&
2074          "We expect InstrsToErase to be empty across iterations");
2075   if (DeadBlocks.count(BB))
2076     return false;
2077 
2078   // Clearing map before every BB because it can be used only for single BB.
2079   ReplaceWithConstMap.clear();
2080   bool ChangedFunction = false;
2081 
2082   for (BasicBlock::iterator BI = BB->begin(), BE = BB->end();
2083        BI != BE;) {
2084     if (!ReplaceWithConstMap.empty())
2085       ChangedFunction |= replaceOperandsWithConsts(&*BI);
2086     ChangedFunction |= processInstruction(&*BI);
2087 
2088     if (InstrsToErase.empty()) {
2089       ++BI;
2090       continue;
2091     }
2092 
2093     // If we need some instructions deleted, do it now.
2094     NumGVNInstr += InstrsToErase.size();
2095 
2096     // Avoid iterator invalidation.
2097     bool AtStart = BI == BB->begin();
2098     if (!AtStart)
2099       --BI;
2100 
2101     for (SmallVectorImpl<Instruction *>::iterator I = InstrsToErase.begin(),
2102          E = InstrsToErase.end(); I != E; ++I) {
2103       DEBUG(dbgs() << "GVN removed: " << **I << '\n');
2104       if (MD) MD->removeInstruction(*I);
2105       DEBUG(verifyRemoved(*I));
2106       (*I)->eraseFromParent();
2107     }
2108 
2109     if (!InstrsToErase.empty())
2110       OI->invalidateBlock(BB);
2111     InstrsToErase.clear();
2112 
2113     if (AtStart)
2114       BI = BB->begin();
2115     else
2116       ++BI;
2117   }
2118 
2119   return ChangedFunction;
2120 }
2121 
2122 // Instantiate an expression in a predecessor that lacked it.
2123 bool GVN::performScalarPREInsertion(Instruction *Instr, BasicBlock *Pred,
2124                                     BasicBlock *Curr, unsigned int ValNo) {
2125   // Because we are going top-down through the block, all value numbers
2126   // will be available in the predecessor by the time we need them.  Any
2127   // that weren't originally present will have been instantiated earlier
2128   // in this loop.
2129   bool success = true;
2130   for (unsigned i = 0, e = Instr->getNumOperands(); i != e; ++i) {
2131     Value *Op = Instr->getOperand(i);
2132     if (isa<Argument>(Op) || isa<Constant>(Op) || isa<GlobalValue>(Op))
2133       continue;
2134     // This could be a newly inserted instruction, in which case, we won't
2135     // find a value number, and should give up before we hurt ourselves.
2136     // FIXME: Rewrite the infrastructure to let it easier to value number
2137     // and process newly inserted instructions.
2138     if (!VN.exists(Op)) {
2139       success = false;
2140       break;
2141     }
2142     uint32_t TValNo =
2143         VN.phiTranslate(Pred, Curr, VN.lookup(Op), *this);
2144     if (Value *V = findLeader(Pred, TValNo)) {
2145       Instr->setOperand(i, V);
2146     } else {
2147       success = false;
2148       break;
2149     }
2150   }
2151 
2152   // Fail out if we encounter an operand that is not available in
2153   // the PRE predecessor.  This is typically because of loads which
2154   // are not value numbered precisely.
2155   if (!success)
2156     return false;
2157 
2158   Instr->insertBefore(Pred->getTerminator());
2159   Instr->setName(Instr->getName() + ".pre");
2160   Instr->setDebugLoc(Instr->getDebugLoc());
2161 
2162   unsigned Num = VN.lookupOrAdd(Instr);
2163   VN.add(Instr, Num);
2164 
2165   // Update the availability map to include the new instruction.
2166   addToLeaderTable(Num, Instr, Pred);
2167   return true;
2168 }
2169 
2170 bool GVN::performScalarPRE(Instruction *CurInst) {
2171   if (isa<AllocaInst>(CurInst) || isa<TerminatorInst>(CurInst) ||
2172       isa<PHINode>(CurInst) || CurInst->getType()->isVoidTy() ||
2173       CurInst->mayReadFromMemory() || CurInst->mayHaveSideEffects() ||
2174       isa<DbgInfoIntrinsic>(CurInst))
2175     return false;
2176 
2177   // Don't do PRE on compares. The PHI would prevent CodeGenPrepare from
2178   // sinking the compare again, and it would force the code generator to
2179   // move the i1 from processor flags or predicate registers into a general
2180   // purpose register.
