1 //===-- LICM.cpp - Loop Invariant Code Motion Pass ------------------------===//
2 //
3 //                     The LLVM Compiler Infrastructure
4 //
5 // This file is distributed under the University of Illinois Open Source
6 // License. See LICENSE.TXT for details.
7 //
8 //===----------------------------------------------------------------------===//
9 //
10 // This pass performs loop invariant code motion, attempting to remove as much
11 // code from the body of a loop as possible.  It does this by either hoisting
12 // code into the preheader block, or by sinking code to the exit blocks if it is
13 // safe.  This pass also promotes must-aliased memory locations in the loop to
14 // live in registers, thus hoisting and sinking "invariant" loads and stores.
15 //
16 // This pass uses alias analysis for two purposes:
17 //
18 //  1. Moving loop invariant loads and calls out of loops.  If we can determine
19 //     that a load or call inside of a loop never aliases anything stored to,
20 //     we can hoist it or sink it like any other instruction.
21 //  2. Scalar Promotion of Memory - If there is a store instruction inside of
22 //     the loop, we try to move the store to happen AFTER the loop instead of
23 //     inside of the loop.  This can only happen if a few conditions are true:
24 //       A. The pointer stored through is loop invariant
25 //       B. There are no stores or loads in the loop which _may_ alias the
26 //          pointer.  There are no calls in the loop which mod/ref the pointer.
27 //     If these conditions are true, we can promote the loads and stores in the
28 //     loop of the pointer to use a temporary alloca'd variable.  We then use
29 //     the SSAUpdater to construct the appropriate SSA form for the value.
30 //
31 //===----------------------------------------------------------------------===//
32 
33 #include "llvm/Transforms/Scalar/LICM.h"
34 #include "llvm/ADT/Statistic.h"
35 #include "llvm/Analysis/AliasAnalysis.h"
36 #include "llvm/Analysis/AliasSetTracker.h"
37 #include "llvm/Analysis/BasicAliasAnalysis.h"
38 #include "llvm/Analysis/CaptureTracking.h"
39 #include "llvm/Analysis/ConstantFolding.h"
40 #include "llvm/Analysis/GlobalsModRef.h"
41 #include "llvm/Analysis/Loads.h"
42 #include "llvm/Analysis/LoopInfo.h"
43 #include "llvm/Analysis/LoopPass.h"
44 #include "llvm/Analysis/MemoryBuiltins.h"
45 #include "llvm/Analysis/MemorySSA.h"
46 #include "llvm/Analysis/OptimizationRemarkEmitter.h"
47 #include "llvm/Analysis/ScalarEvolution.h"
48 #include "llvm/Analysis/ScalarEvolutionAliasAnalysis.h"
49 #include "llvm/Analysis/TargetLibraryInfo.h"
50 #include "llvm/Transforms/Utils/Local.h"
51 #include "llvm/Analysis/ValueTracking.h"
52 #include "llvm/IR/CFG.h"
53 #include "llvm/IR/Constants.h"
54 #include "llvm/IR/DataLayout.h"
55 #include "llvm/IR/DerivedTypes.h"
56 #include "llvm/IR/Dominators.h"
57 #include "llvm/IR/Instructions.h"
58 #include "llvm/IR/IntrinsicInst.h"
59 #include "llvm/IR/LLVMContext.h"
60 #include "llvm/IR/Metadata.h"
61 #include "llvm/IR/PredIteratorCache.h"
62 #include "llvm/Support/CommandLine.h"
63 #include "llvm/Support/Debug.h"
64 #include "llvm/Support/raw_ostream.h"
65 #include "llvm/Transforms/Scalar.h"
66 #include "llvm/Transforms/Scalar/LoopPassManager.h"
67 #include "llvm/Transforms/Utils/BasicBlockUtils.h"
68 #include "llvm/Transforms/Utils/LoopUtils.h"
69 #include "llvm/Transforms/Utils/SSAUpdater.h"
70 #include <algorithm>
71 #include <utility>
72 using namespace llvm;
73 
74 #define DEBUG_TYPE "licm"
75 
76 STATISTIC(NumSunk, "Number of instructions sunk out of loop");
77 STATISTIC(NumHoisted, "Number of instructions hoisted out of loop");
78 STATISTIC(NumMovedLoads, "Number of load insts hoisted or sunk");
79 STATISTIC(NumMovedCalls, "Number of call insts hoisted or sunk");
80 STATISTIC(NumPromoted, "Number of memory locations promoted to registers");
81 
82 /// Memory promotion is enabled by default.
83 static cl::opt<bool>
84     DisablePromotion("disable-licm-promotion", cl::Hidden, cl::init(false),
85                      cl::desc("Disable memory promotion in LICM pass"));
86 
87 static cl::opt<uint32_t> MaxNumUsesTraversed(
88     "licm-max-num-uses-traversed", cl::Hidden, cl::init(8),
89     cl::desc("Max num uses visited for identifying load "
90              "invariance in loop using invariant start (default = 8)"));
91 
92 static bool inSubLoop(BasicBlock *BB, Loop *CurLoop, LoopInfo *LI);
93 static bool isNotUsedOrFreeInLoop(const Instruction &I, const Loop *CurLoop,
94                                   const LoopSafetyInfo *SafetyInfo,
95                                   TargetTransformInfo *TTI, bool &FreeInLoop);
96 static bool hoist(Instruction &I, const DominatorTree *DT, const Loop *CurLoop,
97                   const LoopSafetyInfo *SafetyInfo,
98                   OptimizationRemarkEmitter *ORE);
99 static bool sink(Instruction &I, LoopInfo *LI, DominatorTree *DT,
100                  const Loop *CurLoop, LoopSafetyInfo *SafetyInfo,
101                  OptimizationRemarkEmitter *ORE, bool FreeInLoop);
102 static bool isSafeToExecuteUnconditionally(Instruction &Inst,
103                                            const DominatorTree *DT,
104                                            const Loop *CurLoop,
105                                            const LoopSafetyInfo *SafetyInfo,
106                                            OptimizationRemarkEmitter *ORE,
107                                            const Instruction *CtxI = nullptr);
108 static bool pointerInvalidatedByLoop(Value *V, uint64_t Size,
109                                      const AAMDNodes &AAInfo,
110                                      AliasSetTracker *CurAST);
111 static Instruction *
112 CloneInstructionInExitBlock(Instruction &I, BasicBlock &ExitBlock, PHINode &PN,
113                             const LoopInfo *LI,
114                             const LoopSafetyInfo *SafetyInfo);
115 
116 namespace {
117 struct LoopInvariantCodeMotion {
118   bool runOnLoop(Loop *L, AliasAnalysis *AA, LoopInfo *LI, DominatorTree *DT,
119                  TargetLibraryInfo *TLI, TargetTransformInfo *TTI,
120                  ScalarEvolution *SE, MemorySSA *MSSA,
121                  OptimizationRemarkEmitter *ORE, bool DeleteAST);
122 
123   DenseMap<Loop *, AliasSetTracker *> &getLoopToAliasSetMap() {
124     return LoopToAliasSetMap;
125   }
126 
127 private:
128   DenseMap<Loop *, AliasSetTracker *> LoopToAliasSetMap;
129 
130   AliasSetTracker *collectAliasInfoForLoop(Loop *L, LoopInfo *LI,
131                                            AliasAnalysis *AA);
132 };
133 
134 struct LegacyLICMPass : public LoopPass {
135   static char ID; // Pass identification, replacement for typeid
136   LegacyLICMPass() : LoopPass(ID) {
137     initializeLegacyLICMPassPass(*PassRegistry::getPassRegistry());
138   }
139 
140   bool runOnLoop(Loop *L, LPPassManager &LPM) override {
141     if (skipLoop(L)) {
142       // If we have run LICM on a previous loop but now we are skipping
143       // (because we've hit the opt-bisect limit), we need to clear the
144       // loop alias information.
145       for (auto &LTAS : LICM.getLoopToAliasSetMap())
146         delete LTAS.second;
147       LICM.getLoopToAliasSetMap().clear();
148       return false;
149     }
150 
151     auto *SE = getAnalysisIfAvailable<ScalarEvolutionWrapperPass>();
152     MemorySSA *MSSA = EnableMSSALoopDependency
153                           ? (&getAnalysis<MemorySSAWrapperPass>().getMSSA())
154                           : nullptr;
155     // For the old PM, we can't use OptimizationRemarkEmitter as an analysis
156     // pass.  Function analyses need to be preserved across loop transformations
157     // but ORE cannot be preserved (see comment before the pass definition).
158     OptimizationRemarkEmitter ORE(L->getHeader()->getParent());
159     return LICM.runOnLoop(L,
160                           &getAnalysis<AAResultsWrapperPass>().getAAResults(),
161                           &getAnalysis<LoopInfoWrapperPass>().getLoopInfo(),
162                           &getAnalysis<DominatorTreeWrapperPass>().getDomTree(),
163                           &getAnalysis<TargetLibraryInfoWrapperPass>().getTLI(),
164                           &getAnalysis<TargetTransformInfoWrapperPass>().getTTI(
165                               *L->getHeader()->getParent()),
166                           SE ? &SE->getSE() : nullptr, MSSA, &ORE, false);
167   }
168 
169   /// This transformation requires natural loop information & requires that
170   /// loop preheaders be inserted into the CFG...
