fill_db_untrusted: follow untrusted data down the call tree
[smatch.git] / linearize.c
blobf2034ce935728bde96f5d89c3b9939d10d0ba639
1 /*
2 * Linearize - walk the statement tree (but _not_ the expressions)
3 * to generate a linear version of it and the basic blocks.
5 * NOTE! We're not interested in the actual sub-expressions yet,
6 * even though they can generate conditional branches and
7 * subroutine calls. That's all "local" behaviour.
9 * Copyright (C) 2004 Linus Torvalds
10 * Copyright (C) 2004 Christopher Li
13 #include <string.h>
14 #include <stdarg.h>
15 #include <stdlib.h>
16 #include <stdio.h>
17 #include <assert.h>
19 #include "parse.h"
20 #include "expression.h"
21 #include "linearize.h"
22 #include "flow.h"
23 #include "target.h"
25 pseudo_t linearize_statement(struct entrypoint *ep, struct statement *stmt);
26 pseudo_t linearize_expression(struct entrypoint *ep, struct expression *expr);
28 static pseudo_t add_binary_op(struct entrypoint *ep, struct symbol *ctype, int op, pseudo_t left, pseudo_t right);
29 static pseudo_t add_setval(struct entrypoint *ep, struct symbol *ctype, struct expression *val);
30 static pseudo_t linearize_one_symbol(struct entrypoint *ep, struct symbol *sym);
32 struct access_data;
33 static pseudo_t add_load(struct entrypoint *ep, struct access_data *);
34 static pseudo_t linearize_initializer(struct entrypoint *ep, struct expression *initializer, struct access_data *);
36 struct pseudo void_pseudo = {};
38 static struct position current_pos;
40 ALLOCATOR(pseudo_user, "pseudo_user");
42 static struct instruction *alloc_instruction(int opcode, int size)
44 struct instruction * insn = __alloc_instruction(0);
45 insn->opcode = opcode;
46 insn->size = size;
47 insn->pos = current_pos;
48 return insn;
51 static inline int type_size(struct symbol *type)
53 return type ? type->bit_size > 0 ? type->bit_size : 0 : 0;
56 static struct instruction *alloc_typed_instruction(int opcode, struct symbol *type)
58 struct instruction *insn = alloc_instruction(opcode, type_size(type));
59 insn->type = type;
60 return insn;
63 static struct entrypoint *alloc_entrypoint(void)
65 return __alloc_entrypoint(0);
68 static struct basic_block *alloc_basic_block(struct entrypoint *ep, struct position pos)
70 struct basic_block *bb = __alloc_basic_block(0);
71 bb->context = -1;
72 bb->pos = pos;
73 bb->ep = ep;
74 return bb;
77 static struct multijmp *alloc_multijmp(struct basic_block *target, int begin, int end)
79 struct multijmp *multijmp = __alloc_multijmp(0);
80 multijmp->target = target;
81 multijmp->begin = begin;
82 multijmp->end = end;
83 return multijmp;
86 static inline int regno(pseudo_t n)
88 int retval = -1;
89 if (n && n->type == PSEUDO_REG)
90 retval = n->nr;
91 return retval;
94 const char *show_pseudo(pseudo_t pseudo)
96 static int n;
97 static char buffer[4][64];
98 char *buf;
99 int i;
101 if (!pseudo)
102 return "no pseudo";
103 if (pseudo == VOID)
104 return "VOID";
105 buf = buffer[3 & ++n];
106 switch(pseudo->type) {
107 case PSEUDO_SYM: {
108 struct symbol *sym = pseudo->sym;
109 struct expression *expr;
111 if (sym->bb_target) {
112 snprintf(buf, 64, ".L%p", sym->bb_target);
113 break;
115 if (sym->ident) {
116 snprintf(buf, 64, "%s", show_ident(sym->ident));
