1 //===- TailRecursionElimination.cpp - Eliminate Tail Calls ----------------===//
2 //
3 //                     The LLVM Compiler Infrastructure
4 //
5 // This file is distributed under the University of Illinois Open Source
6 // License. See LICENSE.TXT for details.
7 //
8 //===----------------------------------------------------------------------===//
9 //
10 // This file transforms calls of the current function (self recursion) followed
11 // by a return instruction with a branch to the entry of the function, creating
12 // a loop.  This pass also implements the following extensions to the basic
13 // algorithm:
14 //
15 //  1. Trivial instructions between the call and return do not prevent the
16 //     transformation from taking place, though currently the analysis cannot
17 //     support moving any really useful instructions (only dead ones).
18 //  2. This pass transforms functions that are prevented from being tail
19 //     recursive by an associative and commutative expression to use an
20 //     accumulator variable, thus compiling the typical naive factorial or
21 //     'fib' implementation into efficient code.
22 //  3. TRE is performed if the function returns void, if the return
23 //     returns the result returned by the call, or if the function returns a
24 //     run-time constant on all exits from the function.  It is possible, though
25 //     unlikely, that the return returns something else (like constant 0), and
26 //     can still be TRE'd.  It can be TRE'd if ALL OTHER return instructions in
27 //     the function return the exact same value.
28 //  4. If it can prove that callees do not access their caller stack frame,
29 //     they are marked as eligible for tail call elimination (by the code
30 //     generator).
31 //
32 // There are several improvements that could be made:
33 //
34 //  1. If the function has any alloca instructions, these instructions will be
35 //     moved out of the entry block of the function, causing them to be
36 //     evaluated each time through the tail recursion.  Safely keeping allocas
37 //     in the entry block requires analysis to proves that the tail-called
38 //     function does not read or write the stack object.
39 //  2. Tail recursion is only performed if the call immediately precedes the
40 //     return instruction.  It's possible that there could be a jump between
41 //     the call and the return.
42 //  3. There can be intervening operations between the call and the return that
43 //     prevent the TRE from occurring.  For example, there could be GEP's and
44 //     stores to memory that will not be read or written by the call.  This
45 //     requires some substantial analysis (such as with DSA) to prove safe to
46 //     move ahead of the call, but doing so could allow many more TREs to be
47 //     performed, for example in TreeAdd/TreeAlloc from the treeadd benchmark.
48 //  4. The algorithm we use to detect if callees access their caller stack
49 //     frames is very primitive.
50 //
51 //===----------------------------------------------------------------------===//
52 
53 #include "llvm/Transforms/Scalar.h"
54 #include "llvm/ADT/STLExtras.h"
55 #include "llvm/ADT/SmallPtrSet.h"
56 #include "llvm/ADT/Statistic.h"
57 #include "llvm/Analysis/CaptureTracking.h"
58 #include "llvm/Analysis/CFG.h"
59 #include "llvm/Analysis/InlineCost.h"
60 #include "llvm/Analysis/InstructionSimplify.h"
61 #include "llvm/Analysis/Loads.h"
62 #include "llvm/Analysis/TargetTransformInfo.h"
63 #include "llvm/IR/CFG.h"
64 #include "llvm/IR/CallSite.h"
65 #include "llvm/IR/Constants.h"
66 #include "llvm/IR/DataLayout.h"
67 #include "llvm/IR/DerivedTypes.h"
68 #include "llvm/IR/DiagnosticInfo.h"
69 #include "llvm/IR/Function.h"
70 #include "llvm/IR/Instructions.h"
71 #include "llvm/IR/IntrinsicInst.h"
72 #include "llvm/IR/Module.h"
73 #include "llvm/IR/ValueHandle.h"
74 #include "llvm/Pass.h"
75 #include "llvm/Support/Debug.h"
76 #include "llvm/Support/raw_ostream.h"
77 #include "llvm/Transforms/Utils/BasicBlockUtils.h"
78 #include "llvm/Transforms/Utils/Local.h"
79 using namespace llvm;
80 
81 #define DEBUG_TYPE "tailcallelim"
82 
83 STATISTIC(NumEliminated, "Number of tail calls removed");
84 STATISTIC(NumRetDuped,   "Number of return duplicated");
85 STATISTIC(NumAccumAdded, "Number of accumulators introduced");
86 
87 namespace {
88   struct TailCallElim : public FunctionPass {
89     const TargetTransformInfo *TTI;
90     const DataLayout *DL;
91 
92     static char ID; // Pass identification, replacement for typeid
93     TailCallElim() : FunctionPass(ID) {
