<div dir="ltr">I got this reduction:<div><pre id="gmail-hterm:copy-to-clipboard-source" style="color:rgb(0,0,0)">$ cat geometry.cpp
typedef float a __attribute__((__vector_size__(16)));
a b();
float c();
struct d {
float e;
float f;
};
struct g {
g(float) : h(b()) {}
void i(void *j) {
__builtin_ia32_storelps(
(__attribute__((__vector_size__(8))) int *)j, h);
}
a h;
};
d k(g j) {
d l;
j.i(&l);
return l;
}
bool m;
float n;
struct o {
d p[];
void q(o[]) const;
};
void o::q(o *j) const {
d r = k(n);
if (m)
r.e = c();
j[0].p[1] = k(0);
j[1].p[0] = r;
}
$ ./bin/clang++ -cc1 -triple x86_64-unknown-linux-gnu -emit-obj -target-cpu x86-64 -O2 geometry.cpp |& head
clang++: /usr/local/google/home/rnk/llvm-project/llvm/include/llvm/CodeGen/ValueTypes.h:274: unsigned int llvm::EVT::getVectorNumElements() const: Assertion `isVector() && "Invalid vector type!"' failed.</pre></div></div><br><div class="gmail_quote"><div dir="ltr">On Fri, Sep 14, 2018 at 12:41 PM Reid Kleckner <<a href="mailto:rnk@google.com">rnk@google.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">I reverted this in r<span style="color:rgb(0,0,0)">342265 because it caused assertion failures while building Chromium. I'm starting a reduction.</span></div><br><div class="gmail_quote"><div dir="ltr">On Thu, Sep 13, 2018 at 2:30 PM Amara Emerson via llvm-commits <<a href="mailto:llvm-commits@lists.llvm.org" target="_blank">llvm-commits@lists.llvm.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Author: aemerson<br>
Date: Thu Sep 13 14:28:58 2018<br>
New Revision: 342183<br>
<br>
URL: <a href="http://llvm.org/viewvc/llvm-project?rev=342183&view=rev" rel="noreferrer" target="_blank">http://llvm.org/viewvc/llvm-project?rev=342183&view=rev</a><br>
Log:<br>
[DAGCombine] Fix crash when store merging created an extract_subvector with invalid index.<br>
<br>
Differential Revision: <a href="https://reviews.llvm.org/D51831" rel="noreferrer" target="_blank">https://reviews.llvm.org/D51831</a><br>
<br>
Added:<br>
llvm/trunk/test/CodeGen/X86/merge-vector-stores-scale-idx-crash.ll<br>
Modified:<br>
llvm/trunk/lib/CodeGen/SelectionDAG/DAGCombiner.cpp<br>
<br>
Modified: llvm/trunk/lib/CodeGen/SelectionDAG/DAGCombiner.cpp<br>
URL: <a href="http://llvm.org/viewvc/llvm-project/llvm/trunk/lib/CodeGen/SelectionDAG/DAGCombiner.cpp?rev=342183&r1=342182&r2=342183&view=diff" rel="noreferrer" target="_blank">http://llvm.org/viewvc/llvm-project/llvm/trunk/lib/CodeGen/SelectionDAG/DAGCombiner.cpp?rev=342183&r1=342182&r2=342183&view=diff</a><br>
==============================================================================<br>
--- llvm/trunk/lib/CodeGen/SelectionDAG/DAGCombiner.cpp (original)<br>
+++ llvm/trunk/lib/CodeGen/SelectionDAG/DAGCombiner.cpp Thu Sep 13 14:28:58 2018<br>
@@ -13843,17 +13843,24 @@ bool DAGCombiner::MergeStoresOfConstants<br>
Val.getOpcode() == ISD::EXTRACT_SUBVECTOR)) {<br>
SDValue Vec = Val.getOperand(0);<br>
EVT MemVTScalarTy = MemVT.getScalarType();<br>
