1 /* Support routines for Value Range Propagation (VRP).
2 Copyright (C) 2005, 2006 Free Software Foundation, Inc.
3 Contributed by Diego Novillo <dnovillo@redhat.com>.
5 This file is part of GCC.
7 GCC is free software; you can redistribute it and/or modify
8 it under the terms of the GNU General Public License as published by
9 the Free Software Foundation; either version 2, or (at your option)
12 GCC is distributed in the hope that it will be useful,
13 but WITHOUT ANY WARRANTY; without even the implied warranty of
14 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 GNU General Public License for more details.
17 You should have received a copy of the GNU General Public License
18 along with GCC; see the file COPYING. If not, write to
19 the Free Software Foundation, 51 Franklin Street, Fifth Floor,
20 Boston, MA 02110-1301, USA. */
24 #include "coretypes.h"
29 #include "basic-block.h"
30 #include "tree-flow.h"
31 #include "tree-pass.h"
32 #include "tree-dump.h"
34 #include "diagnostic.h"
36 #include "tree-scalar-evolution.h"
37 #include "tree-ssa-propagate.h"
38 #include "tree-chrec.h"
40 /* Set of SSA names found during the dominator traversal of a
41 sub-graph in find_assert_locations. */
42 static sbitmap found_in_subgraph;
44 /* Local functions. */
45 static int compare_values (tree val1, tree val2);
47 /* Location information for ASSERT_EXPRs. Each instance of this
48 structure describes an ASSERT_EXPR for an SSA name. Since a single
49 SSA name may have more than one assertion associated with it, these
50 locations are kept in a linked list attached to the corresponding
54 /* Basic block where the assertion would be inserted. */
57 /* Some assertions need to be inserted on an edge (e.g., assertions
58 generated by COND_EXPRs). In those cases, BB will be NULL. */
61 /* Pointer to the statement that generated this assertion. */
62 block_stmt_iterator si;
64 /* Predicate code for the ASSERT_EXPR. Must be COMPARISON_CLASS_P. */
65 enum tree_code comp_code;
67 /* Value being compared against. */
70 /* Next node in the linked list. */
71 struct assert_locus_d *next;
74 typedef struct assert_locus_d *assert_locus_t;
76 /* If bit I is present, it means that SSA name N_i has a list of
77 assertions that should be inserted in the IL. */
78 static bitmap need_assert_for;
80 /* Array of locations lists where to insert assertions. ASSERTS_FOR[I]
81 holds a list of ASSERT_LOCUS_T nodes that describe where
82 ASSERT_EXPRs for SSA name N_I should be inserted. */
83 static assert_locus_t *asserts_for;
85 /* Set of blocks visited in find_assert_locations. Used to avoid
86 visiting the same block more than once. */
87 static sbitmap blocks_visited;
89 /* Value range array. After propagation, VR_VALUE[I] holds the range
90 of values that SSA name N_I may take. */
91 static value_range_t **vr_value;
94 /* Return true if ARG is marked with the nonnull attribute in the
95 current function signature. */
98 nonnull_arg_p (tree arg)
100 tree t, attrs, fntype;
101 unsigned HOST_WIDE_INT arg_num;
103 gcc_assert (TREE_CODE (arg) == PARM_DECL && POINTER_TYPE_P (TREE_TYPE (arg)));
105 fntype = TREE_TYPE (current_function_decl);
106 attrs = lookup_attribute ("nonnull", TYPE_ATTRIBUTES (fntype));
108 /* If "nonnull" wasn't specified, we know nothing about the argument. */
109 if (attrs == NULL_TREE)
112 /* If "nonnull" applies to all the arguments, then ARG is non-null. */
113 if (TREE_VALUE (attrs) == NULL_TREE)
116 /* Get the position number for ARG in the function signature. */
117 for (arg_num = 1, t = DECL_ARGUMENTS (current_function_decl);
119 t = TREE_CHAIN (t), arg_num++)
125 gcc_assert (t == arg);
127 /* Now see if ARG_NUM is mentioned in the nonnull list. */
128 for (t = TREE_VALUE (attrs); t; t = TREE_CHAIN (t))
130 if (compare_tree_int (TREE_VALUE (t), arg_num) == 0)
138 /* Set value range VR to {T, MIN, MAX, EQUIV}. */
141 set_value_range (value_range_t *vr, enum value_range_type t, tree min,
142 tree max, bitmap equiv)
144 #if defined ENABLE_CHECKING
145 /* Check the validity of the range. */
146 if (t == VR_RANGE || t == VR_ANTI_RANGE)
150 gcc_assert (min && max);
152 if (INTEGRAL_TYPE_P (TREE_TYPE (min)) && t == VR_ANTI_RANGE)
153 gcc_assert (min != TYPE_MIN_VALUE (TREE_TYPE (min))
154 || max != TYPE_MAX_VALUE (TREE_TYPE (max)));
156 cmp = compare_values (min, max);
157 gcc_assert (cmp == 0 || cmp == -1 || cmp == -2);
160 if (t == VR_UNDEFINED || t == VR_VARYING)
161 gcc_assert (min == NULL_TREE && max == NULL_TREE);
163 if (t == VR_UNDEFINED || t == VR_VARYING)
164 gcc_assert (equiv == NULL || bitmap_empty_p (equiv));
171 /* Since updating the equivalence set involves deep copying the
172 bitmaps, only do it if absolutely necessary. */
173 if (vr->equiv == NULL)
174 vr->equiv = BITMAP_ALLOC (NULL);
176 if (equiv != vr->equiv)
178 if (equiv && !bitmap_empty_p (equiv))
179 bitmap_copy (vr->equiv, equiv);
181 bitmap_clear (vr->equiv);
186 /* Copy value range FROM into value range TO. */
189 copy_value_range (value_range_t *to, value_range_t *from)
191 set_value_range (to, from->type, from->min, from->max, from->equiv);
194 /* Set value range VR to a non-negative range of type TYPE. */
197 set_value_range_to_nonnegative (value_range_t *vr, tree type)
199 tree zero = build_int_cst (type, 0);
200 set_value_range (vr, VR_RANGE, zero, TYPE_MAX_VALUE (type), vr->equiv);
203 /* Set value range VR to a non-NULL range of type TYPE. */
206 set_value_range_to_nonnull (value_range_t *vr, tree type)
208 tree zero = build_int_cst (type, 0);
209 set_value_range (vr, VR_ANTI_RANGE, zero, zero, vr->equiv);
213 /* Set value range VR to a NULL range of type TYPE. */
216 set_value_range_to_null (value_range_t *vr, tree type)
218 tree zero = build_int_cst (type, 0);
219 set_value_range (vr, VR_RANGE, zero, zero, vr->equiv);
223 /* Set value range VR to VR_VARYING. */
226 set_value_range_to_varying (value_range_t *vr)
228 vr->type = VR_VARYING;
229 vr->min = vr->max = NULL_TREE;
231 bitmap_clear (vr->equiv);
235 /* Set value range VR to VR_UNDEFINED. */
238 set_value_range_to_undefined (value_range_t *vr)
240 vr->type = VR_UNDEFINED;
241 vr->min = vr->max = NULL_TREE;
243 bitmap_clear (vr->equiv);
247 /* Return value range information for VAR.
249 If we have no values ranges recorded (ie, VRP is not running), then
250 return NULL. Otherwise create an empty range if none existed for VAR. */
252 static value_range_t *
253 get_value_range (tree var)
257 unsigned ver = SSA_NAME_VERSION (var);
259 /* If we have no recorded ranges, then return NULL. */
267 /* Create a default value range. */
268 vr_value[ver] = vr = XNEW (value_range_t);
269 memset (vr, 0, sizeof (*vr));
271 /* Allocate an equivalence set. */
272 vr->equiv = BITMAP_ALLOC (NULL);
274 /* If VAR is a default definition, the variable can take any value
276 sym = SSA_NAME_VAR (var);
277 if (var == default_def (sym))
279 /* Try to use the "nonnull" attribute to create ~[0, 0]
280 anti-ranges for pointers. Note that this is only valid with
281 default definitions of PARM_DECLs. */
282 if (TREE_CODE (sym) == PARM_DECL
283 && POINTER_TYPE_P (TREE_TYPE (sym))
284 && nonnull_arg_p (sym))
285 set_value_range_to_nonnull (vr, TREE_TYPE (sym));
287 set_value_range_to_varying (vr);
294 /* Update the value range and equivalence set for variable VAR to
295 NEW_VR. Return true if NEW_VR is different from VAR's previous
298 NOTE: This function assumes that NEW_VR is a temporary value range
299 object created for the sole purpose of updating VAR's range. The
300 storage used by the equivalence set from NEW_VR will be freed by
301 this function. Do not call update_value_range when NEW_VR
302 is the range object associated with another SSA name. */
305 update_value_range (tree var, value_range_t *new_vr)
307 value_range_t *old_vr;
310 /* Update the value range, if necessary. */
311 old_vr = get_value_range (var);
312 is_new = old_vr->type != new_vr->type
313 || old_vr->min != new_vr->min
314 || old_vr->max != new_vr->max
315 || (old_vr->equiv == NULL && new_vr->equiv)
316 || (old_vr->equiv && new_vr->equiv == NULL)
317 || (!bitmap_equal_p (old_vr->equiv, new_vr->equiv));
320 set_value_range (old_vr, new_vr->type, new_vr->min, new_vr->max,
323 BITMAP_FREE (new_vr->equiv);
324 new_vr->equiv = NULL;
330 /* Add VAR and VAR's equivalence set to EQUIV. */
333 add_equivalence (bitmap equiv, tree var)
335 unsigned ver = SSA_NAME_VERSION (var);
336 value_range_t *vr = vr_value[ver];
338 bitmap_set_bit (equiv, ver);
340 bitmap_ior_into (equiv, vr->equiv);
344 /* Return true if VR is ~[0, 0]. */
347 range_is_nonnull (value_range_t *vr)
349 return vr->type == VR_ANTI_RANGE
350 && integer_zerop (vr->min)
351 && integer_zerop (vr->max);
355 /* Return true if VR is [0, 0]. */
358 range_is_null (value_range_t *vr)
360 return vr->type == VR_RANGE
361 && integer_zerop (vr->min)
362 && integer_zerop (vr->max);
366 /* Return true if value range VR involves at least one symbol. */
369 symbolic_range_p (value_range_t *vr)
371 return (!is_gimple_min_invariant (vr->min)
372 || !is_gimple_min_invariant (vr->max));
375 /* Like tree_expr_nonnegative_p, but this function uses value ranges
379 vrp_expr_computes_nonnegative (tree expr)
381 return tree_expr_nonnegative_p (expr);
384 /* Like tree_expr_nonzero_p, but this function uses value ranges
388 vrp_expr_computes_nonzero (tree expr)
390 if (tree_expr_nonzero_p (expr))
393 /* If we have an expression of the form &X->a, then the expression
394 is nonnull if X is nonnull. */
395 if (TREE_CODE (expr) == ADDR_EXPR)
397 tree base = get_base_address (TREE_OPERAND (expr, 0));
399 if (base != NULL_TREE
400 && TREE_CODE (base) == INDIRECT_REF
401 && TREE_CODE (TREE_OPERAND (base, 0)) == SSA_NAME)
403 value_range_t *vr = get_value_range (TREE_OPERAND (base, 0));
404 if (range_is_nonnull (vr))
412 /* Returns true if EXPR is a valid value (as expected by compare_values) --
413 a gimple invariant, or SSA_NAME +- CST. */
416 valid_value_p (tree expr)
418 if (TREE_CODE (expr) == SSA_NAME)
421 if (TREE_CODE (expr) == PLUS_EXPR
422 || TREE_CODE (expr) == MINUS_EXPR)
423 return (TREE_CODE (TREE_OPERAND (expr, 0)) == SSA_NAME
424 && TREE_CODE (TREE_OPERAND (expr, 1)) == INTEGER_CST);
426 return is_gimple_min_invariant (expr);
429 /* Compare two values VAL1 and VAL2. Return
431 -2 if VAL1 and VAL2 cannot be compared at compile-time,
434 +1 if VAL1 > VAL2, and
437 This is similar to tree_int_cst_compare but supports pointer values
438 and values that cannot be compared at compile time. */
441 compare_values (tree val1, tree val2)
446 /* Below we rely on the fact that VAL1 and VAL2 are both pointers or
448 gcc_assert (POINTER_TYPE_P (TREE_TYPE (val1))
449 == POINTER_TYPE_P (TREE_TYPE (val2)));
451 if ((TREE_CODE (val1) == SSA_NAME
452 || TREE_CODE (val1) == PLUS_EXPR
453 || TREE_CODE (val1) == MINUS_EXPR)
454 && (TREE_CODE (val2) == SSA_NAME
455 || TREE_CODE (val2) == PLUS_EXPR
456 || TREE_CODE (val2) == MINUS_EXPR))
459 enum tree_code code1, code2;
461 /* If VAL1 and VAL2 are of the form 'NAME [+-] CST' or 'NAME',
462 return -1 or +1 accordingly. If VAL1 and VAL2 don't use the
463 same name, return -2. */
464 if (TREE_CODE (val1) == SSA_NAME)
472 code1 = TREE_CODE (val1);
473 n1 = TREE_OPERAND (val1, 0);
474 c1 = TREE_OPERAND (val1, 1);
475 if (tree_int_cst_sgn (c1) == -1)
477 c1 = fold_unary_to_constant (NEGATE_EXPR, TREE_TYPE (c1), c1);
480 code1 = code1 == MINUS_EXPR ? PLUS_EXPR : MINUS_EXPR;
484 if (TREE_CODE (val2) == SSA_NAME)
492 code2 = TREE_CODE (val2);
493 n2 = TREE_OPERAND (val2, 0);
494 c2 = TREE_OPERAND (val2, 1);
495 if (tree_int_cst_sgn (c2) == -1)
497 c2 = fold_unary_to_constant (NEGATE_EXPR, TREE_TYPE (c2), c2);
500 code2 = code2 == MINUS_EXPR ? PLUS_EXPR : MINUS_EXPR;
504 /* Both values must use the same name. */
508 if (code1 == SSA_NAME
509 && code2 == SSA_NAME)
513 /* If overflow is defined we cannot simplify more. */
514 if (TYPE_UNSIGNED (TREE_TYPE (val1))
518 if (code1 == SSA_NAME)
520 if (code2 == PLUS_EXPR)
521 /* NAME < NAME + CST */
523 else if (code2 == MINUS_EXPR)
524 /* NAME > NAME - CST */
527 else if (code1 == PLUS_EXPR)
529 if (code2 == SSA_NAME)
530 /* NAME + CST > NAME */
532 else if (code2 == PLUS_EXPR)
533 /* NAME + CST1 > NAME + CST2, if CST1 > CST2 */
534 return compare_values (c1, c2);
535 else if (code2 == MINUS_EXPR)
536 /* NAME + CST1 > NAME - CST2 */
539 else if (code1 == MINUS_EXPR)
541 if (code2 == SSA_NAME)
542 /* NAME - CST < NAME */
544 else if (code2 == PLUS_EXPR)
545 /* NAME - CST1 < NAME + CST2 */
547 else if (code2 == MINUS_EXPR)
548 /* NAME - CST1 > NAME - CST2, if CST1 < CST2. Notice that
549 C1 and C2 are swapped in the call to compare_values. */
550 return compare_values (c2, c1);
556 /* We cannot compare non-constants. */
557 if (!is_gimple_min_invariant (val1) || !is_gimple_min_invariant (val2))
560 if (!POINTER_TYPE_P (TREE_TYPE (val1)))
562 /* We cannot compare overflowed values. */
563 if (TREE_OVERFLOW (val1) || TREE_OVERFLOW (val2))
566 return tree_int_cst_compare (val1, val2);
572 /* First see if VAL1 and VAL2 are not the same. */
573 if (val1 == val2 || operand_equal_p (val1, val2, 0))
576 /* If VAL1 is a lower address than VAL2, return -1. */
577 t = fold_binary (LT_EXPR, boolean_type_node, val1, val2);
578 if (t == boolean_true_node)
581 /* If VAL1 is a higher address than VAL2, return +1. */
582 t = fold_binary (GT_EXPR, boolean_type_node, val1, val2);
583 if (t == boolean_true_node)
586 /* If VAL1 is different than VAL2, return +2. */
587 t = fold_binary (NE_EXPR, boolean_type_node, val1, val2);
588 if (t == boolean_true_node)
596 /* Return 1 if VAL is inside value range VR (VR->MIN <= VAL <= VR->MAX),
597 0 if VAL is not inside VR,
598 -2 if we cannot tell either way.
600 FIXME, the current semantics of this functions are a bit quirky
601 when taken in the context of VRP. In here we do not care
602 about VR's type. If VR is the anti-range ~[3, 5] the call
603 value_inside_range (4, VR) will return 1.
605 This is counter-intuitive in a strict sense, but the callers
606 currently expect this. They are calling the function
607 merely to determine whether VR->MIN <= VAL <= VR->MAX. The
608 callers are applying the VR_RANGE/VR_ANTI_RANGE semantics
611 This also applies to value_ranges_intersect_p and
612 range_includes_zero_p. The semantics of VR_RANGE and
613 VR_ANTI_RANGE should be encoded here, but that also means
614 adapting the users of these functions to the new semantics. */
617 value_inside_range (tree val, value_range_t *vr)
621 cmp1 = fold_binary_to_constant (GE_EXPR, boolean_type_node, val, vr->min);
625 cmp2 = fold_binary_to_constant (LE_EXPR, boolean_type_node, val, vr->max);
629 return cmp1 == boolean_true_node && cmp2 == boolean_true_node;
633 /* Return true if value ranges VR0 and VR1 have a non-empty
637 value_ranges_intersect_p (value_range_t *vr0, value_range_t *vr1)
639 return (value_inside_range (vr1->min, vr0) == 1
640 || value_inside_range (vr1->max, vr0) == 1
641 || value_inside_range (vr0->min, vr1) == 1
642 || value_inside_range (vr0->max, vr1) == 1);
646 /* Return true if VR includes the value zero, false otherwise. FIXME,
647 currently this will return false for an anti-range like ~[-4, 3].