94       initializeTailCallElimPass(*PassRegistry::getPassRegistry());
95     }
96 
97     void getAnalysisUsage(AnalysisUsage &AU) const override;
98 
99     bool runOnFunction(Function &F) override;
100 
101   private:
102     bool runTRE(Function &F);
103     bool markTails(Function &F, bool &AllCallsAreTailCalls);
104 
105     CallInst *FindTRECandidate(Instruction *I,
106                                bool CannotTailCallElimCallsMarkedTail);
107     bool EliminateRecursiveTailCall(CallInst *CI, ReturnInst *Ret,
108                                     BasicBlock *&OldEntry,
109                                     bool &TailCallsAreMarkedTail,
110                                     SmallVectorImpl<PHINode *> &ArgumentPHIs,
111                                     bool CannotTailCallElimCallsMarkedTail);
112     bool FoldReturnAndProcessPred(BasicBlock *BB,
113                                   ReturnInst *Ret, BasicBlock *&OldEntry,
114                                   bool &TailCallsAreMarkedTail,
115                                   SmallVectorImpl<PHINode *> &ArgumentPHIs,
116                                   bool CannotTailCallElimCallsMarkedTail);
117     bool ProcessReturningBlock(ReturnInst *RI, BasicBlock *&OldEntry,
118                                bool &TailCallsAreMarkedTail,
119                                SmallVectorImpl<PHINode *> &ArgumentPHIs,
120                                bool CannotTailCallElimCallsMarkedTail);
121     bool CanMoveAboveCall(Instruction *I, CallInst *CI);
122     Value *CanTransformAccumulatorRecursion(Instruction *I, CallInst *CI);
123   };
124 }
125 
126 char TailCallElim::ID = 0;
127 INITIALIZE_PASS_BEGIN(TailCallElim, "tailcallelim",
128                       "Tail Call Elimination", false, false)
129 INITIALIZE_AG_DEPENDENCY(TargetTransformInfo)
130 INITIALIZE_PASS_END(TailCallElim, "tailcallelim",
131                     "Tail Call Elimination", false, false)
132 
133 // Public interface to the TailCallElimination pass
134 FunctionPass *llvm::createTailCallEliminationPass() {
135   return new TailCallElim();
136 }
137 
138 void TailCallElim::getAnalysisUsage(AnalysisUsage &AU) const {
139   AU.addRequired<TargetTransformInfo>();
140 }
141 
142 /// \brief Scan the specified function for alloca instructions.
143 /// If it contains any dynamic allocas, returns false.
144 static bool CanTRE(Function &F) {
145   // Because of PR962, we don't TRE dynamic allocas.
146   for (auto &BB : F) {
147     for (auto &I : BB) {
148       if (AllocaInst *AI = dyn_cast<AllocaInst>(&I)) {
149         if (!AI->isStaticAlloca())
150           return false;
151       }
152     }
153   }
154 
155   return true;
156 }
157 
158 bool TailCallElim::runOnFunction(Function &F) {
159   if (skipOptnoneFunction(F))
160     return false;
161 
162   DL = F.getParent()->getDataLayout();
163 
164   bool AllCallsAreTailCalls = false;
165   bool Modified = markTails(F, AllCallsAreTailCalls);
166   if (AllCallsAreTailCalls)
167     Modified |= runTRE(F);
168   return Modified;
169 }
170 
171 namespace {
172 struct AllocaDerivedValueTracker {
173   // Start at a root value and walk its use-def chain to mark calls that use the
174   // value or a derived value in AllocaUsers, and places where it may escape in
175   // EscapePoints.
176   void walk(Value *Root) {
177     SmallVector<Use *, 32> Worklist;
178     SmallPtrSet<Use *, 32> Visited;
179 
180     auto AddUsesToWorklist = [&](Value *V) {
181       for (auto &U : V->uses()) {
182         if (!Visited.insert(&U))
183           continue;
184         Worklist.push_back(&U);
185       }
186     };
187 
188     AddUsesToWorklist(Root);
189 
190     while (!Worklist.empty()) {
191       Use *U = Worklist.pop_back_val();
192       Instruction *I = cast<Instruction>(U->getUser());
193 
194       switch (I->getOpcode()) {
195       case Instruction::Call:
196       case Instruction::Invoke: {
197         CallSite CS(I);
198         bool IsNocapture = !CS.isCallee(U) &&
199                            CS.doesNotCapture(CS.getArgumentNo(U));
200         callUsesLocalStack(CS, IsNocapture);
201         if (IsNocapture) {
202           // If the alloca-derived argument is passed in as nocapture, then it
203           // can't propagate to the call's return. That would be capturing.
204           continue;
205         }
206         break;
207       }
208       case Instruction::Load: {
209         // The result of a load is not alloca-derived (unless an alloca has
210         // otherwise escaped, but this is a local analysis).