2181   if (isa<CmpInst>(CurInst))
2182     return false;
2183 
2184   // We don't currently value number ANY inline asm calls.
2185   if (CallInst *CallI = dyn_cast<CallInst>(CurInst))
2186     if (CallI->isInlineAsm())
2187       return false;
2188 
2189   uint32_t ValNo = VN.lookup(CurInst);
2190 
2191   // Look for the predecessors for PRE opportunities.  We're
2192   // only trying to solve the basic diamond case, where
2193   // a value is computed in the successor and one predecessor,
2194   // but not the other.  We also explicitly disallow cases
2195   // where the successor is its own predecessor, because they're
2196   // more complicated to get right.
2197   unsigned NumWith = 0;
2198   unsigned NumWithout = 0;
2199   BasicBlock *PREPred = nullptr;
2200   BasicBlock *CurrentBlock = CurInst->getParent();
2201 
2202   SmallVector<std::pair<Value *, BasicBlock *>, 8> predMap;
2203   for (BasicBlock *P : predecessors(CurrentBlock)) {
2204     // We're not interested in PRE where blocks with predecessors that are
2205     // not reachable.
2206     if (!DT->isReachableFromEntry(P)) {
2207       NumWithout = 2;
2208       break;
2209     }
2210     // It is not safe to do PRE when P->CurrentBlock is a loop backedge, and
2211     // when CurInst has operand defined in CurrentBlock (so it may be defined
2212     // by phi in the loop header).
2213     if (BlockRPONumber[P] >= BlockRPONumber[CurrentBlock] &&
2214         llvm::any_of(CurInst->operands(), [&](const Use &U) {
2215           if (auto *Inst = dyn_cast<Instruction>(U.get()))
2216             return Inst->getParent() == CurrentBlock;
2217           return false;
2218         })) {
2219       NumWithout = 2;
2220       break;
2221     }
2222 
2223     uint32_t TValNo = VN.phiTranslate(P, CurrentBlock, ValNo, *this);
2224     Value *predV = findLeader(P, TValNo);
2225     if (!predV) {
2226       predMap.push_back(std::make_pair(static_cast<Value *>(nullptr), P));
2227       PREPred = P;
2228       ++NumWithout;
2229     } else if (predV == CurInst) {
2230       /* CurInst dominates this predecessor. */
2231       NumWithout = 2;
2232       break;
2233     } else {
2234       predMap.push_back(std::make_pair(predV, P));
2235       ++NumWith;
2236     }
2237   }
2238 
2239   // Don't do PRE when it might increase code size, i.e. when
2240   // we would need to insert instructions in more than one pred.
2241   if (NumWithout > 1 || NumWith == 0)
2242     return false;
2243 
2244   // We may have a case where all predecessors have the instruction,
2245   // and we just need to insert a phi node. Otherwise, perform
2246   // insertion.
2247   Instruction *PREInstr = nullptr;
2248 
2249   if (NumWithout != 0) {
2250     // Don't do PRE across indirect branch.
2251     if (isa<IndirectBrInst>(PREPred->getTerminator()))
2252       return false;
2253 
2254     // We can't do PRE safely on a critical edge, so instead we schedule
2255     // the edge to be split and perform the PRE the next time we iterate
2256     // on the function.
2257     unsigned SuccNum = GetSuccessorNumber(PREPred, CurrentBlock);
2258     if (isCriticalEdge(PREPred->getTerminator(), SuccNum)) {
2259       toSplit.push_back(std::make_pair(PREPred->getTerminator(), SuccNum));
2260       return false;
2261     }
2262     // We need to insert somewhere, so let's give it a shot
2263     PREInstr = CurInst->clone();
2264     if (!performScalarPREInsertion(PREInstr, PREPred, CurrentBlock, ValNo)) {
2265       // If we failed insertion, make sure we remove the instruction.
