1 //===- GVN.cpp - Eliminate redundant values and loads ---------------------===//
2 //
3 // Part of the LLVM Project, under the Apache License v2.0 with LLVM Exceptions.
4 // See https://llvm.org/LICENSE.txt for license information.
5 // SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception
6 //
7 //===----------------------------------------------------------------------===//
8 //
9 // This pass performs global value numbering to eliminate fully redundant
10 // instructions.  It also performs simple dead load elimination.
11 //
12 // Note that this pass does the value numbering itself; it does not use the
13 // ValueNumbering analysis passes.
14 //
15 //===----------------------------------------------------------------------===//
16 
17 #include "llvm/Transforms/Scalar/GVN.h"
18 #include "llvm/ADT/DenseMap.h"
19 #include "llvm/ADT/DepthFirstIterator.h"
20 #include "llvm/ADT/Hashing.h"
21 #include "llvm/ADT/MapVector.h"
22 #include "llvm/ADT/PointerIntPair.h"
23 #include "llvm/ADT/PostOrderIterator.h"
24 #include "llvm/ADT/STLExtras.h"
25 #include "llvm/ADT/SetVector.h"
26 #include "llvm/ADT/SmallPtrSet.h"
27 #include "llvm/ADT/SmallVector.h"
28 #include "llvm/ADT/Statistic.h"
29 #include "llvm/Analysis/AliasAnalysis.h"
30 #include "llvm/Analysis/AssumeBundleQueries.h"
31 #include "llvm/Analysis/AssumptionCache.h"
32 #include "llvm/Analysis/CFG.h"
33 #include "llvm/Analysis/DomTreeUpdater.h"
34 #include "llvm/Analysis/GlobalsModRef.h"
35 #include "llvm/Analysis/InstructionSimplify.h"
36 #include "llvm/Analysis/LoopInfo.h"
37 #include "llvm/Analysis/MemoryBuiltins.h"
38 #include "llvm/Analysis/MemoryDependenceAnalysis.h"
39 #include "llvm/Analysis/MemorySSA.h"
40 #include "llvm/Analysis/MemorySSAUpdater.h"
41 #include "llvm/Analysis/OptimizationRemarkEmitter.h"
42 #include "llvm/Analysis/PHITransAddr.h"
43 #include "llvm/Analysis/TargetLibraryInfo.h"
44 #include "llvm/Analysis/ValueTracking.h"
45 #include "llvm/Config/llvm-config.h"
46 #include "llvm/IR/Attributes.h"
47 #include "llvm/IR/BasicBlock.h"
48 #include "llvm/IR/Constant.h"
49 #include "llvm/IR/Constants.h"
50 #include "llvm/IR/DataLayout.h"
51 #include "llvm/IR/DebugLoc.h"
52 #include "llvm/IR/Dominators.h"
53 #include "llvm/IR/Function.h"
54 #include "llvm/IR/InstrTypes.h"
55 #include "llvm/IR/Instruction.h"
56 #include "llvm/IR/Instructions.h"
57 #include "llvm/IR/IntrinsicInst.h"
58 #include "llvm/IR/Intrinsics.h"
59 #include "llvm/IR/LLVMContext.h"
60 #include "llvm/IR/Metadata.h"
61 #include "llvm/IR/Module.h"
62 #include "llvm/IR/Operator.h"
63 #include "llvm/IR/PassManager.h"
64 #include "llvm/IR/PatternMatch.h"
65 #include "llvm/IR/Type.h"
66 #include "llvm/IR/Use.h"
67 #include "llvm/IR/Value.h"
68 #include "llvm/InitializePasses.h"
69 #include "llvm/Pass.h"
70 #include "llvm/Support/Casting.h"
71 #include "llvm/Support/CommandLine.h"
72 #include "llvm/Support/Compiler.h"
73 #include "llvm/Support/Debug.h"
74 #include "llvm/Support/raw_ostream.h"
75 #include "llvm/Transforms/Utils.h"
76 #include "llvm/Transforms/Utils/AssumeBundleBuilder.h"
77 #include "llvm/Transforms/Utils/BasicBlockUtils.h"
78 #include "llvm/Transforms/Utils/Local.h"
79 #include "llvm/Transforms/Utils/SSAUpdater.h"
80 #include "llvm/Transforms/Utils/VNCoercion.h"
81 #include <algorithm>
82 #include <cassert>
83 #include <cstdint>
84 #include <utility>
85 
86 using namespace llvm;
87 using namespace llvm::gvn;
88 using namespace llvm::VNCoercion;
89 using namespace PatternMatch;
90 
91 #define DEBUG_TYPE "gvn"
92 
93 STATISTIC(NumGVNInstr, "Number of instructions deleted");
94 STATISTIC(NumGVNLoad, "Number of loads deleted");
95 STATISTIC(NumGVNPRE, "Number of instructions PRE'd");
96 STATISTIC(NumGVNBlocks, "Number of blocks merged");
97 STATISTIC(NumGVNSimpl, "Number of instructions simplified");
98 STATISTIC(NumGVNEqProp, "Number of equalities propagated");
99 STATISTIC(NumPRELoad, "Number of loads PRE'd");
100 STATISTIC(NumPRELoopLoad, "Number of loop loads PRE'd");
101 
102 STATISTIC(IsValueFullyAvailableInBlockNumSpeculationsMax,
103           "Number of blocks speculated as available in "
104           "IsValueFullyAvailableInBlock(), max");
105 STATISTIC(MaxBBSpeculationCutoffReachedTimes,
106           "Number of times we we reached gvn-max-block-speculations cut-off "
107           "preventing further exploration");
108 
109 static cl::opt<bool> GVNEnablePRE("enable-pre", cl::init(true), cl::Hidden);
110 static cl::opt<bool> GVNEnableLoadPRE("enable-load-pre", cl::init(true));
111 static cl::opt<bool> GVNEnableLoadInLoopPRE("enable-load-in-loop-pre",
112                                             cl::init(true));
113 static cl::opt<bool>
114 GVNEnableSplitBackedgeInLoadPRE("enable-split-backedge-in-load-pre",
115                                 cl::init(true));
116 static cl::opt<bool> GVNEnableMemDep("enable-gvn-memdep", cl::init(true));
117 
118 static cl::opt<uint32_t> MaxNumDeps(
119     "gvn-max-num-deps", cl::Hidden, cl::init(100), cl::ZeroOrMore,
120     cl::desc("Max number of dependences to attempt Load PRE (default = 100)"));
121 
122 // This is based on IsValueFullyAvailableInBlockNumSpeculationsMax stat.
123 static cl::opt<uint32_t> MaxBBSpeculations(
124     "gvn-max-block-speculations", cl::Hidden, cl::init(600), cl::ZeroOrMore,
125     cl::desc("Max number of blocks we're willing to speculate on (and recurse "
126              "into) when deducing if a value is fully available or not in GVN "
127              "(default = 600)"));
128 
129 struct llvm::GVNPass::Expression {
130   uint32_t opcode;
131   bool commutative = false;
132   Type *type = nullptr;
133   SmallVector<uint32_t, 4> varargs;
134 
135   Expression(uint32_t o = ~2U) : opcode(o) {}
136 
137   bool operator==(const Expression &other) const {
138     if (opcode != other.opcode)
139       return false;
140     if (opcode == ~0U || opcode == ~1U)
141       return true;
142     if (type != other.type)
143       return false;
144     if (varargs != other.varargs)
145       return false;
146     return true;
147   }
148 
149   friend hash_code hash_value(const Expression &Value) {
150     return hash_combine(
151         Value.opcode, Value.type,
152         hash_combine_range(Value.varargs.begin(), Value.varargs.end()));
153   }
154 };
155 
156 namespace llvm {
157 
158 template <> struct DenseMapInfo<GVNPass::Expression> {
159   static inline GVNPass::Expression getEmptyKey() { return ~0U; }
160   static inline GVNPass::Expression getTombstoneKey() { return ~1U; }
161 
162   static unsigned getHashValue(const GVNPass::Expression &e) {
163     using llvm::hash_value;
164 
165     return static_cast<unsigned>(hash_value(e));
166   }
167 
168   static bool isEqual(const GVNPass::Expression &LHS,
169                       const GVNPass::Expression &RHS) {
170     return LHS == RHS;
171   }
172 };
173 
174 } // end namespace llvm
175 
176 /// Represents a particular available value that we know how to materialize.
177 /// Materialization of an AvailableValue never fails.  An AvailableValue is
178 /// implicitly associated with a rematerialization point which is the
179 /// location of the instruction from which it was formed.
180 struct llvm::gvn::AvailableValue {
181   enum ValType {
182     SimpleVal, // A simple offsetted value that is accessed.
183     LoadVal,   // A value produced by a load.
184     MemIntrin, // A memory intrinsic which is loaded from.
185     UndefVal   // A UndefValue representing a value from dead block (which
186                // is not yet physically removed from the CFG).
187   };
188 
189   /// V - The value that is live out of the block.
190   PointerIntPair<Value *, 2, ValType> Val;
191 
192   /// Offset - The byte offset in Val that is interesting for the load query.
193   unsigned Offset = 0;
194 
195   static AvailableValue get(Value *V, unsigned Offset = 0) {
196     AvailableValue Res;
197     Res.Val.setPointer(V);
198     Res.Val.setInt(SimpleVal);
199     Res.Offset = Offset;
200     return Res;
201   }
202 
203   static AvailableValue getMI(MemIntrinsic *MI, unsigned Offset = 0) {
204     AvailableValue Res;
205     Res.Val.setPointer(MI);
206     Res.Val.setInt(MemIntrin);
207     Res.Offset = Offset;
208     return Res;
209   }
210 
211   static AvailableValue getLoad(LoadInst *Load, unsigned Offset = 0) {
212     AvailableValue Res;
213     Res.Val.setPointer(Load);
214     Res.Val.setInt(LoadVal);
215     Res.Offset = Offset;
216     return Res;
217   }
218 
219   static AvailableValue getUndef() {
220     AvailableValue Res;
221     Res.Val.setPointer(nullptr);
222     Res.Val.setInt(UndefVal);
223     Res.Offset = 0;
224     return Res;
225   }
226 
227   bool isSimpleValue() const { return Val.getInt() == SimpleVal; }
228   bool isCoercedLoadValue() const { return Val.getInt() == LoadVal; }
229   bool isMemIntrinValue() const { return Val.getInt() == MemIntrin; }
230   bool isUndefValue() const { return Val.getInt() == UndefVal; }
231 
232   Value *getSimpleValue() const {
233     assert(isSimpleValue() && "Wrong accessor");
234     return Val.getPointer();
235   }
236 
237   LoadInst *getCoercedLoadValue() const {
238     assert(isCoercedLoadValue() && "Wrong accessor");
239     return cast<LoadInst>(Val.getPointer());
240   }
241 
242   MemIntrinsic *getMemIntrinValue() const {
243     assert(isMemIntrinValue() && "Wrong accessor");
244     return cast<MemIntrinsic>(Val.getPointer());
245   }
246 
247   /// Emit code at the specified insertion point to adjust the value defined
248   /// here to the specified type. This handles various coercion cases.
249   Value *MaterializeAdjustedValue(LoadInst *Load, Instruction *InsertPt,
250                                   GVNPass &gvn) const;
251 };
252 
253 /// Represents an AvailableValue which can be rematerialized at the end of
254 /// the associated BasicBlock.
255 struct llvm::gvn::AvailableValueInBlock {
256   /// BB - The basic block in question.
257   BasicBlock *BB = nullptr;
258 
259   /// AV - The actual available value
260   AvailableValue AV;
261 
262   static AvailableValueInBlock get(BasicBlock *BB, AvailableValue &&AV) {
263     AvailableValueInBlock Res;
264     Res.BB = BB;
265     Res.AV = std::move(AV);
266     return Res;
267   }
268 
269   static AvailableValueInBlock get(BasicBlock *BB, Value *V,
270                                    unsigned Offset = 0) {
271     return get(BB, AvailableValue::get(V, Offset));
272   }
273 
274   static AvailableValueInBlock getUndef(BasicBlock *BB) {
275     return get(BB, AvailableValue::getUndef());
276   }
277 
278   /// Emit code at the end of this block to adjust the value defined here to
279   /// the specified type. This handles various coercion cases.
280   Value *MaterializeAdjustedValue(LoadInst *Load, GVNPass &gvn) const {
281     return AV.MaterializeAdjustedValue(Load, BB->getTerminator(), gvn);
282   }
283 };
284 
285 //===----------------------------------------------------------------------===//
286 //                     ValueTable Internal Functions
287 //===----------------------------------------------------------------------===//
288 
289 GVNPass::Expression GVNPass::ValueTable::createExpr(Instruction *I) {
290   Expression e;
291   e.type = I->getType();
292   e.opcode = I->getOpcode();
293   if (const GCRelocateInst *GCR = dyn_cast<GCRelocateInst>(I)) {
294     // gc.relocate is 'special' call: its second and third operands are
295     // not real values, but indices into statepoint's argument list.
296     // Use the refered to values for purposes of identity.
297     e.varargs.push_back(lookupOrAdd(GCR->getOperand(0)));
298     e.varargs.push_back(lookupOrAdd(GCR->getBasePtr()));
299     e.varargs.push_back(lookupOrAdd(GCR->getDerivedPtr()));
300   } else {
301     for (Use &Op : I->operands())
302       e.varargs.push_back(lookupOrAdd(Op));
303   }
304   if (I->isCommutative()) {
305     // Ensure that commutative instructions that only differ by a permutation
306     // of their operands get the same value number by sorting the operand value
307     // numbers.  Since commutative operands are the 1st two operands it is more
308     // efficient to sort by hand rather than using, say, std::sort.
309     assert(I->getNumOperands() >= 2 && "Unsupported commutative instruction!");
310     if (e.varargs[0] > e.varargs[1])
311       std::swap(e.varargs[0], e.varargs[1]);
312     e.commutative = true;
313   }
314 
315   if (auto *C = dyn_cast<CmpInst>(I)) {
316     // Sort the operand value numbers so x<y and y>x get the same value number.
317     CmpInst::Predicate Predicate = C->getPredicate();
318     if (e.varargs[0] > e.varargs[1]) {
319       std::swap(e.varargs[0], e.varargs[1]);
320       Predicate = CmpInst::getSwappedPredicate(Predicate);
321     }
322     e.opcode = (C->getOpcode() << 8) | Predicate;
323     e.commutative = true;
324   } else if (auto *E = dyn_cast<InsertValueInst>(I)) {
325     e.varargs.append(E->idx_begin(), E->idx_end());
326   } else if (auto *SVI = dyn_cast<ShuffleVectorInst>(I)) {
327     ArrayRef<int> ShuffleMask = SVI->getShuffleMask();
328     e.varargs.append(ShuffleMask.begin(), ShuffleMask.end());
329   }
330 
331   return e;
332 }
333 
334 GVNPass::Expression GVNPass::ValueTable::createCmpExpr(
335     unsigned Opcode, CmpInst::Predicate Predicate, Value *LHS, Value *RHS) {
336   assert((Opcode == Instruction::ICmp || Opcode == Instruction::FCmp) &&
337          "Not a comparison!");
338   Expression e;
339   e.type = CmpInst::makeCmpResultType(LHS->getType());
340   e.varargs.push_back(lookupOrAdd(LHS));
341   e.varargs.push_back(lookupOrAdd(RHS));
342 
343   // Sort the operand value numbers so x<y and y>x get the same value number.
344   if (e.varargs[0] > e.varargs[1]) {
345     std::swap(e.varargs[0], e.varargs[1]);
346     Predicate = CmpInst::getSwappedPredicate(Predicate);
347   }
348   e.opcode = (Opcode << 8) | Predicate;
349   e.commutative = true;
350   return e;
351 }
352 
353 GVNPass::Expression
354 GVNPass::ValueTable::createExtractvalueExpr(ExtractValueInst *EI) {
355   assert(EI && "Not an ExtractValueInst?");
356   Expression e;
357   e.type = EI->getType();
358   e.opcode = 0;
359 
360   WithOverflowInst *WO = dyn_cast<WithOverflowInst>(EI->getAggregateOperand());
361   if (WO != nullptr && EI->getNumIndices() == 1 && *EI->idx_begin() == 0) {
362     // EI is an extract from one of our with.overflow intrinsics. Synthesize
363     // a semantically equivalent expression instead of an extract value
364     // expression.
365     e.opcode = WO->getBinaryOp();
366     e.varargs.push_back(lookupOrAdd(WO->getLHS()));
367     e.varargs.push_back(lookupOrAdd(WO->getRHS()));
368     return e;
369   }
370 
371   // Not a recognised intrinsic. Fall back to producing an extract value
372   // expression.
373   e.opcode = EI->getOpcode();
374   for (Use &Op : EI->operands())
375     e.varargs.push_back(lookupOrAdd(Op));
376 
377   append_range(e.varargs, EI->indices());
378 
379   return e;
380 }
381 
382 //===----------------------------------------------------------------------===//
383 //                     ValueTable External Functions
384 //===----------------------------------------------------------------------===//
385 
386 GVNPass::ValueTable::ValueTable() = default;
387 GVNPass::ValueTable::ValueTable(const ValueTable &) = default;
388 GVNPass::ValueTable::ValueTable(ValueTable &&) = default;
389 GVNPass::ValueTable::~ValueTable() = default;
390 GVNPass::ValueTable &
391 GVNPass::ValueTable::operator=(const GVNPass::ValueTable &Arg) = default;
392 
393 /// add - Insert a value into the table with a specified value number.
