mod.rs 21 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543
  1. // SPDX-License-Identifier: Apache-2.0
  2. mod expression_values;
  3. mod reaching_values;
  4. mod tests;
  5. mod value;
  6. use super::cfg::{ControlFlowGraph, Instr};
  7. use crate::codegen::Expression;
  8. use crate::sema::ast::{Namespace, Type};
  9. use bitvec::prelude::*;
  10. use expression_values::expression_values;
  11. use num_bigint::{BigInt, Sign};
  12. use num_traits::{One, ToPrimitive};
  13. use reaching_values::{reaching_values, transfer};
  14. use std::collections::{HashMap, HashSet};
  15. use std::convert::TryInto;
  16. use value::{is_single_constant, set_max_signed, set_max_unsigned, Value};
  17. /**
  18. Strength Reduce optimization pass - replace expensive arithmetic operations with cheaper ones
  19. Currently implemented:
  20. - Replace 256/128 bit multiply/divide/modulo with smaller width operations
  21. */
  22. /*
  23. In order to know whether e.g. a 256 multiply can be replaced with a 64 bit one, we need to know
  24. the maximum value its arguments can have. For this, we first use reaching definitions to calculate
  25. the known bits of variables. Then, we walk the expressions and do the replacements.
  26. For example:
  27. contract test {
  28. function f() public {
  29. for (uint i = 0; i < 10; i++) {
  30. // this multiply can be done with a 64 bit instruction
  31. print("i:{}".format(i * 100));
  32. }
  33. }
  34. }
  35. Here we need to collect all the possible values i can have. Here the loop has clear bounds. However,
  36. contract test {
  37. function f(bool x) public {
  38. uint i = 0;
  39. for (;;) {
  40. print("i:{}".format(i * 100));
  41. i += 1;
  42. if (x)
  43. break;
  44. }
  45. }
  46. }
  47. Here we have no idea what the upper bound of i might be, as there is none. We iterate until we have
  48. MAX_VALUES of values, and then the value i becomes a set with the single value unknown. If the multiplication
  49. was "(i & 255) * 100" then we know that the upper bound of i is 255, and the multiply can be done with 64
  50. bit operations again.
  51. TODO/ideas to explore
  52. - In the first example above, the variable i can be replaced with a 64 bit. Check each assignment to i
  53. and check if the result fits into 64 bit
  54. - Conditions like "if (i < 100) { ... }" are not used to know the bounds of i
  55. - The pass does not work across function calls
  56. - Can we replace Expression::Power() with a cheaper one
  57. - Can we replace Expression::BitwiseAnd() with a cheaper one if either side fits into u64
  58. */
  59. // Iterate over the cfg until we have 100 possible values, if we have more give up and assume unknown. This
  60. // is to prevent infinite loops in our pass.
  61. const MAX_VALUES: usize = 100;
  62. /// some information when hovering over a variable.
  63. pub fn strength_reduce(cfg: &mut ControlFlowGraph, ns: &mut Namespace) {
  64. // reaching definitions for integer calculations
  65. let mut block_vars = HashMap::new();
  66. let mut vars = HashMap::new();
  67. reaching_values(0, cfg, &mut vars, &mut block_vars, ns);
  68. // now we have all the reaching values for the top of each block
  69. // we can now step through each block and do any strength reduction where possible
  70. for (block_no, vars) in block_vars.into_iter() {
  71. block_reduce(block_no, cfg, vars, ns);
  72. }
  73. }
  74. /// Walk through all the expressions in a block, and find any expressions which can be
  75. /// replaced with cheaper ones.
  76. fn block_reduce(
  77. block_no: usize,
  78. cfg: &mut ControlFlowGraph,
  79. mut vars: Variables,
  80. ns: &mut Namespace,
  81. ) {
  82. for instr in &mut cfg.blocks[block_no].instr {
  83. match instr {
  84. Instr::Set { expr, .. } => {
  85. *expr = expression_reduce(expr, &vars, ns);
  86. }
  87. Instr::Call { args, .. } => {
  88. *args = args
  89. .iter()
  90. .map(|e| expression_reduce(e, &vars, ns))
  91. .collect();
  92. }
  93. Instr::Return { value } => {
  94. *value = value
  95. .iter()
  96. .map(|e| expression_reduce(e, &vars, ns))
  97. .collect();
  98. }
  99. Instr::Store { dest, data } => {
  100. *dest = expression_reduce(dest, &vars, ns);
  101. *data = expression_reduce(data, &vars, ns);
  102. }
  103. Instr::AssertFailure { expr: Some(expr) } => {
  104. *expr = expression_reduce(expr, &vars, ns);
  105. }
  106. Instr::Print { expr } => {
  107. *expr = expression_reduce(expr, &vars, ns);
  108. }
  109. Instr::ClearStorage { storage, .. } => {
  110. *storage = expression_reduce(storage, &vars, ns);
  111. }
  112. Instr::SetStorage { storage, value, .. } => {
  113. *value = expression_reduce(value, &vars, ns);
  114. *storage = expression_reduce(storage, &vars, ns);
  115. }
  116. Instr::SetStorageBytes {
  117. storage,
  118. value,
  119. offset,
  120. ..
