1 //===- SpeculativeExecution.cpp ---------------------------------*- C++ -*-===// 2 // 3 // Part of the LLVM Project, under the Apache License v2.0 with LLVM Exceptions. 4 // See https://llvm.org/LICENSE.txt for license information. 5 // SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception 6 // 7 //===----------------------------------------------------------------------===// 8 // 9 // This pass hoists instructions to enable speculative execution on 10 // targets where branches are expensive. This is aimed at GPUs. It 11 // currently works on simple if-then and if-then-else 12 // patterns. 13 // 14 // Removing branches is not the only motivation for this 15 // pass. E.g. consider this code and assume that there is no 16 // addressing mode for multiplying by sizeof(*a): 17 // 18 // if (b > 0) 19 // c = a[i + 1] 20 // if (d > 0) 21 // e = a[i + 2] 22 // 23 // turns into 24 // 25 // p = &a[i + 1]; 26 // if (b > 0) 27 // c = *p; 28 // q = &a[i + 2]; 29 // if (d > 0) 30 // e = *q; 31 // 32 // which could later be optimized to 33 // 34 // r = &a[i]; 35 // if (b > 0) 36 // c = r[1]; 37 // if (d > 0) 38 // e = r[2]; 39 // 40 // Later passes sink back much of the speculated code that did not enable 41 // further optimization. 42 // 43 // This pass is more aggressive than the function SpeculativeyExecuteBB in 44 // SimplifyCFG. SimplifyCFG will not speculate if no selects are introduced and 45 // it will speculate at most one instruction. It also will not speculate if 46 // there is a value defined in the if-block that is only used in the then-block. 47 // These restrictions make sense since the speculation in SimplifyCFG seems 48 // aimed at introducing cheap selects, while this pass is intended to do more 49 // aggressive speculation while counting on later passes to either capitalize on 50 // that or clean it up. 51 // 52 // If the pass was created by calling 53 // createSpeculativeExecutionIfHasBranchDivergencePass or the 54 // -spec-exec-only-if-divergent-target option is present, this pass only has an 55 // effect on targets where TargetTransformInfo::hasBranchDivergence() is true; 56 // on other targets, it is a nop. 57 // 58 // This lets you include this pass unconditionally in the IR pass pipeline, but 59 // only enable it for relevant targets. 60 // 61 //===----------------------------------------------------------------------===// 62 63 #include "llvm/Transforms/Scalar/SpeculativeExecution.h" 64 #include "llvm/ADT/SmallPtrSet.h" 65 #include "llvm/Analysis/GlobalsModRef.h" 66 #include "llvm/Analysis/ValueTracking.h" 67 #include "llvm/IR/Instructions.h" 68 #include "llvm/IR/IntrinsicInst.h" 69 #include "llvm/IR/Module.h" 70 #include "llvm/IR/Operator.h" 71 #include "llvm/InitializePasses.h" 72 #include "llvm/Support/CommandLine.h" 73 #include "llvm/Support/Debug.h" 74 75 using namespace llvm; 76 77 #define DEBUG_TYPE "speculative-execution" 78 79 // The risk that speculation will not pay off increases with the 80 // number of instructions speculated, so we put a limit on that. 81 static cl::opt<unsigned> SpecExecMaxSpeculationCost( 82 "spec-exec-max-speculation-cost", cl::init(7), cl::Hidden, 83 cl::desc("Speculative execution is not applied to basic blocks where " 84 "the cost of the instructions to speculatively execute " 85 "exceeds this limit.")); 86 87 // Speculating just a few instructions from a larger block tends not 88 // to be profitable and this limit prevents that. A reason for that is 89 // that small basic blocks are more likely to be candidates for 90 // further optimization. 