211         continue;
212       }
213       case Instruction::Store: {
214         if (U->getOperandNo() == 0)
215           EscapePoints.insert(I);
216         continue;  // Stores have no users to analyze.
217       }
218       case Instruction::BitCast:
219       case Instruction::GetElementPtr:
220       case Instruction::PHI:
221       case Instruction::Select:
222       case Instruction::AddrSpaceCast:
223         break;
224       default:
225         EscapePoints.insert(I);
226         break;
227       }
228 
229       AddUsesToWorklist(I);
230     }
231   }
232 
233   void callUsesLocalStack(CallSite CS, bool IsNocapture) {
234     // Add it to the list of alloca users.
235     AllocaUsers.insert(CS.getInstruction());
236 
237     // If it's nocapture then it can't capture this alloca.
238     if (IsNocapture)
239       return;
240 
241     // If it can write to memory, it can leak the alloca value.
242     if (!CS.onlyReadsMemory())
243       EscapePoints.insert(CS.getInstruction());
244   }
245 
246   SmallPtrSet<Instruction *, 32> AllocaUsers;
247   SmallPtrSet<Instruction *, 32> EscapePoints;
248 };
249 }
250 
251 bool TailCallElim::markTails(Function &F, bool &AllCallsAreTailCalls) {
252   if (F.callsFunctionThatReturnsTwice())
253     return false;
254   AllCallsAreTailCalls = true;
255 
256   AllocaDerivedValueTracker Tracker;
257   for (auto &BB : F) {
258     for (auto &I : BB)
259       if (AllocaInst *AI = dyn_cast<AllocaInst>(&I))
260         Tracker.walk(AI);
261   }
262 
263   bool Modified = false;
264 
265   // Track whether a block is reachable after an alloca has escaped. Blocks that
266   // contain the escaping instruction will be marked as being visited without an
267   // escaped alloca, since that is how the block began.
268   enum VisitType {
269     UNVISITED,
270     UNESCAPED,
271     ESCAPED
272   };
273   DenseMap<BasicBlock *, VisitType> Visited;
274 
275   // We propagate the fact that an alloca has escaped from block to successor.
276   // Visit the blocks that are propagating the escapedness first. To do this, we
277   // maintain two worklists.
278   SmallVector<BasicBlock *, 32> WorklistUnescaped, WorklistEscaped;
279 
280   // We may enter a block and visit it thinking that no alloca has escaped yet,
281   // then see an escape point and go back around a loop edge and come back to
282   // the same block twice. Because of this, we defer setting tail on calls when
283   // we first encounter them in a block. Every entry in this list does not
284   // statically use an alloca via use-def chain analysis, but may find an alloca
285   // through other means if the block turns out to be reachable after an escape
286   // point.
287   SmallVector<CallInst *, 32> DeferredTails;
288 
289   BasicBlock *BB = &F.getEntryBlock();
290   VisitType Escaped = UNESCAPED;
291   do {
292     for (auto &I : *BB) {
293       if (Tracker.EscapePoints.count(&I))
294         Escaped = ESCAPED;
295 
296       CallInst *CI = dyn_cast<CallInst>(&I);
297       if (!CI || CI->isTailCall())
298         continue;
299 
300       if (CI->doesNotAccessMemory()) {
301         // A call to a readnone function whose arguments are all things computed
302         // outside this function can be marked tail. Even if you stored the
303         // alloca address into a global, a readnone function can't load the
304         // global anyhow.
305         //
306         // Note that this runs whether we know an alloca has escaped or not. If
307         // it has, then we can't trust Tracker.AllocaUsers to be accurate.
308         bool SafeToTail = true;
309         for (auto &Arg : CI->arg_operands()) {
310           if (isa<Constant>(Arg.getUser()))
311             continue;
312           if (isa<Argument>(Arg.getUser()))
313             continue;
314           SafeToTail = false;
315           break;
316         }
317         if (SafeToTail) {
318           emitOptimizationRemark(
319               F.getContext(), "tailcallelim", F, CI->getDebugLoc(),
320               "marked this readnone call a tail call candidate");
321           CI->setTailCall();
322           Modified = true;
323           continue;
324         }
325       }
326 
327       if (Escaped == UNESCAPED && !Tracker.AllocaUsers.count(CI)) {
328         DeferredTails.push_back(CI);
329       } else {
330         AllCallsAreTailCalls = false;
331       }
332     }
333 
334     for (auto *SuccBB : make_range(succ_begin(BB), succ_end(BB))) {
335       auto &State = Visited[SuccBB];
336       if (State < Escaped) {
337         State = Escaped;
338         if (State == ESCAPED)
339           WorklistEscaped.push_back(SuccBB);
340         else
341           WorklistUnescaped.push_back(SuccBB);
342       }
343     }
344 
345     if (!WorklistEscaped.empty()) {
346       BB = WorklistEscaped.pop_back_val();
347       Escaped = ESCAPED;
348     } else {
349       BB = nullptr;
350       while (!WorklistUnescaped.empty()) {
351         auto *NextBB = WorklistUnescaped.pop_back_val();
352         if (Visited[NextBB] == UNESCAPED) {
353           BB = NextBB;
354           Escaped = UNESCAPED;
355           break;
356         }
357       }
358     }
359   } while (BB);
360 
361   for (CallInst *CI : DeferredTails) {
362     if (Visited[CI->getParent()] != ESCAPED) {
363       // If the escape point was part way through the block, calls after the
364       // escape point wouldn't have been put into DeferredTails.