  121. } => {
  122. *value = expression_reduce(value, &vars, ns);
  123. *storage = expression_reduce(storage, &vars, ns);
  124. *offset = expression_reduce(offset, &vars, ns);
  125. }
  126. Instr::PushStorage { storage, value, .. } => {
  127. if let Some(value) = value {
  128. *value = expression_reduce(value, &vars, ns);
  129. }
  130. *storage = expression_reduce(storage, &vars, ns);
  131. }
  132. Instr::PopStorage { storage, .. } => {
  133. *storage = expression_reduce(storage, &vars, ns);
  134. }
  135. Instr::PushMemory { value, .. } => {
  136. *value = Box::new(expression_reduce(value, &vars, ns));
  137. }
  138. Instr::Constructor {
  139. args,
  140. value,
  141. gas,
  142. salt,
  143. ..
  144. } => {
  145. *args = args
  146. .iter()
  147. .map(|e| expression_reduce(e, &vars, ns))
  148. .collect();
  149. if let Some(value) = value {
  150. *value = expression_reduce(value, &vars, ns);
  151. }
  152. if let Some(salt) = salt {
  153. *salt = expression_reduce(salt, &vars, ns);
  154. }
  155. *gas = expression_reduce(gas, &vars, ns);
  156. }
  157. Instr::ExternalCall {
  158. address,
  159. payload,
  160. value,
  161. gas,
  162. ..
  163. } => {
  164. *value = expression_reduce(value, &vars, ns);
  165. if let Some(address) = address {
  166. *address = expression_reduce(address, &vars, ns);
  167. }
  168. *payload = expression_reduce(payload, &vars, ns);
  169. *gas = expression_reduce(gas, &vars, ns);
  170. }
  171. Instr::ValueTransfer { address, value, .. } => {
  172. *address = expression_reduce(address, &vars, ns);
  173. *value = expression_reduce(value, &vars, ns);
  174. }
  175. Instr::AbiDecode { data, .. } => {
  176. *data = expression_reduce(data, &vars, ns);
  177. }
  178. Instr::EmitEvent { topics, data, .. } => {
  179. *topics = topics
  180. .iter()
  181. .map(|e| expression_reduce(e, &vars, ns))
  182. .collect();
  183. *data = data
  184. .iter()
  185. .map(|e| expression_reduce(e, &vars, ns))
  186. .collect();
  187. }
  188. _ => (),
  189. }
  190. transfer(instr, &mut vars, ns);
  191. }
  192. }
  193. /// Walk through an expression, and do the replacements for the expensive operations
  194. fn expression_reduce(expr: &Expression, vars: &Variables, ns: &mut Namespace) -> Expression {
  195. let filter = |expr: &Expression, ns: &mut Namespace| -> Expression {
  196. match expr {
  197. Expression::Multiply(loc, ty, unchecked, left, right) => {
  198. let bits = ty.bits(ns) as usize;
  199. if bits >= 128 {
  200. let left_values = expression_values(left, vars, ns);
  201. let right_values = expression_values(right, vars, ns);
  202. if let Some(right) = is_single_constant(&right_values) {
  203. // is it a power of two
  204. // replace with a shift
  205. let mut shift = BigInt::one();
  206. let mut cmp = BigInt::from(2);
  207. for _ in 1..bits {
  208. if cmp == right {
  209. ns.hover_overrides.insert(
  210. *loc,
  211. format!(
  212. "{} multiply optimized to shift left {}",
  213. ty.to_string(ns),
  214. shift
  215. ),
  216. );
  217. return Expression::ShiftLeft(
  218. *loc,
  219. ty.clone(),
  220. left.clone(),
  221. Box::new(Expression::NumberLiteral(*loc, ty.clone(), shift)),
  222. );
  223. }
  224. cmp *= 2;
  225. shift += 1;
  226. }
  227. }
  228. if ty.is_signed_int() {
  229. if let (Some(left_max), Some(right_max)) =
  230. (set_max_signed(&left_values), set_max_signed(&right_values))
  231. {
  232. // We can safely replace this with a 64 bit multiply which can be encoded in a single wasm/bpf instruction
  233. if (left_max * right_max).to_i64().is_some() {
  234. ns.hover_overrides.insert(