2266       DEBUG(verifyRemoved(PREInstr));
2267       PREInstr->deleteValue();
2268       return false;
2269     }
2270   }
2271 
2272   // Either we should have filled in the PRE instruction, or we should
2273   // not have needed insertions.
2274   assert(PREInstr != nullptr || NumWithout == 0);
2275 
2276   ++NumGVNPRE;
2277 
2278   // Create a PHI to make the value available in this block.
2279   PHINode *Phi =
2280       PHINode::Create(CurInst->getType(), predMap.size(),
2281                       CurInst->getName() + ".pre-phi", &CurrentBlock->front());
2282   for (unsigned i = 0, e = predMap.size(); i != e; ++i) {
2283     if (Value *V = predMap[i].first)
2284       Phi->addIncoming(V, predMap[i].second);
2285     else
2286       Phi->addIncoming(PREInstr, PREPred);
2287   }
2288 
2289   VN.add(Phi, ValNo);
2290   // After creating a new PHI for ValNo, the phi translate result for ValNo will
2291   // be changed, so erase the related stale entries in phi translate cache.
2292   VN.eraseTranslateCacheEntry(ValNo, *CurrentBlock);
2293   addToLeaderTable(ValNo, Phi, CurrentBlock);
2294   Phi->setDebugLoc(CurInst->getDebugLoc());
2295   CurInst->replaceAllUsesWith(Phi);
2296   if (MD && Phi->getType()->isPtrOrPtrVectorTy())
2297     MD->invalidateCachedPointerInfo(Phi);
2298   VN.erase(CurInst);
2299   removeFromLeaderTable(ValNo, CurInst, CurrentBlock);
2300 
2301   DEBUG(dbgs() << "GVN PRE removed: " << *CurInst << '\n');
2302   if (MD)
2303     MD->removeInstruction(CurInst);
2304   DEBUG(verifyRemoved(CurInst));
2305   CurInst->eraseFromParent();
2306   OI->invalidateBlock(CurrentBlock);
2307   ++NumGVNInstr;
2308 
2309   return true;
2310 }
2311 
2312 /// Perform a purely local form of PRE that looks for diamond
2313 /// control flow patterns and attempts to perform simple PRE at the join point.
2314 bool GVN::performPRE(Function &F) {
2315   bool Changed = false;
2316   for (BasicBlock *CurrentBlock : depth_first(&F.getEntryBlock())) {
2317     // Nothing to PRE in the entry block.
2318     if (CurrentBlock == &F.getEntryBlock())
2319       continue;
2320 
2321     // Don't perform PRE on an EH pad.
2322     if (CurrentBlock->isEHPad())
2323       continue;
2324 
2325     for (BasicBlock::iterator BI = CurrentBlock->begin(),
2326                               BE = CurrentBlock->end();
2327          BI != BE;) {
2328       Instruction *CurInst = &*BI++;
2329       Changed |= performScalarPRE(CurInst);
2330     }
2331   }
2332 
2333   if (splitCriticalEdges())
2334     Changed = true;
2335 
2336   return Changed;
2337 }
2338 
2339 /// Split the critical edge connecting the given two blocks, and return
2340 /// the block inserted to the critical edge.
2341 BasicBlock *GVN::splitCriticalEdges(BasicBlock *Pred, BasicBlock *Succ) {
2342   BasicBlock *BB =
2343       SplitCriticalEdge(Pred, Succ, CriticalEdgeSplittingOptions(DT));
2344   if (MD)
2345     MD->invalidateCachedPredecessors();
2346   return BB;
2347 }
2348 
2349 /// Split critical edges found during the previous
2350 /// iteration that may enable further optimization.
2351 bool GVN::splitCriticalEdges() {
2352   if (toSplit.empty())
2353     return false;
2354   do {
2355     std::pair<TerminatorInst*, unsigned> Edge = toSplit.pop_back_val();
2356     SplitCriticalEdge(Edge.first, Edge.second,
2357                       CriticalEdgeSplittingOptions(DT));
2358   } while (!toSplit.empty());
2359   if (MD) MD->invalidateCachedPredecessors();
2360   return true;
2361 }
2362 
2363 /// Executes one iteration of GVN
2364 bool GVN::iterateOnFunction(Function &F) {
2365   cleanupGlobalSets();
2366 
2367   // Top-down walk of the dominator tree
2368   bool Changed = false;
2369   // Needed for value numbering with phi construction to work.