394 void GVNPass::ValueTable::add(Value *V, uint32_t num) {
395   valueNumbering.insert(std::make_pair(V, num));
396   if (PHINode *PN = dyn_cast<PHINode>(V))
397     NumberingPhi[num] = PN;
398 }
399 
400 uint32_t GVNPass::ValueTable::lookupOrAddCall(CallInst *C) {
401   if (AA->doesNotAccessMemory(C)) {
402     Expression exp = createExpr(C);
403     uint32_t e = assignExpNewValueNum(exp).first;
404     valueNumbering[C] = e;
405     return e;
406   } else if (MD && AA->onlyReadsMemory(C)) {
407     Expression exp = createExpr(C);
408     auto ValNum = assignExpNewValueNum(exp);
409     if (ValNum.second) {
410       valueNumbering[C] = ValNum.first;
411       return ValNum.first;
412     }
413 
414     MemDepResult local_dep = MD->getDependency(C);
415 
416     if (!local_dep.isDef() && !local_dep.isNonLocal()) {
417       valueNumbering[C] =  nextValueNumber;
418       return nextValueNumber++;
419     }
420 
421     if (local_dep.isDef()) {
422       // For masked load/store intrinsics, the local_dep may actully be
423       // a normal load or store instruction.
424       CallInst *local_cdep = dyn_cast<CallInst>(local_dep.getInst());
425 
426       if (!local_cdep || local_cdep->arg_size() != C->arg_size()) {
427         valueNumbering[C] = nextValueNumber;
428         return nextValueNumber++;
429       }
430 
431       for (unsigned i = 0, e = C->arg_size(); i < e; ++i) {
432         uint32_t c_vn = lookupOrAdd(C->getArgOperand(i));
433         uint32_t cd_vn = lookupOrAdd(local_cdep->getArgOperand(i));
434         if (c_vn != cd_vn) {
435           valueNumbering[C] = nextValueNumber;
436           return nextValueNumber++;
437         }
438       }
439 
440       uint32_t v = lookupOrAdd(local_cdep);
441       valueNumbering[C] = v;
442       return v;
443     }
444 
445     // Non-local case.
446     const MemoryDependenceResults::NonLocalDepInfo &deps =
447         MD->getNonLocalCallDependency(C);
448     // FIXME: Move the checking logic to MemDep!
449     CallInst* cdep = nullptr;
450 
451     // Check to see if we have a single dominating call instruction that is
452     // identical to C.
453     for (unsigned i = 0, e = deps.size(); i != e; ++i) {
454       const NonLocalDepEntry *I = &deps[i];
455       if (I->getResult().isNonLocal())
456         continue;
457 
458       // We don't handle non-definitions.  If we already have a call, reject
459       // instruction dependencies.
460       if (!I->getResult().isDef() || cdep != nullptr) {
461         cdep = nullptr;
462         break;
463       }
464 
465       CallInst *NonLocalDepCall = dyn_cast<CallInst>(I->getResult().getInst());
466       // FIXME: All duplicated with non-local case.
467       if (NonLocalDepCall && DT->properlyDominates(I->getBB(), C->getParent())){
468         cdep = NonLocalDepCall;
469         continue;
470       }
471 
472       cdep = nullptr;
473       break;
474     }
475 
476     if (!cdep) {
477       valueNumbering[C] = nextValueNumber;
478       return nextValueNumber++;
479     }
480 
481     if (cdep->arg_size() != C->arg_size()) {
482       valueNumbering[C] = nextValueNumber;
483       return nextValueNumber++;
484     }
485     for (unsigned i = 0, e = C->arg_size(); i < e; ++i) {
486       uint32_t c_vn = lookupOrAdd(C->getArgOperand(i));
487       uint32_t cd_vn = lookupOrAdd(cdep->getArgOperand(i));
488       if (c_vn != cd_vn) {
489         valueNumbering[C] = nextValueNumber;
490         return nextValueNumber++;
491       }
492     }
493 
494     uint32_t v = lookupOrAdd(cdep);
495     valueNumbering[C] = v;
496     return v;
497   } else {
498     valueNumbering[C] = nextValueNumber;
499     return nextValueNumber++;
500   }
501 }
502 
503 /// Returns true if a value number exists for the specified value.
504 bool GVNPass::ValueTable::exists(Value *V) const {
505   return valueNumbering.count(V) != 0;
506 }
507 
508 /// lookup_or_add - Returns the value number for the specified value, assigning
509 /// it a new number if it did not have one before.
510 uint32_t GVNPass::ValueTable::lookupOrAdd(Value *V) {
511   DenseMap<Value*, uint32_t>::iterator VI = valueNumbering.find(V);
512   if (VI != valueNumbering.end())
513     return VI->second;
514 
515   if (!isa<Instruction>(V)) {
516     valueNumbering[V] = nextValueNumber;
517     return nextValueNumber++;
518   }
519 
520   Instruction* I = cast<Instruction>(V);
521   Expression exp;
522   switch (I->getOpcode()) {
523     case Instruction::Call:
524       return lookupOrAddCall(cast<CallInst>(I));
525     case Instruction::FNeg:
526     case Instruction::Add:
527     case Instruction::FAdd:
528     case Instruction::Sub:
529     case Instruction::FSub:
530     case Instruction::Mul:
531     case Instruction::FMul:
532     case Instruction::UDiv:
533     case Instruction::SDiv:
534     case Instruction::FDiv:
535     case Instruction::URem:
536     case Instruction::SRem:
537     case Instruction::FRem:
538     case Instruction::Shl:
539     case Instruction::LShr:
540     case Instruction::AShr:
541     case Instruction::And:
542     case Instruction::Or:
543     case Instruction::Xor:
544     case Instruction::ICmp:
545     case Instruction::FCmp:
546     case Instruction::Trunc:
547     case Instruction::ZExt:
548     case Instruction::SExt:
549     case Instruction::FPToUI:
550     case Instruction::FPToSI:
551     case Instruction::UIToFP:
552     case Instruction::SIToFP:
553     case Instruction::FPTrunc:
554     case Instruction::FPExt:
555     case Instruction::PtrToInt:
556     case Instruction::IntToPtr:
557     case Instruction::AddrSpaceCast:
558     case Instruction::BitCast:
559     case Instruction::Select:
560     case Instruction::Freeze:
561     case Instruction::ExtractElement:
562     case Instruction::InsertElement:
563     case Instruction::ShuffleVector:
564     case Instruction::InsertValue:
565     case Instruction::GetElementPtr:
566       exp = createExpr(I);
567       break;
568     case Instruction::ExtractValue:
569       exp = createExtractvalueExpr(cast<ExtractValueInst>(I));
570       break;
571     case Instruction::PHI:
572       valueNumbering[V] = nextValueNumber;
573       NumberingPhi[nextValueNumber] = cast<PHINode>(V);
574       return nextValueNumber++;
575     default:
576       valueNumbering[V] = nextValueNumber;
577       return nextValueNumber++;
578   }
579 
580   uint32_t e = assignExpNewValueNum(exp).first;
581   valueNumbering[V] = e;
582   return e;
583 }
584 
585 /// Returns the value number of the specified value. Fails if
586 /// the value has not yet been numbered.
587 uint32_t GVNPass::ValueTable::lookup(Value *V, bool Verify) const {
588   DenseMap<Value*, uint32_t>::const_iterator VI = valueNumbering.find(V);
589   if (Verify) {
590     assert(VI != valueNumbering.end() && "Value not numbered?");
591     return VI->second;
592   }
593   return (VI != valueNumbering.end()) ? VI->second : 0;
594 }
595 
596 /// Returns the value number of the given comparison,
597 /// assigning it a new number if it did not have one before.  Useful when
598 /// we deduced the result of a comparison, but don't immediately have an
599 /// instruction realizing that comparison to hand.
600 uint32_t GVNPass::ValueTable::lookupOrAddCmp(unsigned Opcode,
601                                              CmpInst::Predicate Predicate,
602                                              Value *LHS, Value *RHS) {
603   Expression exp = createCmpExpr(Opcode, Predicate, LHS, RHS);
604   return assignExpNewValueNum(exp).first;
605 }
606 
607 /// Remove all entries from the ValueTable.
608 void GVNPass::ValueTable::clear() {
609   valueNumbering.clear();
610   expressionNumbering.clear();
611   NumberingPhi.clear();
612   PhiTranslateTable.clear();
613   nextValueNumber = 1;
614   Expressions.clear();
615   ExprIdx.clear();
616   nextExprNumber = 0;
617 }
618 
619 /// Remove a value from the value numbering.
620 void GVNPass::ValueTable::erase(Value *V) {
621   uint32_t Num = valueNumbering.lookup(V);
622   valueNumbering.erase(V);
623   // If V is PHINode, V <--> value number is an one-to-one mapping.
624   if (isa<PHINode>(V))
625     NumberingPhi.erase(Num);
626 }
627 
628 /// verifyRemoved - Verify that the value is removed from all internal data
629 /// structures.
630 void GVNPass::ValueTable::verifyRemoved(const Value *V) const {
631   for (DenseMap<Value*, uint32_t>::const_iterator
632          I = valueNumbering.begin(), E = valueNumbering.end(); I != E; ++I) {
633     assert(I->first != V && "Inst still occurs in value numbering map!");
634   }
635 }
636 
637 //===----------------------------------------------------------------------===//
638 //                                GVN Pass
639 //===----------------------------------------------------------------------===//
640 
641 bool GVNPass::isPREEnabled() const {
642   return Options.AllowPRE.getValueOr(GVNEnablePRE);
643 }
644 
645 bool GVNPass::isLoadPREEnabled() const {
646   return Options.AllowLoadPRE.getValueOr(GVNEnableLoadPRE);
647 }
648 
649 bool GVNPass::isLoadInLoopPREEnabled() const {
650   return Options.AllowLoadInLoopPRE.getValueOr(GVNEnableLoadInLoopPRE);
651 }
652 
653 bool GVNPass::isLoadPRESplitBackedgeEnabled() const {
654   return Options.AllowLoadPRESplitBackedge.getValueOr(
655       GVNEnableSplitBackedgeInLoadPRE);
656 }
657 
658 bool GVNPass::isMemDepEnabled() const {
659   return Options.AllowMemDep.getValueOr(GVNEnableMemDep);
660 }
661 
662 PreservedAnalyses GVNPass::run(Function &F, FunctionAnalysisManager &AM) {
663   // FIXME: The order of evaluation of these 'getResult' calls is very
664   // significant! Re-ordering these variables will cause GVN when run alone to
665   // be less effective! We should fix memdep and basic-aa to not exhibit this
666   // behavior, but until then don't change the order here.
667   auto &AC = AM.getResult<AssumptionAnalysis>(F);
668   auto &DT = AM.getResult<DominatorTreeAnalysis>(F);
669   auto &TLI = AM.getResult<TargetLibraryAnalysis>(F);
670   auto &AA = AM.getResult<AAManager>(F);
671   auto *MemDep =
672       isMemDepEnabled() ? &AM.getResult<MemoryDependenceAnalysis>(F) : nullptr;
673   auto *LI = AM.getCachedResult<LoopAnalysis>(F);
674   auto *MSSA = AM.getCachedResult<MemorySSAAnalysis>(F);
675   auto &ORE = AM.getResult<OptimizationRemarkEmitterAnalysis>(F);
676   bool Changed = runImpl(F, AC, DT, TLI, AA, MemDep, LI, &ORE,
677                          MSSA ? &MSSA->getMSSA() : nullptr);
678   if (!Changed)
679     return PreservedAnalyses::all();
680   PreservedAnalyses PA;
681   PA.preserve<DominatorTreeAnalysis>();
682   PA.preserve<TargetLibraryAnalysis>();
683   if (MSSA)
684     PA.preserve<MemorySSAAnalysis>();
685   if (LI)
686     PA.preserve<LoopAnalysis>();
687   return PA;
688 }
689 
690 void GVNPass::printPipeline(
691     raw_ostream &OS, function_ref<StringRef(StringRef)> MapClassName2PassName) {
692   static_cast<PassInfoMixin<GVNPass> *>(this)->printPipeline(
693       OS, MapClassName2PassName);
694 
695   OS << "<";
696   if (Options.AllowPRE != None)
697     OS << (Options.AllowPRE.getValue() ? "" : "no-") << "pre;";
698   if (Options.AllowLoadPRE != None)
699     OS << (Options.AllowLoadPRE.getValue() ? "" : "no-") << "load-pre;";
700   if (Options.AllowLoadPRESplitBackedge != None)
701     OS << (Options.AllowLoadPRESplitBackedge.getValue() ? "" : "no-")
702        << "split-backedge-load-pre;";
703   if (Options.AllowMemDep != None)
704     OS << (Options.AllowMemDep.getValue() ? "" : "no-") << "memdep";
705   OS << ">";
706 }
707 
708 #if !defined(NDEBUG) || defined(LLVM_ENABLE_DUMP)
709 LLVM_DUMP_METHOD void GVNPass::dump(DenseMap<uint32_t, Value *> &d) const {
710   errs() << "{\n";
711   for (auto &I : d) {
712     errs() << I.first << "\n";
713     I.second->dump();
714   }
715   errs() << "}\n";
716 }
717 #endif
718 
719 enum class AvailabilityState : char {
720   /// We know the block *is not* fully available. This is a fixpoint.
721   Unavailable = 0,
722   /// We know the block *is* fully available. This is a fixpoint.
723   Available = 1,
724   /// We do not know whether the block is fully available or not,
725   /// but we are currently speculating that it will be.
726   /// If it would have turned out that the block was, in fact, not fully
727   /// available, this would have been cleaned up into an Unavailable.
728   SpeculativelyAvailable = 2,
729 };
730 
731 /// Return true if we can prove that the value
732 /// we're analyzing is fully available in the specified block.  As we go, keep
733 /// track of which blocks we know are fully alive in FullyAvailableBlocks.  This
734 /// map is actually a tri-state map with the following values:
735 ///   0) we know the block *is not* fully available.
736 ///   1) we know the block *is* fully available.
737 ///   2) we do not know whether the block is fully available or not, but we are
738 ///      currently speculating that it will be.
739 static bool IsValueFullyAvailableInBlock(
740     BasicBlock *BB,
741     DenseMap<BasicBlock *, AvailabilityState> &FullyAvailableBlocks) {
742   SmallVector<BasicBlock *, 32> Worklist;
743   Optional<BasicBlock *> UnavailableBB;
744 
745   // The number of times we didn't find an entry for a block in a map and
746   // optimistically inserted an entry marking block as speculatively available.
747   unsigned NumNewNewSpeculativelyAvailableBBs = 0;
748 
749 #ifndef NDEBUG
750   SmallSet<BasicBlock *, 32> NewSpeculativelyAvailableBBs;
751   SmallVector<BasicBlock *, 32> AvailableBBs;
752 #endif
753 
754   Worklist.emplace_back(BB);
755   while (!Worklist.empty()) {
756     BasicBlock *CurrBB = Worklist.pop_back_val(); // LoadFO - depth-first!
757     // Optimistically assume that the block is Speculatively Available and check
758     // to see if we already know about this block in one lookup.
759     std::pair<DenseMap<BasicBlock *, AvailabilityState>::iterator, bool> IV =
760         FullyAvailableBlocks.try_emplace(
761             CurrBB, AvailabilityState::SpeculativelyAvailable);
762     AvailabilityState &State = IV.first->second;
763 
764     // Did the entry already exist for this block?
765     if (!IV.second) {
766       if (State == AvailabilityState::Unavailable) {
767         UnavailableBB = CurrBB;
768         break; // Backpropagate unavailability info.
769       }
770 
771 #ifndef NDEBUG
772       AvailableBBs.emplace_back(CurrBB);
773 #endif
774       continue; // Don't recurse further, but continue processing worklist.
775     }
776 
777     // No entry found for block.
778     ++NumNewNewSpeculativelyAvailableBBs;
779     bool OutOfBudget = NumNewNewSpeculativelyAvailableBBs > MaxBBSpeculations;
780 
781     // If we have exhausted our budget, mark this block as unavailable.
782     // Also, if this block has no predecessors, the value isn't live-in here.
783     if (OutOfBudget || pred_empty(CurrBB)) {
784       MaxBBSpeculationCutoffReachedTimes += (int)OutOfBudget;
785       State = AvailabilityState::Unavailable;
786       UnavailableBB = CurrBB;
787       break; // Backpropagate unavailability info.
788     }
789 
790     // Tentatively consider this block as speculatively available.
791 #ifndef NDEBUG
792     NewSpeculativelyAvailableBBs.insert(CurrBB);
793 #endif
794     // And further recurse into block's predecessors, in depth-first order!
795     Worklist.append(pred_begin(CurrBB), pred_end(CurrBB));
796   }
797 
798 #if LLVM_ENABLE_STATS
799   IsValueFullyAvailableInBlockNumSpeculationsMax.updateMax(
800       NumNewNewSpeculativelyAvailableBBs);
801 #endif
802 
803   // If the block isn't marked as fixpoint yet
804   // (the Unavailable and Available states are fixpoints)
805   auto MarkAsFixpointAndEnqueueSuccessors =
806       [&](BasicBlock *BB, AvailabilityState FixpointState) {
807         auto It = FullyAvailableBlocks.find(BB);
808         if (It == FullyAvailableBlocks.end())
809           return; // Never queried this block, leave as-is.
810         switch (AvailabilityState &State = It->second) {
811         case AvailabilityState::Unavailable:
812         case AvailabilityState::Available:
813           return; // Don't backpropagate further, continue processing worklist.
814         case AvailabilityState::SpeculativelyAvailable: // Fix it!
815           State = FixpointState;
816 #ifndef NDEBUG
817           assert(NewSpeculativelyAvailableBBs.erase(BB) &&
818                  "Found a speculatively available successor leftover?");
819 #endif
820           // Queue successors for further processing.