  235. *loc,
  236. format!(
  237. "{} multiply optimized to int64 multiply",
  238. ty.to_string(ns),
  239. ),
  240. );
  241. return Expression::SignExt(
  242. *loc,
  243. ty.clone(),
  244. Box::new(Expression::Multiply(
  245. *loc,
  246. Type::Int(64),
  247. *unchecked,
  248. Box::new(left.as_ref().clone().cast(&Type::Int(64), ns)),
  249. Box::new(right.as_ref().clone().cast(&Type::Int(64), ns)),
  250. )),
  251. );
  252. }
  253. }
  254. } else {
  255. let left_max = set_max_unsigned(&left_values);
  256. let right_max = set_max_unsigned(&right_values);
  257. // We can safely replace this with a 64 bit multiply which can be encoded in a single wasm/bpf instruction
  258. if left_max * right_max <= BigInt::from(u64::MAX) {
  259. ns.hover_overrides.insert(
  260. *loc,
  261. format!(
  262. "{} multiply optimized to uint64 multiply",
  263. ty.to_string(ns),
  264. ),
  265. );
  266. return Expression::ZeroExt(
  267. *loc,
  268. ty.clone(),
  269. Box::new(Expression::Multiply(
  270. *loc,
  271. Type::Uint(64),
  272. *unchecked,
  273. Box::new(left.as_ref().clone().cast(&Type::Uint(64), ns)),
  274. Box::new(right.as_ref().clone().cast(&Type::Uint(64), ns)),
  275. )),
  276. );
  277. }
  278. }
  279. }
  280. expr.clone()
  281. }
  282. Expression::UnsignedDivide(loc, ty, left, right)
  283. | Expression::SignedDivide(loc, ty, left, right) => {
  284. let bits = ty.bits(ns) as usize;
  285. if bits >= 128 {
  286. let left_values = expression_values(left, vars, ns);
  287. let right_values = expression_values(right, vars, ns);
  288. if let Some(right) = is_single_constant(&right_values) {
  289. // is it a power of two
  290. // replace with a shift
  291. let mut shift = BigInt::one();
  292. let mut cmp = BigInt::from(2);
  293. for _ in 1..bits {
  294. if cmp == right {
  295. ns.hover_overrides.insert(
  296. *loc,
  297. format!(
  298. "{} divide optimized to shift right {}",
  299. ty.to_string(ns),
  300. shift
  301. ),
  302. );
  303. return Expression::ShiftRight(
  304. *loc,
  305. ty.clone(),
  306. left.clone(),
  307. Box::new(Expression::NumberLiteral(*loc, ty.clone(), shift)),
  308. ty.is_signed_int(),
  309. );
  310. }
  311. cmp *= 2;
  312. shift += 1;
  313. }
  314. }
  315. if ty.is_signed_int() {
  316. if let (Some(left_max), Some(right_max)) =
  317. (set_max_signed(&left_values), set_max_signed(&right_values))
  318. {
  319. if left_max.to_i64().is_some() && right_max.to_i64().is_some() {
  320. ns.hover_overrides.insert(
  321. *loc,
  322. format!(
  323. "{} divide optimized to int64 divide",
  324. ty.to_string(ns),
  325. ),
  326. );
  327. return Expression::SignExt(
  328. *loc,
  329. ty.clone(),
  330. Box::new(Expression::UnsignedDivide(
  331. *loc,
  332. Type::Int(64),
  333. Box::new(left.as_ref().clone().cast(&Type::Int(64), ns)),
  334. Box::new(right.as_ref().clone().cast(&Type::Int(64), ns)),
  335. )),
  336. );
  337. }
  338. }
  339. } else {
  340. let left_max = set_max_unsigned(&left_values);
  341. let right_max = set_max_unsigned(&right_values);
  342. // If both values fit into u64, then the result must too
  343. if left_max.to_u64().is_some() && right_max.to_u64().is_some() {
  344. ns.hover_overrides.insert(
  345. *loc,
  346. format!("{} divide optimized to uint64 divide", ty.to_string(ns),),
  347. );
  348. return Expression::ZeroExt(
  349. *loc,
  350. ty.clone(),
  351. Box::new(Expression::UnsignedDivide(
  352. *loc,
  353. Type::Uint(64),
  354. Box::new(left.as_ref().clone().cast(&Type::Uint(64), ns)),
  355. Box::new(right.as_ref().clone().cast(&Type::Uint(64), ns)),
  356. )),
  357. );