171   ///
172   void getAnalysisUsage(AnalysisUsage &AU) const override {
173     AU.addPreserved<DominatorTreeWrapperPass>();
174     AU.addPreserved<LoopInfoWrapperPass>();
175     AU.addRequired<TargetLibraryInfoWrapperPass>();
176     if (EnableMSSALoopDependency)
177       AU.addRequired<MemorySSAWrapperPass>();
178     AU.addRequired<TargetTransformInfoWrapperPass>();
179     getLoopAnalysisUsage(AU);
180   }
181 
182   using llvm::Pass::doFinalization;
183 
184   bool doFinalization() override {
185     assert(LICM.getLoopToAliasSetMap().empty() &&
186            "Didn't free loop alias sets");
187     return false;
188   }
189 
190 private:
191   LoopInvariantCodeMotion LICM;
192 
193   /// cloneBasicBlockAnalysis - Simple Analysis hook. Clone alias set info.
194   void cloneBasicBlockAnalysis(BasicBlock *From, BasicBlock *To,
195                                Loop *L) override;
196 
197   /// deleteAnalysisValue - Simple Analysis hook. Delete value V from alias
198   /// set.
199   void deleteAnalysisValue(Value *V, Loop *L) override;
200 
201   /// Simple Analysis hook. Delete loop L from alias set map.
202   void deleteAnalysisLoop(Loop *L) override;
203 };
204 } // namespace
205 
206 PreservedAnalyses LICMPass::run(Loop &L, LoopAnalysisManager &AM,
207                                 LoopStandardAnalysisResults &AR, LPMUpdater &) {
208   const auto &FAM =
209       AM.getResult<FunctionAnalysisManagerLoopProxy>(L, AR).getManager();
210   Function *F = L.getHeader()->getParent();
211 
212   auto *ORE = FAM.getCachedResult<OptimizationRemarkEmitterAnalysis>(*F);
213   // FIXME: This should probably be optional rather than required.
214   if (!ORE)
215     report_fatal_error("LICM: OptimizationRemarkEmitterAnalysis not "
216                        "cached at a higher level");
217 
218   LoopInvariantCodeMotion LICM;
219   if (!LICM.runOnLoop(&L, &AR.AA, &AR.LI, &AR.DT, &AR.TLI, &AR.TTI, &AR.SE,
220                       AR.MSSA, ORE, true))
221     return PreservedAnalyses::all();
222 
223   auto PA = getLoopPassPreservedAnalyses();
224 
225   PA.preserve<DominatorTreeAnalysis>();
226   PA.preserve<LoopAnalysis>();
227 
228   return PA;
229 }
230 
231 char LegacyLICMPass::ID = 0;
232 INITIALIZE_PASS_BEGIN(LegacyLICMPass, "licm", "Loop Invariant Code Motion",
233                       false, false)
234 INITIALIZE_PASS_DEPENDENCY(LoopPass)
235 INITIALIZE_PASS_DEPENDENCY(TargetLibraryInfoWrapperPass)
236 INITIALIZE_PASS_DEPENDENCY(TargetTransformInfoWrapperPass)
237 INITIALIZE_PASS_DEPENDENCY(MemorySSAWrapperPass)
238 INITIALIZE_PASS_END(LegacyLICMPass, "licm", "Loop Invariant Code Motion", false,
239                     false)
240 
241 Pass *llvm::createLICMPass() { return new LegacyLICMPass(); }
242 
243 /// Hoist expressions out of the specified loop. Note, alias info for inner
244 /// loop is not preserved so it is not a good idea to run LICM multiple
245 /// times on one loop.
246 /// We should delete AST for inner loops in the new pass manager to avoid
247 /// memory leak.
248 ///
249 bool LoopInvariantCodeMotion::runOnLoop(
250     Loop *L, AliasAnalysis *AA, LoopInfo *LI, DominatorTree *DT,
251     TargetLibraryInfo *TLI, TargetTransformInfo *TTI, ScalarEvolution *SE,
252     MemorySSA *MSSA, OptimizationRemarkEmitter *ORE, bool DeleteAST) {
253   bool Changed = false;
254 
255   assert(L->isLCSSAForm(*DT) && "Loop is not in LCSSA form.");
256 
257   AliasSetTracker *CurAST = collectAliasInfoForLoop(L, LI, AA);
258 
259   // Get the preheader block to move instructions into...
260   BasicBlock *Preheader = L->getLoopPreheader();
261 
262   // Compute loop safety information.
263   LoopSafetyInfo SafetyInfo;
264   computeLoopSafetyInfo(&SafetyInfo, L);
265 
266   // We want to visit all of the instructions in this loop... that are not parts
267   // of our subloops (they have already had their invariants hoisted out of
268   // their loop, into this loop, so there is no need to process the BODIES of
269   // the subloops).
270   //
271   // Traverse the body of the loop in depth first order on the dominator tree so
272   // that we are guaranteed to see definitions before we see uses.  This allows
273   // us to sink instructions in one pass, without iteration.  After sinking
274   // instructions, we perform another pass to hoist them out of the loop.
275   //
276   if (L->hasDedicatedExits())
277     Changed |= sinkRegion(DT->getNode(L->getHeader()), AA, LI, DT, TLI, TTI, L,
278                           CurAST, &SafetyInfo, ORE);
279   if (Preheader)
280     Changed |= hoistRegion(DT->getNode(L->getHeader()), AA, LI, DT, TLI, L,
281                            CurAST, &SafetyInfo, ORE);
282 
283   // Now that all loop invariants have been removed from the loop, promote any
284   // memory references to scalars that we can.
285   // Don't sink stores from loops without dedicated block exits. Exits
286   // containing indirect branches are not transformed by loop simplify,
287   // make sure we catch that. An additional load may be generated in the
288   // preheader for SSA updater, so also avoid sinking when no preheader
289   // is available.
290   if (!DisablePromotion && Preheader && L->hasDedicatedExits()) {
291     // Figure out the loop exits and their insertion points
292     SmallVector<BasicBlock *, 8> ExitBlocks;
293     L->getUniqueExitBlocks(ExitBlocks);
294 
295     // We can't insert into a catchswitch.
296     bool HasCatchSwitch = llvm::any_of(ExitBlocks, [](BasicBlock *Exit) {
297       return isa<CatchSwitchInst>(Exit->getTerminator());
298     });
299 
300     if (!HasCatchSwitch) {
301       SmallVector<Instruction *, 8> InsertPts;
302       InsertPts.reserve(ExitBlocks.size());
303       for (BasicBlock *ExitBlock : ExitBlocks)
304         InsertPts.push_back(&*ExitBlock->getFirstInsertionPt());
305 
306       PredIteratorCache PIC;
307 
308       bool Promoted = false;
309 
310       // Loop over all of the alias sets in the tracker object.
311       for (AliasSet &AS : *CurAST) {
312         // We can promote this alias set if it has a store, if it is a "Must"
313         // alias set, if the pointer is loop invariant, and if we are not
314         // eliminating any volatile loads or stores.
315         if (AS.isForwardingAliasSet() || !AS.isMod() || !AS.isMustAlias() ||
316             AS.isVolatile() || !L->isLoopInvariant(AS.begin()->getValue()))
317           continue;
318 
319         assert(
320             !AS.empty() &&
321             "Must alias set should have at least one pointer element in it!");
322 
323         SmallSetVector<Value *, 8> PointerMustAliases;
324         for (const auto &ASI : AS)
325           PointerMustAliases.insert(ASI.getValue());
326 
327         Promoted |= promoteLoopAccessesToScalars(PointerMustAliases, ExitBlocks,
328                                                  InsertPts, PIC, LI, DT, TLI, L,
329                                                  CurAST, &SafetyInfo, ORE);
330       }
331 
332       // Once we have promoted values across the loop body we have to
333       // recursively reform LCSSA as any nested loop may now have values defined
334       // within the loop used in the outer loop.
335       // FIXME: This is really heavy handed. It would be a bit better to use an
336       // SSAUpdater strategy during promotion that was LCSSA aware and reformed
337       // it as it went.
338       if (Promoted)
339         formLCSSARecursively(*L, *DT, LI, SE);
340 
341       Changed |= Promoted;
342     }
343   }
344 
345   // Check that neither this loop nor its parent have had LCSSA broken. LICM is
346   // specifically moving instructions across the loop boundary and so it is
347   // especially in need of sanity checking here.
348   assert(L->isLCSSAForm(*DT) && "Loop not left in LCSSA form after LICM!");
349   assert((!L->getParentLoop() || L->getParentLoop()->isLCSSAForm(*DT)) &&
350          "Parent loop not left in LCSSA form after LICM!");
351 
352   // If this loop is nested inside of another one, save the alias information
353   // for when we process the outer loop.
354   if (L->getParentLoop() && !DeleteAST)
355     LoopToAliasSetMap[L] = CurAST;
356   else
357     delete CurAST;
358 
359   if (Changed && SE)
360     SE->forgetLoopDispositions(L);
361   return Changed;
362 }
363 
364 /// Walk the specified region of the CFG (defined by all blocks dominated by
365 /// the specified block, and that are in the current loop) in reverse depth
366 /// first order w.r.t the DominatorTree.  This allows us to visit uses before
367 /// definitions, allowing us to sink a loop body in one pass without iteration.