821           Worklist.append(succ_begin(BB), succ_end(BB));
822           return;
823         }
824       };
825 
826   if (UnavailableBB) {
827     // Okay, we have encountered an unavailable block.
828     // Mark speculatively available blocks reachable from UnavailableBB as
829     // unavailable as well. Paths are terminated when they reach blocks not in
830     // FullyAvailableBlocks or they are not marked as speculatively available.
831     Worklist.clear();
832     Worklist.append(succ_begin(*UnavailableBB), succ_end(*UnavailableBB));
833     while (!Worklist.empty())
834       MarkAsFixpointAndEnqueueSuccessors(Worklist.pop_back_val(),
835                                          AvailabilityState::Unavailable);
836   }
837 
838 #ifndef NDEBUG
839   Worklist.clear();
840   for (BasicBlock *AvailableBB : AvailableBBs)
841     Worklist.append(succ_begin(AvailableBB), succ_end(AvailableBB));
842   while (!Worklist.empty())
843     MarkAsFixpointAndEnqueueSuccessors(Worklist.pop_back_val(),
844                                        AvailabilityState::Available);
845 
846   assert(NewSpeculativelyAvailableBBs.empty() &&
847          "Must have fixed all the new speculatively available blocks.");
848 #endif
849 
850   return !UnavailableBB;
851 }
852 
853 /// Given a set of loads specified by ValuesPerBlock,
854 /// construct SSA form, allowing us to eliminate Load.  This returns the value
855 /// that should be used at Load's definition site.
856 static Value *
857 ConstructSSAForLoadSet(LoadInst *Load,
858                        SmallVectorImpl<AvailableValueInBlock> &ValuesPerBlock,
859                        GVNPass &gvn) {
860   // Check for the fully redundant, dominating load case.  In this case, we can
861   // just use the dominating value directly.
862   if (ValuesPerBlock.size() == 1 &&
863       gvn.getDominatorTree().properlyDominates(ValuesPerBlock[0].BB,
864                                                Load->getParent())) {
865     assert(!ValuesPerBlock[0].AV.isUndefValue() &&
866            "Dead BB dominate this block");
867     return ValuesPerBlock[0].MaterializeAdjustedValue(Load, gvn);
868   }
869 
870   // Otherwise, we have to construct SSA form.
871   SmallVector<PHINode*, 8> NewPHIs;
872   SSAUpdater SSAUpdate(&NewPHIs);
873   SSAUpdate.Initialize(Load->getType(), Load->getName());
874 
875   for (const AvailableValueInBlock &AV : ValuesPerBlock) {
876     BasicBlock *BB = AV.BB;
877 
878     if (AV.AV.isUndefValue())
879       continue;
880 
881     if (SSAUpdate.HasValueForBlock(BB))
882       continue;
883 
884     // If the value is the load that we will be eliminating, and the block it's
885     // available in is the block that the load is in, then don't add it as
886     // SSAUpdater will resolve the value to the relevant phi which may let it
887     // avoid phi construction entirely if there's actually only one value.
888     if (BB == Load->getParent() &&
889         ((AV.AV.isSimpleValue() && AV.AV.getSimpleValue() == Load) ||
890          (AV.AV.isCoercedLoadValue() && AV.AV.getCoercedLoadValue() == Load)))
891       continue;
892 
893     SSAUpdate.AddAvailableValue(BB, AV.MaterializeAdjustedValue(Load, gvn));
894   }
895 
896   // Perform PHI construction.
897   return SSAUpdate.GetValueInMiddleOfBlock(Load->getParent());
898 }
899 
900 Value *AvailableValue::MaterializeAdjustedValue(LoadInst *Load,
901                                                 Instruction *InsertPt,
902                                                 GVNPass &gvn) const {
903   Value *Res;
904   Type *LoadTy = Load->getType();
905   const DataLayout &DL = Load->getModule()->getDataLayout();
906   if (isSimpleValue()) {
907     Res = getSimpleValue();
908     if (Res->getType() != LoadTy) {
909       Res = getStoreValueForLoad(Res, Offset, LoadTy, InsertPt, DL);
910 
911       LLVM_DEBUG(dbgs() << "GVN COERCED NONLOCAL VAL:\nOffset: " << Offset
912                         << "  " << *getSimpleValue() << '\n'
913                         << *Res << '\n'
914                         << "\n\n\n");
915     }
916   } else if (isCoercedLoadValue()) {
917     LoadInst *CoercedLoad = getCoercedLoadValue();
918     if (CoercedLoad->getType() == LoadTy && Offset == 0) {
919       Res = CoercedLoad;
920     } else {
921       Res = getLoadValueForLoad(CoercedLoad, Offset, LoadTy, InsertPt, DL);
922       // We would like to use gvn.markInstructionForDeletion here, but we can't
923       // because the load is already memoized into the leader map table that GVN
924       // tracks.  It is potentially possible to remove the load from the table,
925       // but then there all of the operations based on it would need to be
926       // rehashed.  Just leave the dead load around.
927       gvn.getMemDep().removeInstruction(CoercedLoad);
928       LLVM_DEBUG(dbgs() << "GVN COERCED NONLOCAL LOAD:\nOffset: " << Offset
929                         << "  " << *getCoercedLoadValue() << '\n'
930                         << *Res << '\n'
931                         << "\n\n\n");
932     }
933   } else if (isMemIntrinValue()) {
934     Res = getMemInstValueForLoad(getMemIntrinValue(), Offset, LoadTy,
935                                  InsertPt, DL);
936     LLVM_DEBUG(dbgs() << "GVN COERCED NONLOCAL MEM INTRIN:\nOffset: " << Offset
937                       << "  " << *getMemIntrinValue() << '\n'
938                       << *Res << '\n'
939                       << "\n\n\n");
940   } else {
941     llvm_unreachable("Should not materialize value from dead block");
942   }
943   assert(Res && "failed to materialize?");
944   return Res;
945 }
946 
947 static bool isLifetimeStart(const Instruction *Inst) {
948   if (const IntrinsicInst* II = dyn_cast<IntrinsicInst>(Inst))
949     return II->getIntrinsicID() == Intrinsic::lifetime_start;
950   return false;
951 }
952 
953 /// Assuming To can be reached from both From and Between, does Between lie on
954 /// every path from From to To?
955 static bool liesBetween(const Instruction *From, Instruction *Between,
956                         const Instruction *To, DominatorTree *DT) {
957   if (From->getParent() == Between->getParent())
958     return DT->dominates(From, Between);
959   SmallSet<BasicBlock *, 1> Exclusion;
960   Exclusion.insert(Between->getParent());
961   return !isPotentiallyReachable(From, To, &Exclusion, DT);
962 }
963 
964 /// Try to locate the three instruction involved in a missed
965 /// load-elimination case that is due to an intervening store.
966 static void reportMayClobberedLoad(LoadInst *Load, MemDepResult DepInfo,
967                                    DominatorTree *DT,
968                                    OptimizationRemarkEmitter *ORE) {
969   using namespace ore;
970 
971   User *OtherAccess = nullptr;
972 
973   OptimizationRemarkMissed R(DEBUG_TYPE, "LoadClobbered", Load);
974   R << "load of type " << NV("Type", Load->getType()) << " not eliminated"
975     << setExtraArgs();
976 
977   for (auto *U : Load->getPointerOperand()->users()) {
978     if (U != Load && (isa<LoadInst>(U) || isa<StoreInst>(U)) &&
979         cast<Instruction>(U)->getFunction() == Load->getFunction() &&
980         DT->dominates(cast<Instruction>(U), Load)) {
981       // Use the most immediately dominating value
982       if (OtherAccess) {
983         if (DT->dominates(cast<Instruction>(OtherAccess), cast<Instruction>(U)))
984           OtherAccess = U;
985         else
986           assert(DT->dominates(cast<Instruction>(U),
987                                cast<Instruction>(OtherAccess)));
988       } else
989         OtherAccess = U;
990     }
991   }
992 
993   if (!OtherAccess) {
994     // There is no dominating use, check if we can find a closest non-dominating
995     // use that lies between any other potentially available use and Load.
996     for (auto *U : Load->getPointerOperand()->users()) {
997       if (U != Load && (isa<LoadInst>(U) || isa<StoreInst>(U)) &&
998           cast<Instruction>(U)->getFunction() == Load->getFunction() &&
999           isPotentiallyReachable(cast<Instruction>(U), Load, nullptr, DT)) {
1000         if (OtherAccess) {
1001           if (liesBetween(cast<Instruction>(OtherAccess), cast<Instruction>(U),
1002                           Load, DT)) {
1003             OtherAccess = U;
1004           } else if (!liesBetween(cast<Instruction>(U),
1005                                   cast<Instruction>(OtherAccess), Load, DT)) {
1006             // These uses are both partially available at Load were it not for
1007             // the clobber, but neither lies strictly after the other.
1008             OtherAccess = nullptr;
1009             break;
1010           } // else: keep current OtherAccess since it lies between U and Load
1011         } else {
1012           OtherAccess = U;
1013         }
1014       }
1015     }
1016   }
1017 
1018   if (OtherAccess)
1019     R << " in favor of " << NV("OtherAccess", OtherAccess);
1020 
1021   R << " because it is clobbered by " << NV("ClobberedBy", DepInfo.getInst());
1022 
1023   ORE->emit(R);
1024 }
1025 
1026 bool GVNPass::AnalyzeLoadAvailability(LoadInst *Load, MemDepResult DepInfo,
1027                                       Value *Address, AvailableValue &Res) {
1028   assert((DepInfo.isDef() || DepInfo.isClobber()) &&
1029          "expected a local dependence");
1030   assert(Load->isUnordered() && "rules below are incorrect for ordered access");
1031 
1032   const DataLayout &DL = Load->getModule()->getDataLayout();
1033 
1034   Instruction *DepInst = DepInfo.getInst();
1035   if (DepInfo.isClobber()) {
1036     // If the dependence is to a store that writes to a superset of the bits
1037     // read by the load, we can extract the bits we need for the load from the
1038     // stored value.
1039     if (StoreInst *DepSI = dyn_cast<StoreInst>(DepInst)) {
1040       // Can't forward from non-atomic to atomic without violating memory model.
1041       if (Address && Load->isAtomic() <= DepSI->isAtomic()) {
1042         int Offset =
1043             analyzeLoadFromClobberingStore(Load->getType(), Address, DepSI, DL);
1044         if (Offset != -1) {
1045           Res = AvailableValue::get(DepSI->getValueOperand(), Offset);
1046           return true;
1047         }
1048       }
1049     }
1050 
1051     // Check to see if we have something like this:
1052     //    load i32* P
1053     //    load i8* (P+1)
1054     // if we have this, replace the later with an extraction from the former.
1055     if (LoadInst *DepLoad = dyn_cast<LoadInst>(DepInst)) {
1056       // If this is a clobber and L is the first instruction in its block, then
1057       // we have the first instruction in the entry block.
1058       // Can't forward from non-atomic to atomic without violating memory model.
1059       if (DepLoad != Load && Address &&
1060           Load->isAtomic() <= DepLoad->isAtomic()) {
1061         Type *LoadType = Load->getType();
1062         int Offset = -1;
1063 
1064         // If MD reported clobber, check it was nested.
1065         if (DepInfo.isClobber() &&
1066             canCoerceMustAliasedValueToLoad(DepLoad, LoadType, DL)) {
1067           const auto ClobberOff = MD->getClobberOffset(DepLoad);
1068           // GVN has no deal with a negative offset.
1069           Offset = (ClobberOff == None || ClobberOff.getValue() < 0)
1070                        ? -1
1071                        : ClobberOff.getValue();
1072         }
1073         if (Offset == -1)
1074           Offset =
1075               analyzeLoadFromClobberingLoad(LoadType, Address, DepLoad, DL);
1076         if (Offset != -1) {
1077           Res = AvailableValue::getLoad(DepLoad, Offset);
1078           return true;
1079         }
1080       }
1081     }
1082 
1083     // If the clobbering value is a memset/memcpy/memmove, see if we can
1084     // forward a value on from it.
1085     if (MemIntrinsic *DepMI = dyn_cast<MemIntrinsic>(DepInst)) {
1086       if (Address && !Load->isAtomic()) {
1087         int Offset = analyzeLoadFromClobberingMemInst(Load->getType(), Address,
1088                                                       DepMI, DL);
1089         if (Offset != -1) {
1090           Res = AvailableValue::getMI(DepMI, Offset);
1091           return true;
1092         }
1093       }
1094     }
1095     // Nothing known about this clobber, have to be conservative
1096     LLVM_DEBUG(
1097         // fast print dep, using operator<< on instruction is too slow.
1098         dbgs() << "GVN: load "; Load->printAsOperand(dbgs());
1099         dbgs() << " is clobbered by " << *DepInst << '\n';);
1100     if (ORE->allowExtraAnalysis(DEBUG_TYPE))
1101       reportMayClobberedLoad(Load, DepInfo, DT, ORE);
1102 
1103     return false;
1104   }
1105   assert(DepInfo.isDef() && "follows from above");
1106 
1107   // Loading the allocation -> undef.
1108   if (isa<AllocaInst>(DepInst) || isMallocLikeFn(DepInst, TLI) ||
1109       isAlignedAllocLikeFn(DepInst, TLI) ||
1110       // Loading immediately after lifetime begin -> undef.
1111       isLifetimeStart(DepInst)) {
1112     Res = AvailableValue::get(UndefValue::get(Load->getType()));
1113     return true;
1114   }
1115 
1116   // Loading from calloc (which zero initializes memory) -> zero
1117   if (isCallocLikeFn(DepInst, TLI)) {
1118     Res = AvailableValue::get(Constant::getNullValue(Load->getType()));
1119     return true;
1120   }
1121 
1122   if (StoreInst *S = dyn_cast<StoreInst>(DepInst)) {
1123     // Reject loads and stores that are to the same address but are of
1124     // different types if we have to. If the stored value is convertable to
1125     // the loaded value, we can reuse it.
1126     if (!canCoerceMustAliasedValueToLoad(S->getValueOperand(), Load->getType(),
1127                                          DL))
1128       return false;
1129 
1130     // Can't forward from non-atomic to atomic without violating memory model.
1131     if (S->isAtomic() < Load->isAtomic())
1132       return false;
1133 
1134     Res = AvailableValue::get(S->getValueOperand());
1135     return true;
1136   }
1137 
1138   if (LoadInst *LD = dyn_cast<LoadInst>(DepInst)) {
1139     // If the types mismatch and we can't handle it, reject reuse of the load.
1140     // If the stored value is larger or equal to the loaded value, we can reuse
1141     // it.
1142     if (!canCoerceMustAliasedValueToLoad(LD, Load->getType(), DL))
1143       return false;
1144 
1145     // Can't forward from non-atomic to atomic without violating memory model.
1146     if (LD->isAtomic() < Load->isAtomic())
1147       return false;
1148 
1149     Res = AvailableValue::getLoad(LD);
1150     return true;
1151   }
1152 
1153   // Unknown def - must be conservative
1154   LLVM_DEBUG(
1155       // fast print dep, using operator<< on instruction is too slow.
1156       dbgs() << "GVN: load "; Load->printAsOperand(dbgs());
1157       dbgs() << " has unknown def " << *DepInst << '\n';);
1158   return false;
1159 }
1160 
1161 void GVNPass::AnalyzeLoadAvailability(LoadInst *Load, LoadDepVect &Deps,
1162                                       AvailValInBlkVect &ValuesPerBlock,
1163                                       UnavailBlkVect &UnavailableBlocks) {
1164   // Filter out useless results (non-locals, etc).  Keep track of the blocks
1165   // where we have a value available in repl, also keep track of whether we see
1166   // dependencies that produce an unknown value for the load (such as a call
1167   // that could potentially clobber the load).
1168   unsigned NumDeps = Deps.size();
1169   for (unsigned i = 0, e = NumDeps; i != e; ++i) {
1170     BasicBlock *DepBB = Deps[i].getBB();
1171     MemDepResult DepInfo = Deps[i].getResult();
1172 
1173     if (DeadBlocks.count(DepBB)) {
1174       // Dead dependent mem-op disguise as a load evaluating the same value
1175       // as the load in question.
1176       ValuesPerBlock.push_back(AvailableValueInBlock::getUndef(DepBB));
1177       continue;
1178     }
1179 
1180     if (!DepInfo.isDef() && !DepInfo.isClobber()) {
1181       UnavailableBlocks.push_back(DepBB);
1182       continue;
1183     }
1184 
1185     // The address being loaded in this non-local block may not be the same as
1186     // the pointer operand of the load if PHI translation occurs.  Make sure
1187     // to consider the right address.
1188     Value *Address = Deps[i].getAddress();
1189 
1190     AvailableValue AV;
1191     if (AnalyzeLoadAvailability(Load, DepInfo, Address, AV)) {
1192       // subtlety: because we know this was a non-local dependency, we know
1193       // it's safe to materialize anywhere between the instruction within
1194       // DepInfo and the end of it's block.