91 static cl::opt<unsigned> SpecExecMaxNotHoisted( 92 "spec-exec-max-not-hoisted", cl::init(5), cl::Hidden, 93 cl::desc("Speculative execution is not applied to basic blocks where the " 94 "number of instructions that would not be speculatively executed " 95 "exceeds this limit.")); 96 97 static cl::opt<bool> SpecExecOnlyIfDivergentTarget( 98 "spec-exec-only-if-divergent-target", cl::init(false), cl::Hidden, 99 cl::desc("Speculative execution is applied only to targets with divergent " 100 "branches, even if the pass was configured to apply only to all " 101 "targets.")); 102 103 namespace { 104 105 class SpeculativeExecutionLegacyPass : public FunctionPass { 106 public: 107 static char ID; 108 explicit SpeculativeExecutionLegacyPass(bool OnlyIfDivergentTarget = false) 109 : FunctionPass(ID), OnlyIfDivergentTarget(OnlyIfDivergentTarget || 110 SpecExecOnlyIfDivergentTarget), 111 Impl(OnlyIfDivergentTarget) {} 112 113 void getAnalysisUsage(AnalysisUsage &AU) const override; 114 bool runOnFunction(Function &F) override; 115 116 StringRef getPassName() const override { 117 if (OnlyIfDivergentTarget) 118 return "Speculatively execute instructions if target has divergent " 119 "branches"; 120 return "Speculatively execute instructions"; 121 } 122 123 private: 124 // Variable preserved purely for correct name printing. 125 const bool OnlyIfDivergentTarget; 126 127 SpeculativeExecutionPass Impl; 128 }; 129 } // namespace 130 131 char SpeculativeExecutionLegacyPass::ID = 0; 132 INITIALIZE_PASS_BEGIN(SpeculativeExecutionLegacyPass, "speculative-execution", 133 "Speculatively execute instructions", false, false) 134 INITIALIZE_PASS_DEPENDENCY(TargetTransformInfoWrapperPass) 135 INITIALIZE_PASS_END(SpeculativeExecutionLegacyPass, "speculative-execution", 136 "Speculatively execute instructions", false, false) 137 138 void SpeculativeExecutionLegacyPass::getAnalysisUsage(AnalysisUsage &AU) const { 139 AU.addRequired<TargetTransformInfoWrapperPass>(); 140 AU.addPreserved<GlobalsAAWrapperPass>(); 141 AU.setPreservesCFG(); 142 } 143 144 bool SpeculativeExecutionLegacyPass::runOnFunction(Function &F) { 145 if (skipFunction(F)) 146 return false; 147 148 auto *TTI = &getAnalysis<TargetTransformInfoWrapperPass>().getTTI(F); 149 return Impl.runImpl(F, TTI); 150 } 151 152 namespace llvm { 153 154 bool SpeculativeExecutionPass::runImpl(Function &F, TargetTransformInfo *TTI) { 155 if (OnlyIfDivergentTarget && !TTI->hasBranchDivergence()) { 156 LLVM_DEBUG(dbgs() << "Not running SpeculativeExecution because " 157 "TTI->hasBranchDivergence() is false.\n"); 158 return false; 159 } 160 161 this->TTI = TTI; 162 bool Changed = false; 163 for (auto& B : F) { 164 Changed |= runOnBasicBlock(B); 165 } 166 return Changed; 167 } 168 169 bool SpeculativeExecutionPass::runOnBasicBlock(BasicBlock &B) { 170 BranchInst *BI = dyn_cast<BranchInst>(B.getTerminator()); 171 if (BI == nullptr) 172 return false; 173 174 if (BI->getNumSuccessors() != 2) 175 return false; 176 BasicBlock &Succ0 = *BI->getSuccessor(0); 177 BasicBlock &Succ1 = *BI->getSuccessor(1); 178 179 if (&B == &Succ0 || &B == &Succ1 || &Succ0 == &Succ1) { 180 return false; 181 } 182 183 // Hoist from if-then (triangle). 184 if (Succ0.getSinglePredecessor() != nullptr && 185 Succ0.getSingleSuccessor() == &Succ1) { 186 return considerHoistingFromTo(Succ0, B); 187 } 188 189 // Hoist from if-else (triangle). 190 if (Succ1.getSinglePredecessor() != nullptr && 191 Succ1.getSingleSuccessor() == &Succ0) { 192 return considerHoistingFromTo(Succ1, B); 193 } 194 195 // Hoist from if-then-else (diamond), but only if it is equivalent to 196 // an if-else or if-then due to one of the branches doing nothing. 197 if (Succ0.getSinglePredecessor() != nullptr && 198 Succ1.getSinglePredecessor() != nullptr && 199 Succ1.getSingleSuccessor() != nullptr && 200 Succ1.getSingleSuccessor() != &B && 201 Succ1.getSingleSuccessor() == Succ0.getSingleSuccessor()) { 202 // If a block has only one instruction, then that is a terminator 203 // instruction so that the block does nothing. This does happen. 