365       emitOptimizationRemark(F.getContext(), "tailcallelim", F,
366                              CI->getDebugLoc(),
367                              "marked this call a tail call candidate");
368       CI->setTailCall();
369       Modified = true;
370     } else {
371       AllCallsAreTailCalls = false;
372     }
373   }
374 
375   return Modified;
376 }
377 
378 bool TailCallElim::runTRE(Function &F) {
379   // If this function is a varargs function, we won't be able to PHI the args
380   // right, so don't even try to convert it...
381   if (F.getFunctionType()->isVarArg()) return false;
382 
383   TTI = &getAnalysis<TargetTransformInfo>();
384   BasicBlock *OldEntry = nullptr;
385   bool TailCallsAreMarkedTail = false;
386   SmallVector<PHINode*, 8> ArgumentPHIs;
387   bool MadeChange = false;
388 
389   // CanTRETailMarkedCall - If false, we cannot perform TRE on tail calls
390   // marked with the 'tail' attribute, because doing so would cause the stack
391   // size to increase (real TRE would deallocate variable sized allocas, TRE
392   // doesn't).
393   bool CanTRETailMarkedCall = CanTRE(F);
394 
395   // Change any tail recursive calls to loops.
396   //
397   // FIXME: The code generator produces really bad code when an 'escaping
398   // alloca' is changed from being a static alloca to being a dynamic alloca.
399   // Until this is resolved, disable this transformation if that would ever
400   // happen.  This bug is PR962.
401   for (Function::iterator BB = F.begin(), E = F.end(); BB != E; ++BB) {
402     if (ReturnInst *Ret = dyn_cast<ReturnInst>(BB->getTerminator())) {
403       bool Change = ProcessReturningBlock(Ret, OldEntry, TailCallsAreMarkedTail,
404                                           ArgumentPHIs, !CanTRETailMarkedCall);
405       if (!Change && BB->getFirstNonPHIOrDbg() == Ret)
406         Change = FoldReturnAndProcessPred(BB, Ret, OldEntry,
407                                           TailCallsAreMarkedTail, ArgumentPHIs,
408                                           !CanTRETailMarkedCall);
409       MadeChange |= Change;
410     }
411   }
412 
413   // If we eliminated any tail recursions, it's possible that we inserted some
414   // silly PHI nodes which just merge an initial value (the incoming operand)
415   // with themselves.  Check to see if we did and clean up our mess if so.  This
416   // occurs when a function passes an argument straight through to its tail
417   // call.
418   for (unsigned i = 0, e = ArgumentPHIs.size(); i != e; ++i) {
419     PHINode *PN = ArgumentPHIs[i];
420 
421     // If the PHI Node is a dynamic constant, replace it with the value it is.
422     if (Value *PNV = SimplifyInstruction(PN)) {
423       PN->replaceAllUsesWith(PNV);
424       PN->eraseFromParent();
425     }
426   }
427 
428   return MadeChange;
429 }
430 
431 
432 /// CanMoveAboveCall - Return true if it is safe to move the specified
433 /// instruction from after the call to before the call, assuming that all
434 /// instructions between the call and this instruction are movable.
435 ///
436 bool TailCallElim::CanMoveAboveCall(Instruction *I, CallInst *CI) {
437   // FIXME: We can move load/store/call/free instructions above the call if the
438   // call does not mod/ref the memory location being processed.
439   if (I->mayHaveSideEffects())  // This also handles volatile loads.
440     return false;
441 
442   if (LoadInst *L = dyn_cast<LoadInst>(I)) {
443     // Loads may always be moved above calls without side effects.
444     if (CI->mayHaveSideEffects()) {
445       // Non-volatile loads may be moved above a call with side effects if it
446       // does not write to memory and the load provably won't trap.
447       // FIXME: Writes to memory only matter if they may alias the pointer
448       // being loaded from.