2370   // RPOT walks the graph in its constructor and will not be invalidated during
2371   // processBlock.
2372   ReversePostOrderTraversal<Function *> RPOT(&F);
2373   fillImplicitControlFlowInfo(RPOT);
2374   for (BasicBlock *BB : RPOT)
2375     Changed |= processBlock(BB);
2376 
2377   return Changed;
2378 }
2379 
2380 void GVN::cleanupGlobalSets() {
2381   VN.clear();
2382   LeaderTable.clear();
2383   BlockRPONumber.clear();
2384   TableAllocator.Reset();
2385   FirstImplicitControlFlowInsts.clear();
2386 }
2387 
2388 void
2389 GVN::fillImplicitControlFlowInfo(ReversePostOrderTraversal<Function *> &RPOT) {
2390   auto MayNotTransferExecutionToSuccessor = [&](const Instruction *I) {
2391     // If a block's instruction doesn't always pass the control to its successor
2392     // instruction, mark the block as having implicit control flow. We use them
2393     // to avoid wrong assumptions of sort "if A is executed and B post-dominates
2394     // A, then B is also executed". This is not true is there is an implicit
2395     // control flow instruction (e.g. a guard) between them.
2396     //
2397     // TODO: Currently, isGuaranteedToTransferExecutionToSuccessor returns false
2398     // for volatile stores and loads because they can trap. The discussion on
2399     // whether or not it is correct is still ongoing. We might want to get rid
2400     // of this logic in the future. Anyways, trapping instructions shouldn't
2401     // introduce implicit control flow, so we explicitly allow them here. This
2402     // must be removed once isGuaranteedToTransferExecutionToSuccessor is fixed.
2403     if (isGuaranteedToTransferExecutionToSuccessor(I))
2404       return false;
2405     if (isa<LoadInst>(I)) {
2406       assert(cast<LoadInst>(I)->isVolatile() &&
2407              "Non-volatile load should transfer execution to successor!");
2408       return false;
2409     }
2410     if (isa<StoreInst>(I)) {
2411       assert(cast<StoreInst>(I)->isVolatile() &&
2412              "Non-volatile store should transfer execution to successor!");
2413       return false;
2414     }
2415     return true;
2416   };
2417 
2418   for (BasicBlock *BB : RPOT)
2419     for (auto &I : *BB)
2420       if (MayNotTransferExecutionToSuccessor(&I)) {
2421         FirstImplicitControlFlowInsts[BB] = &I;
2422         break;
2423       }
2424 }
2425 
2426 /// Verify that the specified instruction does not occur in our
2427 /// internal data structures.
2428 void GVN::verifyRemoved(const Instruction *Inst) const {
2429   VN.verifyRemoved(Inst);
2430 
2431   // Walk through the value number scope to make sure the instruction isn't
2432   // ferreted away in it.
2433   for (DenseMap<uint32_t, LeaderTableEntry>::const_iterator
2434        I = LeaderTable.begin(), E = LeaderTable.end(); I != E; ++I) {
2435     const LeaderTableEntry *Node = &I->second;
2436     assert(Node->Val != Inst && "Inst still in value numbering scope!");
2437 
2438     while (Node->Next) {
2439       Node = Node->Next;
2440       assert(Node->Val != Inst && "Inst still in value numbering scope!");
2441     }
2442   }
2443 }
2444 
2445 /// BB is declared dead, which implied other blocks become dead as well. This
2446 /// function is to add all these blocks to "DeadBlocks". For the dead blocks'
2447 /// live successors, update their phi nodes by replacing the operands
2448 /// corresponding to dead blocks with UndefVal.
2449 void GVN::addDeadBlock(BasicBlock *BB) {
2450   SmallVector<BasicBlock *, 4> NewDead;
2451   SmallSetVector<BasicBlock *, 4> DF;
2452 
2453   NewDead.push_back(BB);
2454   while (!NewDead.empty()) {
2455     BasicBlock *D = NewDead.pop_back_val();
2456     if (DeadBlocks.count(D))
2457       continue;
2458 
2459     // All blocks dominated by D are dead.
