1 ; NOTE: Assertions have been autogenerated by utils/update_test_checks.py
2 ; RUN: opt -S -passes=indvars -indvars-predicate-loops=0 < %s | FileCheck %s
4 ; Tests in this file are specifically about correctly handling possibly poison
5 ; producing flags when converting from one IV to another. In particular, there
6 ; is a risk that the IV we chose to switch to is dynamically dead (i.e. there
7 ; is no side effect which dependents on the computation thereof). Such an IV
8 ; can produce poison on one or more iterations without triggering UB. When we
9 ; add an additional use to such an IV, we need to ensure that our new use does
10 ; not trigger UB where none existed in the original program.
12 ; Provide legal integer types.
13 target datalayout = "n8:16:32:64"
15 @data = common global [240 x i8] zeroinitializer, align 16
17 ;; In this example, the pointer IV is dynamicaly dead. As such, the fact that
18 ;; inbounds produces poison *does not* trigger UB in the original loop. As
19 ;; such, the pointer IV can be poison and adding a new use of the pointer
20 ;; IV which dependends on that poison computation in a manner which might
21 ;; trigger UB would be incorrect.
22 ;; FIXME: This currently shows a miscompile!
23 define void @neg_dynamically_dead_inbounds(i1 %always_false) #0 {
24 ; CHECK-LABEL: @neg_dynamically_dead_inbounds(
26 ; CHECK-NEXT: br label [[LOOP:%.*]]
28 ; CHECK-NEXT: [[I_0:%.*]] = phi i8 [ 0, [[ENTRY:%.*]] ], [ [[TMP4:%.*]], [[CONT:%.*]] ]
29 ; CHECK-NEXT: [[P_0:%.*]] = phi ptr [ @data, [[ENTRY]] ], [ [[TMP3:%.*]], [[CONT]] ]
30 ; CHECK-NEXT: [[TMP3]] = getelementptr inbounds i8, ptr [[P_0]], i64 1
31 ; CHECK-NEXT: br i1 [[ALWAYS_FALSE:%.*]], label [[NEVER_EXECUTED:%.*]], label [[CONT]]
32 ; CHECK: never_executed:
33 ; CHECK-NEXT: store volatile i8 0, ptr [[TMP3]], align 1
34 ; CHECK-NEXT: br label [[CONT]]
36 ; CHECK-NEXT: [[TMP4]] = add nuw i8 [[I_0]], 1
37 ; CHECK-NEXT: [[EXITCOND:%.*]] = icmp ne i8 [[TMP4]], -10
38 ; CHECK-NEXT: br i1 [[EXITCOND]], label [[LOOP]], label [[EXIT:%.*]]
40 ; CHECK-NEXT: ret void
46 %i.0 = phi i8 [ 0, %entry ], [ %tmp4, %cont ]
47 %p.0 = phi ptr [ @data, %entry ], [ %tmp3, %cont ]
48 %tmp3 = getelementptr inbounds i8, ptr %p.0, i64 1
49 br i1 %always_false, label %never_executed, label %cont
52 store volatile i8 0, ptr %tmp3
56 %tmp4 = add i8 %i.0, 1
57 %tmp5 = icmp ult i8 %tmp4, -10
58 br i1 %tmp5, label %loop, label %exit
64 ; Similiar to above, but shows how we currently guard non-constant
65 ; memory operands in a manner which hides the latent miscompile.