449       if (CI->mayWriteToMemory() ||
450           !isSafeToLoadUnconditionally(L->getPointerOperand(), L,
451                                        L->getAlignment(), DL))
452         return false;
453     }
454   }
455 
456   // Otherwise, if this is a side-effect free instruction, check to make sure
457   // that it does not use the return value of the call.  If it doesn't use the
458   // return value of the call, it must only use things that are defined before
459   // the call, or movable instructions between the call and the instruction
460   // itself.
461   for (unsigned i = 0, e = I->getNumOperands(); i != e; ++i)
462     if (I->getOperand(i) == CI)
463       return false;
464   return true;
465 }
466 
467 // isDynamicConstant - Return true if the specified value is the same when the
468 // return would exit as it was when the initial iteration of the recursive
469 // function was executed.
470 //
471 // We currently handle static constants and arguments that are not modified as
472 // part of the recursion.
473 //
474 static bool isDynamicConstant(Value *V, CallInst *CI, ReturnInst *RI) {
475   if (isa<Constant>(V)) return true; // Static constants are always dyn consts
476 
477   // Check to see if this is an immutable argument, if so, the value
478   // will be available to initialize the accumulator.
479   if (Argument *Arg = dyn_cast<Argument>(V)) {
480     // Figure out which argument number this is...
481     unsigned ArgNo = 0;
482     Function *F = CI->getParent()->getParent();
483     for (Function::arg_iterator AI = F->arg_begin(); &*AI != Arg; ++AI)
484       ++ArgNo;
485 
486     // If we are passing this argument into call as the corresponding
487     // argument operand, then the argument is dynamically constant.
488     // Otherwise, we cannot transform this function safely.
489     if (CI->getArgOperand(ArgNo) == Arg)
490       return true;
491   }
492 
493   // Switch cases are always constant integers. If the value is being switched
494   // on and the return is only reachable from one of its cases, it's
495   // effectively constant.
496   if (BasicBlock *UniquePred = RI->getParent()->getUniquePredecessor())
497     if (SwitchInst *SI = dyn_cast<SwitchInst>(UniquePred->getTerminator()))
498       if (SI->getCondition() == V)
499         return SI->getDefaultDest() != RI->getParent();
500 
501   // Not a constant or immutable argument, we can't safely transform.
502   return false;
503 }
504 
505 // getCommonReturnValue - Check to see if the function containing the specified
506 // tail call consistently returns the same runtime-constant value at all exit
507 // points except for IgnoreRI.  If so, return the returned value.
508 //
509 static Value *getCommonReturnValue(ReturnInst *IgnoreRI, CallInst *CI) {
510   Function *F = CI->getParent()->getParent();
511   Value *ReturnedValue = nullptr;
512 
513   for (Function::iterator BBI = F->begin(), E = F->end(); BBI != E; ++BBI) {
514     ReturnInst *RI = dyn_cast<ReturnInst>(BBI->getTerminator());
515     if (RI == nullptr || RI == IgnoreRI) continue;
516 
517     // We can only perform this transformation if the value returned is
518     // evaluatable at the start of the initial invocation of the function,
519     // instead of at the end of the evaluation.
520     //
521     Value *RetOp = RI->getOperand(0);
522     if (!isDynamicConstant(RetOp, CI, RI))
523       return nullptr;
524 
525     if (ReturnedValue && RetOp != ReturnedValue)
526       return nullptr;     // Cannot transform if differing values are returned.
527     ReturnedValue = RetOp;
528   }
529   return ReturnedValue;
530 }
531 
532 /// CanTransformAccumulatorRecursion - If the specified instruction can be
533 /// transformed using accumulator recursion elimination, return the constant
534 /// which is the start of the accumulator value.  Otherwise return null.
535 ///
536 Value *TailCallElim::CanTransformAccumulatorRecursion(Instruction *I,
537                                                       CallInst *CI) {
538   if (!I->isAssociative() || !I->isCommutative()) return nullptr;
539   assert(I->getNumOperands() == 2 &&
540          "Associative/commutative operations should have 2 args!");
541 
542   // Exactly one operand should be the result of the call instruction.
543   if ((I->getOperand(0) == CI && I->getOperand(1) == CI) ||
544       (I->getOperand(0) != CI && I->getOperand(1) != CI))
545     return nullptr;
546 
547   // The only user of this instruction we allow is a single return instruction.
548   if (!I->hasOneUse() || !isa<ReturnInst>(I->user_back()))
549     return nullptr;
550 
551   // Ok, now we have to check all of the other return instructions in this
552   // function.  If they return non-constants or differing values, then we cannot
553   // transform the function safely.