648 This will be wrong when the semantics of value_inside_range are
649 modified (currently the users of this function expect these
653 range_includes_zero_p (value_range_t *vr)
657 gcc_assert (vr->type != VR_UNDEFINED
658 && vr->type != VR_VARYING
659 && !symbolic_range_p (vr));
661 zero = build_int_cst (TREE_TYPE (vr->min), 0);
662 return (value_inside_range (zero, vr) == 1);
665 /* Return true if T, an SSA_NAME, is known to be nonnegative. Return
666 false otherwise or if no value range information is available. */
669 ssa_name_nonnegative_p (tree t)
671 value_range_t *vr = get_value_range (t);
676 /* Testing for VR_ANTI_RANGE is not useful here as any anti-range
677 which would return a useful value should be encoded as a VR_RANGE. */
678 if (vr->type == VR_RANGE)
680 int result = compare_values (vr->min, integer_zero_node);
682 return (result == 0 || result == 1);
687 /* Return true if T, an SSA_NAME, is known to be nonzero. Return
688 false otherwise or if no value range information is available. */
691 ssa_name_nonzero_p (tree t)
693 value_range_t *vr = get_value_range (t);
698 /* A VR_RANGE which does not include zero is a nonzero value. */
699 if (vr->type == VR_RANGE && !symbolic_range_p (vr))
700 return ! range_includes_zero_p (vr);
702 /* A VR_ANTI_RANGE which does include zero is a nonzero value. */
703 if (vr->type == VR_ANTI_RANGE && !symbolic_range_p (vr))
704 return range_includes_zero_p (vr);
710 /* When extracting ranges from X_i = ASSERT_EXPR <Y_j, pred>, we will
711 initially consider X_i and Y_j equivalent, so the equivalence set
712 of Y_j is added to the equivalence set of X_i. However, it is
713 possible to have a chain of ASSERT_EXPRs whose predicates are
714 actually incompatible. This is usually the result of nesting of
715 contradictory if-then-else statements. For instance, in PR 24670:
717 count_4 has range [-INF, 63]
721 count_19 = ASSERT_EXPR <count_4, count_4 != 0>
724 count_18 = ASSERT_EXPR <count_19, count_19 > 63>
730 Notice that 'if (count_19 > 63)' is trivially false and will be
731 folded out at the end. However, during propagation, the flowgraph
732 is not cleaned up and so, VRP will evaluate predicates more
733 predicates than necessary, so it must support these
734 inconsistencies. The problem here is that because of the chaining
735 of ASSERT_EXPRs, the equivalency set for count_18 includes count_4.
736 Since count_4 has an incompatible range, we ICE when evaluating the
737 ranges in the equivalency set. So, we need to remove count_4 from
741 fix_equivalence_set (value_range_t *vr_p)
745 bitmap e = vr_p->equiv;
746 bitmap to_remove = BITMAP_ALLOC (NULL);
748 /* Only detect inconsistencies on numeric ranges. */
749 if (vr_p->type == VR_VARYING
750 || vr_p->type == VR_UNDEFINED
751 || symbolic_range_p (vr_p))
754 EXECUTE_IF_SET_IN_BITMAP (e, 0, i, bi)
756 value_range_t *equiv_vr = vr_value[i];
758 if (equiv_vr->type == VR_VARYING
759 || equiv_vr->type == VR_UNDEFINED
760 || symbolic_range_p (equiv_vr))
763 if (equiv_vr->type == VR_RANGE
764 && vr_p->type == VR_RANGE
765 && !value_ranges_intersect_p (vr_p, equiv_vr))
766 bitmap_set_bit (to_remove, i);
767 else if ((equiv_vr->type == VR_RANGE && vr_p->type == VR_ANTI_RANGE)
768 || (equiv_vr->type == VR_ANTI_RANGE && vr_p->type == VR_RANGE))
770 /* A range and an anti-range have an empty intersection if
771 their end points are the same. FIXME,
772 value_ranges_intersect_p should handle this
774 if (compare_values (equiv_vr->min, vr_p->min) == 0
775 && compare_values (equiv_vr->max, vr_p->max) == 0)
776 bitmap_set_bit (to_remove, i);
780 bitmap_and_compl_into (vr_p->equiv, to_remove);
781 BITMAP_FREE (to_remove);
785 /* Extract value range information from an ASSERT_EXPR EXPR and store
789 extract_range_from_assert (value_range_t *vr_p, tree expr)
791 tree var, cond, limit, min, max, type;
792 value_range_t *var_vr, *limit_vr;
793 enum tree_code cond_code;
795 var = ASSERT_EXPR_VAR (expr);
796 cond = ASSERT_EXPR_COND (expr);
798 gcc_assert (COMPARISON_CLASS_P (cond));
800 /* Find VAR in the ASSERT_EXPR conditional. */
801 if (var == TREE_OPERAND (cond, 0))
803 /* If the predicate is of the form VAR COMP LIMIT, then we just
804 take LIMIT from the RHS and use the same comparison code. */
805 limit = TREE_OPERAND (cond, 1);
806 cond_code = TREE_CODE (cond);
810 /* If the predicate is of the form LIMIT COMP VAR, then we need
811 to flip around the comparison code to create the proper range
813 limit = TREE_OPERAND (cond, 0);
814 cond_code = swap_tree_comparison (TREE_CODE (cond));
817 type = TREE_TYPE (limit);
818 gcc_assert (limit != var);
820 /* For pointer arithmetic, we only keep track of pointer equality
822 if (POINTER_TYPE_P (type) && cond_code != NE_EXPR && cond_code != EQ_EXPR)
824 set_value_range_to_varying (vr_p);
828 /* If LIMIT is another SSA name and LIMIT has a range of its own,
829 try to use LIMIT's range to avoid creating symbolic ranges
831 limit_vr = (TREE_CODE (limit) == SSA_NAME) ? get_value_range (limit) : NULL;
833 /* LIMIT's range is only interesting if it has any useful information. */
835 && (limit_vr->type == VR_UNDEFINED
836 || limit_vr->type == VR_VARYING
837 || symbolic_range_p (limit_vr)))
840 /* Initially, the new range has the same set of equivalences of
841 VAR's range. This will be revised before returning the final
842 value. Since assertions may be chained via mutually exclusive
843 predicates, we will need to trim the set of equivalences before
845 gcc_assert (vr_p->equiv == NULL);
846 vr_p->equiv = BITMAP_ALLOC (NULL);
847 add_equivalence (vr_p->equiv, var);
849 /* Extract a new range based on the asserted comparison for VAR and
850 LIMIT's value range. Notice that if LIMIT has an anti-range, we
851 will only use it for equality comparisons (EQ_EXPR). For any
852 other kind of assertion, we cannot derive a range from LIMIT's
853 anti-range that can be used to describe the new range. For
854 instance, ASSERT_EXPR <x_2, x_2 <= b_4>. If b_4 is ~[2, 10],
855 then b_4 takes on the ranges [-INF, 1] and [11, +INF]. There is
856 no single range for x_2 that could describe LE_EXPR, so we might
857 as well build the range [b_4, +INF] for it. */
858 if (cond_code == EQ_EXPR)
860 enum value_range_type range_type;
864 range_type = limit_vr->type;
870 range_type = VR_RANGE;
875 set_value_range (vr_p, range_type, min, max, vr_p->equiv);
877 /* When asserting the equality VAR == LIMIT and LIMIT is another
878 SSA name, the new range will also inherit the equivalence set
880 if (TREE_CODE (limit) == SSA_NAME)
881 add_equivalence (vr_p->equiv, limit);
883 else if (cond_code == NE_EXPR)
885 /* As described above, when LIMIT's range is an anti-range and
886 this assertion is an inequality (NE_EXPR), then we cannot
887 derive anything from the anti-range. For instance, if
888 LIMIT's range was ~[0, 0], the assertion 'VAR != LIMIT' does
889 not imply that VAR's range is [0, 0]. So, in the case of
890 anti-ranges, we just assert the inequality using LIMIT and
893 If LIMIT_VR is a range, we can only use it to build a new
894 anti-range if LIMIT_VR is a single-valued range. For
895 instance, if LIMIT_VR is [0, 1], the predicate
896 VAR != [0, 1] does not mean that VAR's range is ~[0, 1].
897 Rather, it means that for value 0 VAR should be ~[0, 0]
898 and for value 1, VAR should be ~[1, 1]. We cannot
899 represent these ranges.
901 The only situation in which we can build a valid
902 anti-range is when LIMIT_VR is a single-valued range
903 (i.e., LIMIT_VR->MIN == LIMIT_VR->MAX). In that case,
904 build the anti-range ~[LIMIT_VR->MIN, LIMIT_VR->MAX]. */
906 && limit_vr->type == VR_RANGE
907 && compare_values (limit_vr->min, limit_vr->max) == 0)
914 /* In any other case, we cannot use LIMIT's range to build a
919 /* If MIN and MAX cover the whole range for their type, then
920 just use the original LIMIT. */
921 if (INTEGRAL_TYPE_P (type)
922 && min == TYPE_MIN_VALUE (type)
923 && max == TYPE_MAX_VALUE (type))
926 set_value_range (vr_p, VR_ANTI_RANGE, min, max, vr_p->equiv);
928 else if (cond_code == LE_EXPR || cond_code == LT_EXPR)
930 min = TYPE_MIN_VALUE (type);
932 if (limit_vr == NULL || limit_vr->type == VR_ANTI_RANGE)
936 /* If LIMIT_VR is of the form [N1, N2], we need to build the
937 range [MIN, N2] for LE_EXPR and [MIN, N2 - 1] for
942 /* For LT_EXPR, we create the range [MIN, MAX - 1]. */
943 if (cond_code == LT_EXPR)
945 tree one = build_int_cst (type, 1);
946 max = fold_build2 (MINUS_EXPR, type, max, one);
949 set_value_range (vr_p, VR_RANGE, min, max, vr_p->equiv);
951 else if (cond_code == GE_EXPR || cond_code == GT_EXPR)
953 max = TYPE_MAX_VALUE (type);
955 if (limit_vr == NULL || limit_vr->type == VR_ANTI_RANGE)
959 /* If LIMIT_VR is of the form [N1, N2], we need to build the
960 range [N1, MAX] for GE_EXPR and [N1 + 1, MAX] for
965 /* For GT_EXPR, we create the range [MIN + 1, MAX]. */
966 if (cond_code == GT_EXPR)
968 tree one = build_int_cst (type, 1);
969 min = fold_build2 (PLUS_EXPR, type, min, one);
972 set_value_range (vr_p, VR_RANGE, min, max, vr_p->equiv);
977 /* If VAR already had a known range, it may happen that the new
978 range we have computed and VAR's range are not compatible. For
982 p_6 = ASSERT_EXPR <p_5, p_5 == NULL>;
984 p_8 = ASSERT_EXPR <p_6, p_6 != NULL>;
986 While the above comes from a faulty program, it will cause an ICE
987 later because p_8 and p_6 will have incompatible ranges and at
988 the same time will be considered equivalent. A similar situation
992 i_6 = ASSERT_EXPR <i_5, i_5 > 10>;
994 i_7 = ASSERT_EXPR <i_6, i_6 < 5>;
996 Again i_6 and i_7 will have incompatible ranges. It would be
997 pointless to try and do anything with i_7's range because
998 anything dominated by 'if (i_5 < 5)' will be optimized away.
999 Note, due to the wa in which simulation proceeds, the statement
1000 i_7 = ASSERT_EXPR <...> we would never be visited because the
1001 conditional 'if (i_5 < 5)' always evaluates to false. However,
1002 this extra check does not hurt and may protect against future
1003 changes to VRP that may get into a situation similar to the
1004 NULL pointer dereference example.
1006 Note that these compatibility tests are only needed when dealing
1007 with ranges or a mix of range and anti-range. If VAR_VR and VR_P
1008 are both anti-ranges, they will always be compatible, because two
1009 anti-ranges will always have a non-empty intersection. */
1011 var_vr = get_value_range (var);
1013 /* We may need to make adjustments when VR_P and VAR_VR are numeric
1014 ranges or anti-ranges. */
1015 if (vr_p->type == VR_VARYING
1016 || vr_p->type == VR_UNDEFINED
1017 || var_vr->type == VR_VARYING
1018 || var_vr->type == VR_UNDEFINED
1019 || symbolic_range_p (vr_p)
1020 || symbolic_range_p (var_vr))
1023 if (var_vr->type == VR_RANGE && vr_p->type == VR_RANGE)
1025 /* If the two ranges have a non-empty intersection, we can
1026 refine the resulting range. Since the assert expression
1027 creates an equivalency and at the same time it asserts a
1028 predicate, we can take the intersection of the two ranges to
1029 get better precision. */
1030 if (value_ranges_intersect_p (var_vr, vr_p))
1032 /* Use the larger of the two minimums. */
1033 if (compare_values (vr_p->min, var_vr->min) == -1)
1038 /* Use the smaller of the two maximums. */
1039 if (compare_values (vr_p->max, var_vr->max) == 1)
1044 set_value_range (vr_p, vr_p->type, min, max, vr_p->equiv);
1048 /* The two ranges do not intersect, set the new range to
1049 VARYING, because we will not be able to do anything
1050 meaningful with it. */
1051 set_value_range_to_varying (vr_p);
1054 else if ((var_vr->type == VR_RANGE && vr_p->type == VR_ANTI_RANGE)
1055 || (var_vr->type == VR_ANTI_RANGE && vr_p->type == VR_RANGE))
1057 /* A range and an anti-range will cancel each other only if
1058 their ends are the same. For instance, in the example above,
1059 p_8's range ~[0, 0] and p_6's range [0, 0] are incompatible,
1060 so VR_P should be set to VR_VARYING. */
1061 if (compare_values (var_vr->min, vr_p->min) == 0
1062 && compare_values (var_vr->max, vr_p->max) == 0)
1063 set_value_range_to_varying (vr_p);
1066 tree min, max, anti_min, anti_max, real_min, real_max;
1068 /* We want to compute the logical AND of the two ranges;
1069 there are three cases to consider.
1072 1. The VR_ANTI_RANGE range is completely within the
1073 VR_RANGE and the endpoints of the ranges are
1074 different. In that case the resulting range
1075 should be whichever range is more precise.
1076 Typically that will be the VR_RANGE.
1078 2. The VR_ANTI_RANGE is completely disjoint from
1079 the VR_RANGE. In this case the resulting range
1080 should be the VR_RANGE.
1082 3. There is some overlap between the VR_ANTI_RANGE
1085 3a. If the high limit of the VR_ANTI_RANGE resides
1086 within the VR_RANGE, then the result is a new
1087 VR_RANGE starting at the high limit of the
1088 the VR_ANTI_RANGE + 1 and extending to the
1089 high limit of the original VR_RANGE.
1091 3b. If the low limit of the VR_ANTI_RANGE resides
1092 within the VR_RANGE, then the result is a new
1093 VR_RANGE starting at the low limit of the original
1094 VR_RANGE and extending to the low limit of the
1095 VR_ANTI_RANGE - 1. */
1096 if (vr_p->type == VR_ANTI_RANGE)
1098 anti_min = vr_p->min;
1099 anti_max = vr_p->max;
1100 real_min = var_vr->min;
1101 real_max = var_vr->max;
1105 anti_min = var_vr->min;
1106 anti_max = var_vr->max;
1107 real_min = vr_p->min;
1108 real_max = vr_p->max;
1112 /* Case 1, VR_ANTI_RANGE completely within VR_RANGE,
1113 not including any endpoints. */
1114 if (compare_values (anti_max, real_max) == -1
1115 && compare_values (anti_min, real_min) == 1)
1117 set_value_range (vr_p, VR_RANGE, real_min,
1118 real_max, vr_p->equiv);
1120 /* Case 2, VR_ANTI_RANGE completely disjoint from
1122 else if (compare_values (anti_min, real_max) == 1
1123 || compare_values (anti_max, real_min) == -1)
1125 set_value_range (vr_p, VR_RANGE, real_min,
1126 real_max, vr_p->equiv);
1128 /* Case 3a, the anti-range extends into the low
1129 part of the real range. Thus creating a new
1130 low for the real range. */
1131 else if ((compare_values (anti_max, real_min) == 1
1132 || compare_values (anti_max, real_min) == 0)
1133 && compare_values (anti_max, real_max) == -1)
1135 min = fold_build2 (PLUS_EXPR, TREE_TYPE (var_vr->min),
1137 build_int_cst (TREE_TYPE (var_vr->min), 1));
1139 set_value_range (vr_p, VR_RANGE, min, max, vr_p->equiv);
1141 /* Case 3b, the anti-range extends into the high
1142 part of the real range. Thus creating a new
1143 higher for the real range. */
1144 else if (compare_values (anti_min, real_min) == 1
1145 && (compare_values (anti_min, real_max) == -1
1146 || compare_values (anti_min, real_max) == 0))
1148 max = fold_build2 (MINUS_EXPR, TREE_TYPE (var_vr->min),
1150 build_int_cst (TREE_TYPE (var_vr->min), 1));
1152 set_value_range (vr_p, VR_RANGE, min, max, vr_p->equiv);
1157 /* Remove names from the equivalence set that have ranges
1158 incompatible with VR_P. */
1160 fix_equivalence_set (vr_p);
1164 /* Extract range information from SSA name VAR and store it in VR. If
1165 VAR has an interesting range, use it. Otherwise, create the
1166 range [VAR, VAR] and return it. This is useful in situations where
1167 we may have conditionals testing values of VARYING names. For
1174 Even if y_5 is deemed VARYING, we can determine that x_3 > y_5 is
1178 extract_range_from_ssa_name (value_range_t *vr, tree var)
1180 value_range_t *var_vr = get_value_range (var);
1182 if (var_vr->type != VR_UNDEFINED && var_vr->type != VR_VARYING)
1183 copy_value_range (vr, var_vr);
1185 set_value_range (vr, VR_RANGE, var, var, NULL);
1187 add_equivalence (vr->equiv, var);
1191 /* Wrapper around int_const_binop. If the operation overflows and we
1192 are not using wrapping arithmetic, then adjust the result to be
1193 -INF or +INF depending on CODE, VAL1 and VAL2. */
1196 vrp_int_const_binop (enum tree_code code, tree val1, tree val2)
1201 return int_const_binop (code, val1, val2, 0);
1203 /* If we are not using wrapping arithmetic, operate symbolically
1204 on -INF and +INF. */
1205 res = int_const_binop (code, val1, val2, 0);
1207 if (TYPE_UNSIGNED (TREE_TYPE (val1)))
1209 int checkz = compare_values (res, val1);
1210 bool overflow = false;
1212 /* Ensure that res = val1 [+*] val2 >= val1
1213 or that res = val1 - val2 <= val1. */
1214 if ((code == PLUS_EXPR
1215 && !(checkz == 1 || checkz == 0))
1216 || (code == MINUS_EXPR
1217 && !(checkz == 0 || checkz == -1)))
1221 /* Checking for multiplication overflow is done by dividing the
1222 output of the multiplication by the first input of the
1223 multiplication. If the result of that division operation is
1224 not equal to the second input of the multiplication, then the
1225 multiplication overflowed. */
1226 else if (code == MULT_EXPR && !integer_zerop (val1))
1228 tree tmp = int_const_binop (TRUNC_DIV_EXPR,
1229 TYPE_MAX_VALUE (TREE_TYPE (val1)),
1231 int check = compare_values (tmp, val2);
1239 res = copy_node (res);
1240 TREE_OVERFLOW (res) = 1;
1244 else if (TREE_OVERFLOW (res)
1245 && !TREE_OVERFLOW (val1)
1246 && !TREE_OVERFLOW (val2))
1248 /* If the operation overflowed but neither VAL1 nor VAL2 are
1249 overflown, return -INF or +INF depending on the operation
1250 and the combination of signs of the operands. */
1251 int sgn1 = tree_int_cst_sgn (val1);
1252 int sgn2 = tree_int_cst_sgn (val2);
1254 /* Notice that we only need to handle the restricted set of
1255 operations handled by extract_range_from_binary_expr.