368 ///
369 bool llvm::sinkRegion(DomTreeNode *N, AliasAnalysis *AA, LoopInfo *LI,
370                       DominatorTree *DT, TargetLibraryInfo *TLI,
371                       TargetTransformInfo *TTI, Loop *CurLoop,
372                       AliasSetTracker *CurAST, LoopSafetyInfo *SafetyInfo,
373                       OptimizationRemarkEmitter *ORE) {
374 
375   // Verify inputs.
376   assert(N != nullptr && AA != nullptr && LI != nullptr && DT != nullptr &&
377          CurLoop != nullptr && CurAST != nullptr && SafetyInfo != nullptr &&
378          "Unexpected input to sinkRegion");
379 
380   // We want to visit children before parents. We will enque all the parents
381   // before their children in the worklist and process the worklist in reverse
382   // order.
383   SmallVector<DomTreeNode *, 16> Worklist = collectChildrenInLoop(N, CurLoop);
384 
385   bool Changed = false;
386   for (DomTreeNode *DTN : reverse(Worklist)) {
387     BasicBlock *BB = DTN->getBlock();
388     // Only need to process the contents of this block if it is not part of a
389     // subloop (which would already have been processed).
390     if (inSubLoop(BB, CurLoop, LI))
391       continue;
392 
393     for (BasicBlock::iterator II = BB->end(); II != BB->begin();) {
394       Instruction &I = *--II;
395 
396       // If the instruction is dead, we would try to sink it because it isn't
397       // used in the loop, instead, just delete it.
398       if (isInstructionTriviallyDead(&I, TLI)) {
399         LLVM_DEBUG(dbgs() << "LICM deleting dead inst: " << I << '\n');
400         salvageDebugInfo(I);
401         ++II;
402         CurAST->deleteValue(&I);
403         I.eraseFromParent();
404         Changed = true;
405         continue;
406       }
407 
408       // Check to see if we can sink this instruction to the exit blocks
409       // of the loop.  We can do this if the all users of the instruction are
410       // outside of the loop.  In this case, it doesn't even matter if the
411       // operands of the instruction are loop invariant.
412       //
413       bool FreeInLoop = false;
414       if (isNotUsedOrFreeInLoop(I, CurLoop, SafetyInfo, TTI, FreeInLoop) &&
415           canSinkOrHoistInst(I, AA, DT, CurLoop, CurAST, true, ORE)) {
416         if (sink(I, LI, DT, CurLoop, SafetyInfo, ORE, FreeInLoop)) {
417           if (!FreeInLoop) {
418             ++II;
419             CurAST->deleteValue(&I);
420             I.eraseFromParent();
421           }
422           Changed = true;
423         }
424       }
425     }
426   }
427   return Changed;
428 }
429 
430 /// Walk the specified region of the CFG (defined by all blocks dominated by
431 /// the specified block, and that are in the current loop) in depth first
432 /// order w.r.t the DominatorTree.  This allows us to visit definitions before
433 /// uses, allowing us to hoist a loop body in one pass without iteration.
434 ///
435 bool llvm::hoistRegion(DomTreeNode *N, AliasAnalysis *AA, LoopInfo *LI,
436                        DominatorTree *DT, TargetLibraryInfo *TLI, Loop *CurLoop,
437                        AliasSetTracker *CurAST, LoopSafetyInfo *SafetyInfo,
438                        OptimizationRemarkEmitter *ORE) {
439   // Verify inputs.
440   assert(N != nullptr && AA != nullptr && LI != nullptr && DT != nullptr &&
441          CurLoop != nullptr && CurAST != nullptr && SafetyInfo != nullptr &&
442          "Unexpected input to hoistRegion");
443 
444   // We want to visit parents before children. We will enque all the parents
445   // before their children in the worklist and process the worklist in order.
446   SmallVector<DomTreeNode *, 16> Worklist = collectChildrenInLoop(N, CurLoop);
447 
448   bool Changed = false;
449   for (DomTreeNode *DTN : Worklist) {
450     BasicBlock *BB = DTN->getBlock();
451     // Only need to process the contents of this block if it is not part of a
452     // subloop (which would already have been processed).
453     if (inSubLoop(BB, CurLoop, LI))
454       continue;
455 
456     // Keep track of whether the prefix of instructions visited so far are such
457     // that the next instruction visited is guaranteed to execute if the loop
458     // is entered.
459     bool IsMustExecute = CurLoop->getHeader() == BB;
460 
461     for (BasicBlock::iterator II = BB->begin(), E = BB->end(); II != E;) {
462       Instruction &I = *II++;
463       // Try constant folding this instruction.  If all the operands are
464       // constants, it is technically hoistable, but it would be better to
465       // just fold it.
466       if (Constant *C = ConstantFoldInstruction(
467               &I, I.getModule()->getDataLayout(), TLI)) {
468         LLVM_DEBUG(dbgs() << "LICM folding inst: " << I << "  --> " << *C
469                           << '\n');
470         CurAST->copyValue(&I, C);
471         I.replaceAllUsesWith(C);
472         if (isInstructionTriviallyDead(&I, TLI)) {
473           CurAST->deleteValue(&I);
474           I.eraseFromParent();
475         }
476         Changed = true;
477         continue;
478       }
479 
480       // Try hoisting the instruction out to the preheader.  We can only do
481       // this if all of the operands of the instruction are loop invariant and
482       // if it is safe to hoist the instruction.
483       //
484       if (CurLoop->hasLoopInvariantOperands(&I) &&
485           canSinkOrHoistInst(I, AA, DT, CurLoop, CurAST, true, ORE) &&
486           (IsMustExecute ||
487            isSafeToExecuteUnconditionally(
488                I, DT, CurLoop, SafetyInfo, ORE,
489                CurLoop->getLoopPreheader()->getTerminator()))) {
490         Changed |= hoist(I, DT, CurLoop, SafetyInfo, ORE);
491         continue;
492       }
493 
494       // Attempt to remove floating point division out of the loop by
495       // converting it to a reciprocal multiplication.
496       if (I.getOpcode() == Instruction::FDiv &&
497           CurLoop->isLoopInvariant(I.getOperand(1)) &&
498           I.hasAllowReciprocal()) {
499         auto Divisor = I.getOperand(1);
500         auto One = llvm::ConstantFP::get(Divisor->getType(), 1.0);
501         auto ReciprocalDivisor = BinaryOperator::CreateFDiv(One, Divisor);
502         ReciprocalDivisor->setFastMathFlags(I.getFastMathFlags());
503         ReciprocalDivisor->insertBefore(&I);
504 
505         auto Product =
506             BinaryOperator::CreateFMul(I.getOperand(0), ReciprocalDivisor);
507         Product->setFastMathFlags(I.getFastMathFlags());
508         Product->insertAfter(&I);
509         I.replaceAllUsesWith(Product);
510         I.eraseFromParent();
511 
512         hoist(*ReciprocalDivisor, DT, CurLoop, SafetyInfo, ORE);
513         Changed = true;
514         continue;
515       }
516 
517       if (IsMustExecute)
518         IsMustExecute = isGuaranteedToTransferExecutionToSuccessor(&I);
519     }
520   }
521 
522   return Changed;
523 }
524 
525 // Return true if LI is invariant within scope of the loop. LI is invariant if
526 // CurLoop is dominated by an invariant.start representing the same memory
527 // location and size as the memory location LI loads from, and also the
528 // invariant.start has no uses.
529 static bool isLoadInvariantInLoop(LoadInst *LI, DominatorTree *DT,
530                                   Loop *CurLoop) {
531   Value *Addr = LI->getOperand(0);
532   const DataLayout &DL = LI->getModule()->getDataLayout();
533   const uint32_t LocSizeInBits = DL.getTypeSizeInBits(
534       cast<PointerType>(Addr->getType())->getElementType());
535 
536   // if the type is i8 addrspace(x)*, we know this is the type of
537   // llvm.invariant.start operand
538   auto *PtrInt8Ty = PointerType::get(Type::getInt8Ty(LI->getContext()),
539                                      LI->getPointerAddressSpace());
540   unsigned BitcastsVisited = 0;
541   // Look through bitcasts until we reach the i8* type (this is invariant.start
542   // operand type).
543   while (Addr->getType() != PtrInt8Ty) {
544     auto *BC = dyn_cast<BitCastInst>(Addr);
545     // Avoid traversing high number of bitcast uses.
546     if (++BitcastsVisited > MaxNumUsesTraversed || !BC)
547       return false;
548     Addr = BC->getOperand(0);
549   }
550 
551   unsigned UsesVisited = 0;
552   // Traverse all uses of the load operand value, to see if invariant.start is
553   // one of the uses, and whether it dominates the load instruction.
554   for (auto *U : Addr->users()) {
555     // Avoid traversing for Load operand with high number of users.
556     if (++UsesVisited > MaxNumUsesTraversed)
557       return false;
558     IntrinsicInst *II = dyn_cast<IntrinsicInst>(U);
559     // If there are escaping uses of invariant.start instruction, the load maybe
560     // non-invariant.