2460     SmallVector<BasicBlock *, 8> Dom;
2461     DT->getDescendants(D, Dom);
2462     DeadBlocks.insert(Dom.begin(), Dom.end());
2463 
2464     // Figure out the dominance-frontier(D).
2465     for (BasicBlock *B : Dom) {
2466       for (BasicBlock *S : successors(B)) {
2467         if (DeadBlocks.count(S))
2468           continue;
2469 
2470         bool AllPredDead = true;
2471         for (BasicBlock *P : predecessors(S))
2472           if (!DeadBlocks.count(P)) {
2473             AllPredDead = false;
2474             break;
2475           }
2476 
2477         if (!AllPredDead) {
2478           // S could be proved dead later on. That is why we don't update phi
2479           // operands at this moment.
2480           DF.insert(S);
2481         } else {
2482           // While S is not dominated by D, it is dead by now. This could take
2483           // place if S already have a dead predecessor before D is declared
2484           // dead.
2485           NewDead.push_back(S);
2486         }
2487       }
2488     }
2489   }
2490 
2491   // For the dead blocks' live successors, update their phi nodes by replacing
2492   // the operands corresponding to dead blocks with UndefVal.
2493   for(SmallSetVector<BasicBlock *, 4>::iterator I = DF.begin(), E = DF.end();
2494         I != E; I++) {
2495     BasicBlock *B = *I;
2496     if (DeadBlocks.count(B))
2497       continue;
2498 
2499     SmallVector<BasicBlock *, 4> Preds(pred_begin(B), pred_end(B));
2500     for (BasicBlock *P : Preds) {
2501       if (!DeadBlocks.count(P))
2502         continue;
2503 
2504       if (isCriticalEdge(P->getTerminator(), GetSuccessorNumber(P, B))) {
2505         if (BasicBlock *S = splitCriticalEdges(P, B))
2506           DeadBlocks.insert(P = S);
2507       }
2508 
2509       for (BasicBlock::iterator II = B->begin(); isa<PHINode>(II); ++II) {
2510         PHINode &Phi = cast<PHINode>(*II);
2511         Phi.setIncomingValue(Phi.getBasicBlockIndex(P),
2512                              UndefValue::get(Phi.getType()));
2513       }
2514     }
2515   }
2516 }
2517 
2518 // If the given branch is recognized as a foldable branch (i.e. conditional
2519 // branch with constant condition), it will perform following analyses and
2520 // transformation.
2521 //  1) If the dead out-coming edge is a critical-edge, split it. Let
2522 //     R be the target of the dead out-coming edge.
2523 //  1) Identify the set of dead blocks implied by the branch's dead outcoming
2524 //     edge. The result of this step will be {X| X is dominated by R}
2525 //  2) Identify those blocks which haves at least one dead predecessor. The
2526 //     result of this step will be dominance-frontier(R).
2527 //  3) Update the PHIs in DF(R) by replacing the operands corresponding to
2528 //     dead blocks with "UndefVal" in an hope these PHIs will optimized away.
2529 //
2530 // Return true iff *NEW* dead code are found.
2531 bool GVN::processFoldableCondBr(BranchInst *BI) {
2532   if (!BI || BI->isUnconditional())
2533     return false;
2534 
2535   // If a branch has two identical successors, we cannot declare either dead.
2536   if (BI->getSuccessor(0) == BI->getSuccessor(1))
2537     return false;
2538 
2539   ConstantInt *Cond = dyn_cast<ConstantInt>(BI->getCondition());
2540   if (!Cond)
2541     return false;
2542 
2543   BasicBlock *DeadRoot =
2544       Cond->getZExtValue() ? BI->getSuccessor(1) : BI->getSuccessor(0);
2545   if (DeadBlocks.count(DeadRoot))
2546     return false;
2547 
2548   if (!DeadRoot->getSinglePredecessor())
2549     DeadRoot = splitCriticalEdges(BI->getParent(), DeadRoot);
2550 
2551   addDeadBlock(DeadRoot);
2552   return true;
2553 }
2554 
2555 // performPRE() will trigger assert if it comes across an instruction without
2556 // associated val-num. As it normally has far more live instructions than dead
2557 // instructions, it makes more sense just to "fabricate" a val-number for the
2558 // dead code than checking if instruction involved is dead or not.