1256 Among them, only multiplication, addition and subtraction
1257 can yield overflow without overflown operands because we
1258 are working with integral types only... except in the
1259 case VAL1 = -INF and VAL2 = -1 which overflows to +INF
1260 for division too. */
1262 /* For multiplication, the sign of the overflow is given
1263 by the comparison of the signs of the operands. */
1264 if ((code == MULT_EXPR && sgn1 == sgn2)
1265 /* For addition, the operands must be of the same sign
1266 to yield an overflow. Its sign is therefore that
1267 of one of the operands, for example the first. */
1268 || (code == PLUS_EXPR && sgn1 > 0)
1269 /* For subtraction, the operands must be of different
1270 signs to yield an overflow. Its sign is therefore
1271 that of the first operand or the opposite of that
1272 of the second operand. A first operand of 0 counts
1273 as positive here, for the corner case 0 - (-INF),
1274 which overflows, but must yield +INF. */
1275 || (code == MINUS_EXPR && sgn1 >= 0)
1276 /* For division, the only case is -INF / -1 = +INF. */
1277 || code == TRUNC_DIV_EXPR
1278 || code == FLOOR_DIV_EXPR
1279 || code == CEIL_DIV_EXPR
1280 || code == EXACT_DIV_EXPR
1281 || code == ROUND_DIV_EXPR)
1282 return TYPE_MAX_VALUE (TREE_TYPE (res));
1284 return TYPE_MIN_VALUE (TREE_TYPE (res));
1291 /* Extract range information from a binary expression EXPR based on
1292 the ranges of each of its operands and the expression code. */
1295 extract_range_from_binary_expr (value_range_t *vr, tree expr)
1297 enum tree_code code = TREE_CODE (expr);
1298 enum value_range_type type;
1299 tree op0, op1, min, max;
1301 value_range_t vr0 = { VR_UNDEFINED, NULL_TREE, NULL_TREE, NULL };
1302 value_range_t vr1 = { VR_UNDEFINED, NULL_TREE, NULL_TREE, NULL };
1304 /* Not all binary expressions can be applied to ranges in a
1305 meaningful way. Handle only arithmetic operations. */
1306 if (code != PLUS_EXPR
1307 && code != MINUS_EXPR
1308 && code != MULT_EXPR
1309 && code != TRUNC_DIV_EXPR
1310 && code != FLOOR_DIV_EXPR
1311 && code != CEIL_DIV_EXPR
1312 && code != EXACT_DIV_EXPR
1313 && code != ROUND_DIV_EXPR
1316 && code != BIT_AND_EXPR
1317 && code != TRUTH_ANDIF_EXPR
1318 && code != TRUTH_ORIF_EXPR
1319 && code != TRUTH_AND_EXPR
1320 && code != TRUTH_OR_EXPR)
1322 set_value_range_to_varying (vr);
1326 /* Get value ranges for each operand. For constant operands, create
1327 a new value range with the operand to simplify processing. */
1328 op0 = TREE_OPERAND (expr, 0);
1329 if (TREE_CODE (op0) == SSA_NAME)
1330 vr0 = *(get_value_range (op0));
1331 else if (is_gimple_min_invariant (op0))
1332 set_value_range (&vr0, VR_RANGE, op0, op0, NULL);
1334 set_value_range_to_varying (&vr0);
1336 op1 = TREE_OPERAND (expr, 1);
1337 if (TREE_CODE (op1) == SSA_NAME)
1338 vr1 = *(get_value_range (op1));
1339 else if (is_gimple_min_invariant (op1))
1340 set_value_range (&vr1, VR_RANGE, op1, op1, NULL);
1342 set_value_range_to_varying (&vr1);
1344 /* If either range is UNDEFINED, so is the result. */
1345 if (vr0.type == VR_UNDEFINED || vr1.type == VR_UNDEFINED)
1347 set_value_range_to_undefined (vr);
1351 /* The type of the resulting value range defaults to VR0.TYPE. */
1354 /* Refuse to operate on VARYING ranges, ranges of different kinds
1355 and symbolic ranges. As an exception, we allow BIT_AND_EXPR
1356 because we may be able to derive a useful range even if one of
1357 the operands is VR_VARYING or symbolic range. TODO, we may be
1358 able to derive anti-ranges in some cases. */
1359 if (code != BIT_AND_EXPR
1360 && code != TRUTH_AND_EXPR
1361 && code != TRUTH_OR_EXPR
1362 && (vr0.type == VR_VARYING
1363 || vr1.type == VR_VARYING
1364 || vr0.type != vr1.type
1365 || symbolic_range_p (&vr0)
1366 || symbolic_range_p (&vr1)))
1368 set_value_range_to_varying (vr);
1372 /* Now evaluate the expression to determine the new range. */
1373 if (POINTER_TYPE_P (TREE_TYPE (expr))
1374 || POINTER_TYPE_P (TREE_TYPE (op0))
1375 || POINTER_TYPE_P (TREE_TYPE (op1)))
1377 /* For pointer types, we are really only interested in asserting
1378 whether the expression evaluates to non-NULL. FIXME, we used
1379 to gcc_assert (code == PLUS_EXPR || code == MINUS_EXPR), but
1380 ivopts is generating expressions with pointer multiplication
1382 if (code == PLUS_EXPR)
1384 if (range_is_nonnull (&vr0) || range_is_nonnull (&vr1))
1385 set_value_range_to_nonnull (vr, TREE_TYPE (expr));
1386 else if (range_is_null (&vr0) && range_is_null (&vr1))
1387 set_value_range_to_null (vr, TREE_TYPE (expr));
1389 set_value_range_to_varying (vr);
1393 /* Subtracting from a pointer, may yield 0, so just drop the
1394 resulting range to varying. */
1395 set_value_range_to_varying (vr);
1401 /* For integer ranges, apply the operation to each end of the
1402 range and see what we end up with. */
1403 if (code == TRUTH_ANDIF_EXPR
1404 || code == TRUTH_ORIF_EXPR
1405 || code == TRUTH_AND_EXPR
1406 || code == TRUTH_OR_EXPR)
1408 /* If one of the operands is zero, we know that the whole
1409 expression evaluates zero. */
1410 if (code == TRUTH_AND_EXPR
1411 && ((vr0.type == VR_RANGE
1412 && integer_zerop (vr0.min)
1413 && integer_zerop (vr0.max))
1414 || (vr1.type == VR_RANGE
1415 && integer_zerop (vr1.min)
1416 && integer_zerop (vr1.max))))
1419 min = max = build_int_cst (TREE_TYPE (expr), 0);
1421 /* If one of the operands is one, we know that the whole
1422 expression evaluates one. */
1423 else if (code == TRUTH_OR_EXPR
1424 && ((vr0.type == VR_RANGE
1425 && integer_onep (vr0.min)
1426 && integer_onep (vr0.max))
1427 || (vr1.type == VR_RANGE
1428 && integer_onep (vr1.min)
1429 && integer_onep (vr1.max))))
1432 min = max = build_int_cst (TREE_TYPE (expr), 1);
1434 else if (vr0.type != VR_VARYING
1435 && vr1.type != VR_VARYING
1436 && vr0.type == vr1.type
1437 && !symbolic_range_p (&vr0)
1438 && !symbolic_range_p (&vr1))
1440 /* Boolean expressions cannot be folded with int_const_binop. */
1441 min = fold_binary (code, TREE_TYPE (expr), vr0.min, vr1.min);
1442 max = fold_binary (code, TREE_TYPE (expr), vr0.max, vr1.max);
1446 set_value_range_to_varying (vr);
1450 else if (code == PLUS_EXPR
1452 || code == MAX_EXPR)
1454 /* If we have a PLUS_EXPR with two VR_ANTI_RANGEs, drop to
1455 VR_VARYING. It would take more effort to compute a precise
1456 range for such a case. For example, if we have op0 == 1 and
1457 op1 == -1 with their ranges both being ~[0,0], we would have
1458 op0 + op1 == 0, so we cannot claim that the sum is in ~[0,0].
1459 Note that we are guaranteed to have vr0.type == vr1.type at
1461 if (code == PLUS_EXPR && vr0.type == VR_ANTI_RANGE)
1463 set_value_range_to_varying (vr);
1467 /* For operations that make the resulting range directly
1468 proportional to the original ranges, apply the operation to
1469 the same end of each range. */
1470 min = vrp_int_const_binop (code, vr0.min, vr1.min);
1471 max = vrp_int_const_binop (code, vr0.max, vr1.max);
1473 else if (code == MULT_EXPR
1474 || code == TRUNC_DIV_EXPR
1475 || code == FLOOR_DIV_EXPR
1476 || code == CEIL_DIV_EXPR
1477 || code == EXACT_DIV_EXPR
1478 || code == ROUND_DIV_EXPR)
1483 /* If we have an unsigned MULT_EXPR with two VR_ANTI_RANGEs,
1484 drop to VR_VARYING. It would take more effort to compute a
1485 precise range for such a case. For example, if we have
1486 op0 == 65536 and op1 == 65536 with their ranges both being
1487 ~[0,0] on a 32-bit machine, we would have op0 * op1 == 0, so
1488 we cannot claim that the product is in ~[0,0]. Note that we
1489 are guaranteed to have vr0.type == vr1.type at this
1491 if (code == MULT_EXPR
1492 && vr0.type == VR_ANTI_RANGE
1493 && (flag_wrapv || TYPE_UNSIGNED (TREE_TYPE (op0))))
1495 set_value_range_to_varying (vr);
1499 /* Multiplications and divisions are a bit tricky to handle,
1500 depending on the mix of signs we have in the two ranges, we
1501 need to operate on different values to get the minimum and
1502 maximum values for the new range. One approach is to figure
1503 out all the variations of range combinations and do the
1506 However, this involves several calls to compare_values and it
1507 is pretty convoluted. It's simpler to do the 4 operations
1508 (MIN0 OP MIN1, MIN0 OP MAX1, MAX0 OP MIN1 and MAX0 OP MAX0 OP
1509 MAX1) and then figure the smallest and largest values to form
1512 /* Divisions by zero result in a VARYING value. */
1513 if (code != MULT_EXPR
1514 && (vr0.type == VR_ANTI_RANGE || range_includes_zero_p (&vr1)))
1516 set_value_range_to_varying (vr);
1520 /* Compute the 4 cross operations. */
1521 val[0] = vrp_int_const_binop (code, vr0.min, vr1.min);
1523 val[1] = (vr1.max != vr1.min)
1524 ? vrp_int_const_binop (code, vr0.min, vr1.max)
1527 val[2] = (vr0.max != vr0.min)
1528 ? vrp_int_const_binop (code, vr0.max, vr1.min)
1531 val[3] = (vr0.min != vr0.max && vr1.min != vr1.max)
1532 ? vrp_int_const_binop (code, vr0.max, vr1.max)
1535 /* Set MIN to the minimum of VAL[i] and MAX to the maximum
1539 for (i = 1; i < 4; i++)
1541 if (!is_gimple_min_invariant (min) || TREE_OVERFLOW (min)
1542 || !is_gimple_min_invariant (max) || TREE_OVERFLOW (max))
1547 if (!is_gimple_min_invariant (val[i]) || TREE_OVERFLOW (val[i]))
1549 /* If we found an overflowed value, set MIN and MAX
1550 to it so that we set the resulting range to
1556 if (compare_values (val[i], min) == -1)
1559 if (compare_values (val[i], max) == 1)
1564 else if (code == MINUS_EXPR)
1566 /* If we have a MINUS_EXPR with two VR_ANTI_RANGEs, drop to
1567 VR_VARYING. It would take more effort to compute a precise
1568 range for such a case. For example, if we have op0 == 1 and
1569 op1 == 1 with their ranges both being ~[0,0], we would have
1570 op0 - op1 == 0, so we cannot claim that the difference is in
1571 ~[0,0]. Note that we are guaranteed to have
1572 vr0.type == vr1.type at this point. */
1573 if (vr0.type == VR_ANTI_RANGE)
1575 set_value_range_to_varying (vr);
1579 /* For MINUS_EXPR, apply the operation to the opposite ends of
1581 min = vrp_int_const_binop (code, vr0.min, vr1.max);
1582 max = vrp_int_const_binop (code, vr0.max, vr1.min);
1584 else if (code == BIT_AND_EXPR)
1586 if (vr0.type == VR_RANGE
1587 && vr0.min == vr0.max
1588 && tree_expr_nonnegative_p (vr0.max)
1589 && TREE_CODE (vr0.max) == INTEGER_CST)
1591 min = build_int_cst (TREE_TYPE (expr), 0);
1594 else if (vr1.type == VR_RANGE
1595 && vr1.min == vr1.max
1596 && tree_expr_nonnegative_p (vr1.max)
1597 && TREE_CODE (vr1.max) == INTEGER_CST)
1600 min = build_int_cst (TREE_TYPE (expr), 0);
1605 set_value_range_to_varying (vr);
1612 /* If either MIN or MAX overflowed, then set the resulting range to
1614 if (!is_gimple_min_invariant (min) || TREE_OVERFLOW (min)
1615 || !is_gimple_min_invariant (max) || TREE_OVERFLOW (max))
1617 set_value_range_to_varying (vr);
1621 cmp = compare_values (min, max);
1622 if (cmp == -2 || cmp == 1)
1624 /* If the new range has its limits swapped around (MIN > MAX),
1625 then the operation caused one of them to wrap around, mark
1626 the new range VARYING. */
1627 set_value_range_to_varying (vr);
1630 set_value_range (vr, type, min, max, NULL);
1634 /* Extract range information from a unary expression EXPR based on
1635 the range of its operand and the expression code. */
1638 extract_range_from_unary_expr (value_range_t *vr, tree expr)
1640 enum tree_code code = TREE_CODE (expr);
1643 value_range_t vr0 = { VR_UNDEFINED, NULL_TREE, NULL_TREE, NULL };
1645 /* Refuse to operate on certain unary expressions for which we
1646 cannot easily determine a resulting range. */
1647 if (code == FIX_TRUNC_EXPR
1648 || code == FIX_CEIL_EXPR
1649 || code == FIX_FLOOR_EXPR
1650 || code == FIX_ROUND_EXPR
1651 || code == FLOAT_EXPR
1652 || code == BIT_NOT_EXPR
1653 || code == NON_LVALUE_EXPR
1654 || code == CONJ_EXPR)
1656 set_value_range_to_varying (vr);
1660 /* Get value ranges for the operand. For constant operands, create
1661 a new value range with the operand to simplify processing. */
1662 op0 = TREE_OPERAND (expr, 0);
1663 if (TREE_CODE (op0) == SSA_NAME)
1664 vr0 = *(get_value_range (op0));
1665 else if (is_gimple_min_invariant (op0))
1666 set_value_range (&vr0, VR_RANGE, op0, op0, NULL);
1668 set_value_range_to_varying (&vr0);
1670 /* If VR0 is UNDEFINED, so is the result. */
1671 if (vr0.type == VR_UNDEFINED)
1673 set_value_range_to_undefined (vr);
1677 /* Refuse to operate on symbolic ranges, or if neither operand is
1678 a pointer or integral type. */
1679 if ((!INTEGRAL_TYPE_P (TREE_TYPE (op0))
1680 && !POINTER_TYPE_P (TREE_TYPE (op0)))
1681 || (vr0.type != VR_VARYING
1682 && symbolic_range_p (&vr0)))
1684 set_value_range_to_varying (vr);
1688 /* If the expression involves pointers, we are only interested in
1689 determining if it evaluates to NULL [0, 0] or non-NULL (~[0, 0]). */
1690 if (POINTER_TYPE_P (TREE_TYPE (expr)) || POINTER_TYPE_P (TREE_TYPE (op0)))
1692 if (range_is_nonnull (&vr0) || tree_expr_nonzero_p (expr))
1693 set_value_range_to_nonnull (vr, TREE_TYPE (expr));
1694 else if (range_is_null (&vr0))
1695 set_value_range_to_null (vr, TREE_TYPE (expr));
1697 set_value_range_to_varying (vr);
1702 /* Handle unary expressions on integer ranges. */
1703 if (code == NOP_EXPR || code == CONVERT_EXPR)
1705 tree inner_type = TREE_TYPE (op0);
1706 tree outer_type = TREE_TYPE (expr);
1708 /* If VR0 represents a simple range, then try to convert
1709 the min and max values for the range to the same type
1710 as OUTER_TYPE. If the results compare equal to VR0's
1711 min and max values and the new min is still less than
1712 or equal to the new max, then we can safely use the newly
1713 computed range for EXPR. This allows us to compute
1714 accurate ranges through many casts. */
1715 if (vr0.type == VR_RANGE
1716 || (vr0.type == VR_VARYING
1717 && TYPE_PRECISION (outer_type) > TYPE_PRECISION (inner_type)))
1719 tree new_min, new_max, orig_min, orig_max;
1721 /* Convert the input operand min/max to OUTER_TYPE. If
1722 the input has no range information, then use the min/max
1723 for the input's type. */
1724 if (vr0.type == VR_RANGE)
1731 orig_min = TYPE_MIN_VALUE (inner_type);
1732 orig_max = TYPE_MAX_VALUE (inner_type);
1735 new_min = fold_convert (outer_type, orig_min);
1736 new_max = fold_convert (outer_type, orig_max);
1738 /* Verify the new min/max values are gimple values and
1739 that they compare equal to the original input's
1741 if (is_gimple_val (new_min)
1742 && is_gimple_val (new_max)
1743 && tree_int_cst_equal (new_min, orig_min)
1744 && tree_int_cst_equal (new_max, orig_max)
1745 && compare_values (new_min, new_max) <= 0
1746 && compare_values (new_min, new_max) >= -1)
1748 set_value_range (vr, VR_RANGE, new_min, new_max, vr->equiv);
1753 /* When converting types of different sizes, set the result to
1754 VARYING. Things like sign extensions and precision loss may
1755 change the range. For instance, if x_3 is of type 'long long
1756 int' and 'y_5 = (unsigned short) x_3', if x_3 is ~[0, 0], it
1757 is impossible to know at compile time whether y_5 will be
1759 if (TYPE_SIZE (inner_type) != TYPE_SIZE (outer_type)
1760 || TYPE_PRECISION (inner_type) != TYPE_PRECISION (outer_type))
1762 set_value_range_to_varying (vr);
1767 /* Conversion of a VR_VARYING value to a wider type can result
1768 in a usable range. So wait until after we've handled conversions
1769 before dropping the result to VR_VARYING if we had a source
1770 operand that is VR_VARYING. */
1771 if (vr0.type == VR_VARYING)
1773 set_value_range_to_varying (vr);
1777 /* Apply the operation to each end of the range and see what we end
1779 if (code == NEGATE_EXPR
1780 && !TYPE_UNSIGNED (TREE_TYPE (expr)))
1782 /* NEGATE_EXPR flips the range around. */
1783 min = (vr0.max == TYPE_MAX_VALUE (TREE_TYPE (expr)) && !flag_wrapv)
1784 ? TYPE_MIN_VALUE (TREE_TYPE (expr))