117 break;
119 expr = sym->initializer;
120 snprintf(buf, 64, "<anon symbol:%p>", sym);
121 if (expr) {
122 switch (expr->type) {
123 case EXPR_VALUE:
124 snprintf(buf, 64, "<symbol value: %lld>", expr->value);
125 break;
126 case EXPR_STRING:
127 return show_string(expr->string);
128 default:
129 break;
132 break;
134 case PSEUDO_REG:
135 i = snprintf(buf, 64, "%%r%d", pseudo->nr);
136 if (pseudo->ident)
137 sprintf(buf+i, "(%s)", show_ident(pseudo->ident));
138 break;
139 case PSEUDO_VAL: {
140 long long value = pseudo->value;
141 if (value > 1000 || value < -1000)
142 snprintf(buf, 64, "$%#llx", value);
143 else
144 snprintf(buf, 64, "$%lld", value);
145 break;
147 case PSEUDO_ARG:
148 snprintf(buf, 64, "%%arg%d", pseudo->nr);
149 break;
150 case PSEUDO_PHI:
151 i = snprintf(buf, 64, "%%phi%d", pseudo->nr);
152 if (pseudo->ident)
153 sprintf(buf+i, "(%s)", show_ident(pseudo->ident));
154 break;
155 default:
156 snprintf(buf, 64, "<bad pseudo type %d>", pseudo->type);
158 return buf;
161 static const char *opcodes[] = {
162 [OP_BADOP] = "bad_op",
164 /* Fn entrypoint */
165 [OP_ENTRY] = "<entry-point>",
167 /* Terminator */
168 [OP_RET] = "ret",
169 [OP_BR] = "br",
170 [OP_SWITCH] = "switch",
171 [OP_INVOKE] = "invoke",
172 [OP_COMPUTEDGOTO] = "jmp *",
173 [OP_UNWIND] = "unwind",
175 /* Binary */
176 [OP_ADD] = "add",
177 [OP_SUB] = "sub",
178 [OP_MULU] = "mulu",
179 [OP_MULS] = "muls",
180 [OP_DIVU] = "divu",
181 [OP_DIVS] = "divs",
182 [OP_MODU] = "modu",
183 [OP_MODS] = "mods",
184 [OP_SHL] = "shl",
185 [OP_LSR] = "lsr",
186 [OP_ASR] = "asr",
188 /* Logical */
189 [OP_AND] = "and",
190 [OP_OR] = "or",
191 [OP_XOR] = "xor",
192 [OP_AND_BOOL] = "and-bool",
193 [OP_OR_BOOL] = "or-bool",
195 /* Binary comparison */
196 [OP_SET_EQ] = "seteq",
197 [OP_SET_NE] = "setne",
198 [OP_SET_LE] = "setle",
199 [OP_SET_GE] = "setge",
200 [OP_SET_LT] = "setlt",
201 [OP_SET_GT] = "setgt",
202 [OP_SET_B] = "setb",
203 [OP_SET_A] = "seta",
204 [OP_SET_BE] = "setbe",
205 [OP_SET_AE] = "setae",
207 /* Uni */
208 [OP_NOT] = "not",
209 [OP_NEG] = "neg",
211 /* Special three-input */
212 [OP_SEL] = "select",
214 /* Memory */
215 [OP_MALLOC] = "malloc",
216 [OP_FREE] = "free",
217 [OP_ALLOCA] = "alloca",
218 [OP_LOAD] = "load",
219 [OP_STORE] = "store",
220 [OP_SETVAL] = "set",
221 [OP_SYMADDR] = "symaddr",
222 [OP_GET_ELEMENT_PTR] = "getelem",
224 /* Other */
225 [OP_PHI] = "phi",
226 [OP_PHISOURCE] = "phisrc",
227 [OP_CAST] = "cast",
228 [OP_SCAST] = "scast",
229 [OP_FPCAST] = "fpcast",
230 [OP_PTRCAST] = "ptrcast",
231 [OP_INLINED_CALL] = "# call",
232 [OP_CALL] = "call",
233 [OP_VANEXT] = "va_next",
234 [OP_VAARG] = "va_arg",
235 [OP_SLICE] = "slice",
236 [OP_SNOP] = "snop",
237 [OP_LNOP] = "lnop",
238 [OP_NOP] = "nop",
239 [OP_DEATHNOTE] = "dead",
240 [OP_ASM] = "asm",
242 /* Sparse tagging (line numbers, context, whatever) */
243 [OP_CONTEXT] = "context",
244 [OP_RANGE] = "range-check",
246 [OP_COPY] = "copy",
249 static char *show_asm_constraints(char *buf, const char *sep, struct asm_constraint_list *list)
251 struct asm_constraint *entry;
253 FOR_EACH_PTR(list, entry) {
254 buf += sprintf(buf, "%s\"%s\"", sep, entry->constraint);
255 if (entry->pseudo)