561     if (!II || II->getIntrinsicID() != Intrinsic::invariant_start ||
562         !II->use_empty())
563       continue;
564     unsigned InvariantSizeInBits =
565         cast<ConstantInt>(II->getArgOperand(0))->getSExtValue() * 8;
566     // Confirm the invariant.start location size contains the load operand size
567     // in bits. Also, the invariant.start should dominate the load, and we
568     // should not hoist the load out of a loop that contains this dominating
569     // invariant.start.
570     if (LocSizeInBits <= InvariantSizeInBits &&
571         DT->properlyDominates(II->getParent(), CurLoop->getHeader()))
572       return true;
573   }
574 
575   return false;
576 }
577 
578 namespace {
579 /// Return true if-and-only-if we know how to (mechanically) both hoist and
580 /// sink a given instruction out of a loop.  Does not address legality
581 /// concerns such as aliasing or speculation safety.
582 bool isHoistableAndSinkableInst(Instruction &I) {
583   // Only these instructions are hoistable/sinkable.
584   return (isa<LoadInst>(I) || isa<CallInst>(I) ||
585           isa<BinaryOperator>(I) || isa<CastInst>(I) ||
586           isa<SelectInst>(I) || isa<GetElementPtrInst>(I) ||
587           isa<CmpInst>(I) || isa<InsertElementInst>(I) ||
588           isa<ExtractElementInst>(I) || isa<ShuffleVectorInst>(I) ||
589           isa<ExtractValueInst>(I) || isa<InsertValueInst>(I));
590 }
591 /// Return true if all of the alias sets within this AST are known not to
592 /// contain a Mod.
593 bool isReadOnly(AliasSetTracker *CurAST) {
594   for (AliasSet &AS : *CurAST) {
595     if (!AS.isForwardingAliasSet() && AS.isMod()) {
596       return false;
597     }
598   }
599   return true;
600 }
601 }
602 
603 bool llvm::canSinkOrHoistInst(Instruction &I, AAResults *AA, DominatorTree *DT,
604                               Loop *CurLoop, AliasSetTracker *CurAST,
605                               bool TargetExecutesOncePerLoop,
606                               OptimizationRemarkEmitter *ORE) {
607   // If we don't understand the instruction, bail early.
608   if (!isHoistableAndSinkableInst(I))
609     return false;
610 
611   // Loads have extra constraints we have to verify before we can hoist them.
612   if (LoadInst *LI = dyn_cast<LoadInst>(&I)) {
613     if (!LI->isUnordered())
614       return false; // Don't sink/hoist volatile or ordered atomic loads!
615 
616     // Loads from constant memory are always safe to move, even if they end up
617     // in the same alias set as something that ends up being modified.
618     if (AA->pointsToConstantMemory(LI->getOperand(0)))
619       return true;
620     if (LI->getMetadata(LLVMContext::MD_invariant_load))
621       return true;
622 
623     if (LI->isAtomic() && !TargetExecutesOncePerLoop)
624       return false; // Don't risk duplicating unordered loads
625 
626     // This checks for an invariant.start dominating the load.
627     if (isLoadInvariantInLoop(LI, DT, CurLoop))
628       return true;
629 
630     // Don't hoist loads which have may-aliased stores in loop.
631     uint64_t Size = 0;
632     if (LI->getType()->isSized())
633       Size = I.getModule()->getDataLayout().getTypeStoreSize(LI->getType());
634 
635     AAMDNodes AAInfo;
636     LI->getAAMetadata(AAInfo);
637 
638     bool Invalidated =
639         pointerInvalidatedByLoop(LI->getOperand(0), Size, AAInfo, CurAST);
640     // Check loop-invariant address because this may also be a sinkable load
641     // whose address is not necessarily loop-invariant.
642     if (ORE && Invalidated && CurLoop->isLoopInvariant(LI->getPointerOperand()))
643       ORE->emit([&]() {
644         return OptimizationRemarkMissed(
645                    DEBUG_TYPE, "LoadWithLoopInvariantAddressInvalidated", LI)
646                << "failed to move load with loop-invariant address "
647                   "because the loop may invalidate its value";
648       });
649 
650     return !Invalidated;
651   } else if (CallInst *CI = dyn_cast<CallInst>(&I)) {
652     // Don't sink or hoist dbg info; it's legal, but not useful.
653     if (isa<DbgInfoIntrinsic>(I))
654       return false;
655 
656     // Don't sink calls which can throw.
657     if (CI->mayThrow())
658       return false;
659 
660     // Handle simple cases by querying alias analysis.
661     FunctionModRefBehavior Behavior = AA->getModRefBehavior(CI);
662     if (Behavior == FMRB_DoesNotAccessMemory)
663       return true;
664     if (AliasAnalysis::onlyReadsMemory(Behavior)) {
665       // A readonly argmemonly function only reads from memory pointed to by
666       // it's arguments with arbitrary offsets.  If we can prove there are no
667       // writes to this memory in the loop, we can hoist or sink.
668       if (AliasAnalysis::onlyAccessesArgPointees(Behavior)) {
669         for (Value *Op : CI->arg_operands())
670           if (Op->getType()->isPointerTy() &&
671               pointerInvalidatedByLoop(Op, MemoryLocation::UnknownSize,
672                                        AAMDNodes(), CurAST))
673             return false;
674         return true;
675       }
676 
677       // If this call only reads from memory and there are no writes to memory
678       // in the loop, we can hoist or sink the call as appropriate.
679       if (isReadOnly(CurAST))
680         return true;
681     }
682 
683     // FIXME: This should use mod/ref information to see if we can hoist or
684     // sink the call.
685 
686     return false;
687   }
688 
689   // We've established mechanical ability and aliasing, it's up to the caller
690   // to check fault safety
691   return true;
692 }
693 
694 /// Returns true if a PHINode is a trivially replaceable with an
695 /// Instruction.
696 /// This is true when all incoming values are that instruction.
697 /// This pattern occurs most often with LCSSA PHI nodes.
698 ///
699 static bool isTriviallyReplaceablePHI(const PHINode &PN, const Instruction &I) {
700   for (const Value *IncValue : PN.incoming_values())
701     if (IncValue != &I)
702       return false;
703 
704   return true;
705 }
706 
707 /// Return true if the instruction is free in the loop.
708 static bool isFreeInLoop(const Instruction &I, const Loop *CurLoop,
709                          const TargetTransformInfo *TTI) {
710 
711   if (const GetElementPtrInst *GEP = dyn_cast<GetElementPtrInst>(&I)) {
712     if (TTI->getUserCost(GEP) != TargetTransformInfo::TCC_Free)
713       return false;
714     // For a GEP, we cannot simply use getUserCost because currently it
715     // optimistically assume that a GEP will fold into addressing mode
716     // regardless of its users.
717     const BasicBlock *BB = GEP->getParent();
718     for (const User *U : GEP->users()) {
719       const Instruction *UI = cast<Instruction>(U);
720       if (CurLoop->contains(UI) &&
721           (BB != UI->getParent() ||
722            (!isa<StoreInst>(UI) && !isa<LoadInst>(UI))))
723         return false;
724     }
725     return true;
726   } else
727     return TTI->getUserCost(&I) == TargetTransformInfo::TCC_Free;
728 }
729 
730 /// Return true if the only users of this instruction are outside of
731 /// the loop. If this is true, we can sink the instruction to the exit
732 /// blocks of the loop.
733 ///
734 /// We also return true if the instruction could be folded away in lowering.
735 /// (e.g.,  a GEP can be folded into a load as an addressing mode in the loop).
736 static bool isNotUsedOrFreeInLoop(const Instruction &I, const Loop *CurLoop,
737                                   const LoopSafetyInfo *SafetyInfo,
738                                   TargetTransformInfo *TTI, bool &FreeInLoop) {
739   const auto &BlockColors = SafetyInfo->BlockColors;
740   bool IsFree = isFreeInLoop(I, CurLoop, TTI);
741   for (const User *U : I.users()) {
742     const Instruction *UI = cast<Instruction>(U);
743     if (const PHINode *PN = dyn_cast<PHINode>(UI)) {
744       const BasicBlock *BB = PN->getParent();
745       // We cannot sink uses in catchswitches.
746       if (isa<CatchSwitchInst>(BB->getTerminator()))
747         return false;
748 
749       // We need to sink a callsite to a unique funclet.  Avoid sinking if the
750       // phi use is too muddled.
751       if (isa<CallInst>(I))
752         if (!BlockColors.empty() &&
753             BlockColors.find(const_cast<BasicBlock *>(BB))->second.size() != 1)
754           return false;
755     }
756 
757     if (CurLoop->contains(UI)) {
758       if (IsFree) {
759         FreeInLoop = true;
760         continue;
761       }
762       return false;
763     }
764   }
765   return true;
766 }
767 
768 static Instruction *
769 CloneInstructionInExitBlock(Instruction &I, BasicBlock &ExitBlock, PHINode &PN,
770                             const LoopInfo *LI,
771                             const LoopSafetyInfo *SafetyInfo) {
772   Instruction *New;
773   if (auto *CI = dyn_cast<CallInst>(&I)) {
774     const auto &BlockColors = SafetyInfo->BlockColors;
775 
776     // Sinking call-sites need to be handled differently from other
777     // instructions.  The cloned call-site needs a funclet bundle operand
778     // appropriate for it's location in the CFG.