1785 : fold_unary_to_constant (code, TREE_TYPE (expr), vr0.max);
1787 max = (vr0.min == TYPE_MIN_VALUE (TREE_TYPE (expr)) && !flag_wrapv)
1788 ? TYPE_MAX_VALUE (TREE_TYPE (expr))
1789 : fold_unary_to_constant (code, TREE_TYPE (expr), vr0.min);
1792 else if (code == NEGATE_EXPR
1793 && TYPE_UNSIGNED (TREE_TYPE (expr)))
1795 if (!range_includes_zero_p (&vr0))
1797 max = fold_unary_to_constant (code, TREE_TYPE (expr), vr0.min);
1798 min = fold_unary_to_constant (code, TREE_TYPE (expr), vr0.max);
1802 if (range_is_null (&vr0))
1803 set_value_range_to_null (vr, TREE_TYPE (expr));
1805 set_value_range_to_varying (vr);
1809 else if (code == ABS_EXPR
1810 && !TYPE_UNSIGNED (TREE_TYPE (expr)))
1812 /* -TYPE_MIN_VALUE = TYPE_MIN_VALUE with flag_wrapv so we can't get a
1815 && ((vr0.type == VR_RANGE
1816 && vr0.min == TYPE_MIN_VALUE (TREE_TYPE (expr)))
1817 || (vr0.type == VR_ANTI_RANGE
1818 && vr0.min != TYPE_MIN_VALUE (TREE_TYPE (expr))
1819 && !range_includes_zero_p (&vr0))))
1821 set_value_range_to_varying (vr);
1825 /* ABS_EXPR may flip the range around, if the original range
1826 included negative values. */
1827 min = (vr0.min == TYPE_MIN_VALUE (TREE_TYPE (expr)))
1828 ? TYPE_MAX_VALUE (TREE_TYPE (expr))
1829 : fold_unary_to_constant (code, TREE_TYPE (expr), vr0.min);
1831 max = fold_unary_to_constant (code, TREE_TYPE (expr), vr0.max);
1833 cmp = compare_values (min, max);
1835 /* If a VR_ANTI_RANGEs contains zero, then we have
1836 ~[-INF, min(MIN, MAX)]. */
1837 if (vr0.type == VR_ANTI_RANGE)
1839 if (range_includes_zero_p (&vr0))
1841 tree type_min_value = TYPE_MIN_VALUE (TREE_TYPE (expr));
1843 /* Take the lower of the two values. */
1847 /* Create ~[-INF, min (abs(MIN), abs(MAX))]
1848 or ~[-INF + 1, min (abs(MIN), abs(MAX))] when
1849 flag_wrapv is set and the original anti-range doesn't include
1850 TYPE_MIN_VALUE, remember -TYPE_MIN_VALUE = TYPE_MIN_VALUE. */
1851 min = (flag_wrapv && vr0.min != type_min_value
1852 ? int_const_binop (PLUS_EXPR,
1854 integer_one_node, 0)
1859 /* All else has failed, so create the range [0, INF], even for
1860 flag_wrapv since TYPE_MIN_VALUE is in the original
1862 vr0.type = VR_RANGE;
1863 min = build_int_cst (TREE_TYPE (expr), 0);
1864 max = TYPE_MAX_VALUE (TREE_TYPE (expr));
1868 /* If the range contains zero then we know that the minimum value in the
1869 range will be zero. */
1870 else if (range_includes_zero_p (&vr0))
1874 min = build_int_cst (TREE_TYPE (expr), 0);
1878 /* If the range was reversed, swap MIN and MAX. */
1889 /* Otherwise, operate on each end of the range. */
1890 min = fold_unary_to_constant (code, TREE_TYPE (expr), vr0.min);
1891 max = fold_unary_to_constant (code, TREE_TYPE (expr), vr0.max);
1894 cmp = compare_values (min, max);
1895 if (cmp == -2 || cmp == 1)
1897 /* If the new range has its limits swapped around (MIN > MAX),
1898 then the operation caused one of them to wrap around, mark
1899 the new range VARYING. */
1900 set_value_range_to_varying (vr);
1903 set_value_range (vr, vr0.type, min, max, NULL);
1907 /* Extract range information from a comparison expression EXPR based
1908 on the range of its operand and the expression code. */
1911 extract_range_from_comparison (value_range_t *vr, tree expr)
1913 tree val = vrp_evaluate_conditional (expr, false);
1916 /* Since this expression was found on the RHS of an assignment,
1917 its type may be different from _Bool. Convert VAL to EXPR's
1919 val = fold_convert (TREE_TYPE (expr), val);
1920 set_value_range (vr, VR_RANGE, val, val, vr->equiv);
1923 set_value_range_to_varying (vr);
1927 /* Try to compute a useful range out of expression EXPR and store it
1931 extract_range_from_expr (value_range_t *vr, tree expr)
1933 enum tree_code code = TREE_CODE (expr);
1935 if (code == ASSERT_EXPR)
1936 extract_range_from_assert (vr, expr);
1937 else if (code == SSA_NAME)
1938 extract_range_from_ssa_name (vr, expr);
1939 else if (TREE_CODE_CLASS (code) == tcc_binary
1940 || code == TRUTH_ANDIF_EXPR
1941 || code == TRUTH_ORIF_EXPR
1942 || code == TRUTH_AND_EXPR
1943 || code == TRUTH_OR_EXPR
1944 || code == TRUTH_XOR_EXPR)
1945 extract_range_from_binary_expr (vr, expr);
1946 else if (TREE_CODE_CLASS (code) == tcc_unary)
1947 extract_range_from_unary_expr (vr, expr);
1948 else if (TREE_CODE_CLASS (code) == tcc_comparison)
1949 extract_range_from_comparison (vr, expr);
1950 else if (is_gimple_min_invariant (expr))
1951 set_value_range (vr, VR_RANGE, expr, expr, NULL);
1953 set_value_range_to_varying (vr);
1955 /* If we got a varying range from the tests above, try a final
1956 time to derive a nonnegative or nonzero range. This time
1957 relying primarily on generic routines in fold in conjunction
1959 if (vr->type == VR_VARYING)
1961 if (INTEGRAL_TYPE_P (TREE_TYPE (expr))
1962 && vrp_expr_computes_nonnegative (expr))
1963 set_value_range_to_nonnegative (vr, TREE_TYPE (expr));
1964 else if (vrp_expr_computes_nonzero (expr))
1965 set_value_range_to_nonnull (vr, TREE_TYPE (expr));
1969 /* Given a range VR, a LOOP and a variable VAR, determine whether it
1970 would be profitable to adjust VR using scalar evolution information
1971 for VAR. If so, update VR with the new limits. */
1974 adjust_range_with_scev (value_range_t *vr, struct loop *loop, tree stmt,
1977 tree init, step, chrec;
1978 bool init_is_max, unknown_max;
1980 /* TODO. Don't adjust anti-ranges. An anti-range may provide
1981 better opportunities than a regular range, but I'm not sure. */
1982 if (vr->type == VR_ANTI_RANGE)
1985 chrec = instantiate_parameters (loop, analyze_scalar_evolution (loop, var));
1986 if (TREE_CODE (chrec) != POLYNOMIAL_CHREC)
1989 init = initial_condition_in_loop_num (chrec, loop->num);
1990 step = evolution_part_in_loop_num (chrec, loop->num);
1992 /* If STEP is symbolic, we can't know whether INIT will be the
1993 minimum or maximum value in the range. Also, unless INIT is
1994 a simple expression, compare_values and possibly other functions
1995 in tree-vrp won't be able to handle it. */
1996 if (step == NULL_TREE
1997 || !is_gimple_min_invariant (step)
1998 || !valid_value_p (init))
2001 /* Do not adjust ranges when chrec may wrap. */
2002 if (scev_probably_wraps_p (chrec_type (chrec), init, step, stmt,
2003 current_loops->parray[CHREC_VARIABLE (chrec)],
2004 &init_is_max, &unknown_max)
2008 if (!POINTER_TYPE_P (TREE_TYPE (init))
2009 && (vr->type == VR_VARYING || vr->type == VR_UNDEFINED))
2011 /* For VARYING or UNDEFINED ranges, just about anything we get
2012 from scalar evolutions should be better. */
2013 tree min = TYPE_MIN_VALUE (TREE_TYPE (init));
2014 tree max = TYPE_MAX_VALUE (TREE_TYPE (init));
2021 /* If we would create an invalid range, then just assume we
2022 know absolutely nothing. This may be over-conservative,
2023 but it's clearly safe. */
2024 if (compare_values (min, max) == 1)
2027 set_value_range (vr, VR_RANGE, min, max, vr->equiv);
2029 else if (vr->type == VR_RANGE)
2036 /* INIT is the maximum value. If INIT is lower than VR->MAX
2037 but no smaller than VR->MIN, set VR->MAX to INIT. */
2038 if (compare_values (init, max) == -1)
2042 /* If we just created an invalid range with the minimum
2043 greater than the maximum, take the minimum all the
2045 if (compare_values (min, max) == 1)
2046 min = TYPE_MIN_VALUE (TREE_TYPE (min));
2051 /* If INIT is bigger than VR->MIN, set VR->MIN to INIT. */
2052 if (compare_values (init, min) == 1)
2056 /* If we just created an invalid range with the minimum
2057 greater than the maximum, take the maximum all the
2059 if (compare_values (min, max) == 1)
2060 max = TYPE_MAX_VALUE (TREE_TYPE (max));
2064 set_value_range (vr, VR_RANGE, min, max, vr->equiv);
2069 /* Given two numeric value ranges VR0, VR1 and a comparison code COMP:
2071 - Return BOOLEAN_TRUE_NODE if VR0 COMP VR1 always returns true for
2072 all the values in the ranges.
2074 - Return BOOLEAN_FALSE_NODE if the comparison always returns false.
2076 - Return NULL_TREE if it is not always possible to determine the
2077 value of the comparison. */
2081 compare_ranges (enum tree_code comp, value_range_t *vr0, value_range_t *vr1)
2083 /* VARYING or UNDEFINED ranges cannot be compared. */
2084 if (vr0->type == VR_VARYING
2085 || vr0->type == VR_UNDEFINED
2086 || vr1->type == VR_VARYING
2087 || vr1->type == VR_UNDEFINED)
2090 /* Anti-ranges need to be handled separately. */
2091 if (vr0->type == VR_ANTI_RANGE || vr1->type == VR_ANTI_RANGE)
2093 /* If both are anti-ranges, then we cannot compute any
2095 if (vr0->type == VR_ANTI_RANGE && vr1->type == VR_ANTI_RANGE)
2098 /* These comparisons are never statically computable. */
2105 /* Equality can be computed only between a range and an
2106 anti-range. ~[VAL1, VAL2] == [VAL1, VAL2] is always false. */
2107 if (vr0->type == VR_RANGE)
2109 /* To simplify processing, make VR0 the anti-range. */
2110 value_range_t *tmp = vr0;
2115 gcc_assert (comp == NE_EXPR || comp == EQ_EXPR);
2117 if (compare_values (vr0->min, vr1->min) == 0
2118 && compare_values (vr0->max, vr1->max) == 0)
2119 return (comp == NE_EXPR) ? boolean_true_node : boolean_false_node;
2124 /* Simplify processing. If COMP is GT_EXPR or GE_EXPR, switch the
2125 operands around and change the comparison code. */
2126 if (comp == GT_EXPR || comp == GE_EXPR)
2129 comp = (comp == GT_EXPR) ? LT_EXPR : LE_EXPR;
2135 if (comp == EQ_EXPR)
2137 /* Equality may only be computed if both ranges represent
2138 exactly one value. */
2139 if (compare_values (vr0->min, vr0->max) == 0
2140 && compare_values (vr1->min, vr1->max) == 0)
2142 int cmp_min = compare_values (vr0->min, vr1->min);
2143 int cmp_max = compare_values (vr0->max, vr1->max);
2144 if (cmp_min == 0 && cmp_max == 0)
2145 return boolean_true_node;
2146 else if (cmp_min != -2 && cmp_max != -2)
2147 return boolean_false_node;
2149 /* If [V0_MIN, V1_MAX] < [V1_MIN, V1_MAX] then V0 != V1. */
2150 else if (compare_values (vr0->min, vr1->max) == 1
2151 || compare_values (vr1->min, vr0->max) == 1)
2152 return boolean_false_node;
2156 else if (comp == NE_EXPR)
2160 /* If VR0 is completely to the left or completely to the right
2161 of VR1, they are always different. Notice that we need to
2162 make sure that both comparisons yield similar results to
2163 avoid comparing values that cannot be compared at
2165 cmp1 = compare_values (vr0->max, vr1->min);
2166 cmp2 = compare_values (vr0->min, vr1->max);
2167 if ((cmp1 == -1 && cmp2 == -1) || (cmp1 == 1 && cmp2 == 1))
2168 return boolean_true_node;
2170 /* If VR0 and VR1 represent a single value and are identical,
2172 else if (compare_values (vr0->min, vr0->max) == 0
2173 && compare_values (vr1->min, vr1->max) == 0
2174 && compare_values (vr0->min, vr1->min) == 0
2175 && compare_values (vr0->max, vr1->max) == 0)
2176 return boolean_false_node;
2178 /* Otherwise, they may or may not be different. */
2182 else if (comp == LT_EXPR || comp == LE_EXPR)
2186 /* If VR0 is to the left of VR1, return true. */
2187 tst = compare_values (vr0->max, vr1->min);
2188 if ((comp == LT_EXPR && tst == -1)
2189 || (comp == LE_EXPR && (tst == -1 || tst == 0)))
2190 return boolean_true_node;
2192 /* If VR0 is to the right of VR1, return false. */
2193 tst = compare_values (vr0->min, vr1->max);
2194 if ((comp == LT_EXPR && (tst == 0 || tst == 1))
2195 || (comp == LE_EXPR && tst == 1))
2196 return boolean_false_node;
2198 /* Otherwise, we don't know. */
2206 /* Given a value range VR, a value VAL and a comparison code COMP, return
2207 BOOLEAN_TRUE_NODE if VR COMP VAL always returns true for all the
2208 values in VR. Return BOOLEAN_FALSE_NODE if the comparison
2209 always returns false. Return NULL_TREE if it is not always
2210 possible to determine the value of the comparison. */
2213 compare_range_with_value (enum tree_code comp, value_range_t *vr, tree val)
2215 if (vr->type == VR_VARYING || vr->type == VR_UNDEFINED)
2218 /* Anti-ranges need to be handled separately. */
2219 if (vr->type == VR_ANTI_RANGE)
2221 /* For anti-ranges, the only predicates that we can compute at
2222 compile time are equality and inequality. */
2229 /* ~[VAL_1, VAL_2] OP VAL is known if VAL_1 <= VAL <= VAL_2. */
2230 if (value_inside_range (val, vr) == 1)
2231 return (comp == NE_EXPR) ? boolean_true_node : boolean_false_node;
2236 if (comp == EQ_EXPR)
2238 /* EQ_EXPR may only be computed if VR represents exactly
2240 if (compare_values (vr->min, vr->max) == 0)
2242 int cmp = compare_values (vr->min, val);
2244 return boolean_true_node;
2245 else if (cmp == -1 || cmp == 1 || cmp == 2)
2246 return boolean_false_node;
2248 else if (compare_values (val, vr->min) == -1
2249 || compare_values (vr->max, val) == -1)
2250 return boolean_false_node;
2254 else if (comp == NE_EXPR)
2256 /* If VAL is not inside VR, then they are always different. */
2257 if (compare_values (vr->max, val) == -1
2258 || compare_values (vr->min, val) == 1)
2259 return boolean_true_node;
2261 /* If VR represents exactly one value equal to VAL, then return
2263 if (compare_values (vr->min, vr->max) == 0
2264 && compare_values (vr->min, val) == 0)
2265 return boolean_false_node;
2267 /* Otherwise, they may or may not be different. */
2270 else if (comp == LT_EXPR || comp == LE_EXPR)
2274 /* If VR is to the left of VAL, return true. */
2275 tst = compare_values (vr->max, val);
2276 if ((comp == LT_EXPR && tst == -1)
2277 || (comp == LE_EXPR && (tst == -1 || tst == 0)))
2278 return boolean_true_node;
2280 /* If VR is to the right of VAL, return false. */
2281 tst = compare_values (vr->min, val);
2282 if ((comp == LT_EXPR && (tst == 0 || tst == 1))
2283 || (comp == LE_EXPR && tst == 1))
2284 return boolean_false_node;
2286 /* Otherwise, we don't know. */
2289 else if (comp == GT_EXPR || comp == GE_EXPR)
2293 /* If VR is to the right of VAL, return true. */
2294 tst = compare_values (vr->min, val);
2295 if ((comp == GT_EXPR && tst == 1)
2296 || (comp == GE_EXPR && (tst == 0 || tst == 1)))
2297 return boolean_true_node;
2299 /* If VR is to the left of VAL, return false. */
2300 tst = compare_values (vr->max, val);
2301 if ((comp == GT_EXPR && (tst == -1 || tst == 0))
2302 || (comp == GE_EXPR && tst == -1))
2303 return boolean_false_node;
2305 /* Otherwise, we don't know. */
2313 /* Debugging dumps. */
2315 void dump_value_range (FILE *, value_range_t *);
2316 void debug_value_range (value_range_t *);
2317 void dump_all_value_ranges (FILE *);
2318 void debug_all_value_ranges (void);
2319 void dump_vr_equiv (FILE *, bitmap);
2320 void debug_vr_equiv (bitmap);
2323 /* Dump value range VR to FILE. */
2326 dump_value_range (FILE *file, value_range_t *vr)
2329 fprintf (file, "[]");
2330 else if (vr->type == VR_UNDEFINED)
2331 fprintf (file, "UNDEFINED");
2332 else if (vr->type == VR_RANGE || vr->type == VR_ANTI_RANGE)
2334 tree type = TREE_TYPE (vr->min);
2336 fprintf (file, "%s[", (vr->type == VR_ANTI_RANGE) ? "~" : "");
2338 if (INTEGRAL_TYPE_P (type)
2339 && !TYPE_UNSIGNED (type)
2340 && vr->min == TYPE_MIN_VALUE (type))
2341 fprintf (file, "-INF");
2343 print_generic_expr (file, vr->min, 0);
2345 fprintf (file, ", ");
2347 if (INTEGRAL_TYPE_P (type)
2348 && vr->max == TYPE_MAX_VALUE (type))
2349 fprintf (file, "+INF");
2351 print_generic_expr (file, vr->max, 0);
2353 fprintf (file, "]");
2360 fprintf (file, " EQUIVALENCES: { ");
2362 EXECUTE_IF_SET_IN_BITMAP (vr->equiv, 0, i, bi)
2364 print_generic_expr (file, ssa_name (i), 0);
2365 fprintf (file, " ");
2369 fprintf (file, "} (%u elements)", c);
2372 else if (vr->type == VR_VARYING)
2373 fprintf (file, "VARYING");
2375 fprintf (file, "INVALID RANGE");
2379 /* Dump value range VR to stderr. */
2382 debug_value_range (value_range_t *vr)
2384 dump_value_range (stderr, vr);
2388 /* Dump value ranges of all SSA_NAMEs to FILE. */
2391 dump_all_value_ranges (FILE *file)
2395 for (i = 0; i < num_ssa_names; i++)