  358. }
  359. }
  360. }
  361. expr.clone()
  362. }
  363. Expression::SignedModulo(loc, ty, left, right)
  364. | Expression::UnsignedModulo(loc, ty, left, right) => {
  365. let bits = ty.bits(ns) as usize;
  366. if bits >= 128 {
  367. let left_values = expression_values(left, vars, ns);
  368. let right_values = expression_values(right, vars, ns);
  369. if let Some(right) = is_single_constant(&right_values) {
  370. // is it a power of two
  371. // replace with an bitwise and
  372. // e.g. (foo % 16) becomes (foo & 15)
  373. let mut cmp = BigInt::one();
  374. for _ in 1..bits {
  375. if cmp == right {
  376. ns.hover_overrides.insert(
  377. *loc,
  378. format!(
  379. "{} modulo optimized to bitwise and {}",
  380. ty.to_string(ns),
  381. cmp.clone() - 1
  382. ),
  383. );
  384. return Expression::BitwiseAnd(
  385. *loc,
  386. ty.clone(),
  387. left.clone(),
  388. Box::new(Expression::NumberLiteral(*loc, ty.clone(), cmp - 1)),
  389. );
  390. }
  391. cmp *= 2;
  392. }
  393. }
  394. if ty.is_signed_int() {
  395. if let (Some(left_max), Some(right_max)) =
  396. (set_max_signed(&left_values), set_max_signed(&right_values))
  397. {
  398. if left_max.to_i64().is_some() && right_max.to_i64().is_some() {
  399. ns.hover_overrides.insert(
  400. *loc,
  401. format!(
  402. "{} modulo optimized to int64 modulo",
  403. ty.to_string(ns),
  404. ),
  405. );
  406. return Expression::SignExt(
  407. *loc,
  408. ty.clone(),
  409. Box::new(Expression::SignedModulo(
  410. *loc,
  411. Type::Int(64),
  412. Box::new(left.as_ref().clone().cast(&Type::Int(64), ns)),
  413. Box::new(right.as_ref().clone().cast(&Type::Int(64), ns)),
  414. )),
  415. );
  416. }
  417. }
  418. } else {
  419. let left_max = set_max_unsigned(&left_values);
  420. let right_max = set_max_unsigned(&right_values);
  421. // If both values fit into u64, then the result must too
  422. if left_max.to_u64().is_some() && right_max.to_u64().is_some() {
  423. ns.hover_overrides.insert(
  424. *loc,
  425. format!("{} modulo optimized to uint64 modulo", ty.to_string(ns)),
  426. );
  427. return Expression::ZeroExt(
  428. *loc,
  429. ty.clone(),
  430. Box::new(Expression::UnsignedModulo(
  431. *loc,
  432. Type::Uint(64),
  433. Box::new(left.as_ref().clone().cast(&Type::Uint(64), ns)),
  434. Box::new(right.as_ref().clone().cast(&Type::Uint(64), ns)),
  435. )),
  436. );
  437. }
  438. }
  439. }
  440. expr.clone()
  441. }
  442. _ => expr.clone(),
  443. }
  444. };
  445. expr.copy_filter(ns, filter)
  446. }
  447. /// This optimization pass only tracks bools and integers variables.
  448. /// Other types (e.g. bytes) is not relevant for strength reduce. Bools are only
  449. /// tracked so we can following branching after integer compare.
  450. fn track(ty: &Type) -> bool {
  451. matches!(ty, Type::Uint(_) | Type::Int(_) | Type::Bool | Type::Value)
  452. }
  453. // A variable can
  454. type Variables = HashMap<usize, HashSet<Value>>;
  455. type Bits = BitArray<Lsb0, [u8; 32]>;
  456. fn highest_set_bit(bs: &[u8]) -> usize {
  457. for (i, b) in bs.iter().enumerate().rev() {
  458. if *b != 0 {
  459. return (i + 1) * 8 - bs[i].leading_zeros() as usize - 1;
  460. }
  461. }
  462. 0
  463. }
  464. fn bigint_to_bitarr(v: &BigInt, bits: usize) -> BitArray<Lsb0, [u8; 32]> {
  465. let mut bs = v.to_signed_bytes_le();
  466. bs.resize(
  467. 32,
  468. if v.sign() == Sign::Minus {
  469. u8::MAX
  470. } else {
  471. u8::MIN
  472. },
  473. );
  474. let mut ba = BitArray::new(bs.try_into().unwrap());
  475. if bits < 256 {
  476. ba[bits..256].set_all(false);
  477. }
  478. ba
  479. }