779     SmallVector<OperandBundleDef, 1> OpBundles;
780     for (unsigned BundleIdx = 0, BundleEnd = CI->getNumOperandBundles();
781          BundleIdx != BundleEnd; ++BundleIdx) {
782       OperandBundleUse Bundle = CI->getOperandBundleAt(BundleIdx);
783       if (Bundle.getTagID() == LLVMContext::OB_funclet)
784         continue;
785 
786       OpBundles.emplace_back(Bundle);
787     }
788 
789     if (!BlockColors.empty()) {
790       const ColorVector &CV = BlockColors.find(&ExitBlock)->second;
791       assert(CV.size() == 1 && "non-unique color for exit block!");
792       BasicBlock *BBColor = CV.front();
793       Instruction *EHPad = BBColor->getFirstNonPHI();
794       if (EHPad->isEHPad())
795         OpBundles.emplace_back("funclet", EHPad);
796     }
797 
798     New = CallInst::Create(CI, OpBundles);
799   } else {
800     New = I.clone();
801   }
802 
803   ExitBlock.getInstList().insert(ExitBlock.getFirstInsertionPt(), New);
804   if (!I.getName().empty())
805     New->setName(I.getName() + ".le");
806 
807   // Build LCSSA PHI nodes for any in-loop operands. Note that this is
808   // particularly cheap because we can rip off the PHI node that we're
809   // replacing for the number and blocks of the predecessors.
810   // OPT: If this shows up in a profile, we can instead finish sinking all
811   // invariant instructions, and then walk their operands to re-establish
812   // LCSSA. That will eliminate creating PHI nodes just to nuke them when
813   // sinking bottom-up.
814   for (User::op_iterator OI = New->op_begin(), OE = New->op_end(); OI != OE;
815        ++OI)
816     if (Instruction *OInst = dyn_cast<Instruction>(*OI))
817       if (Loop *OLoop = LI->getLoopFor(OInst->getParent()))
818         if (!OLoop->contains(&PN)) {
819           PHINode *OpPN =
820               PHINode::Create(OInst->getType(), PN.getNumIncomingValues(),
821                               OInst->getName() + ".lcssa", &ExitBlock.front());
822           for (unsigned i = 0, e = PN.getNumIncomingValues(); i != e; ++i)
823             OpPN->addIncoming(OInst, PN.getIncomingBlock(i));
824           *OI = OpPN;
825         }
826   return New;
827 }
828 
829 static Instruction *sinkThroughTriviallyReplaceablePHI(
830     PHINode *TPN, Instruction *I, LoopInfo *LI,
831     SmallDenseMap<BasicBlock *, Instruction *, 32> &SunkCopies,
832     const LoopSafetyInfo *SafetyInfo, const Loop *CurLoop) {
833   assert(isTriviallyReplaceablePHI(*TPN, *I) &&
834          "Expect only trivially replaceable PHI");
835   BasicBlock *ExitBlock = TPN->getParent();
836   Instruction *New;
837   auto It = SunkCopies.find(ExitBlock);
838   if (It != SunkCopies.end())
839     New = It->second;
840   else
841     New = SunkCopies[ExitBlock] =
842         CloneInstructionInExitBlock(*I, *ExitBlock, *TPN, LI, SafetyInfo);
843   return New;
844 }
845 
846 static bool canSplitPredecessors(PHINode *PN, LoopSafetyInfo *SafetyInfo) {
847   BasicBlock *BB = PN->getParent();
848   if (!BB->canSplitPredecessors())
849     return false;
850   // It's not impossible to split EHPad blocks, but if BlockColors already exist
851   // it require updating BlockColors for all offspring blocks accordingly. By
852   // skipping such corner case, we can make updating BlockColors after splitting
853   // predecessor fairly simple.
854   if (!SafetyInfo->BlockColors.empty() && BB->getFirstNonPHI()->isEHPad())
855     return false;
856   for (pred_iterator PI = pred_begin(BB), E = pred_end(BB); PI != E; ++PI) {
857     BasicBlock *BBPred = *PI;
858     if (isa<IndirectBrInst>(BBPred->getTerminator()))
859       return false;
860   }
861   return true;
862 }
863 
864 static void splitPredecessorsOfLoopExit(PHINode *PN, DominatorTree *DT,
865                                         LoopInfo *LI, const Loop *CurLoop,
866                                         LoopSafetyInfo *SafetyInfo) {
867 #ifndef NDEBUG
868   SmallVector<BasicBlock *, 32> ExitBlocks;
869   CurLoop->getUniqueExitBlocks(ExitBlocks);
870   SmallPtrSet<BasicBlock *, 32> ExitBlockSet(ExitBlocks.begin(),
871                                              ExitBlocks.end());
872 #endif
873   BasicBlock *ExitBB = PN->getParent();
874   assert(ExitBlockSet.count(ExitBB) && "Expect the PHI is in an exit block.");
875 
876   // Split predecessors of the loop exit to make instructions in the loop are
877   // exposed to exit blocks through trivially replaceable PHIs while keeping the
878   // loop in the canonical form where each predecessor of each exit block should
879   // be contained within the loop. For example, this will convert the loop below
880   // from
881   //
882   // LB1:
883   //   %v1 =
884   //   br %LE, %LB2
885   // LB2:
886   //   %v2 =
887   //   br %LE, %LB1
888   // LE:
889   //   %p = phi [%v1, %LB1], [%v2, %LB2] <-- non-trivially replaceable
890   //
891   // to
892   //
893   // LB1:
894   //   %v1 =
895   //   br %LE.split, %LB2
896   // LB2:
897   //   %v2 =
898   //   br %LE.split2, %LB1
899   // LE.split:
900   //   %p1 = phi [%v1, %LB1]  <-- trivially replaceable
901   //   br %LE
902   // LE.split2:
903   //   %p2 = phi [%v2, %LB2]  <-- trivially replaceable
904   //   br %LE
905   // LE:
906   //   %p = phi [%p1, %LE.split], [%p2, %LE.split2]
907   //
908   auto &BlockColors = SafetyInfo->BlockColors;
909   SmallSetVector<BasicBlock *, 8> PredBBs(pred_begin(ExitBB), pred_end(ExitBB));
910   while (!PredBBs.empty()) {
911     BasicBlock *PredBB = *PredBBs.begin();
912     assert(CurLoop->contains(PredBB) &&
913            "Expect all predecessors are in the loop");
914     if (PN->getBasicBlockIndex(PredBB) >= 0) {
915       BasicBlock *NewPred = SplitBlockPredecessors(
916           ExitBB, PredBB, ".split.loop.exit", DT, LI, true);
917       // Since we do not allow splitting EH-block with BlockColors in
918       // canSplitPredecessors(), we can simply assign predecessor's color to
919       // the new block.
920       if (!BlockColors.empty()) {
921         // Grab a reference to the ColorVector to be inserted before getting the
922         // reference to the vector we are copying because inserting the new
923         // element in BlockColors might cause the map to be reallocated.
924         ColorVector &ColorsForNewBlock = BlockColors[NewPred];
925         ColorVector &ColorsForOldBlock = BlockColors[PredBB];
926         ColorsForNewBlock = ColorsForOldBlock;
927       }
928     }
929     PredBBs.remove(PredBB);
930   }
931 }
932 
933 /// When an instruction is found to only be used outside of the loop, this
934 /// function moves it to the exit blocks and patches up SSA form as needed.
935 /// This method is guaranteed to remove the original instruction from its
936 /// position, and may either delete it or move it to outside of the loop.
937 ///
938 static bool sink(Instruction &I, LoopInfo *LI, DominatorTree *DT,
939                  const Loop *CurLoop, LoopSafetyInfo *SafetyInfo,
940                  OptimizationRemarkEmitter *ORE, bool FreeInLoop) {
941   LLVM_DEBUG(dbgs() << "LICM sinking instruction: " << I << "\n");
942   ORE->emit([&]() {
943     return OptimizationRemark(DEBUG_TYPE, "InstSunk", &I)
944            << "sinking " << ore::NV("Inst", &I);
945   });
946   bool Changed = false;
947   if (isa<LoadInst>(I))
948     ++NumMovedLoads;
949   else if (isa<CallInst>(I))
950     ++NumMovedCalls;
951   ++NumSunk;
952 
953   // Iterate over users to be ready for actual sinking. Replace users via
954   // unrechable blocks with undef and make all user PHIs trivially replcable.
955   SmallPtrSet<Instruction *, 8> VisitedUsers;
956   for (Value::user_iterator UI = I.user_begin(), UE = I.user_end(); UI != UE;) {
957     auto *User = cast<Instruction>(*UI);
958     Use &U = UI.getUse();
959     ++UI;
960 
961     if (VisitedUsers.count(User) || CurLoop->contains(User))
962       continue;
963 
964     if (!DT->isReachableFromEntry(User->getParent())) {
965       U = UndefValue::get(I.getType());
966       Changed = true;
967       continue;
968     }
969 
970     // The user must be a PHI node.
971     PHINode *PN = cast<PHINode>(User);
972 
973     // Surprisingly, instructions can be used outside of loops without any
974     // exits.  This can only happen in PHI nodes if the incoming block is
975     // unreachable.