2399 print_generic_expr (file, ssa_name (i), 0);
2400 fprintf (file, ": ");
2401 dump_value_range (file, vr_value[i]);
2402 fprintf (file, "\n");
2406 fprintf (file, "\n");
2410 /* Dump all value ranges to stderr. */
2413 debug_all_value_ranges (void)
2415 dump_all_value_ranges (stderr);
2419 /* Given a COND_EXPR COND of the form 'V OP W', and an SSA name V,
2420 create a new SSA name N and return the assertion assignment
2421 'V = ASSERT_EXPR <V, V OP W>'. */
2424 build_assert_expr_for (tree cond, tree v)
2428 gcc_assert (TREE_CODE (v) == SSA_NAME);
2429 n = duplicate_ssa_name (v, NULL_TREE);
2431 if (COMPARISON_CLASS_P (cond))
2433 tree a = build2 (ASSERT_EXPR, TREE_TYPE (v), v, cond);
2434 assertion = build2 (MODIFY_EXPR, TREE_TYPE (v), n, a);
2436 else if (TREE_CODE (cond) == TRUTH_NOT_EXPR)
2438 /* Given !V, build the assignment N = false. */
2439 tree op0 = TREE_OPERAND (cond, 0);
2440 gcc_assert (op0 == v);
2441 assertion = build2 (MODIFY_EXPR, TREE_TYPE (v), n, boolean_false_node);
2443 else if (TREE_CODE (cond) == SSA_NAME)
2445 /* Given V, build the assignment N = true. */
2446 gcc_assert (v == cond);
2447 assertion = build2 (MODIFY_EXPR, TREE_TYPE (v), n, boolean_true_node);
2452 SSA_NAME_DEF_STMT (n) = assertion;
2454 /* The new ASSERT_EXPR, creates a new SSA name that replaces the
2455 operand of the ASSERT_EXPR. Register the new name and the old one
2456 in the replacement table so that we can fix the SSA web after
2457 adding all the ASSERT_EXPRs. */
2458 register_new_name_mapping (n, v);
2464 /* Return false if EXPR is a predicate expression involving floating
2468 fp_predicate (tree expr)
2470 return (COMPARISON_CLASS_P (expr)
2471 && FLOAT_TYPE_P (TREE_TYPE (TREE_OPERAND (expr, 0))));
2475 /* If the range of values taken by OP can be inferred after STMT executes,
2476 return the comparison code (COMP_CODE_P) and value (VAL_P) that
2477 describes the inferred range. Return true if a range could be
2481 infer_value_range (tree stmt, tree op, enum tree_code *comp_code_p, tree *val_p)
2484 *comp_code_p = ERROR_MARK;
2486 /* Do not attempt to infer anything in names that flow through
2488 if (SSA_NAME_OCCURS_IN_ABNORMAL_PHI (op))
2491 /* Similarly, don't infer anything from statements that may throw
2493 if (tree_could_throw_p (stmt))
2496 /* If STMT is the last statement of a basic block with no
2497 successors, there is no point inferring anything about any of its
2498 operands. We would not be able to find a proper insertion point
2499 for the assertion, anyway. */
2500 if (stmt_ends_bb_p (stmt) && EDGE_COUNT (bb_for_stmt (stmt)->succs) == 0)
2503 /* We can only assume that a pointer dereference will yield
2504 non-NULL if -fdelete-null-pointer-checks is enabled. */
2505 if (flag_delete_null_pointer_checks && POINTER_TYPE_P (TREE_TYPE (op)))
2508 unsigned num_uses, num_derefs;
2510 count_uses_and_derefs (op, stmt, &num_uses, &num_derefs, &is_store);
2513 *val_p = build_int_cst (TREE_TYPE (op), 0);
2514 *comp_code_p = NE_EXPR;
2523 void dump_asserts_for (FILE *, tree);
2524 void debug_asserts_for (tree);
2525 void dump_all_asserts (FILE *);
2526 void debug_all_asserts (void);
2528 /* Dump all the registered assertions for NAME to FILE. */
2531 dump_asserts_for (FILE *file, tree name)
2535 fprintf (file, "Assertions to be inserted for ");
2536 print_generic_expr (file, name, 0);
2537 fprintf (file, "\n");
2539 loc = asserts_for[SSA_NAME_VERSION (name)];
2542 fprintf (file, "\t");
2543 print_generic_expr (file, bsi_stmt (loc->si), 0);
2544 fprintf (file, "\n\tBB #%d", loc->bb->index);
2547 fprintf (file, "\n\tEDGE %d->%d", loc->e->src->index,
2548 loc->e->dest->index);
2549 dump_edge_info (file, loc->e, 0);
2551 fprintf (file, "\n\tPREDICATE: ");
2552 print_generic_expr (file, name, 0);
2553 fprintf (file, " %s ", tree_code_name[(int)loc->comp_code]);
2554 print_generic_expr (file, loc->val, 0);
2555 fprintf (file, "\n\n");
2559 fprintf (file, "\n");
2563 /* Dump all the registered assertions for NAME to stderr. */
2566 debug_asserts_for (tree name)
2568 dump_asserts_for (stderr, name);
2572 /* Dump all the registered assertions for all the names to FILE. */
2575 dump_all_asserts (FILE *file)
2580 fprintf (file, "\nASSERT_EXPRs to be inserted\n\n");
2581 EXECUTE_IF_SET_IN_BITMAP (need_assert_for, 0, i, bi)
2582 dump_asserts_for (file, ssa_name (i));
2583 fprintf (file, "\n");
2587 /* Dump all the registered assertions for all the names to stderr. */
2590 debug_all_asserts (void)
2592 dump_all_asserts (stderr);
2596 /* If NAME doesn't have an ASSERT_EXPR registered for asserting
2597 'NAME COMP_CODE VAL' at a location that dominates block BB or
2598 E->DEST, then register this location as a possible insertion point
2599 for ASSERT_EXPR <NAME, NAME COMP_CODE VAL>.
2601 BB, E and SI provide the exact insertion point for the new
2602 ASSERT_EXPR. If BB is NULL, then the ASSERT_EXPR is to be inserted
2603 on edge E. Otherwise, if E is NULL, the ASSERT_EXPR is inserted on
2604 BB. If SI points to a COND_EXPR or a SWITCH_EXPR statement, then E
2605 must not be NULL. */
2608 register_new_assert_for (tree name,
2609 enum tree_code comp_code,
2613 block_stmt_iterator si)
2615 assert_locus_t n, loc, last_loc;
2617 basic_block dest_bb;
2619 #if defined ENABLE_CHECKING
2620 gcc_assert (bb == NULL || e == NULL);
2623 gcc_assert (TREE_CODE (bsi_stmt (si)) != COND_EXPR
2624 && TREE_CODE (bsi_stmt (si)) != SWITCH_EXPR);
2627 /* The new assertion A will be inserted at BB or E. We need to
2628 determine if the new location is dominated by a previously
2629 registered location for A. If we are doing an edge insertion,
2630 assume that A will be inserted at E->DEST. Note that this is not
2633 If E is a critical edge, it will be split. But even if E is
2634 split, the new block will dominate the same set of blocks that
2637 The reverse, however, is not true, blocks dominated by E->DEST
2638 will not be dominated by the new block created to split E. So,
2639 if the insertion location is on a critical edge, we will not use
2640 the new location to move another assertion previously registered
2641 at a block dominated by E->DEST. */
2642 dest_bb = (bb) ? bb : e->dest;
2644 /* If NAME already has an ASSERT_EXPR registered for COMP_CODE and
2645 VAL at a block dominating DEST_BB, then we don't need to insert a new
2646 one. Similarly, if the same assertion already exists at a block
2647 dominated by DEST_BB and the new location is not on a critical
2648 edge, then update the existing location for the assertion (i.e.,
2649 move the assertion up in the dominance tree).
2651 Note, this is implemented as a simple linked list because there
2652 should not be more than a handful of assertions registered per
2653 name. If this becomes a performance problem, a table hashed by
2654 COMP_CODE and VAL could be implemented. */
2655 loc = asserts_for[SSA_NAME_VERSION (name)];
2660 if (loc->comp_code == comp_code
2662 || operand_equal_p (loc->val, val, 0)))
2664 /* If the assertion NAME COMP_CODE VAL has already been
2665 registered at a basic block that dominates DEST_BB, then
2666 we don't need to insert the same assertion again. Note
2667 that we don't check strict dominance here to avoid
2668 replicating the same assertion inside the same basic
2669 block more than once (e.g., when a pointer is
2670 dereferenced several times inside a block).
2672 An exception to this rule are edge insertions. If the
2673 new assertion is to be inserted on edge E, then it will
2674 dominate all the other insertions that we may want to
2675 insert in DEST_BB. So, if we are doing an edge
2676 insertion, don't do this dominance check. */
2678 && dominated_by_p (CDI_DOMINATORS, dest_bb, loc->bb))
2681 /* Otherwise, if E is not a critical edge and DEST_BB
2682 dominates the existing location for the assertion, move
2683 the assertion up in the dominance tree by updating its
2684 location information. */
2685 if ((e == NULL || !EDGE_CRITICAL_P (e))
2686 && dominated_by_p (CDI_DOMINATORS, loc->bb, dest_bb))
2695 /* Update the last node of the list and move to the next one. */
2700 /* If we didn't find an assertion already registered for
2701 NAME COMP_CODE VAL, add a new one at the end of the list of
2702 assertions associated with NAME. */
2703 n = XNEW (struct assert_locus_d);
2707 n->comp_code = comp_code;
2714 asserts_for[SSA_NAME_VERSION (name)] = n;
2716 bitmap_set_bit (need_assert_for, SSA_NAME_VERSION (name));
2720 /* Try to register an edge assertion for SSA name NAME on edge E for
2721 the conditional jump pointed to by SI. Return true if an assertion
2722 for NAME could be registered. */
2725 register_edge_assert_for (tree name, edge e, block_stmt_iterator si)
2728 enum tree_code comp_code;
2730 stmt = bsi_stmt (si);
2732 /* Do not attempt to infer anything in names that flow through
2734 if (SSA_NAME_OCCURS_IN_ABNORMAL_PHI (name))
2737 /* If NAME was not found in the sub-graph reachable from E, then
2738 there's nothing to do. */
2739 if (!TEST_BIT (found_in_subgraph, SSA_NAME_VERSION (name)))
2742 /* We found a use of NAME in the sub-graph rooted at E->DEST.
2743 Register an assertion for NAME according to the value that NAME
2745 if (TREE_CODE (stmt) == COND_EXPR)
2747 /* If BB ends in a COND_EXPR then NAME then we should insert
2748 the original predicate on EDGE_TRUE_VALUE and the
2749 opposite predicate on EDGE_FALSE_VALUE. */
2750 tree cond = COND_EXPR_COND (stmt);
2751 bool is_else_edge = (e->flags & EDGE_FALSE_VALUE) != 0;
2753 /* Predicates may be a single SSA name or NAME OP VAL. */
2756 /* If the predicate is a name, it must be NAME, in which
2757 case we create the predicate NAME == true or
2758 NAME == false accordingly. */
2759 comp_code = EQ_EXPR;
2760 val = (is_else_edge) ? boolean_false_node : boolean_true_node;
2764 /* Otherwise, we have a comparison of the form NAME COMP VAL
2765 or VAL COMP NAME. */
2766 if (name == TREE_OPERAND (cond, 1))
2768 /* If the predicate is of the form VAL COMP NAME, flip
2769 COMP around because we need to register NAME as the
2770 first operand in the predicate. */
2771 comp_code = swap_tree_comparison (TREE_CODE (cond));
2772 val = TREE_OPERAND (cond, 0);
2776 /* The comparison is of the form NAME COMP VAL, so the
2777 comparison code remains unchanged. */
2778 comp_code = TREE_CODE (cond);
2779 val = TREE_OPERAND (cond, 1);
2782 /* If we are inserting the assertion on the ELSE edge, we
2783 need to invert the sign comparison. */
2785 comp_code = invert_tree_comparison (comp_code, 0);
2787 /* Do not register always-false predicates. FIXME, this
2788 works around a limitation in fold() when dealing with
2789 enumerations. Given 'enum { N1, N2 } x;', fold will not
2790 fold 'if (x > N2)' to 'if (0)'. */
2791 if ((comp_code == GT_EXPR || comp_code == LT_EXPR)
2792 && (INTEGRAL_TYPE_P (TREE_TYPE (val))
2793 || SCALAR_FLOAT_TYPE_P (TREE_TYPE (val))))
2795 tree min = TYPE_MIN_VALUE (TREE_TYPE (val));
2796 tree max = TYPE_MAX_VALUE (TREE_TYPE (val));
2798 if (comp_code == GT_EXPR && compare_values (val, max) == 0)
2801 if (comp_code == LT_EXPR && compare_values (val, min) == 0)
2808 /* FIXME. Handle SWITCH_EXPR. */
2812 register_new_assert_for (name, comp_code, val, NULL, e, si);
2817 static bool find_assert_locations (basic_block bb);
2819 /* Determine whether the outgoing edges of BB should receive an
2820 ASSERT_EXPR for each of the operands of BB's last statement. The
2821 last statement of BB must be a COND_EXPR or a SWITCH_EXPR.
2823 If any of the sub-graphs rooted at BB have an interesting use of
2824 the predicate operands, an assert location node is added to the
2825 list of assertions for the corresponding operands. */
2828 find_conditional_asserts (basic_block bb)
2831 block_stmt_iterator last_si;
2837 need_assert = false;
2838 last_si = bsi_last (bb);
2839 last = bsi_stmt (last_si);
2841 /* Look for uses of the operands in each of the sub-graphs
2842 rooted at BB. We need to check each of the outgoing edges
2843 separately, so that we know what kind of ASSERT_EXPR to
2845 FOR_EACH_EDGE (e, ei, bb->succs)
2850 /* Remove the COND_EXPR operands from the FOUND_IN_SUBGRAPH bitmap.
2851 Otherwise, when we finish traversing each of the sub-graphs, we
2852 won't know whether the variables were found in the sub-graphs or
2853 if they had been found in a block upstream from BB.
2855 This is actually a bad idea is some cases, particularly jump
2856 threading. Consider a CFG like the following:
2866 Assume that one or more operands in the conditional at the
2867 end of block 0 are used in a conditional in block 2, but not
2868 anywhere in block 1. In this case we will not insert any
2869 assert statements in block 1, which may cause us to miss
2870 opportunities to optimize, particularly for jump threading. */
2871 FOR_EACH_SSA_TREE_OPERAND (op, last, iter, SSA_OP_USE)
2872 RESET_BIT (found_in_subgraph, SSA_NAME_VERSION (op));
2874 /* Traverse the strictly dominated sub-graph rooted at E->DEST
2875 to determine if any of the operands in the conditional
2876 predicate are used. */
2878 need_assert |= find_assert_locations (e->dest);
2880 /* Register the necessary assertions for each operand in the
2881 conditional predicate. */
2882 FOR_EACH_SSA_TREE_OPERAND (op, last, iter, SSA_OP_USE)
2883 need_assert |= register_edge_assert_for (op, e, last_si);
2886 /* Finally, indicate that we have found the operands in the
2888 FOR_EACH_SSA_TREE_OPERAND (op, last, iter, SSA_OP_USE)
2889 SET_BIT (found_in_subgraph, SSA_NAME_VERSION (op));
2895 /* Traverse all the statements in block BB looking for statements that
2896 may generate useful assertions for the SSA names in their operand.
2897 If a statement produces a useful assertion A for name N_i, then the
2898 list of assertions already generated for N_i is scanned to
2899 determine if A is actually needed.
2901 If N_i already had the assertion A at a location dominating the
2902 current location, then nothing needs to be done. Otherwise, the
2903 new location for A is recorded instead.
2905 1- For every statement S in BB, all the variables used by S are
2906 added to bitmap FOUND_IN_SUBGRAPH.
2908 2- If statement S uses an operand N in a way that exposes a known
2909 value range for N, then if N was not already generated by an
2910 ASSERT_EXPR, create a new assert location for N. For instance,
2911 if N is a pointer and the statement dereferences it, we can
2912 assume that N is not NULL.
2914 3- COND_EXPRs are a special case of #2. We can derive range
2915 information from the predicate but need to insert different
2916 ASSERT_EXPRs for each of the sub-graphs rooted at the
2917 conditional block. If the last statement of BB is a conditional
2918 expression of the form 'X op Y', then
2920 a) Remove X and Y from the set FOUND_IN_SUBGRAPH.
2922 b) If the conditional is the only entry point to the sub-graph
2923 corresponding to the THEN_CLAUSE, recurse into it. On
2924 return, if X and/or Y are marked in FOUND_IN_SUBGRAPH, then
2925 an ASSERT_EXPR is added for the corresponding variable.
2927 c) Repeat step (b) on the ELSE_CLAUSE.
2929 d) Mark X and Y in FOUND_IN_SUBGRAPH.
2938 In this case, an assertion on the THEN clause is useful to
2939 determine that 'a' is always 9 on that edge. However, an assertion
2940 on the ELSE clause would be unnecessary.
2942 4- If BB does not end in a conditional expression, then we recurse
2943 into BB's dominator children.
2945 At the end of the recursive traversal, every SSA name will have a
2946 list of locations where ASSERT_EXPRs should be added. When a new
2947 location for name N is found, it is registered by calling
2948 register_new_assert_for. That function keeps track of all the
2949 registered assertions to prevent adding unnecessary assertions.
