-
Notifications
You must be signed in to change notification settings - Fork 1.3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
x64: implement vselect with variable blend instructions #2905
Changes from all commits
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -2029,7 +2029,50 @@ fn lower_insn_to_regs<C: LowerCtx<I = Inst>>( | |
ctx.emit(Inst::gen_move(dst, tmp2.to_reg(), ty)); | ||
ctx.emit(Inst::or(ty, RegMem::from(tmp1), dst)); | ||
} else { | ||
unimplemented!("scalar bitselect") | ||
unimplemented!("no lowering for scalar bitselect instruction") | ||
} | ||
} | ||
|
||
Opcode::Vselect => { | ||
let ty = ty.unwrap(); | ||
let condition = put_input_in_reg(ctx, inputs[0]); | ||
let condition_ty = ctx.input_ty(insn, 0); | ||
let if_true = input_to_reg_mem(ctx, inputs[1]); | ||
let if_false = put_input_in_reg(ctx, inputs[2]); | ||
let dst = get_output_reg(ctx, outputs[0]).only_reg().unwrap(); | ||
|
||
if ty.is_vector() { | ||
// `vselect` relies on the bit representation of the condition: | ||
// vector boolean types are defined in Cranelift to be all 1s or | ||
// all 0s. This lowering relies on that fact to use x86's | ||
// variable blend instructions, which look at the _high_bit_ of | ||
// the condition mask. All the bits of vector booleans will | ||
// match (all 1s or all 0s), so we can just use the high bit. | ||
assert!(condition_ty.lane_type().is_bool()); | ||
|
||
// Variable blend instructions expect the condition mask to be | ||
// in XMM0. | ||
let xmm0 = Writable::from_reg(regs::xmm0()); | ||
ctx.emit(Inst::gen_move(xmm0, condition, ty)); | ||
|
||
// Match up the source and destination registers for regalloc. | ||
ctx.emit(Inst::gen_move(dst, if_false, ty)); | ||
|
||
// Technically PBLENDVB would work in all cases (since the bytes | ||
// inside the mask will be all 1s or 0s we can blend | ||
// byte-by-byte instead of word-by-word, e.g.) but | ||
// type-specialized versions are included here for clarity when | ||
// troubleshooting and due to slight improvements in | ||
// latency/throughput on certain processor families. | ||
let opcode = match condition_ty { | ||
types::B64X2 => SseOpcode::Blendvpd, | ||
abrown marked this conversation as resolved.
Show resolved
Hide resolved
|
||
types::B32X4 => SseOpcode::Blendvps, | ||
types::B16X8 | types::B8X16 => SseOpcode::Pblendvb, | ||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. I was curious after seeing two of these get mapped to the same instruction, while the above two types have different instructions. Reading the description, couldn't There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. This is purely a preference thing like I've done previously on moves, e.g.: it adds a negligible overhead to compilation but it matches the original intent of the instruction more closely, which I feel helps during debugging and sometimes can help with latency/throughput. In this case, the latency/throughput differences are very minor (see IA Optimization Manual, appendix D; depending on the arch family, 1 in some cases and 2 in others). There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Ah ok makes sense! Presumably there's no dedicated instruction for 16-bit types? Could you leave a comment for how There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Yup, no 16-bit, at least in SSE-land ( |
||
_ => unimplemented!("unable lower vselect for type: {}", condition_ty), | ||
}; | ||
ctx.emit(Inst::xmm_rm_r(opcode, if_true, dst)); | ||
} else { | ||
unimplemented!("no lowering for scalar vselect instruction") | ||
} | ||
} | ||
|
||
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
How does regalloc know that xmm0 is live until the
xmm_rm_r
instruction below?There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@cfallin can correct me if I get this wrong but every generated instruction tells regalloc how it is using each register using the RegUsageMapper trait. Well, maybe it is the RegUsageCollector. In any case, regalloc should know that a move to that virtual register (hard-coded to XMM0) is a
def
and that that register should be left alone until it isuse
d.There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Indeed, the regalloc.rs semantics are such that we compute live-ranges for both real regs and virtual regs; and a real reg is reserved for the extent of its virtual ranges. As long as we properly have xmm0 as a use below the move then everything works as expected!
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yeah it makes sense to me that it's use/def based and this is a def of xmm0, but I wasn't able to find the use of xmm0 (I'm probably missing something though?) This looks like the relevant block but it doesn't seem have anything xmm0-related there, though?
(I'd sort of expect a
match
on the opcode to add the use of xmm0 in some cases, like the ones used below)There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yup, actually you're right. In talking more to @cfallin I actually came to the same conclusion. Let me fix that.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Out of curiosity, what's the failure mode for a situation like this? The register allocator sees a "def" of xmm0 but it never sees a use. Does that mean that the live range is considered infinite? Or is the live range immediately "dead" after the def?
(this seems like a worrying thing to me and easy to overlook, so curious if we could bolster up checks one way or another to prevent this from happening again)
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@cfallin? 😁
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yeah, the failure mode isn't great: the real-reg liverange ends at the last mention (the def) and so the register is liable to be reused for something else, clobbering the value.
Always looking for ways to foolproof this; it's a bit tricky as the question is: what is the ground-truth we can check against? If we forget to mention a register-use in the metadata we provide to the allocator, the only other way of seeing that would be to disassemble the resulting machine code independently and check its register-mentions. We could certainly do that, perhaps as another oracle during fuzzing; but it's a big project (correlating the disassembly to the VCode especially with multiple-instruction lowerings would take some care).
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Oh nah I wouldn't want to go so all-out just yet. I would imagine something much more simple which is that if something is defined and never used, it's considered either live forever or invalid, causing a panic. In the "live forever" case we'd in theory one day ask why our code was so slow and fix this by limiting the live range, and in the latter case we'd catch the panic real fast and fix it.
I'm not sure if it's common, though, for values to be defined and never used. If that happens pretty normally then there's probably not much we can do about this other than being vigilant for now.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Interesting thoughts in any case, thanks for the ideas here!
Keeping a real-reg liverange open forever would ensure safety here but could potentially have forward-progress implications: it's essentially a "leak" of one register, and if we reserve too many real regs in this way, then we could hit a point where we don't have enough registers to satisfy constraints and finish allocation. That's less bad than clobbering but still bad, and would be somewhat hard to debug.
In theory, dead defs shouldn't happen at the CLIF level, because we lower based on demand, though it's possible at the VCode level depending on the lowering pattern. There's also the issue that we use dead defs as a way to encode clobbers (at calls, for example), so we'd need a different category for those, but it could be doable.
We can think more about this -- I'll add the disallow-dead-defs idea to my running list of "things to look at next time I focus on fuzzing infra" :-)