976     BasicBlock *BB = PN->getIncomingBlock(U);
977     if (!DT->isReachableFromEntry(BB)) {
978       U = UndefValue::get(I.getType());
979       Changed = true;
980       continue;
981     }
982 
983     VisitedUsers.insert(PN);
984     if (isTriviallyReplaceablePHI(*PN, I))
985       continue;
986 
987     if (!canSplitPredecessors(PN, SafetyInfo))
988       return Changed;
989 
990     // Split predecessors of the PHI so that we can make users trivially
991     // replaceable.
992     splitPredecessorsOfLoopExit(PN, DT, LI, CurLoop, SafetyInfo);
993 
994     // Should rebuild the iterators, as they may be invalidated by
995     // splitPredecessorsOfLoopExit().
996     UI = I.user_begin();
997     UE = I.user_end();
998   }
999 
1000   if (VisitedUsers.empty())
1001     return Changed;
1002 
1003 #ifndef NDEBUG
1004   SmallVector<BasicBlock *, 32> ExitBlocks;
1005   CurLoop->getUniqueExitBlocks(ExitBlocks);
1006   SmallPtrSet<BasicBlock *, 32> ExitBlockSet(ExitBlocks.begin(),
1007                                              ExitBlocks.end());
1008 #endif
1009 
1010   // Clones of this instruction. Don't create more than one per exit block!
1011   SmallDenseMap<BasicBlock *, Instruction *, 32> SunkCopies;
1012 
1013   // If this instruction is only used outside of the loop, then all users are
1014   // PHI nodes in exit blocks due to LCSSA form. Just RAUW them with clones of
1015   // the instruction.
1016   SmallSetVector<User*, 8> Users(I.user_begin(), I.user_end());
1017   for (auto *UI : Users) {
1018     auto *User = cast<Instruction>(UI);
1019 
1020     if (CurLoop->contains(User))
1021       continue;
1022 
1023     PHINode *PN = cast<PHINode>(User);
1024     assert(ExitBlockSet.count(PN->getParent()) &&
1025            "The LCSSA PHI is not in an exit block!");
1026     // The PHI must be trivially replaceable.
1027     Instruction *New = sinkThroughTriviallyReplaceablePHI(PN, &I, LI, SunkCopies,
1028                                                           SafetyInfo, CurLoop);
1029     PN->replaceAllUsesWith(New);
1030     PN->eraseFromParent();
1031     Changed = true;
1032   }
1033   return Changed;
1034 }
1035 
1036 /// When an instruction is found to only use loop invariant operands that
1037 /// is safe to hoist, this instruction is called to do the dirty work.
1038 ///
1039 static bool hoist(Instruction &I, const DominatorTree *DT, const Loop *CurLoop,
1040                   const LoopSafetyInfo *SafetyInfo,
1041                   OptimizationRemarkEmitter *ORE) {
1042   auto *Preheader = CurLoop->getLoopPreheader();
1043   LLVM_DEBUG(dbgs() << "LICM hoisting to " << Preheader->getName() << ": " << I
1044                     << "\n");
1045   ORE->emit([&]() {
1046     return OptimizationRemark(DEBUG_TYPE, "Hoisted", &I) << "hoisting "
1047                                                          << ore::NV("Inst", &I);
1048   });
1049 
1050   // Metadata can be dependent on conditions we are hoisting above.
1051   // Conservatively strip all metadata on the instruction unless we were
1052   // guaranteed to execute I if we entered the loop, in which case the metadata
1053   // is valid in the loop preheader.
1054   if (I.hasMetadataOtherThanDebugLoc() &&
1055       // The check on hasMetadataOtherThanDebugLoc is to prevent us from burning
1056       // time in isGuaranteedToExecute if we don't actually have anything to
1057       // drop.  It is a compile time optimization, not required for correctness.
1058       !isGuaranteedToExecute(I, DT, CurLoop, SafetyInfo))
1059     I.dropUnknownNonDebugMetadata();
1060 
1061   // Move the new node to the Preheader, before its terminator.
1062   I.moveBefore(Preheader->getTerminator());
1063 
1064   // Do not retain debug locations when we are moving instructions to different
1065   // basic blocks, because we want to avoid jumpy line tables. Calls, however,
1066   // need to retain their debug locs because they may be inlined.
1067   // FIXME: How do we retain source locations without causing poor debugging
1068   // behavior?
1069   if (!isa<CallInst>(I))
1070     I.setDebugLoc(DebugLoc());
1071 
1072   if (isa<LoadInst>(I))
1073     ++NumMovedLoads;
1074   else if (isa<CallInst>(I))
1075     ++NumMovedCalls;
1076   ++NumHoisted;
1077   return true;
1078 }
1079 
1080 /// Only sink or hoist an instruction if it is not a trapping instruction,
1081 /// or if the instruction is known not to trap when moved to the preheader.
1082 /// or if it is a trapping instruction and is guaranteed to execute.
1083 static bool isSafeToExecuteUnconditionally(Instruction &Inst,
1084                                            const DominatorTree *DT,
1085                                            const Loop *CurLoop,
1086                                            const LoopSafetyInfo *SafetyInfo,
1087                                            OptimizationRemarkEmitter *ORE,
1088                                            const Instruction *CtxI) {
1089   if (isSafeToSpeculativelyExecute(&Inst, CtxI, DT))
1090     return true;
1091 
1092   bool GuaranteedToExecute =
1093       isGuaranteedToExecute(Inst, DT, CurLoop, SafetyInfo);
1094 
1095   if (!GuaranteedToExecute) {
1096     auto *LI = dyn_cast<LoadInst>(&Inst);
1097     if (LI && CurLoop->isLoopInvariant(LI->getPointerOperand()))
1098       ORE->emit([&]() {
1099         return OptimizationRemarkMissed(
1100                    DEBUG_TYPE, "LoadWithLoopInvariantAddressCondExecuted", LI)
1101                << "failed to hoist load with loop-invariant address "
1102                   "because load is conditionally executed";
1103       });
1104   }
1105 
1106   return GuaranteedToExecute;
1107 }
1108 
1109 namespace {
1110 class LoopPromoter : public LoadAndStorePromoter {
1111   Value *SomePtr; // Designated pointer to store to.
1112   const SmallSetVector<Value *, 8> &PointerMustAliases;
1113   SmallVectorImpl<BasicBlock *> &LoopExitBlocks;
1114   SmallVectorImpl<Instruction *> &LoopInsertPts;
1115   PredIteratorCache &PredCache;
1116   AliasSetTracker &AST;
1117   LoopInfo &LI;
1118   DebugLoc DL;
1119   int Alignment;
1120   bool UnorderedAtomic;
1121   AAMDNodes AATags;
1122 
1123   Value *maybeInsertLCSSAPHI(Value *V, BasicBlock *BB) const {
1124     if (Instruction *I = dyn_cast<Instruction>(V))
1125       if (Loop *L = LI.getLoopFor(I->getParent()))
1126         if (!L->contains(BB)) {
1127           // We need to create an LCSSA PHI node for the incoming value and
1128           // store that.
1129           PHINode *PN = PHINode::Create(I->getType(), PredCache.size(BB),
1130                                         I->getName() + ".lcssa", &BB->front());
1131           for (BasicBlock *Pred : PredCache.get(BB))
1132             PN->addIncoming(I, Pred);
1133           return PN;
1134         }
1135     return V;
1136   }
1137 
1138 public:
1139   LoopPromoter(Value *SP, ArrayRef<const Instruction *> Insts, SSAUpdater &S,
1140                const SmallSetVector<Value *, 8> &PMA,
1141                SmallVectorImpl<BasicBlock *> &LEB,
1142                SmallVectorImpl<Instruction *> &LIP, PredIteratorCache &PIC,
1143                AliasSetTracker &ast, LoopInfo &li, DebugLoc dl, int alignment,
1144                bool UnorderedAtomic, const AAMDNodes &AATags)
1145       : LoadAndStorePromoter(Insts, S), SomePtr(SP), PointerMustAliases(PMA),
1146         LoopExitBlocks(LEB), LoopInsertPts(LIP), PredCache(PIC), AST(ast),
1147         LI(li), DL(std::move(dl)), Alignment(alignment),
1148         UnorderedAtomic(UnorderedAtomic), AATags(AATags) {}
1149 
1150   bool isInstInList(Instruction *I,
1151                     const SmallVectorImpl<Instruction *> &) const override {
1152     Value *Ptr;
1153     if (LoadInst *LI = dyn_cast<LoadInst>(I))
1154       Ptr = LI->getOperand(0);
1155     else
1156       Ptr = cast<StoreInst>(I)->getPointerOperand();
1157     return PointerMustAliases.count(Ptr);
1158   }
1159 
1160   void doExtraRewritesBeforeFinalDeletion() const override {
1161     // Insert stores after in the loop exit blocks.  Each exit block gets a
1162     // store of the live-out values that feed them.  Since we've already told
1163     // the SSA updater about the defs in the loop and the preheader
1164     // definition, it is all set and we can start using it.