2950 For instance, if a pointer P_4 is dereferenced more than once in a
2951 dominator tree, only the location dominating all the dereference of
2952 P_4 will receive an ASSERT_EXPR.
2954 If this function returns true, then it means that there are names
2955 for which we need to generate ASSERT_EXPRs. Those assertions are
2956 inserted by process_assert_insertions.
2958 TODO. Handle SWITCH_EXPR. */
2961 find_assert_locations (basic_block bb)
2963 block_stmt_iterator si;
2968 if (TEST_BIT (blocks_visited, bb->index))
2971 SET_BIT (blocks_visited, bb->index);
2973 need_assert = false;
2975 /* Traverse all PHI nodes in BB marking used operands. */
2976 for (phi = phi_nodes (bb); phi; phi = PHI_CHAIN (phi))
2978 use_operand_p arg_p;
2981 FOR_EACH_PHI_ARG (arg_p, phi, i, SSA_OP_USE)
2983 tree arg = USE_FROM_PTR (arg_p);
2984 if (TREE_CODE (arg) == SSA_NAME)
2986 gcc_assert (is_gimple_reg (PHI_RESULT (phi)));
2987 SET_BIT (found_in_subgraph, SSA_NAME_VERSION (arg));
2992 /* Traverse all the statements in BB marking used names and looking
2993 for statements that may infer assertions for their used operands. */
2995 for (si = bsi_start (bb); !bsi_end_p (si); bsi_next (&si))
3000 stmt = bsi_stmt (si);
3002 /* See if we can derive an assertion for any of STMT's operands. */
3003 FOR_EACH_SSA_TREE_OPERAND (op, stmt, i, SSA_OP_USE)
3006 enum tree_code comp_code;
3008 /* Mark OP in bitmap FOUND_IN_SUBGRAPH. If STMT is inside
3009 the sub-graph of a conditional block, when we return from
3010 this recursive walk, our parent will use the
3011 FOUND_IN_SUBGRAPH bitset to determine if one of the
3012 operands it was looking for was present in the sub-graph. */
3013 SET_BIT (found_in_subgraph, SSA_NAME_VERSION (op));
3015 /* If OP is used in such a way that we can infer a value
3016 range for it, and we don't find a previous assertion for
3017 it, create a new assertion location node for OP. */
3018 if (infer_value_range (stmt, op, &comp_code, &value))
3020 /* If we are able to infer a nonzero value range for OP,
3021 then walk backwards through the use-def chain to see if OP
3022 was set via a typecast.
3024 If so, then we can also infer a nonzero value range
3025 for the operand of the NOP_EXPR. */
3026 if (comp_code == NE_EXPR && integer_zerop (value))
3029 tree def_stmt = SSA_NAME_DEF_STMT (t);
3031 while (TREE_CODE (def_stmt) == MODIFY_EXPR
3032 && TREE_CODE (TREE_OPERAND (def_stmt, 1)) == NOP_EXPR
3033 && TREE_CODE (TREE_OPERAND (TREE_OPERAND (def_stmt, 1), 0)) == SSA_NAME
3034 && POINTER_TYPE_P (TREE_TYPE (TREE_OPERAND (TREE_OPERAND (def_stmt, 1), 0))))
3036 t = TREE_OPERAND (TREE_OPERAND (def_stmt, 1), 0);
3037 def_stmt = SSA_NAME_DEF_STMT (t);
3039 /* Note we want to register the assert for the
3040 operand of the NOP_EXPR after SI, not after the
3042 if (! has_single_use (t))
3044 register_new_assert_for (t, comp_code, value,
3051 /* If OP is used only once, namely in this STMT, don't
3052 bother creating an ASSERT_EXPR for it. Such an
3053 ASSERT_EXPR would do nothing but increase compile time. */
3054 if (!has_single_use (op))
3056 register_new_assert_for (op, comp_code, value, bb, NULL, si);
3062 /* Remember the last statement of the block. */
3066 /* If BB's last statement is a conditional expression
3067 involving integer operands, recurse into each of the sub-graphs
3068 rooted at BB to determine if we need to add ASSERT_EXPRs. */
3070 && TREE_CODE (last) == COND_EXPR
3071 && !fp_predicate (COND_EXPR_COND (last))
3072 && !ZERO_SSA_OPERANDS (last, SSA_OP_USE))
3073 need_assert |= find_conditional_asserts (bb);
3075 /* Recurse into the dominator children of BB. */
3076 for (son = first_dom_son (CDI_DOMINATORS, bb);
3078 son = next_dom_son (CDI_DOMINATORS, son))
3079 need_assert |= find_assert_locations (son);
3085 /* Create an ASSERT_EXPR for NAME and insert it in the location
3086 indicated by LOC. Return true if we made any edge insertions. */
3089 process_assert_insertions_for (tree name, assert_locus_t loc)
3091 /* Build the comparison expression NAME_i COMP_CODE VAL. */
3092 tree stmt, cond, assert_expr;
3096 cond = build2 (loc->comp_code, boolean_type_node, name, loc->val);
3097 assert_expr = build_assert_expr_for (cond, name);
3101 /* We have been asked to insert the assertion on an edge. This
3102 is used only by COND_EXPR and SWITCH_EXPR assertions. */
3103 #if defined ENABLE_CHECKING
3104 gcc_assert (TREE_CODE (bsi_stmt (loc->si)) == COND_EXPR
3105 || TREE_CODE (bsi_stmt (loc->si)) == SWITCH_EXPR);
3108 bsi_insert_on_edge (loc->e, assert_expr);
3112 /* Otherwise, we can insert right after LOC->SI iff the
3113 statement must not be the last statement in the block. */
3114 stmt = bsi_stmt (loc->si);
3115 if (!stmt_ends_bb_p (stmt))
3117 bsi_insert_after (&loc->si, assert_expr, BSI_SAME_STMT);
3121 /* If STMT must be the last statement in BB, we can only insert new
3122 assertions on the non-abnormal edge out of BB. Note that since
3123 STMT is not control flow, there may only be one non-abnormal edge
3125 FOR_EACH_EDGE (e, ei, loc->bb->succs)
3126 if (!(e->flags & EDGE_ABNORMAL))
3128 bsi_insert_on_edge (e, assert_expr);
3136 /* Process all the insertions registered for every name N_i registered
3137 in NEED_ASSERT_FOR. The list of assertions to be inserted are
3138 found in ASSERTS_FOR[i]. */
3141 process_assert_insertions (void)
3145 bool update_edges_p = false;
3146 int num_asserts = 0;
3148 if (dump_file && (dump_flags & TDF_DETAILS))
3149 dump_all_asserts (dump_file);
3151 EXECUTE_IF_SET_IN_BITMAP (need_assert_for, 0, i, bi)
3153 assert_locus_t loc = asserts_for[i];
3158 assert_locus_t next = loc->next;
3159 update_edges_p |= process_assert_insertions_for (ssa_name (i), loc);
3167 bsi_commit_edge_inserts ();
3169 if (dump_file && (dump_flags & TDF_STATS))
3170 fprintf (dump_file, "\nNumber of ASSERT_EXPR expressions inserted: %d\n\n",
3175 /* Traverse the flowgraph looking for conditional jumps to insert range
3176 expressions. These range expressions are meant to provide information
3177 to optimizations that need to reason in terms of value ranges. They
3178 will not be expanded into RTL. For instance, given:
3187 this pass will transform the code into:
3193 x = ASSERT_EXPR <x, x < y>
3198 y = ASSERT_EXPR <y, x <= y>
3202 The idea is that once copy and constant propagation have run, other
3203 optimizations will be able to determine what ranges of values can 'x'
3204 take in different paths of the code, simply by checking the reaching
3205 definition of 'x'. */
3208 insert_range_assertions (void)
3214 found_in_subgraph = sbitmap_alloc (num_ssa_names);
3215 sbitmap_zero (found_in_subgraph);
3217 blocks_visited = sbitmap_alloc (last_basic_block);
3218 sbitmap_zero (blocks_visited);
3220 need_assert_for = BITMAP_ALLOC (NULL);
3221 asserts_for = XNEWVEC (assert_locus_t, num_ssa_names);
3222 memset (asserts_for, 0, num_ssa_names * sizeof (assert_locus_t));
3224 calculate_dominance_info (CDI_DOMINATORS);
3226 update_ssa_p = false;
3227 FOR_EACH_EDGE (e, ei, ENTRY_BLOCK_PTR->succs)
3228 if (find_assert_locations (e->dest))
3229 update_ssa_p = true;
3233 process_assert_insertions ();
3234 update_ssa (TODO_update_ssa_no_phi);
3237 if (dump_file && (dump_flags & TDF_DETAILS))
3239 fprintf (dump_file, "\nSSA form after inserting ASSERT_EXPRs\n");
3240 dump_function_to_file (current_function_decl, dump_file, dump_flags);
3243 sbitmap_free (found_in_subgraph);
3245 BITMAP_FREE (need_assert_for);
3249 /* Convert range assertion expressions into the implied copies and
3250 copy propagate away the copies. Doing the trivial copy propagation
3251 here avoids the need to run the full copy propagation pass after
3254 FIXME, this will eventually lead to copy propagation removing the
3255 names that had useful range information attached to them. For
3256 instance, if we had the assertion N_i = ASSERT_EXPR <N_j, N_j > 3>,
3257 then N_i will have the range [3, +INF].
3259 However, by converting the assertion into the implied copy
3260 operation N_i = N_j, we will then copy-propagate N_j into the uses
3261 of N_i and lose the range information. We may want to hold on to
3262 ASSERT_EXPRs a little while longer as the ranges could be used in
3263 things like jump threading.
3265 The problem with keeping ASSERT_EXPRs around is that passes after
3266 VRP need to handle them appropriately.
3268 Another approach would be to make the range information a first
3269 class property of the SSA_NAME so that it can be queried from
3270 any pass. This is made somewhat more complex by the need for
3271 multiple ranges to be associated with one SSA_NAME. */
3274 remove_range_assertions (void)
3277 block_stmt_iterator si;
3279 /* Note that the BSI iterator bump happens at the bottom of the
3280 loop and no bump is necessary if we're removing the statement
3281 referenced by the current BSI. */
3283 for (si = bsi_start (bb); !bsi_end_p (si);)
3285 tree stmt = bsi_stmt (si);
3288 if (TREE_CODE (stmt) == MODIFY_EXPR
3289 && TREE_CODE (TREE_OPERAND (stmt, 1)) == ASSERT_EXPR)
3291 tree rhs = TREE_OPERAND (stmt, 1), var;
3292 tree cond = fold (ASSERT_EXPR_COND (rhs));
3293 use_operand_p use_p;
3294 imm_use_iterator iter;
3296 gcc_assert (cond != boolean_false_node);
3298 /* Propagate the RHS into every use of the LHS. */
3299 var = ASSERT_EXPR_VAR (rhs);
3300 FOR_EACH_IMM_USE_STMT (use_stmt, iter, TREE_OPERAND (stmt, 0))
3301 FOR_EACH_IMM_USE_ON_STMT (use_p, iter)
3303 SET_USE (use_p, var);
3304 gcc_assert (TREE_CODE (var) == SSA_NAME);
3307 /* And finally, remove the copy, it is not needed. */
3308 bsi_remove (&si, true);
3314 sbitmap_free (blocks_visited);
3318 /* Return true if STMT is interesting for VRP. */
3321 stmt_interesting_for_vrp (tree stmt)
3323 if (TREE_CODE (stmt) == PHI_NODE
3324 && is_gimple_reg (PHI_RESULT (stmt))
3325 && (INTEGRAL_TYPE_P (TREE_TYPE (PHI_RESULT (stmt)))
3326 || POINTER_TYPE_P (TREE_TYPE (PHI_RESULT (stmt)))))
3328 else if (TREE_CODE (stmt) == MODIFY_EXPR)
3330 tree lhs = TREE_OPERAND (stmt, 0);
3331 tree rhs = TREE_OPERAND (stmt, 1);
3333 /* In general, assignments with virtual operands are not useful
3334 for deriving ranges, with the obvious exception of calls to
3335 builtin functions. */
3336 if (TREE_CODE (lhs) == SSA_NAME
3337 && (INTEGRAL_TYPE_P (TREE_TYPE (lhs))
3338 || POINTER_TYPE_P (TREE_TYPE (lhs)))
3339 && ((TREE_CODE (rhs) == CALL_EXPR
3340 && TREE_CODE (TREE_OPERAND (rhs, 0)) == ADDR_EXPR
3341 && DECL_P (TREE_OPERAND (TREE_OPERAND (rhs, 0), 0))
3342 && DECL_IS_BUILTIN (TREE_OPERAND (TREE_OPERAND (rhs, 0), 0)))
3343 || ZERO_SSA_OPERANDS (stmt, SSA_OP_ALL_VIRTUALS)))
3346 else if (TREE_CODE (stmt) == COND_EXPR || TREE_CODE (stmt) == SWITCH_EXPR)
3353 /* Initialize local data structures for VRP. */
3356 vrp_initialize (void)
3360 vr_value = XNEWVEC (value_range_t *, num_ssa_names);
3361 memset (vr_value, 0, num_ssa_names * sizeof (value_range_t *));
3365 block_stmt_iterator si;
3368 for (phi = phi_nodes (bb); phi; phi = PHI_CHAIN (phi))
3370 if (!stmt_interesting_for_vrp (phi))
3372 tree lhs = PHI_RESULT (phi);
3373 set_value_range_to_varying (get_value_range (lhs));
3374 DONT_SIMULATE_AGAIN (phi) = true;
3377 DONT_SIMULATE_AGAIN (phi) = false;
3380 for (si = bsi_start (bb); !bsi_end_p (si); bsi_next (&si))
3382 tree stmt = bsi_stmt (si);
3384 if (!stmt_interesting_for_vrp (stmt))
3388 FOR_EACH_SSA_TREE_OPERAND (def, stmt, i, SSA_OP_DEF)
3389 set_value_range_to_varying (get_value_range (def));
3390 DONT_SIMULATE_AGAIN (stmt) = true;
3394 DONT_SIMULATE_AGAIN (stmt) = false;
3401 /* Visit assignment STMT. If it produces an interesting range, record
3402 the SSA name in *OUTPUT_P. */
3404 static enum ssa_prop_result
3405 vrp_visit_assignment (tree stmt, tree *output_p)
3410 lhs = TREE_OPERAND (stmt, 0);
3411 rhs = TREE_OPERAND (stmt, 1);
3413 /* We only keep track of ranges in integral and pointer types. */
3414 if (TREE_CODE (lhs) == SSA_NAME
3415 && ((INTEGRAL_TYPE_P (TREE_TYPE (lhs))
3416 /* It is valid to have NULL MIN/MAX values on a type. See
3417 build_range_type. */
3418 && TYPE_MIN_VALUE (TREE_TYPE (lhs))
3419 && TYPE_MAX_VALUE (TREE_TYPE (lhs)))
3420 || POINTER_TYPE_P (TREE_TYPE (lhs))))
3423 value_range_t new_vr = { VR_UNDEFINED, NULL_TREE, NULL_TREE, NULL };
3425 extract_range_from_expr (&new_vr, rhs);
3427 /* If STMT is inside a loop, we may be able to know something
3428 else about the range of LHS by examining scalar evolution
3430 if (current_loops && (l = loop_containing_stmt (stmt)))
3431 adjust_range_with_scev (&new_vr, l, stmt, lhs);
3433 if (update_value_range (lhs, &new_vr))
3437 if (dump_file && (dump_flags & TDF_DETAILS))
3439 fprintf (dump_file, "Found new range for ");
3440 print_generic_expr (dump_file, lhs, 0);
3441 fprintf (dump_file, ": ");
3442 dump_value_range (dump_file, &new_vr);
3443 fprintf (dump_file, "\n\n");
3446 if (new_vr.type == VR_VARYING)
3447 return SSA_PROP_VARYING;
3449 return SSA_PROP_INTERESTING;
3452 return SSA_PROP_NOT_INTERESTING;
3455 /* Every other statement produces no useful ranges. */
3456 FOR_EACH_SSA_TREE_OPERAND (def, stmt, iter, SSA_OP_DEF)
3457 set_value_range_to_varying (get_value_range (def));
3459 return SSA_PROP_VARYING;
3463 /* Compare all the value ranges for names equivalent to VAR with VAL
3464 using comparison code COMP. Return the same value returned by
3465 compare_range_with_value. */
3468 compare_name_with_value (enum tree_code comp, tree var, tree val)
3475 t = retval = NULL_TREE;
3477 /* Get the set of equivalences for VAR. */
3478 e = get_value_range (var)->equiv;
3480 /* Add VAR to its own set of equivalences so that VAR's value range
3481 is processed by this loop (otherwise, we would have to replicate
3482 the body of the loop just to check VAR's value range). */
3483 bitmap_set_bit (e, SSA_NAME_VERSION (var));
3485 EXECUTE_IF_SET_IN_BITMAP (e, 0, i, bi)
3487 value_range_t equiv_vr = *(vr_value[i]);
3489 /* If name N_i does not have a valid range, use N_i as its own
3490 range. This allows us to compare against names that may
3491 have N_i in their ranges. */
3492 if (equiv_vr.type == VR_VARYING || equiv_vr.type == VR_UNDEFINED)
3494 equiv_vr.type = VR_RANGE;
3495 equiv_vr.min = ssa_name (i);
3496 equiv_vr.max = ssa_name (i);
3499 t = compare_range_with_value (comp, &equiv_vr, val);
3502 /* All the ranges should compare the same against VAL. */
3503 gcc_assert (retval == NULL || t == retval);
3508 /* Remove VAR from its own equivalence set. */
3509 bitmap_clear_bit (e, SSA_NAME_VERSION (var));
3514 /* We couldn't find a non-NULL value for the predicate. */
3519 /* Given a comparison code COMP and names N1 and N2, compare all the
3520 ranges equivalent to N1 against all the ranges equivalent to N2
3521 to determine the value of N1 COMP N2. Return the same value
3522 returned by compare_ranges. */
3525 compare_names (enum tree_code comp, tree n1, tree n2)
3529 bitmap_iterator bi1, bi2;
3532 /* Compare the ranges of every name equivalent to N1 against the
3533 ranges of every name equivalent to N2. */
3534 e1 = get_value_range (n1)->equiv;
3535 e2 = get_value_range (n2)->equiv;
3537 /* Add N1 and N2 to their own set of equivalences to avoid
3538 duplicating the body of the loop just to check N1 and N2
3540 bitmap_set_bit (e1, SSA_NAME_VERSION (n1));
3541 bitmap_set_bit (e2, SSA_NAME_VERSION (n2));
3543 /* If the equivalence sets have a common intersection, then the two
3544 names can be compared without checking their ranges. */
3545 if (bitmap_intersect_p (e1, e2))
3547 bitmap_clear_bit (e1, SSA_NAME_VERSION (n1));
3548 bitmap_clear_bit (e2, SSA_NAME_VERSION (n2));
3550 return (comp == EQ_EXPR || comp == GE_EXPR || comp == LE_EXPR)
3552 : boolean_false_node;
3555 /* Otherwise, compare all the equivalent ranges. First, add N1 and
3556 N2 to their own set of equivalences to avoid duplicating the body
3557 of the loop just to check N1 and N2 ranges. */
3558 EXECUTE_IF_SET_IN_BITMAP (e1, 0, i1, bi1)
3560 value_range_t vr1 = *(vr_value[i1]);
3562 /* If the range is VARYING or UNDEFINED, use the name itself. */
3563 if (vr1.type == VR_VARYING || vr1.type == VR_UNDEFINED)
3565 vr1.type = VR_RANGE;
3566 vr1.min = ssa_name (i1);
3567 vr1.max = ssa_name (i1);
3570 t = retval = NULL_TREE;
3571 EXECUTE_IF_SET_IN_BITMAP (e2, 0, i2, bi2)
3573 value_range_t vr2 = *(vr_value[i2]);
3575 if (vr2.type == VR_VARYING || vr2.type == VR_UNDEFINED)
3577 vr2.type = VR_RANGE;
3578 vr2.min = ssa_name (i2);
3579 vr2.max = ssa_name (i2);
3582 t = compare_ranges (comp, &vr1, &vr2);
3585 /* All the ranges in the equivalent sets should compare
3587 gcc_assert (retval == NULL || t == retval);
3594 bitmap_clear_bit (e1, SSA_NAME_VERSION (n1));
3595 bitmap_clear_bit (e2, SSA_NAME_VERSION (n2));
3600 /* None of the equivalent ranges are useful in computing this
3602 bitmap_clear_bit (e1, SSA_NAME_VERSION (n1));
3603 bitmap_clear_bit (e2, SSA_NAME_VERSION (n2));
3608 /* Given a conditional predicate COND, try to determine if COND yields
3609 true or false based on the value ranges of its operands. Return
3610 BOOLEAN_TRUE_NODE if the conditional always evaluates to true,
3611 BOOLEAN_FALSE_NODE if the conditional always evaluates to false, and,
3612 NULL if the conditional cannot be evaluated at compile time.
3614 If USE_EQUIV_P is true, the ranges of all the names equivalent with
3615 the operands in COND are used when trying to compute its value.