+ SDValue Idx = Val.getOperand(1);<br>
// We may need to add a bitcast here to get types to line up.<br>
if (MemVTScalarTy != Vec.getValueType()) {<br>
unsigned Elts = Vec.getValueType().getSizeInBits() /<br>
MemVTScalarTy.getSizeInBits();<br>
+ if (Val.getValueType().isVector()) {<br>
+ unsigned IdxC = cast<ConstantSDNode>(Idx)->getZExtValue();<br>
+ unsigned NewIdx =<br>
+ ((uint64_t)IdxC * MemVT.getVectorNumElements()) / Elts;<br>
+ Idx = DAG.getConstant(NewIdx, SDLoc(Val), Idx.getValueType());<br>
+ }<br>
EVT NewVecTy =<br>
EVT::getVectorVT(*DAG.getContext(), MemVTScalarTy, Elts);<br>
Vec = DAG.getBitcast(NewVecTy, Vec);<br>
}<br>
auto OpC = (MemVT.isVector()) ? ISD::EXTRACT_SUBVECTOR<br>
: ISD::EXTRACT_VECTOR_ELT;<br>
- Val = DAG.getNode(OpC, SDLoc(Val), MemVT, Vec, Val.getOperand(1));<br>
+ Val = DAG.getNode(OpC, SDLoc(Val), MemVT, Vec, Idx);<br>
}<br>
Ops.push_back(Val);<br>
}<br>
<br>
Added: llvm/trunk/test/CodeGen/X86/merge-vector-stores-scale-idx-crash.ll<br>
URL: <a href="http://llvm.org/viewvc/llvm-project/llvm/trunk/test/CodeGen/X86/merge-vector-stores-scale-idx-crash.ll?rev=342183&view=auto" rel="noreferrer" target="_blank">http://llvm.org/viewvc/llvm-project/llvm/trunk/test/CodeGen/X86/merge-vector-stores-scale-idx-crash.ll?rev=342183&view=auto</a><br>
==============================================================================<br>
--- llvm/trunk/test/CodeGen/X86/merge-vector-stores-scale-idx-crash.ll (added)<br>
+++ llvm/trunk/test/CodeGen/X86/merge-vector-stores-scale-idx-crash.ll Thu Sep 13 14:28:58 2018<br>
@@ -0,0 +1,19 @@<br>
+; RUN: llc < %s -mtriple=x86_64-apple-osx10.14 -mattr=+avx2 | FileCheck %s<br>
+<br>
+; Check that we don't crash due creating invalid extract_subvector indices in store merging.<br>
+; CHECK-LABEL: testfn<br>
+; CHECK: retq<br>
+define void @testfn(i32* nocapture %p) {<br>
+ %v0 = getelementptr i32, i32* %p, i64 12<br>
+ %1 = bitcast i32* %v0 to <2 x i64>*<br>
+ %2 = bitcast i32* %v0 to <4 x i32>*<br>
+ %3 = getelementptr <2 x i64>, <2 x i64>* %1, i64 -3<br>
+ store <2 x i64> undef, <2 x i64>* %3, align 16<br>
+ %4 = shufflevector <4 x i64> zeroinitializer, <4 x i64> undef, <2 x i32> <i32 0, i32 1><br>
+ %5 = getelementptr <2 x i64>, <2 x i64>* %1, i64 -2<br>
+ store <2 x i64> %4, <2 x i64>* %5, align 16<br>
+ %6 = shufflevector <8 x i32> zeroinitializer, <8 x i32> undef, <4 x i32> <i32 4, i32 5, i32 6, i32 7><br>
+ %7 = getelementptr <4 x i32>, <4 x i32>* %2, i64 -1<br>
+ store <4 x i32> %6, <4 x i32>* %7, align 16<br>
+ ret void<br>
+}<br>
<br>
<br>
_______________________________________________<br>
llvm-commits mailing list<br>
<a href="mailto:llvm-commits@lists.llvm.org" target="_blank">llvm-commits@lists.llvm.org</a><br>
<a href="http://lists.llvm.org/cgi-bin/mailman/listinfo/llvm-commits" rel="noreferrer" target="_blank">http://lists.llvm.org/cgi-bin/mailman/listinfo/llvm-commits</a><br>
</blockquote></div>
</blockquote></div>