554   return getCommonReturnValue(cast<ReturnInst>(I->user_back()), CI);
555 }
556 
557 static Instruction *FirstNonDbg(BasicBlock::iterator I) {
558   while (isa<DbgInfoIntrinsic>(I))
559     ++I;
560   return &*I;
561 }
562 
563 CallInst*
564 TailCallElim::FindTRECandidate(Instruction *TI,
565                                bool CannotTailCallElimCallsMarkedTail) {
566   BasicBlock *BB = TI->getParent();
567   Function *F = BB->getParent();
568 
569   if (&BB->front() == TI) // Make sure there is something before the terminator.
570     return nullptr;
571 
572   // Scan backwards from the return, checking to see if there is a tail call in
573   // this block.  If so, set CI to it.
574   CallInst *CI = nullptr;
575   BasicBlock::iterator BBI = TI;
576   while (true) {
577     CI = dyn_cast<CallInst>(BBI);
578     if (CI && CI->getCalledFunction() == F)
579       break;
580 
581     if (BBI == BB->begin())
582       return nullptr;          // Didn't find a potential tail call.
583     --BBI;
584   }
585 
586   // If this call is marked as a tail call, and if there are dynamic allocas in
587   // the function, we cannot perform this optimization.
588   if (CI->isTailCall() && CannotTailCallElimCallsMarkedTail)
589     return nullptr;
590 
591   // As a special case, detect code like this:
592   //   double fabs(double f) { return __builtin_fabs(f); } // a 'fabs' call
593   // and disable this xform in this case, because the code generator will
594   // lower the call to fabs into inline code.
595   if (BB == &F->getEntryBlock() &&
596       FirstNonDbg(BB->front()) == CI &&
597       FirstNonDbg(std::next(BB->begin())) == TI &&
598       CI->getCalledFunction() &&
599       !TTI->isLoweredToCall(CI->getCalledFunction())) {
600     // A single-block function with just a call and a return. Check that
601     // the arguments match.
602     CallSite::arg_iterator I = CallSite(CI).arg_begin(),
603                            E = CallSite(CI).arg_end();
604     Function::arg_iterator FI = F->arg_begin(),
605                            FE = F->arg_end();
606     for (; I != E && FI != FE; ++I, ++FI)
607       if (*I != &*FI) break;
608     if (I == E && FI == FE)
609       return nullptr;
610   }
611 
612   return CI;
613 }
614 
615 bool TailCallElim::EliminateRecursiveTailCall(CallInst *CI, ReturnInst *Ret,
616                                        BasicBlock *&OldEntry,
617                                        bool &TailCallsAreMarkedTail,
618                                        SmallVectorImpl<PHINode *> &ArgumentPHIs,
619                                        bool CannotTailCallElimCallsMarkedTail) {
620   // If we are introducing accumulator recursion to eliminate operations after
621   // the call instruction that are both associative and commutative, the initial
622   // value for the accumulator is placed in this variable.  If this value is set
623   // then we actually perform accumulator recursion elimination instead of
624   // simple tail recursion elimination.  If the operation is an LLVM instruction
625   // (eg: "add") then it is recorded in AccumulatorRecursionInstr.  If not, then
626   // we are handling the case when the return instruction returns a constant C
627   // which is different to the constant returned by other return instructions
628   // (which is recorded in AccumulatorRecursionEliminationInitVal).  This is a
629   // special case of accumulator recursion, the operation being "return C".
630   Value *AccumulatorRecursionEliminationInitVal = nullptr;
631   Instruction *AccumulatorRecursionInstr = nullptr;
632 
633   // Ok, we found a potential tail call.  We can currently only transform the
634   // tail call if all of the instructions between the call and the return are
635   // movable to above the call itself, leaving the call next to the return.
636   // Check that this is the case now.
637   BasicBlock::iterator BBI = CI;
638   for (++BBI; &*BBI != Ret; ++BBI) {
639     if (CanMoveAboveCall(BBI, CI)) continue;
640 
641     // If we can't move the instruction above the call, it might be because it
642     // is an associative and commutative operation that could be transformed
643     // using accumulator recursion elimination.  Check to see if this is the
644     // case, and if so, remember the initial accumulator value for later.
645     if ((AccumulatorRecursionEliminationInitVal =
646                            CanTransformAccumulatorRecursion(BBI, CI))) {
647       // Yes, this is accumulator recursion.  Remember which instruction
648       // accumulates.
649       AccumulatorRecursionInstr = BBI;
650     } else {
651       return false;   // Otherwise, we cannot eliminate the tail recursion!
652     }
653   }
654 
655   // We can only transform call/return pairs that either ignore the return value
656   // of the call and return void, ignore the value of the call and return a
657   // constant, return the value returned by the tail call, or that are being
658   // accumulator recursion variable eliminated.