1165     for (unsigned i = 0, e = LoopExitBlocks.size(); i != e; ++i) {
1166       BasicBlock *ExitBlock = LoopExitBlocks[i];
1167       Value *LiveInValue = SSA.GetValueInMiddleOfBlock(ExitBlock);
1168       LiveInValue = maybeInsertLCSSAPHI(LiveInValue, ExitBlock);
1169       Value *Ptr = maybeInsertLCSSAPHI(SomePtr, ExitBlock);
1170       Instruction *InsertPos = LoopInsertPts[i];
1171       StoreInst *NewSI = new StoreInst(LiveInValue, Ptr, InsertPos);
1172       if (UnorderedAtomic)
1173         NewSI->setOrdering(AtomicOrdering::Unordered);
1174       NewSI->setAlignment(Alignment);
1175       NewSI->setDebugLoc(DL);
1176       if (AATags)
1177         NewSI->setAAMetadata(AATags);
1178     }
1179   }
1180 
1181   void replaceLoadWithValue(LoadInst *LI, Value *V) const override {
1182     // Update alias analysis.
1183     AST.copyValue(LI, V);
1184   }
1185   void instructionDeleted(Instruction *I) const override { AST.deleteValue(I); }
1186 };
1187 
1188 
1189 /// Return true iff we can prove that a caller of this function can not inspect
1190 /// the contents of the provided object in a well defined program.
1191 bool isKnownNonEscaping(Value *Object, const TargetLibraryInfo *TLI) {
1192   if (isa<AllocaInst>(Object))
1193     // Since the alloca goes out of scope, we know the caller can't retain a
1194     // reference to it and be well defined.  Thus, we don't need to check for
1195     // capture.
1196     return true;
1197 
1198   // For all other objects we need to know that the caller can't possibly
1199   // have gotten a reference to the object.  There are two components of
1200   // that:
1201   //   1) Object can't be escaped by this function.  This is what
1202   //      PointerMayBeCaptured checks.
1203   //   2) Object can't have been captured at definition site.  For this, we
1204   //      need to know the return value is noalias.  At the moment, we use a
1205   //      weaker condition and handle only AllocLikeFunctions (which are
1206   //      known to be noalias).  TODO
1207   return isAllocLikeFn(Object, TLI) &&
1208     !PointerMayBeCaptured(Object, true, true);
1209 }
1210 
1211 } // namespace
1212 
1213 /// Try to promote memory values to scalars by sinking stores out of the
1214 /// loop and moving loads to before the loop.  We do this by looping over
1215 /// the stores in the loop, looking for stores to Must pointers which are
1216 /// loop invariant.
1217 ///
1218 bool llvm::promoteLoopAccessesToScalars(
1219     const SmallSetVector<Value *, 8> &PointerMustAliases,
1220     SmallVectorImpl<BasicBlock *> &ExitBlocks,
1221     SmallVectorImpl<Instruction *> &InsertPts, PredIteratorCache &PIC,
1222     LoopInfo *LI, DominatorTree *DT, const TargetLibraryInfo *TLI,
1223     Loop *CurLoop, AliasSetTracker *CurAST, LoopSafetyInfo *SafetyInfo,
1224     OptimizationRemarkEmitter *ORE) {
1225   // Verify inputs.
1226   assert(LI != nullptr && DT != nullptr && CurLoop != nullptr &&
1227          CurAST != nullptr && SafetyInfo != nullptr &&
1228          "Unexpected Input to promoteLoopAccessesToScalars");
1229 
1230   Value *SomePtr = *PointerMustAliases.begin();
1231   BasicBlock *Preheader = CurLoop->getLoopPreheader();
1232 
1233   // It is not safe to promote a load/store from the loop if the load/store is
1234   // conditional.  For example, turning:
1235   //
1236   //    for () { if (c) *P += 1; }
1237   //
1238   // into:
1239   //
1240   //    tmp = *P;  for () { if (c) tmp +=1; } *P = tmp;
1241   //
1242   // is not safe, because *P may only be valid to access if 'c' is true.
1243   //
1244   // The safety property divides into two parts:
1245   // p1) The memory may not be dereferenceable on entry to the loop.  In this
1246   //    case, we can't insert the required load in the preheader.
1247   // p2) The memory model does not allow us to insert a store along any dynamic
1248   //    path which did not originally have one.
1249   //
1250   // If at least one store is guaranteed to execute, both properties are
1251   // satisfied, and promotion is legal.
1252   //
1253   // This, however, is not a necessary condition. Even if no store/load is
1254   // guaranteed to execute, we can still establish these properties.
1255   // We can establish (p1) by proving that hoisting the load into the preheader
1256   // is safe (i.e. proving dereferenceability on all paths through the loop). We
1257   // can use any access within the alias set to prove dereferenceability,
1258   // since they're all must alias.
1259   //
1260   // There are two ways establish (p2):
1261   // a) Prove the location is thread-local. In this case the memory model
1262   // requirement does not apply, and stores are safe to insert.
1263   // b) Prove a store dominates every exit block. In this case, if an exit
1264   // blocks is reached, the original dynamic path would have taken us through
1265   // the store, so inserting a store into the exit block is safe. Note that this
1266   // is different from the store being guaranteed to execute. For instance,
1267   // if an exception is thrown on the first iteration of the loop, the original
1268   // store is never executed, but the exit blocks are not executed either.
1269 
1270   bool DereferenceableInPH = false;
1271   bool SafeToInsertStore = false;
1272 
1273   SmallVector<Instruction *, 64> LoopUses;
1274 
1275   // We start with an alignment of one and try to find instructions that allow
1276   // us to prove better alignment.
1277   unsigned Alignment = 1;
1278   // Keep track of which types of access we see
1279   bool SawUnorderedAtomic = false;
1280   bool SawNotAtomic = false;
1281   AAMDNodes AATags;
1282 
1283   const DataLayout &MDL = Preheader->getModule()->getDataLayout();
1284 
1285   bool IsKnownThreadLocalObject = false;
1286   if (SafetyInfo->MayThrow) {
1287     // If a loop can throw, we have to insert a store along each unwind edge.
1288     // That said, we can't actually make the unwind edge explicit. Therefore,
1289     // we have to prove that the store is dead along the unwind edge.  We do
1290     // this by proving that the caller can't have a reference to the object
1291     // after return and thus can't possibly load from the object.
1292     Value *Object = GetUnderlyingObject(SomePtr, MDL);
1293     if (!isKnownNonEscaping(Object, TLI))
1294       return false;
1295     // Subtlety: Alloca's aren't visible to callers, but *are* potentially
1296     // visible to other threads if captured and used during their lifetimes.
1297     IsKnownThreadLocalObject = !isa<AllocaInst>(Object);
1298   }
1299 
1300   // Check that all of the pointers in the alias set have the same type.  We
1301   // cannot (yet) promote a memory location that is loaded and stored in
1302   // different sizes.  While we are at it, collect alignment and AA info.
1303   for (Value *ASIV : PointerMustAliases) {
1304     // Check that all of the pointers in the alias set have the same type.  We
1305     // cannot (yet) promote a memory location that is loaded and stored in
1306     // different sizes.
1307     if (SomePtr->getType() != ASIV->getType())
1308       return false;
1309 
1310     for (User *U : ASIV->users()) {
1311       // Ignore instructions that are outside the loop.
1312       Instruction *UI = dyn_cast<Instruction>(U);
1313       if (!UI || !CurLoop->contains(UI))
1314         continue;
1315 
1316       // If there is an non-load/store instruction in the loop, we can't promote
1317       // it.
1318       if (LoadInst *Load = dyn_cast<LoadInst>(UI)) {
1319         assert(!Load->isVolatile() && "AST broken");
1320         if (!Load->isUnordered())
1321           return false;
1322 
1323         SawUnorderedAtomic |= Load->isAtomic();
1324         SawNotAtomic |= !Load->isAtomic();
1325 
1326         if (!DereferenceableInPH)
1327           DereferenceableInPH = isSafeToExecuteUnconditionally(
1328               *Load, DT, CurLoop, SafetyInfo, ORE, Preheader->getTerminator());
1329       } else if (const StoreInst *Store = dyn_cast<StoreInst>(UI)) {
1330         // Stores *of* the pointer are not interesting, only stores *to* the
1331         // pointer.
1332         if (UI->getOperand(1) != ASIV)
1333           continue;
1334         assert(!Store->isVolatile() && "AST broken");
1335         if (!Store->isUnordered())
1336           return false;
1337 
1338         SawUnorderedAtomic |= Store->isAtomic();
1339         SawNotAtomic |= !Store->isAtomic();
1340 
1341         // If the store is guaranteed to execute, both properties are satisfied.
1342         // We may want to check if a store is guaranteed to execute even if we
1343         // already know that promotion is safe, since it may have higher
1344         // alignment than any other guaranteed stores, in which case we can
1345         // raise the alignment on the promoted store.
1346         unsigned InstAlignment = Store->getAlignment();
1347         if (!InstAlignment)
1348           InstAlignment =
1349               MDL.getABITypeAlignment(Store->getValueOperand()->getType());
1350 
1351         if (!DereferenceableInPH || !SafeToInsertStore ||
1352             (InstAlignment > Alignment)) {
1353           if (isGuaranteedToExecute(*UI, DT, CurLoop, SafetyInfo)) {
1354             DereferenceableInPH = true;
1355             SafeToInsertStore = true;
1356             Alignment = std::max(Alignment, InstAlignment);
1357           }
1358         }
1359 
1360         // If a store dominates all exit blocks, it is safe to sink.
1361         // As explained above, if an exit block was executed, a dominating
1362         // store must have been executed at least once, so we are not
1363         // introducing stores on paths that did not have them.
