From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 33844 invoked by alias); 15 Dec 2016 16:34:36 -0000 Mailing-List: contact gcc-patches-help@gcc.gnu.org; run by ezmlm Precedence: bulk List-Id: List-Archive: List-Post: List-Help: Sender: gcc-patches-owner@gcc.gnu.org Received: (qmail 33829 invoked by uid 89); 15 Dec 2016 16:34:35 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-4.0 required=5.0 tests=BAYES_00,KAM_LAZY_DOMAIN_SECURITY,RP_MATCHES_RCVD autolearn=ham version=3.3.2 spammy=hardness X-HELO: foss.arm.com Received: from foss.arm.com (HELO foss.arm.com) (217.140.101.70) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with ESMTP; Thu, 15 Dec 2016 16:34:25 +0000 Received: from usa-sjc-imap-foss1.foss.arm.com (unknown [10.72.51.249]) by usa-sjc-mx-foss1.foss.arm.com (Postfix) with ESMTP id 055DD1516; Thu, 15 Dec 2016 08:34:23 -0800 (PST) Received: from [10.2.207.77] (e100706-lin.cambridge.arm.com [10.2.207.77]) by usa-sjc-imap-foss1.foss.arm.com (Postfix) with ESMTPSA id 67EAC3F445; Thu, 15 Dec 2016 08:34:22 -0800 (PST) Message-ID: <5852C60C.7010100@foss.arm.com> Date: Thu, 15 Dec 2016 16:40:00 -0000 From: Kyrill Tkachov User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.2.0 MIME-Version: 1.0 To: "Richard Earnshaw (lists)" , GCC Patches CC: Ramana Radhakrishnan Subject: Re: [PATCH][ARM] PR target/71436: Restrict *load_multiple pattern till after LRA References: <583F02B0.3030406@foss.arm.com> <325eb8f2-a5e0-62af-be0c-0d85a53812a4@arm.com> In-Reply-To: <325eb8f2-a5e0-62af-be0c-0d85a53812a4@arm.com> Content-Type: multipart/mixed; boundary="------------090705090503060106020404" X-SW-Source: 2016-12/txt/msg01401.txt.bz2 This is a multi-part message in MIME format. --------------090705090503060106020404 Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit Content-length: 4859 On 15/12/16 09:55, Richard Earnshaw (lists) wrote: > On 30/11/16 16:47, Kyrill Tkachov wrote: >> Hi all, >> >> In this awkward ICE we have a *load_multiple pattern that is being >> transformed in reload from: >> (insn 55 67 151 3 (parallel [ >> (set (reg:SI 0 r0) >> (mem/u/c:SI (reg/f:SI 147) [2 c+0 S4 A32])) >> (set (reg:SI 158 [ c+4 ]) >> (mem/u/c:SI (plus:SI (reg/f:SI 147) >> (const_int 4 [0x4])) [2 c+4 S4 A32])) >> ]) arm-crash.c:25 393 {*load_multiple} >> (expr_list:REG_UNUSED (reg:SI 0 r0) >> (nil))) >> >> >> into the invalid: >> (insn 55 67 70 3 (parallel [ >> (set (reg:SI 0 r0) >> (mem/u/c:SI (reg/f:SI 5 r5 [147]) [2 c+0 S4 A32])) >> (set (mem/c:SI (plus:SI (reg/f:SI 102 sfp) >> (const_int -4 [0xfffffffffffffffc])) [4 %sfp+-12 >> S4 A32]) >> (mem/u/c:SI (plus:SI (reg/f:SI 5 r5 [147]) >> (const_int 4 [0x4])) [2 c+4 S4 A32])) >> ]) arm-crash.c:25 393 {*load_multiple} >> (nil)) >> >> The operands of *load_multiple are not validated through constraints >> like LRA is used to, but rather through >> a match_parallel predicate which ends up calling ldm_stm_operation_p to >> validate the multiple sets. >> But this means that LRA cannot reason about the constraints properly. >> This two-regiseter load should not have used *load_multiple anyway, it >> should have used *ldm2_ from ldmstm.md >> and indeed it did until the loop2_invariant pass which copied the ldm2_ >> pattern: >> (insn 27 23 28 4 (parallel [ >> (set (reg:SI 0 r0) >> (mem/u/c:SI (reg/f:SI 147) [2 c+0 S4 A32])) >> (set (reg:SI 1 r1) >> (mem/u/c:SI (plus:SI (reg/f:SI 147) >> (const_int 4 [0x4])) [2 c+4 S4 A32])) >> ]) "ldm.c":25 385 {*ldm2_} >> (nil)) >> >> into: >> (insn 55 19 67 3 (parallel [ >> (set (reg:SI 0 r0) >> (mem/u/c:SI (reg/f:SI 147) [2 c+0 S4 A32])) >> (set (reg:SI 158) >> (mem/u/c:SI (plus:SI (reg/f:SI 147) >> (const_int 4 [0x4])) [2 c+4 S4 A32])) >> ]) "ldm.c":25 404 {*load_multiple} >> (expr_list:REG_UNUSED (reg:SI 0 r0) >> (nil))) >> >> Note