66 define void @neg_dynamically_dead_inbounds2(ptr %a, i1 %always_false) #0 {
67 ; CHECK-LABEL: @neg_dynamically_dead_inbounds2(
69 ; CHECK-NEXT: br label [[LOOP:%.*]]
71 ; CHECK-NEXT: [[I_0:%.*]] = phi i8 [ 0, [[ENTRY:%.*]] ], [ [[TMP4:%.*]], [[CONT:%.*]] ]
72 ; CHECK-NEXT: [[P_0:%.*]] = phi ptr [ [[A:%.*]], [[ENTRY]] ], [ [[TMP3:%.*]], [[CONT]] ]
73 ; CHECK-NEXT: [[TMP3]] = getelementptr inbounds i8, ptr [[P_0]], i64 1
74 ; CHECK-NEXT: br i1 [[ALWAYS_FALSE:%.*]], label [[NEVER_EXECUTED:%.*]], label [[CONT]]
75 ; CHECK: never_executed:
76 ; CHECK-NEXT: store volatile i8 0, ptr [[TMP3]], align 1
77 ; CHECK-NEXT: br label [[CONT]]
79 ; CHECK-NEXT: [[TMP4]] = add nuw i8 [[I_0]], 1
80 ; CHECK-NEXT: [[EXITCOND:%.*]] = icmp ne i8 [[TMP4]], -10
81 ; CHECK-NEXT: br i1 [[EXITCOND]], label [[LOOP]], label [[EXIT:%.*]]
83 ; CHECK-NEXT: ret void
89 %i.0 = phi i8 [ 0, %entry ], [ %tmp4, %cont ]
90 %p.0 = phi ptr [ %a, %entry ], [ %tmp3, %cont ]
91 %tmp3 = getelementptr inbounds i8, ptr %p.0, i64 1
92 br i1 %always_false, label %never_executed, label %cont
95 store volatile i8 0, ptr %tmp3
99 %tmp4 = add i8 %i.0, 1
100 %tmp5 = icmp ult i8 %tmp4, -10
101 br i1 %tmp5, label %loop, label %exit
107 define void @dom_store_preinc() #0 {
108 ; CHECK-LABEL: @dom_store_preinc(
110 ; CHECK-NEXT: br label [[LOOP:%.*]]
112 ; CHECK-NEXT: [[P_0:%.*]] = phi ptr [ @data, [[ENTRY:%.*]] ], [ [[TMP3:%.*]], [[LOOP]] ]
113 ; CHECK-NEXT: store volatile i8 0, ptr [[P_0]], align 1
114 ; CHECK-NEXT: [[TMP3]] = getelementptr inbounds i8, ptr [[P_0]], i64 1
115 ; CHECK-NEXT: [[EXITCOND:%.*]] = icmp ne ptr [[P_0]], getelementptr nuw (i8, ptr @data, i64 245)
116 ; CHECK-NEXT: br i1 [[EXITCOND]], label [[LOOP]], label [[EXIT:%.*]]
118 ; CHECK-NEXT: ret void
124 %i.0 = phi i8 [ 0, %entry ], [ %tmp4, %loop ]
125 %p.0 = phi ptr [ @data, %entry ], [ %tmp3, %loop ]
126 store volatile i8 0, ptr %p.0
127 %tmp3 = getelementptr inbounds i8, ptr %p.0, i64 1
128 %tmp4 = add i8 %i.0, 1
129 %tmp5 = icmp ult i8 %tmp4, -10
130 br i1 %tmp5, label %loop, label %exit
136 define void @dom_store_postinc() #0 {
137 ; CHECK-LABEL: @dom_store_postinc(
139 ; CHECK-NEXT: br label [[LOOP:%.*]]
141 ; CHECK-NEXT: [[P_0:%.*]] = phi ptr [ @data, [[ENTRY:%.*]] ], [ [[TMP3:%.*]], [[LOOP]] ]
142 ; CHECK-NEXT: [[TMP3]] = getelementptr inbounds i8, ptr [[P_0]], i64 1
143 ; CHECK-NEXT: store volatile i8 0, ptr [[TMP3]], align 1
144 ; CHECK-NEXT: [[EXITCOND:%.*]] = icmp ne ptr [[TMP3]], getelementptr nuw (i8, ptr @data, i64 246)
145 ; CHECK-NEXT: br i1 [[EXITCOND]], label [[LOOP]], label [[EXIT:%.*]]
147 ; CHECK-NEXT: ret void
153 %i.0 = phi i8 [ 0, %entry ], [ %tmp4, %loop ]
154 %p.0 = phi ptr [ @data, %entry ], [ %tmp3, %loop ]
155 %tmp3 = getelementptr inbounds i8, ptr %p.0, i64 1
156 store volatile i8 0, ptr %tmp3