3616 This is only used during final substitution. During propagation,
3617 we only check the range of each variable and not its equivalents. */
3620 vrp_evaluate_conditional (tree cond, bool use_equiv_p)
3622 gcc_assert (TREE_CODE (cond) == SSA_NAME
3623 || TREE_CODE_CLASS (TREE_CODE (cond)) == tcc_comparison);
3625 if (TREE_CODE (cond) == SSA_NAME)
3631 retval = compare_name_with_value (NE_EXPR, cond, boolean_false_node);
3634 value_range_t *vr = get_value_range (cond);
3635 retval = compare_range_with_value (NE_EXPR, vr, boolean_false_node);
3638 /* If COND has a known boolean range, return it. */
3642 /* Otherwise, if COND has a symbolic range of exactly one value,
3644 vr = get_value_range (cond);
3645 if (vr->type == VR_RANGE && vr->min == vr->max)
3650 tree op0 = TREE_OPERAND (cond, 0);
3651 tree op1 = TREE_OPERAND (cond, 1);
3653 /* We only deal with integral and pointer types. */
3654 if (!INTEGRAL_TYPE_P (TREE_TYPE (op0))
3655 && !POINTER_TYPE_P (TREE_TYPE (op0)))
3660 if (TREE_CODE (op0) == SSA_NAME && TREE_CODE (op1) == SSA_NAME)
3661 return compare_names (TREE_CODE (cond), op0, op1);
3662 else if (TREE_CODE (op0) == SSA_NAME)
3663 return compare_name_with_value (TREE_CODE (cond), op0, op1);
3664 else if (TREE_CODE (op1) == SSA_NAME)
3665 return compare_name_with_value (
3666 swap_tree_comparison (TREE_CODE (cond)), op1, op0);
3670 value_range_t *vr0, *vr1;
3672 vr0 = (TREE_CODE (op0) == SSA_NAME) ? get_value_range (op0) : NULL;
3673 vr1 = (TREE_CODE (op1) == SSA_NAME) ? get_value_range (op1) : NULL;
3676 return compare_ranges (TREE_CODE (cond), vr0, vr1);
3677 else if (vr0 && vr1 == NULL)
3678 return compare_range_with_value (TREE_CODE (cond), vr0, op1);
3679 else if (vr0 == NULL && vr1)
3680 return compare_range_with_value (
3681 swap_tree_comparison (TREE_CODE (cond)), vr1, op0);
3685 /* Anything else cannot be computed statically. */
3690 /* Visit conditional statement STMT. If we can determine which edge
3691 will be taken out of STMT's basic block, record it in
3692 *TAKEN_EDGE_P and return SSA_PROP_INTERESTING. Otherwise, return
3693 SSA_PROP_VARYING. */
3695 static enum ssa_prop_result
3696 vrp_visit_cond_stmt (tree stmt, edge *taken_edge_p)
3700 *taken_edge_p = NULL;
3702 /* FIXME. Handle SWITCH_EXPRs. But first, the assert pass needs to
3703 add ASSERT_EXPRs for them. */
3704 if (TREE_CODE (stmt) == SWITCH_EXPR)
3705 return SSA_PROP_VARYING;
3707 cond = COND_EXPR_COND (stmt);
3709 if (dump_file && (dump_flags & TDF_DETAILS))
3714 fprintf (dump_file, "\nVisiting conditional with predicate: ");
3715 print_generic_expr (dump_file, cond, 0);
3716 fprintf (dump_file, "\nWith known ranges\n");
3718 FOR_EACH_SSA_TREE_OPERAND (use, stmt, i, SSA_OP_USE)
3720 fprintf (dump_file, "\t");
3721 print_generic_expr (dump_file, use, 0);
3722 fprintf (dump_file, ": ");
3723 dump_value_range (dump_file, vr_value[SSA_NAME_VERSION (use)]);
3726 fprintf (dump_file, "\n");
3729 /* Compute the value of the predicate COND by checking the known
3730 ranges of each of its operands.
3732 Note that we cannot evaluate all the equivalent ranges here
3733 because those ranges may not yet be final and with the current
3734 propagation strategy, we cannot determine when the value ranges
3735 of the names in the equivalence set have changed.
3737 For instance, given the following code fragment
3741 i_14 = ASSERT_EXPR <i_5, i_5 != 0>
3745 Assume that on the first visit to i_14, i_5 has the temporary
3746 range [8, 8] because the second argument to the PHI function is
3747 not yet executable. We derive the range ~[0, 0] for i_14 and the
3748 equivalence set { i_5 }. So, when we visit 'if (i_14 == 1)' for
3749 the first time, since i_14 is equivalent to the range [8, 8], we
3750 determine that the predicate is always false.
3752 On the next round of propagation, i_13 is determined to be
3753 VARYING, which causes i_5 to drop down to VARYING. So, another
3754 visit to i_14 is scheduled. In this second visit, we compute the
3755 exact same range and equivalence set for i_14, namely ~[0, 0] and
3756 { i_5 }. But we did not have the previous range for i_5
3757 registered, so vrp_visit_assignment thinks that the range for
3758 i_14 has not changed. Therefore, the predicate 'if (i_14 == 1)'
3759 is not visited again, which stops propagation from visiting
3760 statements in the THEN clause of that if().
3762 To properly fix this we would need to keep the previous range
3763 value for the names in the equivalence set. This way we would've
3764 discovered that from one visit to the other i_5 changed from
3765 range [8, 8] to VR_VARYING.
3767 However, fixing this apparent limitation may not be worth the
3768 additional checking. Testing on several code bases (GCC, DLV,
3769 MICO, TRAMP3D and SPEC2000) showed that doing this results in
3770 4 more predicates folded in SPEC. */
3771 val = vrp_evaluate_conditional (cond, false);
3773 *taken_edge_p = find_taken_edge (bb_for_stmt (stmt), val);
3775 if (dump_file && (dump_flags & TDF_DETAILS))
3777 fprintf (dump_file, "\nPredicate evaluates to: ");
3778 if (val == NULL_TREE)
3779 fprintf (dump_file, "DON'T KNOW\n");
3781 print_generic_stmt (dump_file, val, 0);
3784 return (*taken_edge_p) ? SSA_PROP_INTERESTING : SSA_PROP_VARYING;
3788 /* Evaluate statement STMT. If the statement produces a useful range,
3789 return SSA_PROP_INTERESTING and record the SSA name with the
3790 interesting range into *OUTPUT_P.
3792 If STMT is a conditional branch and we can determine its truth
3793 value, the taken edge is recorded in *TAKEN_EDGE_P.
3795 If STMT produces a varying value, return SSA_PROP_VARYING. */
3797 static enum ssa_prop_result
3798 vrp_visit_stmt (tree stmt, edge *taken_edge_p, tree *output_p)
3804 if (dump_file && (dump_flags & TDF_DETAILS))
3806 fprintf (dump_file, "\nVisiting statement:\n");
3807 print_generic_stmt (dump_file, stmt, dump_flags);
3808 fprintf (dump_file, "\n");
3811 ann = stmt_ann (stmt);
3812 if (TREE_CODE (stmt) == MODIFY_EXPR)
3814 tree rhs = TREE_OPERAND (stmt, 1);
3816 /* In general, assignments with virtual operands are not useful
3817 for deriving ranges, with the obvious exception of calls to
3818 builtin functions. */
3819 if ((TREE_CODE (rhs) == CALL_EXPR
3820 && TREE_CODE (TREE_OPERAND (rhs, 0)) == ADDR_EXPR
3821 && DECL_P (TREE_OPERAND (TREE_OPERAND (rhs, 0), 0))
3822 && DECL_IS_BUILTIN (TREE_OPERAND (TREE_OPERAND (rhs, 0), 0)))
3823 || ZERO_SSA_OPERANDS (stmt, SSA_OP_ALL_VIRTUALS))
3824 return vrp_visit_assignment (stmt, output_p);
3826 else if (TREE_CODE (stmt) == COND_EXPR || TREE_CODE (stmt) == SWITCH_EXPR)
3827 return vrp_visit_cond_stmt (stmt, taken_edge_p);
3829 /* All other statements produce nothing of interest for VRP, so mark
3830 their outputs varying and prevent further simulation. */
3831 FOR_EACH_SSA_TREE_OPERAND (def, stmt, iter, SSA_OP_DEF)
3832 set_value_range_to_varying (get_value_range (def));
3834 return SSA_PROP_VARYING;
3838 /* Meet operation for value ranges. Given two value ranges VR0 and
3839 VR1, store in VR0 the result of meeting VR0 and VR1.
3841 The meeting rules are as follows:
3843 1- If VR0 and VR1 have an empty intersection, set VR0 to VR_VARYING.
3845 2- If VR0 and VR1 have a non-empty intersection, set VR0 to the
3846 union of VR0 and VR1. */
3849 vrp_meet (value_range_t *vr0, value_range_t *vr1)
3851 if (vr0->type == VR_UNDEFINED)
3853 copy_value_range (vr0, vr1);
3857 if (vr1->type == VR_UNDEFINED)
3859 /* Nothing to do. VR0 already has the resulting range. */
3863 if (vr0->type == VR_VARYING)
3865 /* Nothing to do. VR0 already has the resulting range. */
3869 if (vr1->type == VR_VARYING)
3871 set_value_range_to_varying (vr0);
3875 if (vr0->type == VR_RANGE && vr1->type == VR_RANGE)
3877 /* If VR0 and VR1 have a non-empty intersection, compute the
3878 union of both ranges. */
3879 if (value_ranges_intersect_p (vr0, vr1))
3884 /* The lower limit of the new range is the minimum of the
3885 two ranges. If they cannot be compared, the result is
3887 cmp = compare_values (vr0->min, vr1->min);
3888 if (cmp == 0 || cmp == 1)
3894 set_value_range_to_varying (vr0);
3898 /* Similarly, the upper limit of the new range is the
3899 maximum of the two ranges. If they cannot be compared,
3900 the result is VARYING. */
3901 cmp = compare_values (vr0->max, vr1->max);
3902 if (cmp == 0 || cmp == -1)
3908 set_value_range_to_varying (vr0);
3912 /* The resulting set of equivalences is the intersection of
3914 if (vr0->equiv && vr1->equiv && vr0->equiv != vr1->equiv)
3915 bitmap_and_into (vr0->equiv, vr1->equiv);
3916 else if (vr0->equiv && !vr1->equiv)
3917 bitmap_clear (vr0->equiv);
3919 set_value_range (vr0, vr0->type, min, max, vr0->equiv);
3924 else if (vr0->type == VR_ANTI_RANGE && vr1->type == VR_ANTI_RANGE)
3926 /* Two anti-ranges meet only if they are both identical. */
3927 if (compare_values (vr0->min, vr1->min) == 0
3928 && compare_values (vr0->max, vr1->max) == 0
3929 && compare_values (vr0->min, vr0->max) == 0)
3931 /* The resulting set of equivalences is the intersection of
3933 if (vr0->equiv && vr1->equiv && vr0->equiv != vr1->equiv)
3934 bitmap_and_into (vr0->equiv, vr1->equiv);
3935 else if (vr0->equiv && !vr1->equiv)
3936 bitmap_clear (vr0->equiv);
3941 else if (vr0->type == VR_ANTI_RANGE || vr1->type == VR_ANTI_RANGE)
3943 /* A numeric range [VAL1, VAL2] and an anti-range ~[VAL3, VAL4]
3944 meet only if the ranges have an empty intersection. The
3945 result of the meet operation is the anti-range. */
3946 if (!symbolic_range_p (vr0)
3947 && !symbolic_range_p (vr1)
3948 && !value_ranges_intersect_p (vr0, vr1))
3950 /* Copy most of VR1 into VR0. Don't copy VR1's equivalence
3951 set. We need to compute the intersection of the two
3952 equivalence sets. */
3953 if (vr1->type == VR_ANTI_RANGE)
3954 set_value_range (vr0, vr1->type, vr1->min, vr1->max, vr0->equiv);
3956 /* The resulting set of equivalences is the intersection of
3958 if (vr0->equiv && vr1->equiv && vr0->equiv != vr1->equiv)
3959 bitmap_and_into (vr0->equiv, vr1->equiv);
3960 else if (vr0->equiv && !vr1->equiv)
3961 bitmap_clear (vr0->equiv);
3972 /* The two range VR0 and VR1 do not meet. Before giving up and
3973 setting the result to VARYING, see if we can at least derive a
3974 useful anti-range. FIXME, all this nonsense about distinguishing
3975 anti-ranges from ranges is necessary because of the odd
3976 semantics of range_includes_zero_p and friends. */
3977 if (!symbolic_range_p (vr0)
3978 && ((vr0->type == VR_RANGE && !range_includes_zero_p (vr0))
3979 || (vr0->type == VR_ANTI_RANGE && range_includes_zero_p (vr0)))
3980 && !symbolic_range_p (vr1)
3981 && ((vr1->type == VR_RANGE && !range_includes_zero_p (vr1))
3982 || (vr1->type == VR_ANTI_RANGE && range_includes_zero_p (vr1))))
3984 set_value_range_to_nonnull (vr0, TREE_TYPE (vr0->min));
3986 /* Since this meet operation did not result from the meeting of
3987 two equivalent names, VR0 cannot have any equivalences. */
3989 bitmap_clear (vr0->equiv);
3992 set_value_range_to_varying (vr0);
3996 /* Visit all arguments for PHI node PHI that flow through executable
3997 edges. If a valid value range can be derived from all the incoming
3998 value ranges, set a new range for the LHS of PHI. */
4000 static enum ssa_prop_result
4001 vrp_visit_phi_node (tree phi)
4004 tree lhs = PHI_RESULT (phi);
4005 value_range_t *lhs_vr = get_value_range (lhs);
4006 value_range_t vr_result = { VR_UNDEFINED, NULL_TREE, NULL_TREE, NULL };
4008 copy_value_range (&vr_result, lhs_vr);
4010 if (dump_file && (dump_flags & TDF_DETAILS))
4012 fprintf (dump_file, "\nVisiting PHI node: ");
4013 print_generic_expr (dump_file, phi, dump_flags);
4016 for (i = 0; i < PHI_NUM_ARGS (phi); i++)
4018 edge e = PHI_ARG_EDGE (phi, i);
4020 if (dump_file && (dump_flags & TDF_DETAILS))
4023 "\n Argument #%d (%d -> %d %sexecutable)\n",
4024 i, e->src->index, e->dest->index,
4025 (e->flags & EDGE_EXECUTABLE) ? "" : "not ");
4028 if (e->flags & EDGE_EXECUTABLE)
4030 tree arg = PHI_ARG_DEF (phi, i);
4031 value_range_t vr_arg;
4033 if (TREE_CODE (arg) == SSA_NAME)
4034 vr_arg = *(get_value_range (arg));
4037 vr_arg.type = VR_RANGE;
4040 vr_arg.equiv = NULL;
4043 if (dump_file && (dump_flags & TDF_DETAILS))
4045 fprintf (dump_file, "\t");
4046 print_generic_expr (dump_file, arg, dump_flags);
4047 fprintf (dump_file, "\n\tValue: ");
4048 dump_value_range (dump_file, &vr_arg);
4049 fprintf (dump_file, "\n");
4052 vrp_meet (&vr_result, &vr_arg);
4054 if (vr_result.type == VR_VARYING)
4059 if (vr_result.type == VR_VARYING)
4062 /* To prevent infinite iterations in the algorithm, derive ranges
4063 when the new value is slightly bigger or smaller than the
4065 if (lhs_vr->type == VR_RANGE && vr_result.type == VR_RANGE)
4067 if (!POINTER_TYPE_P (TREE_TYPE (lhs)))
4069 int cmp_min = compare_values (lhs_vr->min, vr_result.min);
4070 int cmp_max = compare_values (lhs_vr->max, vr_result.max);
4072 /* If the new minimum is smaller or larger than the previous
4073 one, go all the way to -INF. In the first case, to avoid
4074 iterating millions of times to reach -INF, and in the
4075 other case to avoid infinite bouncing between different
4077 if (cmp_min > 0 || cmp_min < 0)
4078 vr_result.min = TYPE_MIN_VALUE (TREE_TYPE (vr_result.min));
4080 /* Similarly, if the new maximum is smaller or larger than
4081 the previous one, go all the way to +INF. */
4082 if (cmp_max < 0 || cmp_max > 0)
4083 vr_result.max = TYPE_MAX_VALUE (TREE_TYPE (vr_result.max));
4085 /* If we ended up with a (-INF, +INF) range, set it to
4087 if (vr_result.min == TYPE_MIN_VALUE (TREE_TYPE (vr_result.min))
4088 && vr_result.max == TYPE_MAX_VALUE (TREE_TYPE (vr_result.max)))
4093 /* If the new range is different than the previous value, keep
4095 if (update_value_range (lhs, &vr_result))
4096 return SSA_PROP_INTERESTING;
4098 /* Nothing changed, don't add outgoing edges. */
4099 return SSA_PROP_NOT_INTERESTING;
4101 /* No match found. Set the LHS to VARYING. */
4103 set_value_range_to_varying (lhs_vr);
4104 return SSA_PROP_VARYING;
4107 /* Simplify a division or modulo operator to a right shift or
4108 bitwise and if the first operand is unsigned or is greater
4109 than zero and the second operand is an exact power of two. */
4112 simplify_div_or_mod_using_ranges (tree stmt, tree rhs, enum tree_code rhs_code)
4115 tree op = TREE_OPERAND (rhs, 0);
4116 value_range_t *vr = get_value_range (TREE_OPERAND (rhs, 0));
4118 if (TYPE_UNSIGNED (TREE_TYPE (op)))
4120 val = integer_one_node;
4124 val = compare_range_with_value (GT_EXPR, vr, integer_zero_node);
4127 if (val && integer_onep (val))
4130 tree op0 = TREE_OPERAND (rhs, 0);
4131 tree op1 = TREE_OPERAND (rhs, 1);
4133 if (rhs_code == TRUNC_DIV_EXPR)
4135 t = build_int_cst (NULL_TREE, tree_log2 (op1));
4136 t = build2 (RSHIFT_EXPR, TREE_TYPE (op0), op0, t);
4140 t = build_int_cst (TREE_TYPE (op1), 1);
4141 t = int_const_binop (MINUS_EXPR, op1, t, 0);
4142 t = fold_convert (TREE_TYPE (op0), t);
4143 t = build2 (BIT_AND_EXPR, TREE_TYPE (op0), op0, t);
4146 TREE_OPERAND (stmt, 1) = t;
4151 /* If the operand to an ABS_EXPR is >= 0, then eliminate the
4152 ABS_EXPR. If the operand is <= 0, then simplify the
4153 ABS_EXPR into a NEGATE_EXPR. */
4156 simplify_abs_using_ranges (tree stmt, tree rhs)
4159 tree op = TREE_OPERAND (rhs, 0);
4160 tree type = TREE_TYPE (op);
4161 value_range_t *vr = get_value_range (TREE_OPERAND (rhs, 0));
4163 if (TYPE_UNSIGNED (type))
4165 val = integer_zero_node;
4169 val = compare_range_with_value (LE_EXPR, vr, integer_zero_node);
4172 val = compare_range_with_value (GE_EXPR, vr, integer_zero_node);
4176 if (integer_zerop (val))
4177 val = integer_one_node;
4178 else if (integer_onep (val))
4179 val = integer_zero_node;
4184 && (integer_onep (val) || integer_zerop (val)))
4188 if (integer_onep (val))
4189 t = build1 (NEGATE_EXPR, TREE_TYPE (op), op);
4193 TREE_OPERAND (stmt, 1) = t;
4199 /* We are comparing trees OP0 and OP1 using COND_CODE. OP0 has
4200 a known value range VR.
