maxjhandsome
/
llvm-project
forked from OSchip/llvm-project
1
0
Fork 0
Code Issues Pull Requests Packages Releases Wiki Activity

Treat branch on poison as immediate UB (under an off by default flag) 

The LangRef clearly states that branching on a undef or poison value is immediate undefined behavior, but historically, we have not been consistent about implementing that interpretation in the optimizer. Historically, we used (in some cases) a more relaxed model which essentially looked for provable UB along both paths which was control dependent on the condition. However, we've never been 100% consistent here. For instance SCEV uses the strong model for increments which form AddRecs (and only addrecs).

At the moment, the last big blocker for finally making this switch is enabling the fix landed in D106041. Loop unswitching (in it's classic form) is incorrect as it creates many "branch on poisons" when unswitching conditions originally unreachable within the loop.

This change adds a flag to value tracking which allows to easily test the optimization potential of treating branch on poison as immediate UB. It's intended to help ease work on getting us finally through this transition and avoid multiple independent rediscovers of the same issues.

Differential Revision: https://reviews.llvm.org/D112026
This commit is contained in:
Philip Reames 2021-10-24 12:39:26 -07:00
parent 3c06ecaa1e
commit a461fa64bb
1 changed files with 21 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
llvm/lib/Analysis/ValueTracking.cpp
View File

@ -84,6 +84,17 @@ using namespace llvm::PatternMatch;
static cl::opt<unsigned> DomConditionsMaxUses("dom-conditions-max-uses",
cl::Hidden, cl::init(20));
// According to the LangRef, branching on a poison condition is absolutely
// immediate full UB. However, historically we haven't implemented that
// consistently as we have an important transformation (non-trivial unswitch)
// which introduces instances of branch on poison/undef to otherwise well
// defined programs. This flag exists to let us test optimization benefit
// of exploiting the specified behavior (in combination with enabling the
// unswitch fix.)
static cl::opt<bool> BranchOnPoisonAsUB("branch-on-poison-as-ub",
cl::Hidden, cl::init(false));
/// Returns the bitwidth of the given scalar or pointer type. For vector types,
/// returns the element type's bitwidth.
static unsigned getBitWidth(Type *Ty, const DataLayout &DL) {
@ -5468,7 +5479,16 @@ void llvm::getGuaranteedNonPoisonOps(const Instruction *I,
case Instruction::SRem:
Operands.insert(I->getOperand(1));
break;
case Instruction::Switch:
if (BranchOnPoisonAsUB)
Operands.insert(cast<SwitchInst>(I)->getCondition());
break;
case Instruction::Br: {
auto *BR = cast<BranchInst>(I);
if (BranchOnPoisonAsUB && BR->isConditional())
Operands.insert(BR->getCondition());
break;
}
default:
break;
}