1195       ValuesPerBlock.push_back(AvailableValueInBlock::get(DepBB,
1196                                                           std::move(AV)));
1197     } else {
1198       UnavailableBlocks.push_back(DepBB);
1199     }
1200   }
1201 
1202   assert(NumDeps == ValuesPerBlock.size() + UnavailableBlocks.size() &&
1203          "post condition violation");
1204 }
1205 
1206 void GVNPass::eliminatePartiallyRedundantLoad(
1207     LoadInst *Load, AvailValInBlkVect &ValuesPerBlock,
1208     MapVector<BasicBlock *, Value *> &AvailableLoads) {
1209   for (const auto &AvailableLoad : AvailableLoads) {
1210     BasicBlock *UnavailableBlock = AvailableLoad.first;
1211     Value *LoadPtr = AvailableLoad.second;
1212 
1213     auto *NewLoad =
1214         new LoadInst(Load->getType(), LoadPtr, Load->getName() + ".pre",
1215                      Load->isVolatile(), Load->getAlign(), Load->getOrdering(),
1216                      Load->getSyncScopeID(), UnavailableBlock->getTerminator());
1217     NewLoad->setDebugLoc(Load->getDebugLoc());
1218     if (MSSAU) {
1219       auto *MSSA = MSSAU->getMemorySSA();
1220       // Get the defining access of the original load or use the load if it is a
1221       // MemoryDef (e.g. because it is volatile). The inserted loads are
1222       // guaranteed to load from the same definition.
1223       auto *LoadAcc = MSSA->getMemoryAccess(Load);
1224       auto *DefiningAcc =
1225           isa<MemoryDef>(LoadAcc) ? LoadAcc : LoadAcc->getDefiningAccess();
1226       auto *NewAccess = MSSAU->createMemoryAccessInBB(
1227           NewLoad, DefiningAcc, NewLoad->getParent(),
1228           MemorySSA::BeforeTerminator);
1229       if (auto *NewDef = dyn_cast<MemoryDef>(NewAccess))
1230         MSSAU->insertDef(NewDef, /*RenameUses=*/true);
1231       else
1232         MSSAU->insertUse(cast<MemoryUse>(NewAccess), /*RenameUses=*/true);
1233     }
1234 
1235     // Transfer the old load's AA tags to the new load.
1236     AAMDNodes Tags = Load->getAAMetadata();
1237     if (Tags)
1238       NewLoad->setAAMetadata(Tags);
1239 
1240     if (auto *MD = Load->getMetadata(LLVMContext::MD_invariant_load))
1241       NewLoad->setMetadata(LLVMContext::MD_invariant_load, MD);
1242     if (auto *InvGroupMD = Load->getMetadata(LLVMContext::MD_invariant_group))
1243       NewLoad->setMetadata(LLVMContext::MD_invariant_group, InvGroupMD);
1244     if (auto *RangeMD = Load->getMetadata(LLVMContext::MD_range))
1245       NewLoad->setMetadata(LLVMContext::MD_range, RangeMD);
1246     if (auto *AccessMD = Load->getMetadata(LLVMContext::MD_access_group))
1247       if (LI &&
1248           LI->getLoopFor(Load->getParent()) == LI->getLoopFor(UnavailableBlock))
1249         NewLoad->setMetadata(LLVMContext::MD_access_group, AccessMD);
1250 
1251     // We do not propagate the old load's debug location, because the new
1252     // load now lives in a different BB, and we want to avoid a jumpy line
1253     // table.
1254     // FIXME: How do we retain source locations without causing poor debugging
1255     // behavior?
1256 
1257     // Add the newly created load.
1258     ValuesPerBlock.push_back(
1259         AvailableValueInBlock::get(UnavailableBlock, NewLoad));
1260     MD->invalidateCachedPointerInfo(LoadPtr);
1261     LLVM_DEBUG(dbgs() << "GVN INSERTED " << *NewLoad << '\n');
1262   }
1263 
1264   // Perform PHI construction.
1265   Value *V = ConstructSSAForLoadSet(Load, ValuesPerBlock, *this);
1266   Load->replaceAllUsesWith(V);
1267   if (isa<PHINode>(V))
1268     V->takeName(Load);
1269   if (Instruction *I = dyn_cast<Instruction>(V))
1270     I->setDebugLoc(Load->getDebugLoc());
1271   if (V->getType()->isPtrOrPtrVectorTy())
1272     MD->invalidateCachedPointerInfo(V);
1273   markInstructionForDeletion(Load);
1274   ORE->emit([&]() {
1275     return OptimizationRemark(DEBUG_TYPE, "LoadPRE", Load)
1276            << "load eliminated by PRE";
1277   });
1278 }
1279 
1280 bool GVNPass::PerformLoadPRE(LoadInst *Load, AvailValInBlkVect &ValuesPerBlock,
1281                              UnavailBlkVect &UnavailableBlocks) {
1282   // Okay, we have *some* definitions of the value.  This means that the value
1283   // is available in some of our (transitive) predecessors.  Lets think about
1284   // doing PRE of this load.  This will involve inserting a new load into the
1285   // predecessor when it's not available.  We could do this in general, but
1286   // prefer to not increase code size.  As such, we only do this when we know
1287   // that we only have to insert *one* load (which means we're basically moving
1288   // the load, not inserting a new one).
1289 
1290   SmallPtrSet<BasicBlock *, 4> Blockers(UnavailableBlocks.begin(),
1291                                         UnavailableBlocks.end());
1292 
1293   // Let's find the first basic block with more than one predecessor.  Walk
1294   // backwards through predecessors if needed.
1295   BasicBlock *LoadBB = Load->getParent();
1296   BasicBlock *TmpBB = LoadBB;
1297 
1298   // Check that there is no implicit control flow instructions above our load in
1299   // its block. If there is an instruction that doesn't always pass the
1300   // execution to the following instruction, then moving through it may become
1301   // invalid. For example:
1302   //
1303   // int arr[LEN];
1304   // int index = ???;
1305   // ...
1306   // guard(0 <= index && index < LEN);
1307   // use(arr[index]);
1308   //
1309   // It is illegal to move the array access to any point above the guard,
1310   // because if the index is out of bounds we should deoptimize rather than
1311   // access the array.
1312   // Check that there is no guard in this block above our instruction.
1313   bool MustEnsureSafetyOfSpeculativeExecution =
1314       ICF->isDominatedByICFIFromSameBlock(Load);
1315 
1316   while (TmpBB->getSinglePredecessor()) {
1317     TmpBB = TmpBB->getSinglePredecessor();
1318     if (TmpBB == LoadBB) // Infinite (unreachable) loop.
1319       return false;
1320     if (Blockers.count(TmpBB))
1321       return false;
1322 
1323     // If any of these blocks has more than one successor (i.e. if the edge we
1324     // just traversed was critical), then there are other paths through this
1325     // block along which the load may not be anticipated.  Hoisting the load
1326     // above this block would be adding the load to execution paths along
1327     // which it was not previously executed.
1328     if (TmpBB->getTerminator()->getNumSuccessors() != 1)
1329       return false;
1330 
1331     // Check that there is no implicit control flow in a block above.
1332     MustEnsureSafetyOfSpeculativeExecution =
1333         MustEnsureSafetyOfSpeculativeExecution || ICF->hasICF(TmpBB);
1334   }
1335 
1336   assert(TmpBB);
1337   LoadBB = TmpBB;
1338 
1339   // Check to see how many predecessors have the loaded value fully
1340   // available.
1341   MapVector<BasicBlock *, Value *> PredLoads;
1342   DenseMap<BasicBlock *, AvailabilityState> FullyAvailableBlocks;
1343   for (const AvailableValueInBlock &AV : ValuesPerBlock)
1344     FullyAvailableBlocks[AV.BB] = AvailabilityState::Available;
1345   for (BasicBlock *UnavailableBB : UnavailableBlocks)
1346     FullyAvailableBlocks[UnavailableBB] = AvailabilityState::Unavailable;
1347 
1348   SmallVector<BasicBlock *, 4> CriticalEdgePred;
1349   for (BasicBlock *Pred : predecessors(LoadBB)) {
1350     // If any predecessor block is an EH pad that does not allow non-PHI
1351     // instructions before the terminator, we can't PRE the load.
1352     if (Pred->getTerminator()->isEHPad()) {
1353       LLVM_DEBUG(
1354           dbgs() << "COULD NOT PRE LOAD BECAUSE OF AN EH PAD PREDECESSOR '"
1355                  << Pred->getName() << "': " << *Load << '\n');
1356       return false;
1357     }
1358 
1359     if (IsValueFullyAvailableInBlock(Pred, FullyAvailableBlocks)) {
1360       continue;
1361     }
1362 
1363     if (Pred->getTerminator()->getNumSuccessors() != 1) {
1364       if (isa<IndirectBrInst>(Pred->getTerminator())) {
1365         LLVM_DEBUG(
1366             dbgs() << "COULD NOT PRE LOAD BECAUSE OF INDBR CRITICAL EDGE '"
1367                    << Pred->getName() << "': " << *Load << '\n');
1368         return false;
1369       }
1370 
1371       // FIXME: Can we support the fallthrough edge?
1372       if (isa<CallBrInst>(Pred->getTerminator())) {
1373         LLVM_DEBUG(
1374             dbgs() << "COULD NOT PRE LOAD BECAUSE OF CALLBR CRITICAL EDGE '"
1375                    << Pred->getName() << "': " << *Load << '\n');
1376         return false;
1377       }
1378 
1379       if (LoadBB->isEHPad()) {
1380         LLVM_DEBUG(
1381             dbgs() << "COULD NOT PRE LOAD BECAUSE OF AN EH PAD CRITICAL EDGE '"
1382                    << Pred->getName() << "': " << *Load << '\n');
1383         return false;
1384       }
1385 
1386       // Do not split backedge as it will break the canonical loop form.
1387       if (!isLoadPRESplitBackedgeEnabled())
1388         if (DT->dominates(LoadBB, Pred)) {
1389           LLVM_DEBUG(
1390               dbgs()
1391               << "COULD NOT PRE LOAD BECAUSE OF A BACKEDGE CRITICAL EDGE '"
1392               << Pred->getName() << "': " << *Load << '\n');
1393           return false;
1394         }
1395 
1396       CriticalEdgePred.push_back(Pred);
1397     } else {
1398       // Only add the predecessors that will not be split for now.
1399       PredLoads[Pred] = nullptr;
1400     }
1401   }
1402 
1403   // Decide whether PRE is profitable for this load.
1404   unsigned NumUnavailablePreds = PredLoads.size() + CriticalEdgePred.size();
1405   assert(NumUnavailablePreds != 0 &&
1406          "Fully available value should already be eliminated!");
1407 
1408   // If this load is unavailable in multiple predecessors, reject it.
1409   // FIXME: If we could restructure the CFG, we could make a common pred with
1410   // all the preds that don't have an available Load and insert a new load into
1411   // that one block.
1412   if (NumUnavailablePreds != 1)
1413       return false;
1414 
1415   // Now we know where we will insert load. We must ensure that it is safe
1416   // to speculatively execute the load at that points.
1417   if (MustEnsureSafetyOfSpeculativeExecution) {
1418     if (CriticalEdgePred.size())
1419       if (!isSafeToSpeculativelyExecute(Load, LoadBB->getFirstNonPHI(), DT))
1420         return false;
1421     for (auto &PL : PredLoads)
1422       if (!isSafeToSpeculativelyExecute(Load, PL.first->getTerminator(), DT))
1423         return false;
1424   }
1425 
1426   // Split critical edges, and update the unavailable predecessors accordingly.
1427   for (BasicBlock *OrigPred : CriticalEdgePred) {
1428     BasicBlock *NewPred = splitCriticalEdges(OrigPred, LoadBB);
1429     assert(!PredLoads.count(OrigPred) && "Split edges shouldn't be in map!");
1430     PredLoads[NewPred] = nullptr;
1431     LLVM_DEBUG(dbgs() << "Split critical edge " << OrigPred->getName() << "->"
1432                       << LoadBB->getName() << '\n');
1433   }
1434 
1435   // Check if the load can safely be moved to all the unavailable predecessors.
1436   bool CanDoPRE = true;
1437   const DataLayout &DL = Load->getModule()->getDataLayout();
1438   SmallVector<Instruction*, 8> NewInsts;
1439   for (auto &PredLoad : PredLoads) {
1440     BasicBlock *UnavailablePred = PredLoad.first;
1441 
1442     // Do PHI translation to get its value in the predecessor if necessary.  The
1443     // returned pointer (if non-null) is guaranteed to dominate UnavailablePred.
1444     // We do the translation for each edge we skipped by going from Load's block
1445     // to LoadBB, otherwise we might miss pieces needing translation.
1446 
1447     // If all preds have a single successor, then we know it is safe to insert
1448     // the load on the pred (?!?), so we can insert code to materialize the
1449     // pointer if it is not available.
1450     Value *LoadPtr = Load->getPointerOperand();
1451     BasicBlock *Cur = Load->getParent();
1452     while (Cur != LoadBB) {
1453       PHITransAddr Address(LoadPtr, DL, AC);
1454       LoadPtr = Address.PHITranslateWithInsertion(
1455           Cur, Cur->getSinglePredecessor(), *DT, NewInsts);
1456       if (!LoadPtr) {
1457         CanDoPRE = false;
1458         break;
1459       }
1460       Cur = Cur->getSinglePredecessor();
1461     }
1462 
1463     if (LoadPtr) {
1464       PHITransAddr Address(LoadPtr, DL, AC);
1465       LoadPtr = Address.PHITranslateWithInsertion(LoadBB, UnavailablePred, *DT,
1466                                                   NewInsts);
1467     }
1468     // If we couldn't find or insert a computation of this phi translated value,
1469     // we fail PRE.
1470     if (!LoadPtr) {
1471       LLVM_DEBUG(dbgs() << "COULDN'T INSERT PHI TRANSLATED VALUE OF: "
1472                         << *Load->getPointerOperand() << "\n");
1473       CanDoPRE = false;
1474       break;
1475     }
1476 
1477     PredLoad.second = LoadPtr;
1478   }
1479 
1480   if (!CanDoPRE) {
1481     while (!NewInsts.empty()) {
1482       // Erase instructions generated by the failed PHI translation before
1483       // trying to number them. PHI translation might insert instructions
1484       // in basic blocks other than the current one, and we delete them
1485       // directly, as markInstructionForDeletion only allows removing from the
1486       // current basic block.
1487       NewInsts.pop_back_val()->eraseFromParent();
1488     }
1489     // HINT: Don't revert the edge-splitting as following transformation may
1490     // also need to split these critical edges.
1491     return !CriticalEdgePred.empty();
1492   }
1493 
1494   // Okay, we can eliminate this load by inserting a reload in the predecessor
1495   // and using PHI construction to get the value in the other predecessors, do
1496   // it.
1497   LLVM_DEBUG(dbgs() << "GVN REMOVING PRE LOAD: " << *Load << '\n');
1498   LLVM_DEBUG(if (!NewInsts.empty()) dbgs() << "INSERTED " << NewInsts.size()
1499                                            << " INSTS: " << *NewInsts.back()
1500                                            << '\n');
1501 
1502   // Assign value numbers to the new instructions.
1503   for (Instruction *I : NewInsts) {
1504     // Instructions that have been inserted in predecessor(s) to materialize
1505     // the load address do not retain their original debug locations. Doing
1506     // so could lead to confusing (but correct) source attributions.
1507     I->updateLocationAfterHoist();
1508 
1509     // FIXME: We really _ought_ to insert these value numbers into their
1510     // parent's availability map.  However, in doing so, we risk getting into
1511     // ordering issues.  If a block hasn't been processed yet, we would be
1512     // marking a value as AVAIL-IN, which isn't what we intend.
1513     VN.lookupOrAdd(I);
1514   }
1515 
1516   eliminatePartiallyRedundantLoad(Load, ValuesPerBlock, PredLoads);
1517   ++NumPRELoad;
1518   return true;
1519 }
1520 
1521 bool GVNPass::performLoopLoadPRE(LoadInst *Load,
1522                                  AvailValInBlkVect &ValuesPerBlock,
1523                                  UnavailBlkVect &UnavailableBlocks) {
1524   if (!LI)
1525     return false;
1526 
1527   const Loop *L = LI->getLoopFor(Load->getParent());
1528   // TODO: Generalize to other loop blocks that dominate the latch.
1529   if (!L || L->getHeader() != Load->getParent())
1530     return false;
1531 
1532   BasicBlock *Preheader = L->getLoopPreheader();
1533   BasicBlock *Latch = L->getLoopLatch();
1534   if (!Preheader || !Latch)
1535     return false;
1536 
1537   Value *LoadPtr = Load->getPointerOperand();
1538   // Must be available in preheader.
1539   if (!L->isLoopInvariant(LoadPtr))
1540     return false;
1541 
1542   // We plan to hoist the load to preheader without introducing a new fault.
1543   // In order to do it, we need to prove that we cannot side-exit the loop
1544   // once loop header is first entered before execution of the load.
1545   if (ICF->isDominatedByICFIFromSameBlock(Load))
1546     return false;
1547 
1548   BasicBlock *LoopBlock = nullptr;
1549   for (auto *Blocker : UnavailableBlocks) {
1550     // Blockers from outside the loop are handled in preheader.
1551     if (!L->contains(Blocker))
1552       continue;
1553 
1554     // Only allow one loop block. Loop header is not less frequently executed
1555     // than each loop block, and likely it is much more frequently executed. But
1556     // in case of multiple loop blocks, we need extra information (such as block
1557     // frequency info) to understand whether it is profitable to PRE into
1558     // multiple loop blocks.
1559     if (LoopBlock)
1560       return false;
1561 
1562     // Do not sink into inner loops. This may be non-profitable.
1563     if (L != LI->getLoopFor(Blocker))
1564       return false;
1565 
1566     // Blocks that dominate the latch execute on every single iteration, maybe
1567     // except the last one. So PREing into these blocks doesn't make much sense
1568     // in most cases. But the blocks that do not necessarily execute on each
1569     // iteration are sometimes much colder than the header, and this is when
1570     // PRE is potentially profitable.
1571     if (DT->dominates(Blocker, Latch))
1572       return false;
1573 
1574     // Make sure that the terminator itself doesn't clobber.