256 buf += sprintf(buf, " (%s)", show_pseudo(entry->pseudo));
257 if (entry->ident)
258 buf += sprintf(buf, " [%s]", show_ident(entry->ident));
259 sep = ", ";
260 } END_FOR_EACH_PTR(entry);
261 return buf;
264 static char *show_asm(char *buf, struct instruction *insn)
266 struct asm_rules *rules = insn->asm_rules;
268 buf += sprintf(buf, "\"%s\"", insn->string);
269 buf = show_asm_constraints(buf, "\n\t\tout: ", rules->outputs);
270 buf = show_asm_constraints(buf, "\n\t\tin: ", rules->inputs);
271 buf = show_asm_constraints(buf, "\n\t\tclobber: ", rules->clobbers);
272 return buf;
275 const char *show_instruction(struct instruction *insn)
277 int opcode = insn->opcode;
278 static char buffer[4096];
279 char *buf;
281 buf = buffer;
282 if (!insn->bb)
283 buf += sprintf(buf, "# ");
285 if (opcode < sizeof(opcodes)/sizeof(char *)) {
286 const char *op = opcodes[opcode];
287 if (!op)
288 buf += sprintf(buf, "opcode:%d", opcode);
289 else
290 buf += sprintf(buf, "%s", op);
291 if (insn->size)
292 buf += sprintf(buf, ".%d", insn->size);
293 memset(buf, ' ', 20);
294 buf++;
297 if (buf < buffer + 12)
298 buf = buffer + 12;
299 switch (opcode) {
300 case OP_RET:
301 if (insn->src && insn->src != VOID)
302 buf += sprintf(buf, "%s", show_pseudo(insn->src));
303 break;
304 case OP_BR:
305 if (insn->bb_true && insn->bb_false) {
306 buf += sprintf(buf, "%s, .L%p, .L%p", show_pseudo(insn->cond), insn->bb_true, insn->bb_false);
307 break;
309 buf += sprintf(buf, ".L%p", insn->bb_true ? insn->bb_true : insn->bb_false);
310 break;
312 case OP_SYMADDR: {
313 struct symbol *sym = insn->symbol->sym;
314 buf += sprintf(buf, "%s <- ", show_pseudo(insn->target));
316 if (sym->bb_target) {
317 buf += sprintf(buf, ".L%p", sym->bb_target);
318 break;
320 if (sym->ident) {
321 buf += sprintf(buf, "%s", show_ident(sym->ident));
322 break;
324 buf += sprintf(buf, "<anon symbol:%p>", sym);
325 break;
328 case OP_SETVAL: {
329 struct expression *expr = insn->val;
330 buf += sprintf(buf, "%s <- ", show_pseudo(insn->target));
332 if (!expr) {
333 buf += sprintf(buf, "%s", "<none>");
334 break;
337 switch (expr->type) {
338 case EXPR_VALUE:
339 buf += sprintf(buf, "%lld", expr->value);
340 break;
341 case EXPR_FVALUE:
342 buf += sprintf(buf, "%Lf", expr->fvalue);
343 break;
344 case EXPR_STRING:
345 buf += sprintf(buf, "%.40s", show_string(expr->string));
346 break;
347 case EXPR_SYMBOL:
348 buf += sprintf(buf, "%s", show_ident(expr->symbol->ident));
349 break;
350 case EXPR_LABEL:
351 buf += sprintf(buf, ".L%p", expr->symbol->bb_target);
352 break;
353 default:
354 buf += sprintf(buf, "SETVAL EXPR TYPE %d", expr->type);
356 break;
358 case OP_SWITCH: {
359 struct multijmp *jmp;
360 buf += sprintf(buf, "%s", show_pseudo(insn->target));
361 FOR_EACH_PTR(insn->multijmp_list, jmp) {
362 if (jmp->begin == jmp->end)
363 buf += sprintf(buf, ", %d -> .L%p", jmp->begin, jmp->target);
364 else if (jmp->begin < jmp->end)
365 buf += sprintf(buf, ", %d ... %d -> .L%p", jmp->begin, jmp->end, jmp->target);
366 else
367 buf += sprintf(buf, ", default -> .L%p", jmp->target);
368 } END_FOR_EACH_PTR(jmp);
369 break;
371 case OP_COMPUTEDGOTO: {
372 struct multijmp *jmp;
373 buf += sprintf(buf, "%s", show_pseudo(insn->target));