659   if (Ret->getNumOperands() == 1 && Ret->getReturnValue() != CI &&
660       !isa<UndefValue>(Ret->getReturnValue()) &&
661       AccumulatorRecursionEliminationInitVal == nullptr &&
662       !getCommonReturnValue(nullptr, CI)) {
663     // One case remains that we are able to handle: the current return
664     // instruction returns a constant, and all other return instructions
665     // return a different constant.
666     if (!isDynamicConstant(Ret->getReturnValue(), CI, Ret))
667       return false; // Current return instruction does not return a constant.
668     // Check that all other return instructions return a common constant.  If
669     // so, record it in AccumulatorRecursionEliminationInitVal.
670     AccumulatorRecursionEliminationInitVal = getCommonReturnValue(Ret, CI);
671     if (!AccumulatorRecursionEliminationInitVal)
672       return false;
673   }
674 
675   BasicBlock *BB = Ret->getParent();
676   Function *F = BB->getParent();
677 
678   emitOptimizationRemark(F->getContext(), "tailcallelim", *F, CI->getDebugLoc(),
679                          "transforming tail recursion to loop");
680 
681   // OK! We can transform this tail call.  If this is the first one found,
682   // create the new entry block, allowing us to branch back to the old entry.
683   if (!OldEntry) {
684     OldEntry = &F->getEntryBlock();
685     BasicBlock *NewEntry = BasicBlock::Create(F->getContext(), "", F, OldEntry);
686     NewEntry->takeName(OldEntry);
687     OldEntry->setName("tailrecurse");
688     BranchInst::Create(OldEntry, NewEntry);
689 
690     // If this tail call is marked 'tail' and if there are any allocas in the
691     // entry block, move them up to the new entry block.
692     TailCallsAreMarkedTail = CI->isTailCall();
693     if (TailCallsAreMarkedTail)
694       // Move all fixed sized allocas from OldEntry to NewEntry.
695       for (BasicBlock::iterator OEBI = OldEntry->begin(), E = OldEntry->end(),
696              NEBI = NewEntry->begin(); OEBI != E; )
697         if (AllocaInst *AI = dyn_cast<AllocaInst>(OEBI++))
698           if (isa<ConstantInt>(AI->getArraySize()))
699             AI->moveBefore(NEBI);
700 
701     // Now that we have created a new block, which jumps to the entry
702     // block, insert a PHI node for each argument of the function.
703     // For now, we initialize each PHI to only have the real arguments
704     // which are passed in.
705     Instruction *InsertPos = OldEntry->begin();
706     for (Function::arg_iterator I = F->arg_begin(), E = F->arg_end();
707          I != E; ++I) {
708       PHINode *PN = PHINode::Create(I->getType(), 2,
709                                     I->getName() + ".tr", InsertPos);
710       I->replaceAllUsesWith(PN); // Everyone use the PHI node now!
711       PN->addIncoming(I, NewEntry);
712       ArgumentPHIs.push_back(PN);
713     }
714   }
715 
716   // If this function has self recursive calls in the tail position where some
717   // are marked tail and some are not, only transform one flavor or another.  We
718   // have to choose whether we move allocas in the entry block to the new entry
719   // block or not, so we can't make a good choice for both.  NOTE: We could do
720   // slightly better here in the case that the function has no entry block
721   // allocas.
722   if (TailCallsAreMarkedTail && !CI->isTailCall())
723     return false;
724 
725   // Ok, now that we know we have a pseudo-entry block WITH all of the
726   // required PHI nodes, add entries into the PHI node for the actual
727   // parameters passed into the tail-recursive call.
728   for (unsigned i = 0, e = CI->getNumArgOperands(); i != e; ++i)
729     ArgumentPHIs[i]->addIncoming(CI->getArgOperand(i), BB);
730 
731   // If we are introducing an accumulator variable to eliminate the recursion,
732   // do so now.  Note that we _know_ that no subsequent tail recursion
733   // eliminations will happen on this function because of the way the
734   // accumulator recursion predicate is set up.
735   //
736   if (AccumulatorRecursionEliminationInitVal) {
737     Instruction *AccRecInstr = AccumulatorRecursionInstr;
738     // Start by inserting a new PHI node for the accumulator.
739     pred_iterator PB = pred_begin(OldEntry), PE = pred_end(OldEntry);
740     PHINode *AccPN =
741       PHINode::Create(AccumulatorRecursionEliminationInitVal->getType(),
742                       std::distance(PB, PE) + 1,
743                       "accumulator.tr", OldEntry->begin());
744 
745     // Loop over all of the predecessors of the tail recursion block.  For the
746     // real entry into the function we seed the PHI with the initial value,
747     // computed earlier.  For any other existing branches to this block (due to
748     // other tail recursions eliminated) the accumulator is not modified.