2559 void GVN::assignValNumForDeadCode() {
2560   for (BasicBlock *BB : DeadBlocks) {
2561     for (Instruction &Inst : *BB) {
2562       unsigned ValNum = VN.lookupOrAdd(&Inst);
2563       addToLeaderTable(ValNum, &Inst, BB);
2564     }
2565   }
2566 }
2567 
2568 class llvm::gvn::GVNLegacyPass : public FunctionPass {
2569 public:
2570   static char ID; // Pass identification, replacement for typeid
2571 
2572   explicit GVNLegacyPass(bool NoLoads = false)
2573       : FunctionPass(ID), NoLoads(NoLoads) {
2574     initializeGVNLegacyPassPass(*PassRegistry::getPassRegistry());
2575   }
2576 
2577   bool runOnFunction(Function &F) override {
2578     if (skipFunction(F))
2579       return false;
2580 
2581     auto *LIWP = getAnalysisIfAvailable<LoopInfoWrapperPass>();
2582 
2583     return Impl.runImpl(
2584         F, getAnalysis<AssumptionCacheTracker>().getAssumptionCache(F),
2585         getAnalysis<DominatorTreeWrapperPass>().getDomTree(),
2586         getAnalysis<TargetLibraryInfoWrapperPass>().getTLI(),
2587         getAnalysis<AAResultsWrapperPass>().getAAResults(),
2588         NoLoads ? nullptr
2589                 : &getAnalysis<MemoryDependenceWrapperPass>().getMemDep(),
2590         LIWP ? &LIWP->getLoopInfo() : nullptr,
2591         &getAnalysis<OptimizationRemarkEmitterWrapperPass>().getORE());
2592   }
2593 
2594   void getAnalysisUsage(AnalysisUsage &AU) const override {
2595     AU.addRequired<AssumptionCacheTracker>();
2596     AU.addRequired<DominatorTreeWrapperPass>();
2597     AU.addRequired<TargetLibraryInfoWrapperPass>();
2598     if (!NoLoads)
2599       AU.addRequired<MemoryDependenceWrapperPass>();
2600     AU.addRequired<AAResultsWrapperPass>();
2601 
2602     AU.addPreserved<DominatorTreeWrapperPass>();
2603     AU.addPreserved<GlobalsAAWrapperPass>();
2604     AU.addPreserved<TargetLibraryInfoWrapperPass>();
2605     AU.addRequired<OptimizationRemarkEmitterWrapperPass>();
2606   }
2607 
2608 private:
2609   bool NoLoads;
2610   GVN Impl;
2611 };
2612 
2613 char GVNLegacyPass::ID = 0;
2614 
2615 INITIALIZE_PASS_BEGIN(GVNLegacyPass, "gvn", "Global Value Numbering", false, false)
2616 INITIALIZE_PASS_DEPENDENCY(AssumptionCacheTracker)
2617 INITIALIZE_PASS_DEPENDENCY(MemoryDependenceWrapperPass)
2618 INITIALIZE_PASS_DEPENDENCY(DominatorTreeWrapperPass)
2619 INITIALIZE_PASS_DEPENDENCY(TargetLibraryInfoWrapperPass)
2620 INITIALIZE_PASS_DEPENDENCY(AAResultsWrapperPass)
2621 INITIALIZE_PASS_DEPENDENCY(GlobalsAAWrapperPass)
2622 INITIALIZE_PASS_DEPENDENCY(OptimizationRemarkEmitterWrapperPass)
2623 INITIALIZE_PASS_END(GVNLegacyPass, "gvn", "Global Value Numbering", false, false)
2624 
2625 // The public interface to this file...
2626 FunctionPass *llvm::createGVNPass(bool NoLoads) {
2627   return new GVNLegacyPass(NoLoads);
2628 }
2629