1364         // Note that this only looks at explicit exit blocks. If we ever
1365         // start sinking stores into unwind edges (see above), this will break.
1366         if (!SafeToInsertStore)
1367           SafeToInsertStore = llvm::all_of(ExitBlocks, [&](BasicBlock *Exit) {
1368             return DT->dominates(Store->getParent(), Exit);
1369           });
1370 
1371         // If the store is not guaranteed to execute, we may still get
1372         // deref info through it.
1373         if (!DereferenceableInPH) {
1374           DereferenceableInPH = isDereferenceableAndAlignedPointer(
1375               Store->getPointerOperand(), Store->getAlignment(), MDL,
1376               Preheader->getTerminator(), DT);
1377         }
1378       } else
1379         return false; // Not a load or store.
1380 
1381       // Merge the AA tags.
1382       if (LoopUses.empty()) {
1383         // On the first load/store, just take its AA tags.
1384         UI->getAAMetadata(AATags);
1385       } else if (AATags) {
1386         UI->getAAMetadata(AATags, /* Merge = */ true);
1387       }
1388 
1389       LoopUses.push_back(UI);
1390     }
1391   }
1392 
1393   // If we found both an unordered atomic instruction and a non-atomic memory
1394   // access, bail.  We can't blindly promote non-atomic to atomic since we
1395   // might not be able to lower the result.  We can't downgrade since that
1396   // would violate memory model.  Also, align 0 is an error for atomics.
1397   if (SawUnorderedAtomic && SawNotAtomic)
1398     return false;
1399 
1400   // If we couldn't prove we can hoist the load, bail.
1401   if (!DereferenceableInPH)
1402     return false;
1403 
1404   // We know we can hoist the load, but don't have a guaranteed store.
1405   // Check whether the location is thread-local. If it is, then we can insert
1406   // stores along paths which originally didn't have them without violating the
1407   // memory model.
1408   if (!SafeToInsertStore) {
1409     if (IsKnownThreadLocalObject)
1410       SafeToInsertStore = true;
1411     else {
1412       Value *Object = GetUnderlyingObject(SomePtr, MDL);
1413       SafeToInsertStore =
1414           (isAllocLikeFn(Object, TLI) || isa<AllocaInst>(Object)) &&
1415           !PointerMayBeCaptured(Object, true, true);
1416     }
1417   }
1418 
1419   // If we've still failed to prove we can sink the store, give up.
1420   if (!SafeToInsertStore)
1421     return false;
1422 
1423   // Otherwise, this is safe to promote, lets do it!
1424   LLVM_DEBUG(dbgs() << "LICM: Promoting value stored to in loop: " << *SomePtr
1425                     << '\n');
1426   ORE->emit([&]() {
1427     return OptimizationRemark(DEBUG_TYPE, "PromoteLoopAccessesToScalar",
1428                               LoopUses[0])
1429            << "Moving accesses to memory location out of the loop";
1430   });
1431   ++NumPromoted;
1432 
1433   // Grab a debug location for the inserted loads/stores; given that the
1434   // inserted loads/stores have little relation to the original loads/stores,
1435   // this code just arbitrarily picks a location from one, since any debug
1436   // location is better than none.
1437   DebugLoc DL = LoopUses[0]->getDebugLoc();
1438 
1439   // We use the SSAUpdater interface to insert phi nodes as required.
1440   SmallVector<PHINode *, 16> NewPHIs;
1441   SSAUpdater SSA(&NewPHIs);
1442   LoopPromoter Promoter(SomePtr, LoopUses, SSA, PointerMustAliases, ExitBlocks,
1443                         InsertPts, PIC, *CurAST, *LI, DL, Alignment,
1444                         SawUnorderedAtomic, AATags);
1445 
1446   // Set up the preheader to have a definition of the value.  It is the live-out
1447   // value from the preheader that uses in the loop will use.
1448   LoadInst *PreheaderLoad = new LoadInst(
1449       SomePtr, SomePtr->getName() + ".promoted", Preheader->getTerminator());
1450   if (SawUnorderedAtomic)
1451     PreheaderLoad->setOrdering(AtomicOrdering::Unordered);
1452   PreheaderLoad->setAlignment(Alignment);
1453   PreheaderLoad->setDebugLoc(DL);
1454   if (AATags)
1455     PreheaderLoad->setAAMetadata(AATags);
1456   SSA.AddAvailableValue(Preheader, PreheaderLoad);
1457 
1458   // Rewrite all the loads in the loop and remember all the definitions from
1459   // stores in the loop.
1460   Promoter.run(LoopUses);
1461 
1462   // If the SSAUpdater didn't use the load in the preheader, just zap it now.
1463   if (PreheaderLoad->use_empty())
1464     PreheaderLoad->eraseFromParent();
1465 
1466   return true;
1467 }
1468 
1469 /// Returns an owning pointer to an alias set which incorporates aliasing info
1470 /// from L and all subloops of L.
1471 /// FIXME: In new pass manager, there is no helper function to handle loop
1472 /// analysis such as cloneBasicBlockAnalysis, so the AST needs to be recomputed
1473 /// from scratch for every loop. Hook up with the helper functions when
1474 /// available in the new pass manager to avoid redundant computation.
1475 AliasSetTracker *
1476 LoopInvariantCodeMotion::collectAliasInfoForLoop(Loop *L, LoopInfo *LI,
1477                                                  AliasAnalysis *AA) {
1478   AliasSetTracker *CurAST = nullptr;
1479   SmallVector<Loop *, 4> RecomputeLoops;
1480   for (Loop *InnerL : L->getSubLoops()) {
1481     auto MapI = LoopToAliasSetMap.find(InnerL);
1482     // If the AST for this inner loop is missing it may have been merged into
1483     // some other loop's AST and then that loop unrolled, and so we need to
1484     // recompute it.
1485     if (MapI == LoopToAliasSetMap.end()) {
1486       RecomputeLoops.push_back(InnerL);
1487       continue;
1488     }
1489     AliasSetTracker *InnerAST = MapI->second;
1490 
1491     if (CurAST != nullptr) {
1492       // What if InnerLoop was modified by other passes ?
1493       CurAST->add(*InnerAST);
1494 
1495       // Once we've incorporated the inner loop's AST into ours, we don't need
1496       // the subloop's anymore.
1497       delete InnerAST;
1498     } else {
1499       CurAST = InnerAST;
1500     }
1501     LoopToAliasSetMap.erase(MapI);
1502   }
1503   if (CurAST == nullptr)
1504     CurAST = new AliasSetTracker(*AA);
1505 
1506   auto mergeLoop = [&](Loop *L) {
1507     // Loop over the body of this loop, looking for calls, invokes, and stores.
1508     for (BasicBlock *BB : L->blocks())
1509       CurAST->add(*BB); // Incorporate the specified basic block
1510   };
1511 
1512   // Add everything from the sub loops that are no longer directly available.
1513   for (Loop *InnerL : RecomputeLoops)
1514     mergeLoop(InnerL);
1515 
1516   // And merge in this loop.
1517   mergeLoop(L);
1518 
1519   return CurAST;
1520 }
1521 
1522 /// Simple analysis hook. Clone alias set info.
1523 ///
1524 void LegacyLICMPass::cloneBasicBlockAnalysis(BasicBlock *From, BasicBlock *To,
1525                                              Loop *L) {
1526   AliasSetTracker *AST = LICM.getLoopToAliasSetMap().lookup(L);
1527   if (!AST)
1528     return;
1529 
1530   AST->copyValue(From, To);
1531 }
1532 
1533 /// Simple Analysis hook. Delete value V from alias set
1534 ///
1535 void LegacyLICMPass::deleteAnalysisValue(Value *V, Loop *L) {
1536   AliasSetTracker *AST = LICM.getLoopToAliasSetMap().lookup(L);
1537   if (!AST)
1538     return;
1539 
1540   AST->deleteValue(V);
1541 }
1542 
1543 /// Simple Analysis hook. Delete value L from alias set map.
1544 ///
1545 void LegacyLICMPass::deleteAnalysisLoop(Loop *L) {
1546   AliasSetTracker *AST = LICM.getLoopToAliasSetMap().lookup(L);
1547   if (!AST)
1548     return;
1549 
1550   delete AST;
1551   LICM.getLoopToAliasSetMap().erase(L);
1552 }
1553 
1554 /// Return true if the body of this loop may store into the memory
1555 /// location pointed to by V.
1556 ///
1557 static bool pointerInvalidatedByLoop(Value *V, uint64_t Size,
1558                                      const AAMDNodes &AAInfo,
1559                                      AliasSetTracker *CurAST) {
1560   // Check to see if any of the basic blocks in CurLoop invalidate *V.
1561   return CurAST->getAliasSetForPointer(V, Size, AAInfo).isMod();
1562 }
1563 
1564 /// Little predicate that returns true if the specified basic block is in
1565 /// a subloop of the current one, not the current one itself.
1566 ///
1567 static bool inSubLoop(BasicBlock *BB, Loop *CurLoop, LoopInfo *LI) {
1568   assert(CurLoop->contains(BB) && "Only valid if BB is IN the loop");
1569   return LI->getLoopFor(BB) != CurLoop;
1570 }
1571