1575     if (Blocker->getTerminator()->mayWriteToMemory())
1576       return false;
1577 
1578     LoopBlock = Blocker;
1579   }
1580 
1581   if (!LoopBlock)
1582     return false;
1583 
1584   // Make sure the memory at this pointer cannot be freed, therefore we can
1585   // safely reload from it after clobber.
1586   if (LoadPtr->canBeFreed())
1587     return false;
1588 
1589   // TODO: Support critical edge splitting if blocker has more than 1 successor.
1590   MapVector<BasicBlock *, Value *> AvailableLoads;
1591   AvailableLoads[LoopBlock] = LoadPtr;
1592   AvailableLoads[Preheader] = LoadPtr;
1593 
1594   LLVM_DEBUG(dbgs() << "GVN REMOVING PRE LOOP LOAD: " << *Load << '\n');
1595   eliminatePartiallyRedundantLoad(Load, ValuesPerBlock, AvailableLoads);
1596   ++NumPRELoopLoad;
1597   return true;
1598 }
1599 
1600 static void reportLoadElim(LoadInst *Load, Value *AvailableValue,
1601                            OptimizationRemarkEmitter *ORE) {
1602   using namespace ore;
1603 
1604   ORE->emit([&]() {
1605     return OptimizationRemark(DEBUG_TYPE, "LoadElim", Load)
1606            << "load of type " << NV("Type", Load->getType()) << " eliminated"
1607            << setExtraArgs() << " in favor of "
1608            << NV("InfavorOfValue", AvailableValue);
1609   });
1610 }
1611 
1612 /// Attempt to eliminate a load whose dependencies are
1613 /// non-local by performing PHI construction.
1614 bool GVNPass::processNonLocalLoad(LoadInst *Load) {
1615   // non-local speculations are not allowed under asan.
1616   if (Load->getParent()->getParent()->hasFnAttribute(
1617           Attribute::SanitizeAddress) ||
1618       Load->getParent()->getParent()->hasFnAttribute(
1619           Attribute::SanitizeHWAddress))
1620     return false;
1621 
1622   // Step 1: Find the non-local dependencies of the load.
1623   LoadDepVect Deps;
1624   MD->getNonLocalPointerDependency(Load, Deps);
1625 
1626   // If we had to process more than one hundred blocks to find the
1627   // dependencies, this load isn't worth worrying about.  Optimizing
1628   // it will be too expensive.
1629   unsigned NumDeps = Deps.size();
1630   if (NumDeps > MaxNumDeps)
1631     return false;
1632 
1633   // If we had a phi translation failure, we'll have a single entry which is a
1634   // clobber in the current block.  Reject this early.
1635   if (NumDeps == 1 &&
1636       !Deps[0].getResult().isDef() && !Deps[0].getResult().isClobber()) {
1637     LLVM_DEBUG(dbgs() << "GVN: non-local load "; Load->printAsOperand(dbgs());
1638                dbgs() << " has unknown dependencies\n";);
1639     return false;
1640   }
1641 
1642   bool Changed = false;
1643   // If this load follows a GEP, see if we can PRE the indices before analyzing.
1644   if (GetElementPtrInst *GEP =
1645           dyn_cast<GetElementPtrInst>(Load->getOperand(0))) {
1646     for (GetElementPtrInst::op_iterator OI = GEP->idx_begin(),
1647                                         OE = GEP->idx_end();
1648          OI != OE; ++OI)
1649       if (Instruction *I = dyn_cast<Instruction>(OI->get()))
1650         Changed |= performScalarPRE(I);
1651   }
1652 
1653   // Step 2: Analyze the availability of the load
1654   AvailValInBlkVect ValuesPerBlock;
1655   UnavailBlkVect UnavailableBlocks;
1656   AnalyzeLoadAvailability(Load, Deps, ValuesPerBlock, UnavailableBlocks);
1657 
1658   // If we have no predecessors that produce a known value for this load, exit
1659   // early.
1660   if (ValuesPerBlock.empty())
1661     return Changed;
1662 
1663   // Step 3: Eliminate fully redundancy.
1664   //
1665   // If all of the instructions we depend on produce a known value for this
1666   // load, then it is fully redundant and we can use PHI insertion to compute
1667   // its value.  Insert PHIs and remove the fully redundant value now.
1668   if (UnavailableBlocks.empty()) {
1669     LLVM_DEBUG(dbgs() << "GVN REMOVING NONLOCAL LOAD: " << *Load << '\n');
1670 
1671     // Perform PHI construction.
1672     Value *V = ConstructSSAForLoadSet(Load, ValuesPerBlock, *this);
1673     Load->replaceAllUsesWith(V);
1674 
1675     if (isa<PHINode>(V))
1676       V->takeName(Load);
1677     if (Instruction *I = dyn_cast<Instruction>(V))
1678       // If instruction I has debug info, then we should not update it.
1679       // Also, if I has a null DebugLoc, then it is still potentially incorrect
1680       // to propagate Load's DebugLoc because Load may not post-dominate I.
1681       if (Load->getDebugLoc() && Load->getParent() == I->getParent())
1682         I->setDebugLoc(Load->getDebugLoc());
1683     if (V->getType()->isPtrOrPtrVectorTy())
1684       MD->invalidateCachedPointerInfo(V);
1685     markInstructionForDeletion(Load);
1686     ++NumGVNLoad;
1687     reportLoadElim(Load, V, ORE);
1688     return true;
1689   }
1690 
1691   // Step 4: Eliminate partial redundancy.
1692   if (!isPREEnabled() || !isLoadPREEnabled())
1693     return Changed;
1694   if (!isLoadInLoopPREEnabled() && LI && LI->getLoopFor(Load->getParent()))
1695     return Changed;
1696 
1697   if (performLoopLoadPRE(Load, ValuesPerBlock, UnavailableBlocks) ||
1698       PerformLoadPRE(Load, ValuesPerBlock, UnavailableBlocks))
1699     return true;
1700 
1701   return Changed;
1702 }
1703 
1704 static bool impliesEquivalanceIfTrue(CmpInst* Cmp) {
1705   if (Cmp->getPredicate() == CmpInst::Predicate::ICMP_EQ)
1706     return true;
1707 
1708   // Floating point comparisons can be equal, but not equivalent.  Cases:
1709   // NaNs for unordered operators
1710   // +0.0 vs 0.0 for all operators
1711   if (Cmp->getPredicate() == CmpInst::Predicate::FCMP_OEQ ||
1712       (Cmp->getPredicate() == CmpInst::Predicate::FCMP_UEQ &&
1713        Cmp->getFastMathFlags().noNaNs())) {
1714       Value *LHS = Cmp->getOperand(0);
1715       Value *RHS = Cmp->getOperand(1);
1716       // If we can prove either side non-zero, then equality must imply
1717       // equivalence.
1718       // FIXME: We should do this optimization if 'no signed zeros' is
1719       // applicable via an instruction-level fast-math-flag or some other
1720       // indicator that relaxed FP semantics are being used.
1721       if (isa<ConstantFP>(LHS) && !cast<ConstantFP>(LHS)->isZero())
1722         return true;
1723       if (isa<ConstantFP>(RHS) && !cast<ConstantFP>(RHS)->isZero())
1724         return true;;
1725       // TODO: Handle vector floating point constants
1726   }
1727   return false;
1728 }
1729 
1730 static bool impliesEquivalanceIfFalse(CmpInst* Cmp) {
1731   if (Cmp->getPredicate() == CmpInst::Predicate::ICMP_NE)
1732     return true;
1733 
1734   // Floating point comparisons can be equal, but not equivelent.  Cases:
1735   // NaNs for unordered operators
1736   // +0.0 vs 0.0 for all operators
1737   if ((Cmp->getPredicate() == CmpInst::Predicate::FCMP_ONE &&
1738        Cmp->getFastMathFlags().noNaNs()) ||
1739       Cmp->getPredicate() == CmpInst::Predicate::FCMP_UNE) {
1740       Value *LHS = Cmp->getOperand(0);
1741       Value *RHS = Cmp->getOperand(1);
1742       // If we can prove either side non-zero, then equality must imply
1743       // equivalence.
1744       // FIXME: We should do this optimization if 'no signed zeros' is
1745       // applicable via an instruction-level fast-math-flag or some other
1746       // indicator that relaxed FP semantics are being used.
1747       if (isa<ConstantFP>(LHS) && !cast<ConstantFP>(LHS)->isZero())
1748         return true;
1749       if (isa<ConstantFP>(RHS) && !cast<ConstantFP>(RHS)->isZero())
1750         return true;;
1751       // TODO: Handle vector floating point constants
1752   }
1753   return false;
1754 }
1755 
1756 
1757 static bool hasUsersIn(Value *V, BasicBlock *BB) {
1758   for (User *U : V->users())
1759     if (isa<Instruction>(U) &&
1760         cast<Instruction>(U)->getParent() == BB)
1761       return true;
1762   return false;
1763 }
1764 
1765 bool GVNPass::processAssumeIntrinsic(AssumeInst *IntrinsicI) {
1766   Value *V = IntrinsicI->getArgOperand(0);
1767 
1768   if (ConstantInt *Cond = dyn_cast<ConstantInt>(V)) {
1769     if (Cond->isZero()) {
1770       Type *Int8Ty = Type::getInt8Ty(V->getContext());
1771       // Insert a new store to null instruction before the load to indicate that
1772       // this code is not reachable.  FIXME: We could insert unreachable
1773       // instruction directly because we can modify the CFG.
1774       auto *NewS = new StoreInst(UndefValue::get(Int8Ty),
1775                                  Constant::getNullValue(Int8Ty->getPointerTo()),
1776                                  IntrinsicI);
1777       if (MSSAU) {
1778         const MemoryUseOrDef *FirstNonDom = nullptr;
1779         const auto *AL =
1780             MSSAU->getMemorySSA()->getBlockAccesses(IntrinsicI->getParent());
1781 
1782         // If there are accesses in the current basic block, find the first one
1783         // that does not come before NewS. The new memory access is inserted
1784         // after the found access or before the terminator if no such access is
1785         // found.
1786         if (AL) {
1787           for (auto &Acc : *AL) {
1788             if (auto *Current = dyn_cast<MemoryUseOrDef>(&Acc))
1789               if (!Current->getMemoryInst()->comesBefore(NewS)) {
1790                 FirstNonDom = Current;
1791                 break;
1792               }
1793           }
1794         }
1795 
1796         // This added store is to null, so it will never executed and we can
1797         // just use the LiveOnEntry def as defining access.
1798         auto *NewDef =
1799             FirstNonDom ? MSSAU->createMemoryAccessBefore(
1800                               NewS, MSSAU->getMemorySSA()->getLiveOnEntryDef(),
1801                               const_cast<MemoryUseOrDef *>(FirstNonDom))
1802                         : MSSAU->createMemoryAccessInBB(
1803                               NewS, MSSAU->getMemorySSA()->getLiveOnEntryDef(),
1804                               NewS->getParent(), MemorySSA::BeforeTerminator);
1805 
1806         MSSAU->insertDef(cast<MemoryDef>(NewDef), /*RenameUses=*/false);
1807       }
1808     }
1809     if (isAssumeWithEmptyBundle(*IntrinsicI))
1810       markInstructionForDeletion(IntrinsicI);
1811     return false;
1812   } else if (isa<Constant>(V)) {
1813     // If it's not false, and constant, it must evaluate to true. This means our
1814     // assume is assume(true), and thus, pointless, and we don't want to do
1815     // anything more here.
1816     return false;
1817   }
1818 
1819   Constant *True = ConstantInt::getTrue(V->getContext());
1820   bool Changed = false;
1821 
1822   for (BasicBlock *Successor : successors(IntrinsicI->getParent())) {
1823     BasicBlockEdge Edge(IntrinsicI->getParent(), Successor);
1824 
1825     // This property is only true in dominated successors, propagateEquality
1826     // will check dominance for us.
1827     Changed |= propagateEquality(V, True, Edge, false);
1828   }
1829 
1830   // We can replace assume value with true, which covers cases like this:
1831   // call void @llvm.assume(i1 %cmp)
1832   // br i1 %cmp, label %bb1, label %bb2 ; will change %cmp to true
1833   ReplaceOperandsWithMap[V] = True;
1834 
1835   // Similarly, after assume(!NotV) we know that NotV == false.
1836   Value *NotV;
1837   if (match(V, m_Not(m_Value(NotV))))
1838     ReplaceOperandsWithMap[NotV] = ConstantInt::getFalse(V->getContext());
1839 
1840   // If we find an equality fact, canonicalize all dominated uses in this block
1841   // to one of the two values.  We heuristically choice the "oldest" of the
1842   // two where age is determined by value number. (Note that propagateEquality
1843   // above handles the cross block case.)
1844   //
1845   // Key case to cover are:
1846   // 1)
1847   // %cmp = fcmp oeq float 3.000000e+00, %0 ; const on lhs could happen
1848   // call void @llvm.assume(i1 %cmp)
1849   // ret float %0 ; will change it to ret float 3.000000e+00
1850   // 2)
1851   // %load = load float, float* %addr
1852   // %cmp = fcmp oeq float %load, %0
1853   // call void @llvm.assume(i1 %cmp)
1854   // ret float %load ; will change it to ret float %0
1855   if (auto *CmpI = dyn_cast<CmpInst>(V)) {
1856     if (impliesEquivalanceIfTrue(CmpI)) {
1857       Value *CmpLHS = CmpI->getOperand(0);
1858       Value *CmpRHS = CmpI->getOperand(1);
1859       // Heuristically pick the better replacement -- the choice of heuristic
1860       // isn't terribly important here, but the fact we canonicalize on some
1861       // replacement is for exposing other simplifications.
1862       // TODO: pull this out as a helper function and reuse w/existing
1863       // (slightly different) logic.
1864       if (isa<Constant>(CmpLHS) && !isa<Constant>(CmpRHS))
1865         std::swap(CmpLHS, CmpRHS);
1866       if (!isa<Instruction>(CmpLHS) && isa<Instruction>(CmpRHS))
1867         std::swap(CmpLHS, CmpRHS);
1868       if ((isa<Argument>(CmpLHS) && isa<Argument>(CmpRHS)) ||
1869           (isa<Instruction>(CmpLHS) && isa<Instruction>(CmpRHS))) {
1870         // Move the 'oldest' value to the right-hand side, using the value
1871         // number as a proxy for age.
1872         uint32_t LVN = VN.lookupOrAdd(CmpLHS);
1873         uint32_t RVN = VN.lookupOrAdd(CmpRHS);
1874         if (LVN < RVN)
1875           std::swap(CmpLHS, CmpRHS);
1876       }
1877 
1878       // Handle degenerate case where we either haven't pruned a dead path or a
1879       // removed a trivial assume yet.
1880       if (isa<Constant>(CmpLHS) && isa<Constant>(CmpRHS))
1881         return Changed;
1882 
1883       LLVM_DEBUG(dbgs() << "Replacing dominated uses of "
1884                  << *CmpLHS << " with "
1885                  << *CmpRHS << " in block "
1886                  << IntrinsicI->getParent()->getName() << "\n");
1887 
1888 
1889       // Setup the replacement map - this handles uses within the same block
1890       if (hasUsersIn(CmpLHS, IntrinsicI->getParent()))
1891         ReplaceOperandsWithMap[CmpLHS] = CmpRHS;
1892 
1893       // NOTE: The non-block local cases are handled by the call to
1894       // propagateEquality above; this block is just about handling the block
1895       // local cases.  TODO: There's a bunch of logic in propagateEqualiy which
1896       // isn't duplicated for the block local case, can we share it somehow?
1897     }
1898   }
1899   return Changed;
1900 }
1901 
1902 static void patchAndReplaceAllUsesWith(Instruction *I, Value *Repl) {
1903   patchReplacementInstruction(I, Repl);
1904   I->replaceAllUsesWith(Repl);
1905 }
1906 
1907 /// Attempt to eliminate a load, first by eliminating it
1908 /// locally, and then attempting non-local elimination if that fails.
1909 bool GVNPass::processLoad(LoadInst *L) {
1910   if (!MD)
1911     return false;
1912 
1913   // This code hasn't been audited for ordered or volatile memory access
1914   if (!L->isUnordered())
1915     return false;
1916 
1917   if (L->use_empty()) {
1918     markInstructionForDeletion(L);
1919     return true;
1920   }
1921 
1922   // ... to a pointer that has been loaded from before...
1923   MemDepResult Dep = MD->getDependency(L);
1924 
1925   // If it is defined in another block, try harder.
1926   if (Dep.isNonLocal())
1927     return processNonLocalLoad(L);
1928 
1929   // Only handle the local case below
1930   if (!Dep.isDef() && !Dep.isClobber()) {
1931     // This might be a NonFuncLocal or an Unknown
1932     LLVM_DEBUG(
1933         // fast print dep, using operator<< on instruction is too slow.
1934         dbgs() << "GVN: load "; L->printAsOperand(dbgs());
1935         dbgs() << " has unknown dependence\n";);
1936     return false;
1937   }
1938 
1939   AvailableValue AV;
1940   if (AnalyzeLoadAvailability(L, Dep, L->getPointerOperand(), AV)) {
1941     Value *AvailableValue = AV.MaterializeAdjustedValue(L, L, *this);
1942 
1943     // Replace the load!
1944     patchAndReplaceAllUsesWith(L, AvailableValue);
1945     markInstructionForDeletion(L);
1946     if (MSSAU)
1947       MSSAU->removeMemoryAccess(L);
1948     ++NumGVNLoad;
1949     reportLoadElim(L, AvailableValue, ORE);
1950     // Tell MDA to reexamine the reused pointer since we might have more
1951     // information after forwarding it.