374 FOR_EACH_PTR(insn->multijmp_list, jmp) {
375 buf += sprintf(buf, ", .L%p", jmp->target);
376 } END_FOR_EACH_PTR(jmp);
377 break;
380 case OP_PHISOURCE: {
381 struct instruction *phi;
382 buf += sprintf(buf, "%s <- %s ", show_pseudo(insn->target), show_pseudo(insn->phi_src));
383 FOR_EACH_PTR(insn->phi_users, phi) {
384 buf += sprintf(buf, " (%s)", show_pseudo(phi->target));
385 } END_FOR_EACH_PTR(phi);
386 break;
389 case OP_PHI: {
390 pseudo_t phi;
391 const char *s = " <-";
392 buf += sprintf(buf, "%s", show_pseudo(insn->target));
393 FOR_EACH_PTR(insn->phi_list, phi) {
394 buf += sprintf(buf, "%s %s", s, show_pseudo(phi));
395 s = ",";
396 } END_FOR_EACH_PTR(phi);
397 break;
399 case OP_LOAD: case OP_LNOP:
400 buf += sprintf(buf, "%s <- %d[%s]", show_pseudo(insn->target), insn->offset, show_pseudo(insn->src));
401 break;
402 case OP_STORE: case OP_SNOP:
403 buf += sprintf(buf, "%s -> %d[%s]", show_pseudo(insn->target), insn->offset, show_pseudo(insn->src));
404 break;
405 case OP_INLINED_CALL:
406 case OP_CALL: {
407 struct pseudo *arg;
408 if (insn->target && insn->target != VOID)
409 buf += sprintf(buf, "%s <- ", show_pseudo(insn->target));
410 buf += sprintf(buf, "%s", show_pseudo(insn->func));
411 FOR_EACH_PTR(insn->arguments, arg) {
412 buf += sprintf(buf, ", %s", show_pseudo(arg));
413 } END_FOR_EACH_PTR(arg);
414 break;
416 case OP_CAST:
417 case OP_SCAST:
418 case OP_FPCAST:
419 case OP_PTRCAST:
420 buf += sprintf(buf, "%s <- (%d) %s",
421 show_pseudo(insn->target),
422 type_size(insn->orig_type),
423 show_pseudo(insn->src));
424 break;
425 case OP_BINARY ... OP_BINARY_END:
426 case OP_BINCMP ... OP_BINCMP_END:
427 buf += sprintf(buf, "%s <- %s, %s", show_pseudo(insn->target), show_pseudo(insn->src1), show_pseudo(insn->src2));
428 break;
430 case OP_SEL:
431 buf += sprintf(buf, "%s <- %s, %s, %s", show_pseudo(insn->target),
432 show_pseudo(insn->src1), show_pseudo(insn->src2), show_pseudo(insn->src3));
433 break;
435 case OP_SLICE:
436 buf += sprintf(buf, "%s <- %s, %d, %d", show_pseudo(insn->target), show_pseudo(insn->base), insn->from, insn->len);
437 break;
439 case OP_NOT: case OP_NEG:
440 buf += sprintf(buf, "%s <- %s", show_pseudo(insn->target), show_pseudo(insn->src1));
441 break;
443 case OP_CONTEXT:
444 buf += sprintf(buf, "%s%d", insn->check ? "check: " : "", insn->increment);
445 break;
446 case OP_RANGE:
447 buf += sprintf(buf, "%s between %s..%s", show_pseudo(insn->src1), show_pseudo(insn->src2), show_pseudo(insn->src3));
448 break;
449 case OP_NOP:
450 buf += sprintf(buf, "%s <- %s", show_pseudo(insn->target), show_pseudo(insn->src1));
451 break;
452 case OP_DEATHNOTE:
453 buf += sprintf(buf, "%s", show_pseudo(insn->target));
454 break;
455 case OP_ASM:
456 buf = show_asm(buf, insn);
457 break;
458 case OP_COPY:
459 buf += sprintf(buf, "%s <- %s", show_pseudo(insn->target), show_pseudo(insn->src));
460 break;
461 default:
462 break;
465 if (buf >= buffer + sizeof(buffer))
466 die("instruction buffer overflowed %td\n", buf - buffer);
467 do { --buf; } while (*buf == ' ');
468 *++buf = 0;
469 return buffer;
472 void show_bb(struct basic_block *bb)
474 struct instruction *insn;
476 printf(".L%p:\n", bb);
477 if (verbose) {
478 pseudo_t needs, defines;