749     // Because we haven't added the branch in the current block to OldEntry yet,
750     // it will not show up as a predecessor.
751     for (pred_iterator PI = PB; PI != PE; ++PI) {
752       BasicBlock *P = *PI;
753       if (P == &F->getEntryBlock())
754         AccPN->addIncoming(AccumulatorRecursionEliminationInitVal, P);
755       else
756         AccPN->addIncoming(AccPN, P);
757     }
758 
759     if (AccRecInstr) {
760       // Add an incoming argument for the current block, which is computed by
761       // our associative and commutative accumulator instruction.
762       AccPN->addIncoming(AccRecInstr, BB);
763 
764       // Next, rewrite the accumulator recursion instruction so that it does not
765       // use the result of the call anymore, instead, use the PHI node we just
766       // inserted.
767       AccRecInstr->setOperand(AccRecInstr->getOperand(0) != CI, AccPN);
768     } else {
769       // Add an incoming argument for the current block, which is just the
770       // constant returned by the current return instruction.
771       AccPN->addIncoming(Ret->getReturnValue(), BB);
772     }
773 
774     // Finally, rewrite any return instructions in the program to return the PHI
775     // node instead of the "initval" that they do currently.  This loop will
776     // actually rewrite the return value we are destroying, but that's ok.
777     for (Function::iterator BBI = F->begin(), E = F->end(); BBI != E; ++BBI)
778       if (ReturnInst *RI = dyn_cast<ReturnInst>(BBI->getTerminator()))
779         RI->setOperand(0, AccPN);
780     ++NumAccumAdded;
781   }
782 
783   // Now that all of the PHI nodes are in place, remove the call and
784   // ret instructions, replacing them with an unconditional branch.
785   BranchInst *NewBI = BranchInst::Create(OldEntry, Ret);
786   NewBI->setDebugLoc(CI->getDebugLoc());
787 
788   BB->getInstList().erase(Ret);  // Remove return.
789   BB->getInstList().erase(CI);   // Remove call.
790   ++NumEliminated;
791   return true;
792 }
793 
794 bool TailCallElim::FoldReturnAndProcessPred(BasicBlock *BB,
795                                        ReturnInst *Ret, BasicBlock *&OldEntry,
796                                        bool &TailCallsAreMarkedTail,
797                                        SmallVectorImpl<PHINode *> &ArgumentPHIs,
798                                        bool CannotTailCallElimCallsMarkedTail) {
799   bool Change = false;
800 
801   // If the return block contains nothing but the return and PHI's,
802   // there might be an opportunity to duplicate the return in its
803   // predecessors and perform TRC there. Look for predecessors that end
804   // in unconditional branch and recursive call(s).
805   SmallVector<BranchInst*, 8> UncondBranchPreds;
806   for (pred_iterator PI = pred_begin(BB), E = pred_end(BB); PI != E; ++PI) {
807     BasicBlock *Pred = *PI;
808     TerminatorInst *PTI = Pred->getTerminator();
809     if (BranchInst *BI = dyn_cast<BranchInst>(PTI))
810       if (BI->isUnconditional())
811         UncondBranchPreds.push_back(BI);
812   }
813 
814   while (!UncondBranchPreds.empty()) {
815     BranchInst *BI = UncondBranchPreds.pop_back_val();
816     BasicBlock *Pred = BI->getParent();
817     if (CallInst *CI = FindTRECandidate(BI, CannotTailCallElimCallsMarkedTail)){
818       DEBUG(dbgs() << "FOLDING: " << *BB
819             << "INTO UNCOND BRANCH PRED: " << *Pred);
820       EliminateRecursiveTailCall(CI, FoldReturnIntoUncondBranch(Ret, BB, Pred),
821                                  OldEntry, TailCallsAreMarkedTail, ArgumentPHIs,
822                                  CannotTailCallElimCallsMarkedTail);
823       ++NumRetDuped;
824       Change = true;
825     }
826   }
827 
828   return Change;
829 }
830 
831 bool
832 TailCallElim::ProcessReturningBlock(ReturnInst *Ret, BasicBlock *&OldEntry,
833                                     bool &TailCallsAreMarkedTail,
834                                     SmallVectorImpl<PHINode *> &ArgumentPHIs,
835                                     bool CannotTailCallElimCallsMarkedTail) {
836   CallInst *CI = FindTRECandidate(Ret, CannotTailCallElimCallsMarkedTail);
837   if (!CI)
838     return false;
839 
840   return EliminateRecursiveTailCall(CI, Ret, OldEntry, TailCallsAreMarkedTail,
841                                     ArgumentPHIs,
842                                     CannotTailCallElimCallsMarkedTail);
843 }
844