1952     if (MD && AvailableValue->getType()->isPtrOrPtrVectorTy())
1953       MD->invalidateCachedPointerInfo(AvailableValue);
1954     return true;
1955   }
1956 
1957   return false;
1958 }
1959 
1960 /// Return a pair the first field showing the value number of \p Exp and the
1961 /// second field showing whether it is a value number newly created.
1962 std::pair<uint32_t, bool>
1963 GVNPass::ValueTable::assignExpNewValueNum(Expression &Exp) {
1964   uint32_t &e = expressionNumbering[Exp];
1965   bool CreateNewValNum = !e;
1966   if (CreateNewValNum) {
1967     Expressions.push_back(Exp);
1968     if (ExprIdx.size() < nextValueNumber + 1)
1969       ExprIdx.resize(nextValueNumber * 2);
1970     e = nextValueNumber;
1971     ExprIdx[nextValueNumber++] = nextExprNumber++;
1972   }
1973   return {e, CreateNewValNum};
1974 }
1975 
1976 /// Return whether all the values related with the same \p num are
1977 /// defined in \p BB.
1978 bool GVNPass::ValueTable::areAllValsInBB(uint32_t Num, const BasicBlock *BB,
1979                                          GVNPass &Gvn) {
1980   LeaderTableEntry *Vals = &Gvn.LeaderTable[Num];
1981   while (Vals && Vals->BB == BB)
1982     Vals = Vals->Next;
1983   return !Vals;
1984 }
1985 
1986 /// Wrap phiTranslateImpl to provide caching functionality.
1987 uint32_t GVNPass::ValueTable::phiTranslate(const BasicBlock *Pred,
1988                                            const BasicBlock *PhiBlock,
1989                                            uint32_t Num, GVNPass &Gvn) {
1990   auto FindRes = PhiTranslateTable.find({Num, Pred});
1991   if (FindRes != PhiTranslateTable.end())
1992     return FindRes->second;
1993   uint32_t NewNum = phiTranslateImpl(Pred, PhiBlock, Num, Gvn);
1994   PhiTranslateTable.insert({{Num, Pred}, NewNum});
1995   return NewNum;
1996 }
1997 
1998 // Return true if the value number \p Num and NewNum have equal value.
1999 // Return false if the result is unknown.
2000 bool GVNPass::ValueTable::areCallValsEqual(uint32_t Num, uint32_t NewNum,
2001                                            const BasicBlock *Pred,
2002                                            const BasicBlock *PhiBlock,
2003                                            GVNPass &Gvn) {
2004   CallInst *Call = nullptr;
2005   LeaderTableEntry *Vals = &Gvn.LeaderTable[Num];
2006   while (Vals) {
2007     Call = dyn_cast<CallInst>(Vals->Val);
2008     if (Call && Call->getParent() == PhiBlock)
2009       break;
2010     Vals = Vals->Next;
2011   }
2012 
2013   if (AA->doesNotAccessMemory(Call))
2014     return true;
2015 
2016   if (!MD || !AA->onlyReadsMemory(Call))
2017     return false;
2018 
2019   MemDepResult local_dep = MD->getDependency(Call);
2020   if (!local_dep.isNonLocal())
2021     return false;
2022 
2023   const MemoryDependenceResults::NonLocalDepInfo &deps =
2024       MD->getNonLocalCallDependency(Call);
2025 
2026   // Check to see if the Call has no function local clobber.
2027   for (const NonLocalDepEntry &D : deps) {
2028     if (D.getResult().isNonFuncLocal())
2029       return true;
2030   }
2031   return false;
2032 }
2033 
2034 /// Translate value number \p Num using phis, so that it has the values of
2035 /// the phis in BB.
2036 uint32_t GVNPass::ValueTable::phiTranslateImpl(const BasicBlock *Pred,
2037                                                const BasicBlock *PhiBlock,
2038                                                uint32_t Num, GVNPass &Gvn) {
2039   if (PHINode *PN = NumberingPhi[Num]) {
2040     for (unsigned i = 0; i != PN->getNumIncomingValues(); ++i) {
2041       if (PN->getParent() == PhiBlock && PN->getIncomingBlock(i) == Pred)
2042         if (uint32_t TransVal = lookup(PN->getIncomingValue(i), false))
2043           return TransVal;
2044     }
2045     return Num;
2046   }
2047 
2048   // If there is any value related with Num is defined in a BB other than
2049   // PhiBlock, it cannot depend on a phi in PhiBlock without going through
2050   // a backedge. We can do an early exit in that case to save compile time.
2051   if (!areAllValsInBB(Num, PhiBlock, Gvn))
2052     return Num;
2053 
2054   if (Num >= ExprIdx.size() || ExprIdx[Num] == 0)
2055     return Num;
2056   Expression Exp = Expressions[ExprIdx[Num]];
2057 
2058   for (unsigned i = 0; i < Exp.varargs.size(); i++) {
2059     // For InsertValue and ExtractValue, some varargs are index numbers
2060     // instead of value numbers. Those index numbers should not be
2061     // translated.
2062     if ((i > 1 && Exp.opcode == Instruction::InsertValue) ||
2063         (i > 0 && Exp.opcode == Instruction::ExtractValue) ||
2064         (i > 1 && Exp.opcode == Instruction::ShuffleVector))
2065       continue;
2066     Exp.varargs[i] = phiTranslate(Pred, PhiBlock, Exp.varargs[i], Gvn);
2067   }
2068 
2069   if (Exp.commutative) {
2070     assert(Exp.varargs.size() >= 2 && "Unsupported commutative instruction!");
2071     if (Exp.varargs[0] > Exp.varargs[1]) {
2072       std::swap(Exp.varargs[0], Exp.varargs[1]);
2073       uint32_t Opcode = Exp.opcode >> 8;
2074       if (Opcode == Instruction::ICmp || Opcode == Instruction::FCmp)
2075         Exp.opcode = (Opcode << 8) |
2076                      CmpInst::getSwappedPredicate(
2077                          static_cast<CmpInst::Predicate>(Exp.opcode & 255));
2078     }
2079   }
2080 
2081   if (uint32_t NewNum = expressionNumbering[Exp]) {
2082     if (Exp.opcode == Instruction::Call && NewNum != Num)
2083       return areCallValsEqual(Num, NewNum, Pred, PhiBlock, Gvn) ? NewNum : Num;
2084     return NewNum;
2085   }
2086   return Num;
2087 }
2088 
2089 /// Erase stale entry from phiTranslate cache so phiTranslate can be computed
2090 /// again.
2091 void GVNPass::ValueTable::eraseTranslateCacheEntry(
2092     uint32_t Num, const BasicBlock &CurrBlock) {
2093   for (const BasicBlock *Pred : predecessors(&CurrBlock))
2094     PhiTranslateTable.erase({Num, Pred});
2095 }
2096 
2097 // In order to find a leader for a given value number at a
2098 // specific basic block, we first obtain the list of all Values for that number,
2099 // and then scan the list to find one whose block dominates the block in
2100 // question.  This is fast because dominator tree queries consist of only
2101 // a few comparisons of DFS numbers.
2102 Value *GVNPass::findLeader(const BasicBlock *BB, uint32_t num) {
2103   LeaderTableEntry Vals = LeaderTable[num];
2104   if (!Vals.Val) return nullptr;
2105 
2106   Value *Val = nullptr;
2107   if (DT->dominates(Vals.BB, BB)) {
2108     Val = Vals.Val;
2109     if (isa<Constant>(Val)) return Val;
2110   }
2111 
2112   LeaderTableEntry* Next = Vals.Next;
2113   while (Next) {
2114     if (DT->dominates(Next->BB, BB)) {
2115       if (isa<Constant>(Next->Val)) return Next->Val;
2116       if (!Val) Val = Next->Val;
2117     }
2118 
2119     Next = Next->Next;
2120   }
2121 
2122   return Val;
2123 }
2124 
2125 /// There is an edge from 'Src' to 'Dst'.  Return
2126 /// true if every path from the entry block to 'Dst' passes via this edge.  In
2127 /// particular 'Dst' must not be reachable via another edge from 'Src'.
2128 static bool isOnlyReachableViaThisEdge(const BasicBlockEdge &E,
2129                                        DominatorTree *DT) {
2130   // While in theory it is interesting to consider the case in which Dst has
2131   // more than one predecessor, because Dst might be part of a loop which is
2132   // only reachable from Src, in practice it is pointless since at the time
2133   // GVN runs all such loops have preheaders, which means that Dst will have
2134   // been changed to have only one predecessor, namely Src.
2135   const BasicBlock *Pred = E.getEnd()->getSinglePredecessor();
2136   assert((!Pred || Pred == E.getStart()) &&
2137          "No edge between these basic blocks!");
2138   return Pred != nullptr;
2139 }
2140 
2141 void GVNPass::assignBlockRPONumber(Function &F) {
2142   BlockRPONumber.clear();
2143   uint32_t NextBlockNumber = 1;
2144   ReversePostOrderTraversal<Function *> RPOT(&F);
2145   for (BasicBlock *BB : RPOT)
2146     BlockRPONumber[BB] = NextBlockNumber++;
2147   InvalidBlockRPONumbers = false;
2148 }
2149 
2150 bool GVNPass::replaceOperandsForInBlockEquality(Instruction *Instr) const {
2151   bool Changed = false;
2152   for (unsigned OpNum = 0; OpNum < Instr->getNumOperands(); ++OpNum) {
2153     Value *Operand = Instr->getOperand(OpNum);
2154     auto it = ReplaceOperandsWithMap.find(Operand);
2155     if (it != ReplaceOperandsWithMap.end()) {
2156       LLVM_DEBUG(dbgs() << "GVN replacing: " << *Operand << " with "
2157                         << *it->second << " in instruction " << *Instr << '\n');
2158       Instr->setOperand(OpNum, it->second);
2159       Changed = true;
2160     }
2161   }
2162   return Changed;
2163 }
2164 
2165 /// The given values are known to be equal in every block
2166 /// dominated by 'Root'.  Exploit this, for example by replacing 'LHS' with
2167 /// 'RHS' everywhere in the scope.  Returns whether a change was made.
2168 /// If DominatesByEdge is false, then it means that we will propagate the RHS
2169 /// value starting from the end of Root.Start.
2170 bool GVNPass::propagateEquality(Value *LHS, Value *RHS,
2171                                 const BasicBlockEdge &Root,
2172                                 bool DominatesByEdge) {
2173   SmallVector<std::pair<Value*, Value*>, 4> Worklist;
2174   Worklist.push_back(std::make_pair(LHS, RHS));
2175   bool Changed = false;
2176   // For speed, compute a conservative fast approximation to
2177   // DT->dominates(Root, Root.getEnd());
2178   const bool RootDominatesEnd = isOnlyReachableViaThisEdge(Root, DT);
2179 
2180   while (!Worklist.empty()) {
2181     std::pair<Value*, Value*> Item = Worklist.pop_back_val();
2182     LHS = Item.first; RHS = Item.second;
2183 
2184     if (LHS == RHS)
2185       continue;
2186     assert(LHS->getType() == RHS->getType() && "Equality but unequal types!");
2187 
2188     // Don't try to propagate equalities between constants.
2189     if (isa<Constant>(LHS) && isa<Constant>(RHS))
2190       continue;
2191 
2192     // Prefer a constant on the right-hand side, or an Argument if no constants.
2193     if (isa<Constant>(LHS) || (isa<Argument>(LHS) && !isa<Constant>(RHS)))
2194       std::swap(LHS, RHS);
2195     assert((isa<Argument>(LHS) || isa<Instruction>(LHS)) && "Unexpected value!");
2196 
2197     // If there is no obvious reason to prefer the left-hand side over the
2198     // right-hand side, ensure the longest lived term is on the right-hand side,
2199     // so the shortest lived term will be replaced by the longest lived.
2200     // This tends to expose more simplifications.
2201     uint32_t LVN = VN.lookupOrAdd(LHS);
2202     if ((isa<Argument>(LHS) && isa<Argument>(RHS)) ||
2203         (isa<Instruction>(LHS) && isa<Instruction>(RHS))) {
2204       // Move the 'oldest' value to the right-hand side, using the value number
2205       // as a proxy for age.
2206       uint32_t RVN = VN.lookupOrAdd(RHS);
2207       if (LVN < RVN) {
2208         std::swap(LHS, RHS);
2209         LVN = RVN;
2210       }
2211     }
2212 
2213     // If value numbering later sees that an instruction in the scope is equal
2214     // to 'LHS' then ensure it will be turned into 'RHS'.  In order to preserve
2215     // the invariant that instructions only occur in the leader table for their
2216     // own value number (this is used by removeFromLeaderTable), do not do this
2217     // if RHS is an instruction (if an instruction in the scope is morphed into
2218     // LHS then it will be turned into RHS by the next GVN iteration anyway, so
2219     // using the leader table is about compiling faster, not optimizing better).
2220     // The leader table only tracks basic blocks, not edges. Only add to if we
2221     // have the simple case where the edge dominates the end.
2222     if (RootDominatesEnd && !isa<Instruction>(RHS))
2223       addToLeaderTable(LVN, RHS, Root.getEnd());
2224 
2225     // Replace all occurrences of 'LHS' with 'RHS' everywhere in the scope.  As
2226     // LHS always has at least one use that is not dominated by Root, this will
2227     // never do anything if LHS has only one use.
2228     if (!LHS->hasOneUse()) {
2229       unsigned NumReplacements =
2230           DominatesByEdge
2231               ? replaceDominatedUsesWith(LHS, RHS, *DT, Root)
2232               : replaceDominatedUsesWith(LHS, RHS, *DT, Root.getStart());
2233 
2234       Changed |= NumReplacements > 0;
2235       NumGVNEqProp += NumReplacements;
2236       // Cached information for anything that uses LHS will be invalid.
2237       if (MD)
2238         MD->invalidateCachedPointerInfo(LHS);
2239     }
2240 
2241     // Now try to deduce additional equalities from this one. For example, if
2242     // the known equality was "(A != B)" == "false" then it follows that A and B
2243     // are equal in the scope. Only boolean equalities with an explicit true or
2244     // false RHS are currently supported.
2245     if (!RHS->getType()->isIntegerTy(1))
2246       // Not a boolean equality - bail out.
2247       continue;
2248     ConstantInt *CI = dyn_cast<ConstantInt>(RHS);
2249     if (!CI)
2250       // RHS neither 'true' nor 'false' - bail out.
2251       continue;
2252     // Whether RHS equals 'true'.  Otherwise it equals 'false'.
2253     bool isKnownTrue = CI->isMinusOne();
2254     bool isKnownFalse = !isKnownTrue;
2255 
2256     // If "A && B" is known true then both A and B are known true.  If "A || B"
2257     // is known false then both A and B are known false.
2258     Value *A, *B;
2259     if ((isKnownTrue && match(LHS, m_LogicalAnd(m_Value(A), m_Value(B)))) ||
2260         (isKnownFalse && match(LHS, m_LogicalOr(m_Value(A), m_Value(B))))) {
2261       Worklist.push_back(std::make_pair(A, RHS));
2262       Worklist.push_back(std::make_pair(B, RHS));
2263       continue;
2264     }
2265 
2266     // If we are propagating an equality like "(A == B)" == "true" then also
2267     // propagate the equality A == B.  When propagating a comparison such as
2268     // "(A >= B)" == "true", replace all instances of "A < B" with "false".
2269     if (CmpInst *Cmp = dyn_cast<CmpInst>(LHS)) {
2270       Value *Op0 = Cmp->getOperand(0), *Op1 = Cmp->getOperand(1);
2271 
2272       // If "A == B" is known true, or "A != B" is known false, then replace
2273       // A with B everywhere in the scope.  For floating point operations, we
2274       // have to be careful since equality does not always imply equivalance.
2275       if ((isKnownTrue && impliesEquivalanceIfTrue(Cmp)) ||
2276           (isKnownFalse && impliesEquivalanceIfFalse(Cmp)))
2277         Worklist.push_back(std::make_pair(Op0, Op1));
2278 
2279       // If "A >= B" is known true, replace "A < B" with false everywhere.
2280       CmpInst::Predicate NotPred = Cmp->getInversePredicate();
2281       Constant *NotVal = ConstantInt::get(Cmp->getType(), isKnownFalse);
2282       // Since we don't have the instruction "A < B" immediately to hand, work
2283       // out the value number that it would have and use that to find an
2284       // appropriate instruction (if any).
2285       uint32_t NextNum = VN.getNextUnusedValueNumber();
2286       uint32_t Num = VN.lookupOrAddCmp(Cmp->getOpcode(), NotPred, Op0, Op1);
2287       // If the number we were assigned was brand new then there is no point in
2288       // looking for an instruction realizing it: there cannot be one!
2289       if (Num < NextNum) {
2290         Value *NotCmp = findLeader(Root.getEnd(), Num);
2291         if (NotCmp && isa<Instruction>(NotCmp)) {
2292           unsigned NumReplacements =
2293               DominatesByEdge
2294                   ? replaceDominatedUsesWith(NotCmp, NotVal, *DT, Root)
2295                   : replaceDominatedUsesWith(NotCmp, NotVal, *DT,
2296                                              Root.getStart());
2297           Changed |= NumReplacements > 0;
2298           NumGVNEqProp += NumReplacements;
2299           // Cached information for anything that uses NotCmp will be invalid.
2300           if (MD)
2301             MD->invalidateCachedPointerInfo(NotCmp);
2302         }
2303       }
2304       // Ensure that any instruction in scope that gets the "A < B" value number
2305       // is replaced with false.
2306       // The leader table only tracks basic blocks, not edges. Only add to if we
2307       // have the simple case where the edge dominates the end.