479 printf("%s:%d\n", stream_name(bb->pos.stream), bb->pos.line);
481 FOR_EACH_PTR(bb->needs, needs) {
482 struct instruction *def = needs->def;
483 if (def->opcode != OP_PHI) {
484 printf(" **uses %s (from .L%p)**\n", show_pseudo(needs), def->bb);
485 } else {
486 pseudo_t phi;
487 const char *sep = " ";
488 printf(" **uses %s (from", show_pseudo(needs));
489 FOR_EACH_PTR(def->phi_list, phi) {
490 if (phi == VOID)
491 continue;
492 printf("%s(%s:.L%p)", sep, show_pseudo(phi), phi->def->bb);
493 sep = ", ";
494 } END_FOR_EACH_PTR(phi);
495 printf(")**\n");
497 } END_FOR_EACH_PTR(needs);
499 FOR_EACH_PTR(bb->defines, defines) {
500 printf(" **defines %s **\n", show_pseudo(defines));
501 } END_FOR_EACH_PTR(defines);
503 if (bb->parents) {
504 struct basic_block *from;
505 FOR_EACH_PTR(bb->parents, from) {
506 printf(" **from %p (%s:%d:%d)**\n", from,
507 stream_name(from->pos.stream), from->pos.line, from->pos.pos);
508 } END_FOR_EACH_PTR(from);
511 if (bb->children) {
512 struct basic_block *to;
513 FOR_EACH_PTR(bb->children, to) {
514 printf(" **to %p (%s:%d:%d)**\n", to,
515 stream_name(to->pos.stream), to->pos.line, to->pos.pos);
516 } END_FOR_EACH_PTR(to);
520 FOR_EACH_PTR(bb->insns, insn) {
521 if (!insn->bb && verbose < 2)
522 continue;
523 printf("\t%s\n", show_instruction(insn));
524 } END_FOR_EACH_PTR(insn);
525 if (!bb_terminated(bb))
526 printf("\tEND\n");
529 static void show_symbol_usage(pseudo_t pseudo)
531 struct pseudo_user *pu;
533 if (pseudo) {
534 FOR_EACH_PTR(pseudo->users, pu) {
535 printf("\t%s\n", show_instruction(pu->insn));
536 } END_FOR_EACH_PTR(pu);
540 void show_entry(struct entrypoint *ep)
542 struct symbol *sym;
543 struct basic_block *bb;
545 printf("%s:\n", show_ident(ep->name->ident));
547 if (verbose) {
548 printf("ep %p: %s\n", ep, show_ident(ep->name->ident));
550 FOR_EACH_PTR(ep->syms, sym) {
551 if (!sym->pseudo)
552 continue;
553 if (!sym->pseudo->users)
554 continue;
555 printf(" sym: %p %s\n", sym, show_ident(sym->ident));
556 if (sym->ctype.modifiers & (MOD_EXTERN | MOD_STATIC | MOD_ADDRESSABLE))
557 printf("\texternal visibility\n");
558 show_symbol_usage(sym->pseudo);
559 } END_FOR_EACH_PTR(sym);
561 printf("\n");
564 FOR_EACH_PTR(ep->bbs, bb) {
565 if (!bb)
566 continue;
567 if (!bb->parents && !bb->children && !bb->insns && verbose < 2)
568 continue;
569 show_bb(bb);
570 printf("\n");
571 } END_FOR_EACH_PTR(bb);
573 printf("\n");
576 static void bind_label(struct symbol *label, struct basic_block *bb, struct position pos)
578 if (label->bb_target)
579 warning(pos, "label '%s' already bound", show_ident(label->ident));
580 label->bb_target = bb;
583 static struct basic_block * get_bound_block(struct entrypoint *ep, struct symbol *label)
585 struct basic_block *bb = label->bb_target;
587 if (!bb) {
588 bb = alloc_basic_block(ep, label->pos);
589 label->bb_target = bb;
591 return bb;
594 static void finish_block(struct entrypoint *ep)
596 struct basic_block *src = ep->active;
597 if (bb_reachable(src))
598 ep->active = NULL;
601 static void add_goto(struct entrypoint *ep, struct basic_block *dst)
603 struct basic_block *src = ep->active;
604 if (bb_reachable(src)) {
605 struct instruction *br = alloc_instruction(OP_BR, 0);