that it now got recognised as load_multiple because the second >> register is not a hard register but the pseudo 158. >> In any case, the solution suggested in the PR (and I agree with it) is >> to restrict *load_multiple to after reload. >> The similar pattern *load_multiple_with_writeback also has a similar >> condition and the comment above *load_multiple says that >> it's used to generate epilogues, which is done after reload anyway. For >> pre-reload load-multiples the patterns in ldmstm.md >> should do just fine. >> >> Bootstrapped and tested on arm-none-linux-gnueabihf. >> >> Ok for trunk? >> > I don't think this is right. Firstly, these patterns look to me like > the ones used for memcpy expansion, so not recognizing them could lead > to compiler aborts. I think the other patterns in ldmstm.md would catch these anyway but... > Secondly, the bug is when we generate > > (insn 55 67 70 3 (parallel [ > (set (reg:SI 0 r0) > (mem/u/c:SI (reg/f:SI 5 r5 [147]) [2 c+0 S4 A32])) > (set (mem/c:SI (plus:SI (reg/f:SI 102 sfp) > (const_int -4 [0xfffffffffffffffc])) [4 %sfp+-12 > S4 A32]) > (mem/u/c:SI (plus:SI (reg/f:SI 5 r5 [147]) > (const_int 4 [0x4])) [2 c+4 S4 A32])) > ]) arm-crash.c:25 393 {*load_multiple} > (nil)) > > These patterns are supposed to enforce that the load (store) target > register is a hard register that is higher numbered than the hard > register in the memory slot that precedes it (thus satisfying the > constraints for a normal ldm/stm instruction. > > The real question is why did ldm_stm_operation_p permit this modified > pattern through, or was the pattern validation bypassed incorrectly by > the loop2 invariant code when it copied the insn and made changes? ... ldm_stm_operation_p doesn't check that the registers are hard registers, which is an implicit requirement since it validates their ascending order. So the safe easy fix is to require hard registers. This patch does that. Bootstrapped and tested on arm-none-linux-gnueabihf. Ok for trunk? Thanks, Kyrill 2016-12-15 Kyrylo Tkachov PR target/71436 * config/arm/arm.c (ldm_stm_operation_p): Check that last register in the list is a hard reg. 2016-12-15 Kyrylo Tkachov PR target/71436 * gcc.c-torture/compile/pr71436.c: New test. --------------090705090503060106020404 Content-Type: text/x-patch; name="arm-ldm.patch" Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename="arm-ldm.patch" Content-length: 1498 diff --git a/gcc/config/arm/arm.c b/gcc/config/arm/arm.c index 437da6fe3d34978e7a3a72f7ec39dc76a54d6408..b6c5fdf42ee359a0c0b0fab8de4d374ff39cd35b 100644 --- a/gcc/config/arm/arm.c +++ b/gcc/config/arm/arm.c @@ -12709,6 +12709,13 @@ ldm_stm_operation_p (rtx op, bool load, machine_mode mode, addr_reg_in_reglist = true; } + /* The ascending register number requirement only makes sense when dealing + with hard registers. The code above already validated the ascending + requirement so we only need to validate the "hardness" of the last + register in the list. */ + if (regno >= FIRST_PSEUDO_REGISTER) + return false; + if (load) { if (update && addr_reg_in_reglist) diff --git a/gcc/testsuite/gcc.c-torture/compile/pr71436.c b/gcc/testsuite/gcc.c-torture/compile/pr71436.c new file mode 100644 index 0000000000000000000000000000000000000000..ab08d5d369c769fc9e411238fcf1379705e576f2 --- /dev/null +++ b/gcc/testsuite/gcc.c-torture/compile/pr71436.c @@ -0,0 +1,35 @@ +/* PR target/71436. */ + +#pragma pack(1) +struct S0 +{ + volatile int f0; + short f2; +}; + +void foo (struct S0 *); +int a, d; +static struct S0 b[5]; +static struct S0 c; +void fn1 (); +void +main () +{ + { + struct S0 e; + for (; d; fn1 ()) + { + { + a = 3; + for (; a >= 0; a -= 1) + { + { + e = c; + } + b[a] = e; + } + } + } + } + foo (b); +} --------------090705090503060106020404--