2308       if (RootDominatesEnd)
2309         addToLeaderTable(Num, NotVal, Root.getEnd());
2310 
2311       continue;
2312     }
2313   }
2314 
2315   return Changed;
2316 }
2317 
2318 /// When calculating availability, handle an instruction
2319 /// by inserting it into the appropriate sets
2320 bool GVNPass::processInstruction(Instruction *I) {
2321   // Ignore dbg info intrinsics.
2322   if (isa<DbgInfoIntrinsic>(I))
2323     return false;
2324 
2325   // If the instruction can be easily simplified then do so now in preference
2326   // to value numbering it.  Value numbering often exposes redundancies, for
2327   // example if it determines that %y is equal to %x then the instruction
2328   // "%z = and i32 %x, %y" becomes "%z = and i32 %x, %x" which we now simplify.
2329   const DataLayout &DL = I->getModule()->getDataLayout();
2330   if (Value *V = SimplifyInstruction(I, {DL, TLI, DT, AC})) {
2331     bool Changed = false;
2332     if (!I->use_empty()) {
2333       // Simplification can cause a special instruction to become not special.
2334       // For example, devirtualization to a willreturn function.
2335       ICF->removeUsersOf(I);
2336       I->replaceAllUsesWith(V);
2337       Changed = true;
2338     }
2339     if (isInstructionTriviallyDead(I, TLI)) {
2340       markInstructionForDeletion(I);
2341       Changed = true;
2342     }
2343     if (Changed) {
2344       if (MD && V->getType()->isPtrOrPtrVectorTy())
2345         MD->invalidateCachedPointerInfo(V);
2346       ++NumGVNSimpl;
2347       return true;
2348     }
2349   }
2350 
2351   if (auto *Assume = dyn_cast<AssumeInst>(I))
2352     return processAssumeIntrinsic(Assume);
2353 
2354   if (LoadInst *Load = dyn_cast<LoadInst>(I)) {
2355     if (processLoad(Load))
2356       return true;
2357 
2358     unsigned Num = VN.lookupOrAdd(Load);
2359     addToLeaderTable(Num, Load, Load->getParent());
2360     return false;
2361   }
2362 
2363   // For conditional branches, we can perform simple conditional propagation on
2364   // the condition value itself.
2365   if (BranchInst *BI = dyn_cast<BranchInst>(I)) {
2366     if (!BI->isConditional())
2367       return false;
2368 
2369     if (isa<Constant>(BI->getCondition()))
2370       return processFoldableCondBr(BI);
2371 
2372     Value *BranchCond = BI->getCondition();
2373     BasicBlock *TrueSucc = BI->getSuccessor(0);
2374     BasicBlock *FalseSucc = BI->getSuccessor(1);
2375     // Avoid multiple edges early.
2376     if (TrueSucc == FalseSucc)
2377       return false;
2378 
2379     BasicBlock *Parent = BI->getParent();
2380     bool Changed = false;
2381 
2382     Value *TrueVal = ConstantInt::getTrue(TrueSucc->getContext());
2383     BasicBlockEdge TrueE(Parent, TrueSucc);
2384     Changed |= propagateEquality(BranchCond, TrueVal, TrueE, true);
2385 
2386     Value *FalseVal = ConstantInt::getFalse(FalseSucc->getContext());
2387     BasicBlockEdge FalseE(Parent, FalseSucc);
2388     Changed |= propagateEquality(BranchCond, FalseVal, FalseE, true);
2389 
2390     return Changed;
2391   }
2392 
2393   // For switches, propagate the case values into the case destinations.
2394   if (SwitchInst *SI = dyn_cast<SwitchInst>(I)) {
2395     Value *SwitchCond = SI->getCondition();
2396     BasicBlock *Parent = SI->getParent();
2397     bool Changed = false;
2398 
2399     // Remember how many outgoing edges there are to every successor.
2400     SmallDenseMap<BasicBlock *, unsigned, 16> SwitchEdges;
2401     for (unsigned i = 0, n = SI->getNumSuccessors(); i != n; ++i)
2402       ++SwitchEdges[SI->getSuccessor(i)];
2403 
2404     for (SwitchInst::CaseIt i = SI->case_begin(), e = SI->case_end();
2405          i != e; ++i) {
2406       BasicBlock *Dst = i->getCaseSuccessor();
2407       // If there is only a single edge, propagate the case value into it.
2408       if (SwitchEdges.lookup(Dst) == 1) {
2409         BasicBlockEdge E(Parent, Dst);
2410         Changed |= propagateEquality(SwitchCond, i->getCaseValue(), E, true);
2411       }
2412     }
2413     return Changed;
2414   }
2415 
2416   // Instructions with void type don't return a value, so there's
2417   // no point in trying to find redundancies in them.
2418   if (I->getType()->isVoidTy())
2419     return false;
2420 
2421   uint32_t NextNum = VN.getNextUnusedValueNumber();
2422   unsigned Num = VN.lookupOrAdd(I);
2423 
2424   // Allocations are always uniquely numbered, so we can save time and memory
2425   // by fast failing them.
2426   if (isa<AllocaInst>(I) || I->isTerminator() || isa<PHINode>(I)) {
2427     addToLeaderTable(Num, I, I->getParent());
2428     return false;
2429   }
2430 
2431   // If the number we were assigned was a brand new VN, then we don't
2432   // need to do a lookup to see if the number already exists
2433   // somewhere in the domtree: it can't!
2434   if (Num >= NextNum) {
2435     addToLeaderTable(Num, I, I->getParent());
2436     return false;
2437   }
2438 
2439   // Perform fast-path value-number based elimination of values inherited from
2440   // dominators.
2441   Value *Repl = findLeader(I->getParent(), Num);
2442   if (!Repl) {
2443     // Failure, just remember this instance for future use.
2444     addToLeaderTable(Num, I, I->getParent());
2445     return false;
2446   } else if (Repl == I) {
2447     // If I was the result of a shortcut PRE, it might already be in the table
2448     // and the best replacement for itself. Nothing to do.
2449     return false;
2450   }
2451 
2452   // Remove it!
2453   patchAndReplaceAllUsesWith(I, Repl);
2454   if (MD && Repl->getType()->isPtrOrPtrVectorTy())
2455     MD->invalidateCachedPointerInfo(Repl);
2456   markInstructionForDeletion(I);
2457   return true;
2458 }
2459 
2460 /// runOnFunction - This is the main transformation entry point for a function.
2461 bool GVNPass::runImpl(Function &F, AssumptionCache &RunAC, DominatorTree &RunDT,
2462                       const TargetLibraryInfo &RunTLI, AAResults &RunAA,
2463                       MemoryDependenceResults *RunMD, LoopInfo *LI,
2464                       OptimizationRemarkEmitter *RunORE, MemorySSA *MSSA) {
2465   AC = &RunAC;
2466   DT = &RunDT;
2467   VN.setDomTree(DT);
2468   TLI = &RunTLI;
2469   VN.setAliasAnalysis(&RunAA);
2470   MD = RunMD;
2471   ImplicitControlFlowTracking ImplicitCFT;
2472   ICF = &ImplicitCFT;
2473   this->LI = LI;
2474   VN.setMemDep(MD);
2475   ORE = RunORE;
2476   InvalidBlockRPONumbers = true;
2477   MemorySSAUpdater Updater(MSSA);
2478   MSSAU = MSSA ? &Updater : nullptr;
2479 
2480   bool Changed = false;
2481   bool ShouldContinue = true;
2482 
2483   DomTreeUpdater DTU(DT, DomTreeUpdater::UpdateStrategy::Eager);
2484   // Merge unconditional branches, allowing PRE to catch more
2485   // optimization opportunities.
2486   for (BasicBlock &BB : llvm::make_early_inc_range(F)) {
2487     bool removedBlock = MergeBlockIntoPredecessor(&BB, &DTU, LI, MSSAU, MD);
2488     if (removedBlock)
2489       ++NumGVNBlocks;
2490 
2491     Changed |= removedBlock;
2492   }
2493 
2494   unsigned Iteration = 0;
2495   while (ShouldContinue) {
2496     LLVM_DEBUG(dbgs() << "GVN iteration: " << Iteration << "\n");
2497     ShouldContinue = iterateOnFunction(F);
2498     Changed |= ShouldContinue;
2499     ++Iteration;
2500   }
2501 
2502   if (isPREEnabled()) {
2503     // Fabricate val-num for dead-code in order to suppress assertion in
2504     // performPRE().
2505     assignValNumForDeadCode();
2506     bool PREChanged = true;
2507     while (PREChanged) {
2508       PREChanged = performPRE(F);
2509       Changed |= PREChanged;
2510     }
2511   }
2512 
2513   // FIXME: Should perform GVN again after PRE does something.  PRE can move
2514   // computations into blocks where they become fully redundant.  Note that
2515   // we can't do this until PRE's critical edge splitting updates memdep.
2516   // Actually, when this happens, we should just fully integrate PRE into GVN.
2517 
2518   cleanupGlobalSets();
2519   // Do not cleanup DeadBlocks in cleanupGlobalSets() as it's called for each
2520   // iteration.
2521   DeadBlocks.clear();
2522 
2523   if (MSSA && VerifyMemorySSA)
2524     MSSA->verifyMemorySSA();
2525 
2526   return Changed;
2527 }
2528 
2529 bool GVNPass::processBlock(BasicBlock *BB) {
2530   // FIXME: Kill off InstrsToErase by doing erasing eagerly in a helper function
2531   // (and incrementing BI before processing an instruction).
2532   assert(InstrsToErase.empty() &&
2533          "We expect InstrsToErase to be empty across iterations");
2534   if (DeadBlocks.count(BB))
2535     return false;
2536 
2537   // Clearing map before every BB because it can be used only for single BB.
2538   ReplaceOperandsWithMap.clear();
2539   bool ChangedFunction = false;
2540 
2541   // Since we may not have visited the input blocks of the phis, we can't
2542   // use our normal hash approach for phis.  Instead, simply look for
2543   // obvious duplicates.  The first pass of GVN will tend to create
2544   // identical phis, and the second or later passes can eliminate them.
2545   ChangedFunction |= EliminateDuplicatePHINodes(BB);
2546 
2547   for (BasicBlock::iterator BI = BB->begin(), BE = BB->end();
2548        BI != BE;) {
2549     if (!ReplaceOperandsWithMap.empty())
2550       ChangedFunction |= replaceOperandsForInBlockEquality(&*BI);
2551     ChangedFunction |= processInstruction(&*BI);
2552 
2553     if (InstrsToErase.empty()) {
2554       ++BI;
2555       continue;
2556     }
2557 
2558     // If we need some instructions deleted, do it now.
2559     NumGVNInstr += InstrsToErase.size();
2560 
2561     // Avoid iterator invalidation.
2562     bool AtStart = BI == BB->begin();
2563     if (!AtStart)
2564       --BI;
2565 
2566     for (auto *I : InstrsToErase) {
2567       assert(I->getParent() == BB && "Removing instruction from wrong block?");
2568       LLVM_DEBUG(dbgs() << "GVN removed: " << *I << '\n');
2569       salvageKnowledge(I, AC);
2570       salvageDebugInfo(*I);
2571       if (MD) MD->removeInstruction(I);
2572       if (MSSAU)
2573         MSSAU->removeMemoryAccess(I);
2574       LLVM_DEBUG(verifyRemoved(I));
2575       ICF->removeInstruction(I);
2576       I->eraseFromParent();
2577     }
2578     InstrsToErase.clear();
2579 
2580     if (AtStart)
2581       BI = BB->begin();
2582     else
2583       ++BI;
2584   }
2585 
2586   return ChangedFunction;
2587 }
2588 
2589 // Instantiate an expression in a predecessor that lacked it.
2590 bool GVNPass::performScalarPREInsertion(Instruction *Instr, BasicBlock *Pred,
2591                                         BasicBlock *Curr, unsigned int ValNo) {
2592   // Because we are going top-down through the block, all value numbers
2593   // will be available in the predecessor by the time we need them.  Any
2594   // that weren't originally present will have been instantiated earlier
2595   // in this loop.
2596   bool success = true;
2597   for (unsigned i = 0, e = Instr->getNumOperands(); i != e; ++i) {
2598     Value *Op = Instr->getOperand(i);
2599     if (isa<Argument>(Op) || isa<Constant>(Op) || isa<GlobalValue>(Op))
2600       continue;
2601     // This could be a newly inserted instruction, in which case, we won't
2602     // find a value number, and should give up before we hurt ourselves.
2603     // FIXME: Rewrite the infrastructure to let it easier to value number
2604     // and process newly inserted instructions.
2605     if (!VN.exists(Op)) {
2606       success = false;
2607       break;
2608     }
2609     uint32_t TValNo =
2610         VN.phiTranslate(Pred, Curr, VN.lookup(Op), *this);
2611     if (Value *V = findLeader(Pred, TValNo)) {
2612       Instr->setOperand(i, V);
2613     } else {
2614       success = false;
2615       break;
2616     }
2617   }
2618 
2619   // Fail out if we encounter an operand that is not available in
2620   // the PRE predecessor.  This is typically because of loads which
2621   // are not value numbered precisely.
2622   if (!success)
2623     return false;
2624 
2625   Instr->insertBefore(Pred->getTerminator());
2626   Instr->setName(Instr->getName() + ".pre");
2627   Instr->setDebugLoc(Instr->getDebugLoc());
2628 
2629   ICF->insertInstructionTo(Instr, Pred);
2630 
2631   unsigned Num = VN.lookupOrAdd(Instr);
2632   VN.add(Instr, Num);
2633 
2634   // Update the availability map to include the new instruction.
2635   addToLeaderTable(Num, Instr, Pred);
2636   return true;
2637 }
2638 
2639 bool GVNPass::performScalarPRE(Instruction *CurInst) {
2640   if (isa<AllocaInst>(CurInst) || CurInst->isTerminator() ||
2641       isa<PHINode>(CurInst) || CurInst->getType()->isVoidTy() ||
2642       CurInst->mayReadFromMemory() || CurInst->mayHaveSideEffects() ||
2643       isa<DbgInfoIntrinsic>(CurInst))
2644     return false;
2645 
2646   // Don't do PRE on compares. The PHI would prevent CodeGenPrepare from
2647   // sinking the compare again, and it would force the code generator to
2648   // move the i1 from processor flags or predicate registers into a general
2649   // purpose register.
2650   if (isa<CmpInst>(CurInst))
2651     return false;
2652 
2653   // Don't do PRE on GEPs. The inserted PHI would prevent CodeGenPrepare from
2654   // sinking the addressing mode computation back to its uses. Extending the
2655   // GEP's live range increases the register pressure, and therefore it can
2656   // introduce unnecessary spills.
2657   //
2658   // This doesn't prevent Load PRE. PHI translation will make the GEP available
2659   // to the load by moving it to the predecessor block if necessary.
2660   if (isa<GetElementPtrInst>(CurInst))
2661     return false;
2662 
2663   if (auto *CallB = dyn_cast<CallBase>(CurInst)) {
2664     // We don't currently value number ANY inline asm calls.
2665     if (CallB->isInlineAsm())
2666       return false;
2667     // Don't do PRE on convergent calls.
2668     if (CallB->isConvergent())
2669       return false;
2670   }
2671 
2672   uint32_t ValNo = VN.lookup(CurInst);
2673 
2674   // Look for the predecessors for PRE opportunities.  We're
2675   // only trying to solve the basic diamond case, where
2676   // a value is computed in the successor and one predecessor,
2677   // but not the other.  We also explicitly disallow cases
2678   // where the successor is its own predecessor, because they're
2679   // more complicated to get right.
2680   unsigned NumWith = 0;
2681   unsigned NumWithout = 0;
2682   BasicBlock *PREPred = nullptr;
2683   BasicBlock *CurrentBlock = CurInst->getParent();
2684 
2685   // Update the RPO numbers for this function.
2686   if (InvalidBlockRPONumbers)
2687     assignBlockRPONumber(*CurrentBlock->getParent());
2688 
2689   SmallVector<std::pair<Value *, BasicBlock *>, 8> predMap;
2690   for (BasicBlock *P : predecessors(CurrentBlock)) {
2691     // We're not interested in PRE where blocks with predecessors that are
2692     // not reachable.
2693     if (!DT->isReachableFromEntry(P)) {
2694       NumWithout = 2;
2695       break;
2696     }
2697     // It is not safe to do PRE when P->CurrentBlock is a loop backedge, and
2698     // when CurInst has operand defined in CurrentBlock (so it may be defined
2699     // by phi in the loop header).
2700     assert(BlockRPONumber.count(P) && BlockRPONumber.count(CurrentBlock) &&
2701            "Invalid BlockRPONumber map.");
2702     if (BlockRPONumber[P] >= BlockRPONumber[CurrentBlock] &&
2703         llvm::any_of(CurInst->operands(), [&](const Use &U) {
2704           if (auto *Inst = dyn_cast<Instruction>(U.get()))
2705             return Inst->getParent() == CurrentBlock;
2706           return false;
2707         })) {
2708       NumWithout = 2;
2709       break;
2710     }
2711 
2712     uint32_t TValNo = VN.phiTranslate(P, CurrentBlock, ValNo, *this);
2713     Value *predV = findLeader(P, TValNo);
2714     if (!predV) {
2715       predMap.push_back(std::make_pair(static_cast<Value *>(nullptr), P));
2716       PREPred = P;
2717       ++NumWithout;
2718     } else if (predV == CurInst) {
2719       /* CurInst dominates this predecessor. */
2720       NumWithout = 2;
2721       break;
2722     } else {
2723       predMap.push_back(std::make_pair(predV, P));
2724       ++NumWith;
2725     }
2726   }
2727 
2728   // Don't do PRE when it might increase code size, i.e. when
2729   // we would need to insert instructions in more than one pred.