157 %tmp4 = add i8 %i.0, 1
158 %tmp5 = icmp ult i8 %tmp4, -10
159 br i1 %tmp5, label %loop, label %exit
165 define i8 @dom_load() #0 {
166 ; CHECK-LABEL: @dom_load(
168 ; CHECK-NEXT: br label [[LOOP:%.*]]
170 ; CHECK-NEXT: [[P_0:%.*]] = phi ptr [ @data, [[ENTRY:%.*]] ], [ [[TMP3:%.*]], [[LOOP]] ]
171 ; CHECK-NEXT: [[TMP3]] = getelementptr inbounds i8, ptr [[P_0]], i64 1
172 ; CHECK-NEXT: [[V:%.*]] = load i8, ptr [[TMP3]], align 1
173 ; CHECK-NEXT: [[EXITCOND:%.*]] = icmp ne ptr [[TMP3]], getelementptr nuw (i8, ptr @data, i64 246)
174 ; CHECK-NEXT: br i1 [[EXITCOND]], label [[LOOP]], label [[EXIT:%.*]]
176 ; CHECK-NEXT: [[V_LCSSA:%.*]] = phi i8 [ [[V]], [[LOOP]] ]
177 ; CHECK-NEXT: ret i8 [[V_LCSSA]]
183 %i.0 = phi i8 [ 0, %entry ], [ %tmp4, %loop ]
184 %p.0 = phi ptr [ @data, %entry ], [ %tmp3, %loop ]
185 %tmp3 = getelementptr inbounds i8, ptr %p.0, i64 1
186 %v = load i8, ptr %tmp3
187 %tmp4 = add i8 %i.0, 1
188 %tmp5 = icmp ult i8 %tmp4, -10
189 br i1 %tmp5, label %loop, label %exit
195 define i64 @dom_div(i64 %input) #0 {
196 ; CHECK-LABEL: @dom_div(
198 ; CHECK-NEXT: br label [[LOOP:%.*]]
200 ; CHECK-NEXT: [[I_0:%.*]] = phi i8 [ 0, [[ENTRY:%.*]] ], [ [[TMP4:%.*]], [[LOOP]] ]
201 ; CHECK-NEXT: [[I_1:%.*]] = phi i64 [ [[INPUT:%.*]], [[ENTRY]] ], [ [[TMP3:%.*]], [[LOOP]] ]
202 ; CHECK-NEXT: [[TMP3]] = add nuw nsw i64 [[I_1]], 1
203 ; CHECK-NEXT: [[V:%.*]] = udiv i64 5, [[TMP3]]
204 ; CHECK-NEXT: [[TMP4]] = add nuw i8 [[I_0]], 1
205 ; CHECK-NEXT: [[EXITCOND:%.*]] = icmp ne i8 [[TMP4]], -10
206 ; CHECK-NEXT: br i1 [[EXITCOND]], label [[LOOP]], label [[EXIT:%.*]]
208 ; CHECK-NEXT: [[V_LCSSA:%.*]] = phi i64 [ [[V]], [[LOOP]] ]
209 ; CHECK-NEXT: ret i64 [[V_LCSSA]]
215 %i.0 = phi i8 [ 0, %entry ], [ %tmp4, %loop ]
216 %i.1 = phi i64 [ %input, %entry ], [ %tmp3, %loop ]
217 %tmp3 = add nsw nuw i64 %i.1, 1
218 %v = udiv i64 5, %tmp3
219 %tmp4 = add i8 %i.0, 1
220 %tmp5 = icmp ult i8 %tmp4, -10
221 br i1 %tmp5, label %loop, label %exit
227 ; For integer IVs, we handle this trigger case by stripping the problematic
228 ; flags which removes the potential introduction of UB.
229 define void @neg_dead_int_iv() #0 {
230 ; CHECK-LABEL: @neg_dead_int_iv(
232 ; CHECK-NEXT: br label [[LOOP:%.*]]
234 ; CHECK-NEXT: [[I_1:%.*]] = phi i64 [ -2, [[ENTRY:%.*]] ], [ [[TMP3:%.*]], [[LOOP]] ]
235 ; CHECK-NEXT: [[TMP3]] = add nsw i64 [[I_1]], 1
236 ; CHECK-NEXT: [[EXITCOND:%.*]] = icmp ne i64 [[TMP3]], 244
237 ; CHECK-NEXT: br i1 [[EXITCOND]], label [[LOOP]], label [[EXIT:%.*]]
239 ; CHECK-NEXT: ret void
245 %i.0 = phi i8 [ 0, %entry ], [ %tmp4, %loop ]
246 %i.1 = phi i64 [ -2, %entry ], [ %tmp3, %loop ]
247 %tmp3 = add nsw nuw i64 %i.1, 1
248 %tmp4 = add i8 %i.0, 1
249 %tmp5 = icmp ult i8 %tmp4, -10
250 br i1 %tmp5, label %loop, label %exit