204 if (Succ1.size() == 1) // equivalent to if-then 205 return considerHoistingFromTo(Succ0, B); 206 if (Succ0.size() == 1) // equivalent to if-else 207 return considerHoistingFromTo(Succ1, B); 208 } 209 210 return false; 211 } 212 213 static unsigned ComputeSpeculationCost(const Instruction *I, 214 const TargetTransformInfo &TTI) { 215 switch (Operator::getOpcode(I)) { 216 case Instruction::GetElementPtr: 217 case Instruction::Add: 218 case Instruction::Mul: 219 case Instruction::And: 220 case Instruction::Or: 221 case Instruction::Select: 222 case Instruction::Shl: 223 case Instruction::Sub: 224 case Instruction::LShr: 225 case Instruction::AShr: 226 case Instruction::Xor: 227 case Instruction::ZExt: 228 case Instruction::SExt: 229 case Instruction::Call: 230 case Instruction::BitCast: 231 case Instruction::PtrToInt: 232 case Instruction::IntToPtr: 233 case Instruction::AddrSpaceCast: 234 case Instruction::FPToUI: 235 case Instruction::FPToSI: 236 case Instruction::UIToFP: 237 case Instruction::SIToFP: 238 case Instruction::FPExt: 239 case Instruction::FPTrunc: 240 case Instruction::FAdd: 241 case Instruction::FSub: 242 case Instruction::FMul: 243 case Instruction::FDiv: 244 case Instruction::FRem: 245 case Instruction::FNeg: 246 case Instruction::ICmp: 247 case Instruction::FCmp: 248 case Instruction::Trunc: 249 case Instruction::Freeze: 250 case Instruction::ExtractElement: 251 case Instruction::InsertElement: 252 case Instruction::ShuffleVector: 253 case Instruction::ExtractValue: 254 case Instruction::InsertValue: 255 return TTI.getUserCost(I, TargetTransformInfo::TCK_SizeAndLatency); 256 257 default: 258 return UINT_MAX; // Disallow anything not explicitly listed. 259 } 260 } 261 262 bool SpeculativeExecutionPass::considerHoistingFromTo( 263 BasicBlock &FromBlock, BasicBlock &ToBlock) { 264 SmallPtrSet<const Instruction *, 8> NotHoisted; 265 const auto AllPrecedingUsesFromBlockHoisted = [&NotHoisted](const User *U) { 266 // Debug variable has special operand to check it's not hoisted. 267 if (const auto *DVI = dyn_cast<DbgVariableIntrinsic>(U)) { 268 if (const auto *I = 269 dyn_cast_or_null<Instruction>(DVI->getVariableLocation())) 270 if (NotHoisted.count(I) == 0) 271 return true; 272 return false; 273 } 274 275 // Usially debug label instrinsic corresponds to label in LLVM IR. In these 276 // cases we should not move it here. 277 // TODO: Possible special processing needed to detect it is related to a 278 // hoisted instruction. 279 if (isa<DbgLabelInst>(U)) 280 return false; 281 282 for (const Value *V : U->operand_values()) { 283 if (const Instruction *I = dyn_cast<Instruction>(V)) { 284 if (NotHoisted.contains(I)) 285 return false; 286 } 287 } 288 return true; 289 }; 290 291 unsigned TotalSpeculationCost = 0; 292 unsigned NotHoistedInstCount = 0; 293 for (const auto &I : FromBlock) { 294 const unsigned Cost = ComputeSpeculationCost(&I, *TTI); 295 if (Cost != UINT_MAX && isSafeToSpeculativelyExecute(&I) && 296 AllPrecedingUsesFromBlockHoisted(&I)) { 297 TotalSpeculationCost += Cost; 298 if (TotalSpeculationCost > SpecExecMaxSpeculationCost) 299 return false; // too much to hoist 300 } else { 301 // Debug info instrinsics should not be counted for threshold. 302 if (!isa<DbgInfoIntrinsic>(I)) 303 NotHoistedInstCount++; 304 if (NotHoistedInstCount > SpecExecMaxNotHoisted) 305 return false; // too much left behind 306 NotHoisted.insert(&I); 307 } 308 } 309 310 for (auto I = FromBlock.begin(); I != FromBlock.end();) { 311 // We have to increment I before moving Current as moving Current 312 // changes the list that I is iterating through. 313 auto Current = I; 314 ++I; 315 if (!NotHoisted.count(&*Current)) { 316 Current->moveBefore(ToBlock.getTerminator()); 317 } 318 } 319 return true; 320 } 321 322 FunctionPass *createSpeculativeExecutionPass() { 323 return new SpeculativeExecutionLegacyPass(); 324 } 325 326 FunctionPass *createSpeculativeExecutionIfHasBranchDivergencePass() { 327 return new SpeculativeExecutionLegacyPass(/* OnlyIfDivergentTarget = */ true); 328 } 329 330 SpeculativeExecutionPass::SpeculativeExecutionPass(bool OnlyIfDivergentTarget) 331 : OnlyIfDivergentTarget(OnlyIfDivergentTarget || 332 SpecExecOnlyIfDivergentTarget) {} 333 334 PreservedAnalyses SpeculativeExecutionPass::run(Function &F, 335 FunctionAnalysisManager &AM) { 336 auto *TTI = &AM.getResult<TargetIRAnalysis>(F); 337 338 bool Changed = runImpl(F, TTI); 339 340 if (!Changed) 341 return PreservedAnalyses::all(); 342 PreservedAnalyses PA; 343 PA.preserve<GlobalsAA>(); 344 PA.preserveSet<CFGAnalyses>(); 345 return PA; 346 } 347 } // namespace llvm 348