2730   if (NumWithout > 1 || NumWith == 0)
2731     return false;
2732 
2733   // We may have a case where all predecessors have the instruction,
2734   // and we just need to insert a phi node. Otherwise, perform
2735   // insertion.
2736   Instruction *PREInstr = nullptr;
2737 
2738   if (NumWithout != 0) {
2739     if (!isSafeToSpeculativelyExecute(CurInst)) {
2740       // It is only valid to insert a new instruction if the current instruction
2741       // is always executed. An instruction with implicit control flow could
2742       // prevent us from doing it. If we cannot speculate the execution, then
2743       // PRE should be prohibited.
2744       if (ICF->isDominatedByICFIFromSameBlock(CurInst))
2745         return false;
2746     }
2747 
2748     // Don't do PRE across indirect branch.
2749     if (isa<IndirectBrInst>(PREPred->getTerminator()))
2750       return false;
2751 
2752     // Don't do PRE across callbr.
2753     // FIXME: Can we do this across the fallthrough edge?
2754     if (isa<CallBrInst>(PREPred->getTerminator()))
2755       return false;
2756 
2757     // We can't do PRE safely on a critical edge, so instead we schedule
2758     // the edge to be split and perform the PRE the next time we iterate
2759     // on the function.
2760     unsigned SuccNum = GetSuccessorNumber(PREPred, CurrentBlock);
2761     if (isCriticalEdge(PREPred->getTerminator(), SuccNum)) {
2762       toSplit.push_back(std::make_pair(PREPred->getTerminator(), SuccNum));
2763       return false;
2764     }
2765     // We need to insert somewhere, so let's give it a shot
2766     PREInstr = CurInst->clone();
2767     if (!performScalarPREInsertion(PREInstr, PREPred, CurrentBlock, ValNo)) {
2768       // If we failed insertion, make sure we remove the instruction.
2769       LLVM_DEBUG(verifyRemoved(PREInstr));
2770       PREInstr->deleteValue();
2771       return false;
2772     }
2773   }
2774 
2775   // Either we should have filled in the PRE instruction, or we should
2776   // not have needed insertions.
2777   assert(PREInstr != nullptr || NumWithout == 0);
2778 
2779   ++NumGVNPRE;
2780 
2781   // Create a PHI to make the value available in this block.
2782   PHINode *Phi =
2783       PHINode::Create(CurInst->getType(), predMap.size(),
2784                       CurInst->getName() + ".pre-phi", &CurrentBlock->front());
2785   for (unsigned i = 0, e = predMap.size(); i != e; ++i) {
2786     if (Value *V = predMap[i].first) {
2787       // If we use an existing value in this phi, we have to patch the original
2788       // value because the phi will be used to replace a later value.
2789       patchReplacementInstruction(CurInst, V);
2790       Phi->addIncoming(V, predMap[i].second);
2791     } else
2792       Phi->addIncoming(PREInstr, PREPred);
2793   }
2794 
2795   VN.add(Phi, ValNo);
2796   // After creating a new PHI for ValNo, the phi translate result for ValNo will
2797   // be changed, so erase the related stale entries in phi translate cache.
2798   VN.eraseTranslateCacheEntry(ValNo, *CurrentBlock);
2799   addToLeaderTable(ValNo, Phi, CurrentBlock);
2800   Phi->setDebugLoc(CurInst->getDebugLoc());
2801   CurInst->replaceAllUsesWith(Phi);
2802   if (MD && Phi->getType()->isPtrOrPtrVectorTy())
2803     MD->invalidateCachedPointerInfo(Phi);
2804   VN.erase(CurInst);
2805   removeFromLeaderTable(ValNo, CurInst, CurrentBlock);
2806 
2807   LLVM_DEBUG(dbgs() << "GVN PRE removed: " << *CurInst << '\n');
2808   if (MD)
2809     MD->removeInstruction(CurInst);
2810   if (MSSAU)
2811     MSSAU->removeMemoryAccess(CurInst);
2812   LLVM_DEBUG(verifyRemoved(CurInst));
2813   // FIXME: Intended to be markInstructionForDeletion(CurInst), but it causes
2814   // some assertion failures.
2815   ICF->removeInstruction(CurInst);
2816   CurInst->eraseFromParent();
2817   ++NumGVNInstr;
2818 
2819   return true;
2820 }
2821 
2822 /// Perform a purely local form of PRE that looks for diamond
2823 /// control flow patterns and attempts to perform simple PRE at the join point.
2824 bool GVNPass::performPRE(Function &F) {
2825   bool Changed = false;
2826   for (BasicBlock *CurrentBlock : depth_first(&F.getEntryBlock())) {
2827     // Nothing to PRE in the entry block.
2828     if (CurrentBlock == &F.getEntryBlock())
2829       continue;
2830 
2831     // Don't perform PRE on an EH pad.
2832     if (CurrentBlock->isEHPad())
2833       continue;
2834 
2835     for (BasicBlock::iterator BI = CurrentBlock->begin(),
2836                               BE = CurrentBlock->end();
2837          BI != BE;) {
2838       Instruction *CurInst = &*BI++;
2839       Changed |= performScalarPRE(CurInst);
2840     }
2841   }
2842 
2843   if (splitCriticalEdges())
2844     Changed = true;
2845 
2846   return Changed;
2847 }
2848 
2849 /// Split the critical edge connecting the given two blocks, and return
2850 /// the block inserted to the critical edge.
2851 BasicBlock *GVNPass::splitCriticalEdges(BasicBlock *Pred, BasicBlock *Succ) {
2852   // GVN does not require loop-simplify, do not try to preserve it if it is not
2853   // possible.
2854   BasicBlock *BB = SplitCriticalEdge(
2855       Pred, Succ,
2856       CriticalEdgeSplittingOptions(DT, LI, MSSAU).unsetPreserveLoopSimplify());
2857   if (BB) {
2858     if (MD)
2859       MD->invalidateCachedPredecessors();
2860     InvalidBlockRPONumbers = true;
2861   }
2862   return BB;
2863 }
2864 
2865 /// Split critical edges found during the previous
2866 /// iteration that may enable further optimization.
2867 bool GVNPass::splitCriticalEdges() {
2868   if (toSplit.empty())
2869     return false;
2870 
2871   bool Changed = false;
2872   do {
2873     std::pair<Instruction *, unsigned> Edge = toSplit.pop_back_val();
2874     Changed |= SplitCriticalEdge(Edge.first, Edge.second,
2875                                  CriticalEdgeSplittingOptions(DT, LI, MSSAU)) !=
2876                nullptr;
2877   } while (!toSplit.empty());
2878   if (Changed) {
2879     if (MD)
2880       MD->invalidateCachedPredecessors();
2881     InvalidBlockRPONumbers = true;
2882   }
2883   return Changed;
2884 }
2885 
2886 /// Executes one iteration of GVN
2887 bool GVNPass::iterateOnFunction(Function &F) {
2888   cleanupGlobalSets();
2889 
2890   // Top-down walk of the dominator tree
2891   bool Changed = false;
2892   // Needed for value numbering with phi construction to work.
2893   // RPOT walks the graph in its constructor and will not be invalidated during
2894   // processBlock.
2895   ReversePostOrderTraversal<Function *> RPOT(&F);
2896 
2897   for (BasicBlock *BB : RPOT)
2898     Changed |= processBlock(BB);
2899 
2900   return Changed;
2901 }
2902 
2903 void GVNPass::cleanupGlobalSets() {
2904   VN.clear();
2905   LeaderTable.clear();
2906   BlockRPONumber.clear();
2907   TableAllocator.Reset();
2908   ICF->clear();
2909   InvalidBlockRPONumbers = true;
2910 }
2911 
2912 /// Verify that the specified instruction does not occur in our
2913 /// internal data structures.
2914 void GVNPass::verifyRemoved(const Instruction *Inst) const {
2915   VN.verifyRemoved(Inst);
2916 
2917   // Walk through the value number scope to make sure the instruction isn't
2918   // ferreted away in it.
2919   for (const auto &I : LeaderTable) {
2920     const LeaderTableEntry *Node = &I.second;
2921     assert(Node->Val != Inst && "Inst still in value numbering scope!");
2922 
2923     while (Node->Next) {
2924       Node = Node->Next;
2925       assert(Node->Val != Inst && "Inst still in value numbering scope!");
2926     }
2927   }
2928 }
2929 
2930 /// BB is declared dead, which implied other blocks become dead as well. This
2931 /// function is to add all these blocks to "DeadBlocks". For the dead blocks'
2932 /// live successors, update their phi nodes by replacing the operands
2933 /// corresponding to dead blocks with UndefVal.
2934 void GVNPass::addDeadBlock(BasicBlock *BB) {
2935   SmallVector<BasicBlock *, 4> NewDead;
2936   SmallSetVector<BasicBlock *, 4> DF;
2937 
2938   NewDead.push_back(BB);
2939   while (!NewDead.empty()) {
2940     BasicBlock *D = NewDead.pop_back_val();
2941     if (DeadBlocks.count(D))
2942       continue;
2943 
2944     // All blocks dominated by D are dead.
2945     SmallVector<BasicBlock *, 8> Dom;
2946     DT->getDescendants(D, Dom);
2947     DeadBlocks.insert(Dom.begin(), Dom.end());
2948 
2949     // Figure out the dominance-frontier(D).
2950     for (BasicBlock *B : Dom) {
2951       for (BasicBlock *S : successors(B)) {
2952         if (DeadBlocks.count(S))
2953           continue;
2954 
2955         bool AllPredDead = true;
2956         for (BasicBlock *P : predecessors(S))
2957           if (!DeadBlocks.count(P)) {
2958             AllPredDead = false;
2959             break;
2960           }
2961 
2962         if (!AllPredDead) {
2963           // S could be proved dead later on. That is why we don't update phi
2964           // operands at this moment.
2965           DF.insert(S);
2966         } else {
2967           // While S is not dominated by D, it is dead by now. This could take
2968           // place if S already have a dead predecessor before D is declared
2969           // dead.
2970           NewDead.push_back(S);
2971         }
2972       }
2973     }
2974   }
2975 
2976   // For the dead blocks' live successors, update their phi nodes by replacing
2977   // the operands corresponding to dead blocks with UndefVal.
2978   for (BasicBlock *B : DF) {
2979     if (DeadBlocks.count(B))
2980       continue;
2981 
2982     // First, split the critical edges. This might also create additional blocks
2983     // to preserve LoopSimplify form and adjust edges accordingly.
2984     SmallVector<BasicBlock *, 4> Preds(predecessors(B));
2985     for (BasicBlock *P : Preds) {
2986       if (!DeadBlocks.count(P))
2987         continue;
2988 
2989       if (llvm::is_contained(successors(P), B) &&
2990           isCriticalEdge(P->getTerminator(), B)) {
2991         if (BasicBlock *S = splitCriticalEdges(P, B))
2992           DeadBlocks.insert(P = S);
2993       }
2994     }
2995 
2996     // Now undef the incoming values from the dead predecessors.
2997     for (BasicBlock *P : predecessors(B)) {
2998       if (!DeadBlocks.count(P))
2999         continue;
3000       for (PHINode &Phi : B->phis()) {
3001         Phi.setIncomingValueForBlock(P, UndefValue::get(Phi.getType()));
3002         if (MD)
3003           MD->invalidateCachedPointerInfo(&Phi);
3004       }
3005     }
3006   }
3007 }
3008 
3009 // If the given branch is recognized as a foldable branch (i.e. conditional
3010 // branch with constant condition), it will perform following analyses and
3011 // transformation.
3012 //  1) If the dead out-coming edge is a critical-edge, split it. Let
3013 //     R be the target of the dead out-coming edge.
3014 //  1) Identify the set of dead blocks implied by the branch's dead outcoming
3015 //     edge. The result of this step will be {X| X is dominated by R}
3016 //  2) Identify those blocks which haves at least one dead predecessor. The
3017 //     result of this step will be dominance-frontier(R).
3018 //  3) Update the PHIs in DF(R) by replacing the operands corresponding to
3019 //     dead blocks with "UndefVal" in an hope these PHIs will optimized away.
3020 //
3021 // Return true iff *NEW* dead code are found.
3022 bool GVNPass::processFoldableCondBr(BranchInst *BI) {
3023   if (!BI || BI->isUnconditional())
3024     return false;
3025 
3026   // If a branch has two identical successors, we cannot declare either dead.
3027   if (BI->getSuccessor(0) == BI->getSuccessor(1))
3028     return false;
3029 
3030   ConstantInt *Cond = dyn_cast<ConstantInt>(BI->getCondition());
3031   if (!Cond)
3032     return false;
3033 
3034   BasicBlock *DeadRoot =
3035       Cond->getZExtValue() ? BI->getSuccessor(1) : BI->getSuccessor(0);
3036   if (DeadBlocks.count(DeadRoot))
3037     return false;
3038 
3039   if (!DeadRoot->getSinglePredecessor())
3040     DeadRoot = splitCriticalEdges(BI->getParent(), DeadRoot);
3041 
3042   addDeadBlock(DeadRoot);
3043   return true;
3044 }
3045 
3046 // performPRE() will trigger assert if it comes across an instruction without
3047 // associated val-num. As it normally has far more live instructions than dead
3048 // instructions, it makes more sense just to "fabricate" a val-number for the
3049 // dead code than checking if instruction involved is dead or not.
3050 void GVNPass::assignValNumForDeadCode() {
3051   for (BasicBlock *BB : DeadBlocks) {
3052     for (Instruction &Inst : *BB) {
3053       unsigned ValNum = VN.lookupOrAdd(&Inst);
3054       addToLeaderTable(ValNum, &Inst, BB);
3055     }
3056   }
3057 }
3058 
3059 class llvm::gvn::GVNLegacyPass : public FunctionPass {
3060 public:
3061   static char ID; // Pass identification, replacement for typeid
3062 
3063   explicit GVNLegacyPass(bool NoMemDepAnalysis = !GVNEnableMemDep)
3064       : FunctionPass(ID), Impl(GVNOptions().setMemDep(!NoMemDepAnalysis)) {
3065     initializeGVNLegacyPassPass(*PassRegistry::getPassRegistry());
3066   }
3067 
3068   bool runOnFunction(Function &F) override {
3069     if (skipFunction(F))
3070       return false;
3071 
3072     auto *LIWP = getAnalysisIfAvailable<LoopInfoWrapperPass>();
3073 
3074     auto *MSSAWP = getAnalysisIfAvailable<MemorySSAWrapperPass>();
3075     return Impl.runImpl(
3076         F, getAnalysis<AssumptionCacheTracker>().getAssumptionCache(F),
3077         getAnalysis<DominatorTreeWrapperPass>().getDomTree(),
3078         getAnalysis<TargetLibraryInfoWrapperPass>().getTLI(F),
3079         getAnalysis<AAResultsWrapperPass>().getAAResults(),
3080         Impl.isMemDepEnabled()
3081             ? &getAnalysis<MemoryDependenceWrapperPass>().getMemDep()
3082             : nullptr,
3083         LIWP ? &LIWP->getLoopInfo() : nullptr,
3084         &getAnalysis<OptimizationRemarkEmitterWrapperPass>().getORE(),
3085         MSSAWP ? &MSSAWP->getMSSA() : nullptr);
3086   }
3087 
3088   void getAnalysisUsage(AnalysisUsage &AU) const override {
3089     AU.addRequired<AssumptionCacheTracker>();
3090     AU.addRequired<DominatorTreeWrapperPass>();
3091     AU.addRequired<TargetLibraryInfoWrapperPass>();
3092     AU.addRequired<LoopInfoWrapperPass>();
3093     if (Impl.isMemDepEnabled())
3094       AU.addRequired<MemoryDependenceWrapperPass>();
3095     AU.addRequired<AAResultsWrapperPass>();
3096     AU.addPreserved<DominatorTreeWrapperPass>();
3097     AU.addPreserved<GlobalsAAWrapperPass>();
3098     AU.addPreserved<TargetLibraryInfoWrapperPass>();
3099     AU.addPreserved<LoopInfoWrapperPass>();
3100     AU.addRequired<OptimizationRemarkEmitterWrapperPass>();
3101     AU.addPreserved<MemorySSAWrapperPass>();
3102   }
3103 
3104 private:
3105   GVNPass Impl;
3106 };
3107 
3108 char GVNLegacyPass::ID = 0;
3109 
3110 INITIALIZE_PASS_BEGIN(GVNLegacyPass, "gvn", "Global Value Numbering", false, false)
3111 INITIALIZE_PASS_DEPENDENCY(AssumptionCacheTracker)
3112 INITIALIZE_PASS_DEPENDENCY(MemoryDependenceWrapperPass)
3113 INITIALIZE_PASS_DEPENDENCY(DominatorTreeWrapperPass)
3114 INITIALIZE_PASS_DEPENDENCY(TargetLibraryInfoWrapperPass)
3115 INITIALIZE_PASS_DEPENDENCY(AAResultsWrapperPass)
3116 INITIALIZE_PASS_DEPENDENCY(GlobalsAAWrapperPass)
3117 INITIALIZE_PASS_DEPENDENCY(OptimizationRemarkEmitterWrapperPass)
3118 INITIALIZE_PASS_END(GVNLegacyPass, "gvn", "Global Value Numbering", false, false)
3119 
3120 // The public interface to this file...
3121 FunctionPass *llvm::createGVNPass(bool NoMemDepAnalysis) {
3122   return new GVNLegacyPass(NoMemDepAnalysis);
3123 }
3124