4202 If there is one and only one value which will satisfy the
4203 conditional, then return that value. Else return NULL. */
4206 test_for_singularity (enum tree_code cond_code, tree op0,
4207 tree op1, value_range_t *vr)
4212 /* Extract minimum/maximum values which satisfy the
4213 the conditional as it was written. */
4214 if (cond_code == LE_EXPR || cond_code == LT_EXPR)
4216 min = TYPE_MIN_VALUE (TREE_TYPE (op0));
4219 if (cond_code == LT_EXPR)
4221 tree one = build_int_cst (TREE_TYPE (op0), 1);
4222 max = fold_build2 (MINUS_EXPR, TREE_TYPE (op0), max, one);
4225 else if (cond_code == GE_EXPR || cond_code == GT_EXPR)
4227 max = TYPE_MAX_VALUE (TREE_TYPE (op0));
4230 if (cond_code == GT_EXPR)
4232 tree one = build_int_cst (TREE_TYPE (op0), 1);
4233 min = fold_build2 (PLUS_EXPR, TREE_TYPE (op0), min, one);
4237 /* Now refine the minimum and maximum values using any
4238 value range information we have for op0. */
4241 if (compare_values (vr->min, min) == -1)
4245 if (compare_values (vr->max, max) == 1)
4250 /* If the new min/max values have converged to a single value,
4251 then there is only one value which can satisfy the condition,
4252 return that value. */
4253 if (operand_equal_p (min, max, 0) && is_gimple_min_invariant (min))
4259 /* Simplify a conditional using a relational operator to an equality
4260 test if the range information indicates only one value can satisfy
4261 the original conditional. */
4264 simplify_cond_using_ranges (tree stmt)
4266 tree cond = COND_EXPR_COND (stmt);
4267 tree op0 = TREE_OPERAND (cond, 0);
4268 tree op1 = TREE_OPERAND (cond, 1);
4269 enum tree_code cond_code = TREE_CODE (cond);
4271 if (cond_code != NE_EXPR
4272 && cond_code != EQ_EXPR
4273 && TREE_CODE (op0) == SSA_NAME
4274 && INTEGRAL_TYPE_P (TREE_TYPE (op0))
4275 && is_gimple_min_invariant (op1))
4277 value_range_t *vr = get_value_range (op0);
4279 /* If we have range information for OP0, then we might be
4280 able to simplify this conditional. */
4281 if (vr->type == VR_RANGE)
4283 tree new = test_for_singularity (cond_code, op0, op1, vr);
4289 fprintf (dump_file, "Simplified relational ");
4290 print_generic_expr (dump_file, cond, 0);
4291 fprintf (dump_file, " into ");
4294 COND_EXPR_COND (stmt)
4295 = build2 (EQ_EXPR, boolean_type_node, op0, new);
4300 print_generic_expr (dump_file, COND_EXPR_COND (stmt), 0);
4301 fprintf (dump_file, "\n");
4307 /* Try again after inverting the condition. We only deal
4308 with integral types here, so no need to worry about
4309 issues with inverting FP comparisons. */
4310 cond_code = invert_tree_comparison (cond_code, false);
4311 new = test_for_singularity (cond_code, op0, op1, vr);
4317 fprintf (dump_file, "Simplified relational ");
4318 print_generic_expr (dump_file, cond, 0);
4319 fprintf (dump_file, " into ");
4322 COND_EXPR_COND (stmt)
4323 = build2 (NE_EXPR, boolean_type_node, op0, new);
4328 print_generic_expr (dump_file, COND_EXPR_COND (stmt), 0);
4329 fprintf (dump_file, "\n");
4338 /* Simplify STMT using ranges if possible. */
4341 simplify_stmt_using_ranges (tree stmt)
4343 if (TREE_CODE (stmt) == MODIFY_EXPR)
4345 tree rhs = TREE_OPERAND (stmt, 1);
4346 enum tree_code rhs_code = TREE_CODE (rhs);
4348 /* Transform TRUNC_DIV_EXPR and TRUNC_MOD_EXPR into RSHIFT_EXPR
4349 and BIT_AND_EXPR respectively if the first operand is greater
4350 than zero and the second operand is an exact power of two. */
4351 if ((rhs_code == TRUNC_DIV_EXPR || rhs_code == TRUNC_MOD_EXPR)
4352 && INTEGRAL_TYPE_P (TREE_TYPE (TREE_OPERAND (rhs, 0)))
4353 && integer_pow2p (TREE_OPERAND (rhs, 1)))
4354 simplify_div_or_mod_using_ranges (stmt, rhs, rhs_code);
4356 /* Transform ABS (X) into X or -X as appropriate. */
4357 if (rhs_code == ABS_EXPR
4358 && TREE_CODE (TREE_OPERAND (rhs, 0)) == SSA_NAME
4359 && INTEGRAL_TYPE_P (TREE_TYPE (TREE_OPERAND (rhs, 0))))
4360 simplify_abs_using_ranges (stmt, rhs);
4362 else if (TREE_CODE (stmt) == COND_EXPR
4363 && COMPARISON_CLASS_P (COND_EXPR_COND (stmt)))
4365 simplify_cond_using_ranges (stmt);
4369 /* Stack of dest,src equivalency pairs that need to be restored after
4370 each attempt to thread a block's incoming edge to an outgoing edge.
4372 A NULL entry is used to mark the end of pairs which need to be
4374 static VEC(tree,heap) *stack;
4376 /* A trivial wrapper so that we can present the generic jump
4377 threading code with a simple API for simplifying statements. */
4379 simplify_stmt_for_jump_threading (tree stmt)
4381 /* We only use VRP information to simplify conditionals. This is
4382 overly conservative, but it's unclear if doing more would be
4383 worth the compile time cost. */
4384 if (TREE_CODE (stmt) != COND_EXPR)
4387 return vrp_evaluate_conditional (COND_EXPR_COND (stmt), true);
4390 /* Blocks which have more than one predecessor and more than
4391 one successor present jump threading opportunities. ie,
4392 when the block is reached from a specific predecessor, we
4393 may be able to determine which of the outgoing edges will
4394 be traversed. When this optimization applies, we are able
4395 to avoid conditionals at runtime and we may expose secondary
4396 optimization opportunities.
4398 This routine is effectively a driver for the generic jump
4399 threading code. It basically just presents the generic code
4400 with edges that may be suitable for jump threading.
4402 Unlike DOM, we do not iterate VRP if jump threading was successful.
4403 While iterating may expose new opportunities for VRP, it is expected
4404 those opportunities would be very limited and the compile time cost
4405 to expose those opportunities would be significant.
4407 As jump threading opportunities are discovered, they are registered
4408 for later realization. */
4411 identify_jump_threads (void)
4416 /* Ugh. When substituting values earlier in this pass we can
4417 wipe the dominance information. So rebuild the dominator
4418 information as we need it within the jump threading code. */
4419 calculate_dominance_info (CDI_DOMINATORS);
4421 /* We do not allow VRP information to be used for jump threading
4422 across a back edge in the CFG. Otherwise it becomes too
4423 difficult to avoid eliminating loop exit tests. Of course
4424 EDGE_DFS_BACK is not accurate at this time so we have to
4426 mark_dfs_back_edges ();
4428 /* Allocate our unwinder stack to unwind any temporary equivalences
4429 that might be recorded. */
4430 stack = VEC_alloc (tree, heap, 20);
4432 /* To avoid lots of silly node creation, we create a single
4433 conditional and just modify it in-place when attempting to
4435 dummy = build2 (EQ_EXPR, boolean_type_node, NULL, NULL);
4436 dummy = build3 (COND_EXPR, void_type_node, dummy, NULL, NULL);
4438 /* Walk through all the blocks finding those which present a
4439 potential jump threading opportunity. We could set this up
4440 as a dominator walker and record data during the walk, but
4441 I doubt it's worth the effort for the classes of jump
4442 threading opportunities we are trying to identify at this
4443 point in compilation. */
4448 /* If the generic jump threading code does not find this block
4449 interesting, then there is nothing to do. */
4450 if (! potentially_threadable_block (bb))
4453 /* We only care about blocks ending in a COND_EXPR. While there
4454 may be some value in handling SWITCH_EXPR here, I doubt it's
4455 terribly important. */
4456 last = bsi_stmt (bsi_last (bb));
4457 if (TREE_CODE (last) != COND_EXPR)
4460 /* We're basically looking for any kind of conditional with
4461 integral type arguments. */
4462 cond = COND_EXPR_COND (last);
4463 if ((TREE_CODE (cond) == SSA_NAME
4464 && INTEGRAL_TYPE_P (TREE_TYPE (cond)))
4465 || (COMPARISON_CLASS_P (cond)
4466 && TREE_CODE (TREE_OPERAND (cond, 0)) == SSA_NAME
4467 && INTEGRAL_TYPE_P (TREE_TYPE (TREE_OPERAND (cond, 0)))
4468 && (TREE_CODE (TREE_OPERAND (cond, 1)) == SSA_NAME
4469 || is_gimple_min_invariant (TREE_OPERAND (cond, 1)))
4470 && INTEGRAL_TYPE_P (TREE_TYPE (TREE_OPERAND (cond, 1)))))
4475 /* We've got a block with multiple predecessors and multiple
4476 successors which also ends in a suitable conditional. For
4477 each predecessor, see if we can thread it to a specific
4479 FOR_EACH_EDGE (e, ei, bb->preds)
4481 /* Do not thread across back edges or abnormal edges
4483 if (e->flags & (EDGE_DFS_BACK | EDGE_COMPLEX))
4486 thread_across_edge (dummy, e, true,
4488 simplify_stmt_for_jump_threading);
4493 /* We do not actually update the CFG or SSA graphs at this point as
4494 ASSERT_EXPRs are still in the IL and cfg cleanup code does not yet
4495 handle ASSERT_EXPRs gracefully. */
4498 /* We identified all the jump threading opportunities earlier, but could
4499 not transform the CFG at that time. This routine transforms the
4500 CFG and arranges for the dominator tree to be rebuilt if necessary.
4502 Note the SSA graph update will occur during the normal TODO
4503 processing by the pass manager. */
4505 finalize_jump_threads (void)
4507 bool cfg_altered = false;
4508 cfg_altered = thread_through_all_blocks ();
4510 /* If we threaded jumps, then we need to recompute the dominance
4511 information, to safely do that we must clean up the CFG first. */
4514 free_dominance_info (CDI_DOMINATORS);
4515 cleanup_tree_cfg ();
4516 calculate_dominance_info (CDI_DOMINATORS);
4518 VEC_free (tree, heap, stack);
4522 /* Traverse all the blocks folding conditionals with known ranges. */
4528 prop_value_t *single_val_range;
4529 bool do_value_subst_p;
4533 fprintf (dump_file, "\nValue ranges after VRP:\n\n");
4534 dump_all_value_ranges (dump_file);
4535 fprintf (dump_file, "\n");
4538 /* We may have ended with ranges that have exactly one value. Those
4539 values can be substituted as any other copy/const propagated
4540 value using substitute_and_fold. */
4541 single_val_range = XNEWVEC (prop_value_t, num_ssa_names);
4542 memset (single_val_range, 0, num_ssa_names * sizeof (*single_val_range));
4544 do_value_subst_p = false;
4545 for (i = 0; i < num_ssa_names; i++)
4547 && vr_value[i]->type == VR_RANGE
4548 && vr_value[i]->min == vr_value[i]->max)
4550 single_val_range[i].value = vr_value[i]->min;
4551 do_value_subst_p = true;
4554 if (!do_value_subst_p)
4556 /* We found no single-valued ranges, don't waste time trying to
4557 do single value substitution in substitute_and_fold. */
4558 free (single_val_range);
4559 single_val_range = NULL;
4562 substitute_and_fold (single_val_range, true);
4564 /* We must identify jump threading opportunities before we release
4565 the datastructures built by VRP. */
4566 identify_jump_threads ();
4568 /* Free allocated memory. */
4569 for (i = 0; i < num_ssa_names; i++)
4572 BITMAP_FREE (vr_value[i]->equiv);
4576 free (single_val_range);
4579 /* So that we can distinguish between VRP data being available
4580 and not available. */
4585 /* Main entry point to VRP (Value Range Propagation). This pass is
4586 loosely based on J. R. C. Patterson, ``Accurate Static Branch
4587 Prediction by Value Range Propagation,'' in SIGPLAN Conference on
4588 Programming Language Design and Implementation, pp. 67-78, 1995.
4589 Also available at http://citeseer.ist.psu.edu/patterson95accurate.html
4591 This is essentially an SSA-CCP pass modified to deal with ranges
4592 instead of constants.
4594 While propagating ranges, we may find that two or more SSA name
4595 have equivalent, though distinct ranges. For instance,
4598 2 p_4 = ASSERT_EXPR <p_3, p_3 != 0>
4600 4 p_5 = ASSERT_EXPR <p_4, p_4 == q_2>;
4604 In the code above, pointer p_5 has range [q_2, q_2], but from the
4605 code we can also determine that p_5 cannot be NULL and, if q_2 had
4606 a non-varying range, p_5's range should also be compatible with it.
4608 These equivalences are created by two expressions: ASSERT_EXPR and
4609 copy operations. Since p_5 is an assertion on p_4, and p_4 was the
4610 result of another assertion, then we can use the fact that p_5 and
4611 p_4 are equivalent when evaluating p_5's range.
4613 Together with value ranges, we also propagate these equivalences
4614 between names so that we can take advantage of information from
4615 multiple ranges when doing final replacement. Note that this
4616 equivalency relation is transitive but not symmetric.
4618 In the example above, p_5 is equivalent to p_4, q_2 and p_3, but we
4619 cannot assert that q_2 is equivalent to p_5 because q_2 may be used
4620 in contexts where that assertion does not hold (e.g., in line 6).
4622 TODO, the main difference between this pass and Patterson's is that
4623 we do not propagate edge probabilities. We only compute whether
4624 edges can be taken or not. That is, instead of having a spectrum
4625 of jump probabilities between 0 and 1, we only deal with 0, 1 and
4626 DON'T KNOW. In the future, it may be worthwhile to propagate
4627 probabilities to aid branch prediction. */
4632 insert_range_assertions ();
4634 current_loops = loop_optimizer_init (LOOPS_NORMAL);
4636 scev_initialize (current_loops);
4639 ssa_propagate (vrp_visit_stmt, vrp_visit_phi_node);
4645 loop_optimizer_finalize (current_loops);
4646 current_loops = NULL;
4649 /* ASSERT_EXPRs must be removed before finalizing jump threads
4650 as finalizing jump threads calls the CFG cleanup code which
4651 does not properly handle ASSERT_EXPRs. */
4652 remove_range_assertions ();
4654 /* If we exposed any new variables, go ahead and put them into
4655 SSA form now, before we handle jump threading. This simplifies
4656 interactions between rewriting of _DECL nodes into SSA form
4657 and rewriting SSA_NAME nodes into SSA form after block
4658 duplication and CFG manipulation. */
4659 update_ssa (TODO_update_ssa);
4661 finalize_jump_threads ();
4668 return flag_tree_vrp != 0;
4671 struct tree_opt_pass pass_vrp =
4674 gate_vrp, /* gate */
4675 execute_vrp, /* execute */
4678 0, /* static_pass_number */
4679 TV_TREE_VRP, /* tv_id */
4680 PROP_ssa | PROP_alias, /* properties_required */
4681 0, /* properties_provided */
4682 PROP_smt_usage, /* properties_destroyed */
4683 0, /* todo_flags_start */
4689 | TODO_update_smt_usage, /* todo_flags_finish */