606 br->bb_true = dst;
607 add_bb(&dst->parents, src);
608 add_bb(&src->children, dst);
609 br->bb = src;
610 add_instruction(&src->insns, br);
611 ep->active = NULL;
615 static void add_one_insn(struct entrypoint *ep, struct instruction *insn)
617 struct basic_block *bb = ep->active;
619 if (bb_reachable(bb)) {
620 insn->bb = bb;
621 add_instruction(&bb->insns, insn);
625 static void set_activeblock(struct entrypoint *ep, struct basic_block *bb)
627 if (!bb_terminated(ep->active))
628 add_goto(ep, bb);
630 ep->active = bb;
631 if (bb_reachable(bb))
632 add_bb(&ep->bbs, bb);
635 static void remove_parent(struct basic_block *child, struct basic_block *parent)
637 remove_bb_from_list(&child->parents, parent, 1);
638 if (!child->parents)
639 kill_bb(child);
642 /* Change a "switch" into a branch */
643 void insert_branch(struct basic_block *bb, struct instruction *jmp, struct basic_block *target)
645 struct instruction *br, *old;
646 struct basic_block *child;
648 /* Remove the switch */
649 old = delete_last_instruction(&bb->insns);
650 assert(old == jmp);
652 br = alloc_instruction(OP_BR, 0);
653 br->bb = bb;
654 br->bb_true = target;
655 add_instruction(&bb->insns, br);
657 FOR_EACH_PTR(bb->children, child) {
658 if (child == target) {
659 target = NULL; /* Trigger just once */
660 continue;
662 DELETE_CURRENT_PTR(child);
663 remove_parent(child, bb);
664 } END_FOR_EACH_PTR(child);
665 PACK_PTR_LIST(&bb->children);
669 void insert_select(struct basic_block *bb, struct instruction *br, struct instruction *phi_node, pseudo_t if_true, pseudo_t if_false)
671 pseudo_t target;
672 struct instruction *select;
674 /* Remove the 'br' */
675 delete_last_instruction(&bb->insns);
677 select = alloc_instruction(OP_SEL, phi_node->size);
678 select->bb = bb;
680 assert(br->cond);
681 use_pseudo(select, br->cond, &select->src1);
683 target = phi_node->target;
684 assert(target->def == phi_node);
685 select->target = target;
686 target->def = select;
688 use_pseudo(select, if_true, &select->src2);
689 use_pseudo(select, if_false, &select->src3);
691 add_instruction(&bb->insns, select);
692 add_instruction(&bb->insns, br);
695 static inline int bb_empty(struct basic_block *bb)
697 return !bb->insns;
700 /* Add a label to the currently active block, return new active block */
701 static struct basic_block * add_label(struct entrypoint *ep, struct symbol *label)
703 struct basic_block *bb = label->bb_target;
705 if (bb) {
706 set_activeblock(ep, bb);
707 return bb;
709 bb = ep->active;
710 if (!bb_reachable(bb) || !bb_empty(bb)) {
711 bb = alloc_basic_block(ep, label->pos);
712 set_activeblock(ep, bb);
714 label->bb_target = bb;
715 return bb;
718 static void add_branch(struct entrypoint *ep, struct expression *expr, pseudo_t cond, struct basic_block *bb_true, struct basic_block *bb_false)
720 struct basic_block *bb = ep->active;
721 struct instruction *br;
723 if (bb_reachable(bb)) {
724 br = alloc_instruction(OP_BR, 0);
725 use_pseudo(br, cond, &br->cond);
726 br->bb_true = bb_true;
727 br->bb_false = bb_false;
728 add_bb(&bb_true->parents, bb);
729 add_bb(&bb_false->parents, bb);
730 add_bb(&bb->children, bb_true);
731 add_bb(&bb->children, bb_false);
732 add_one_insn(ep, br);
736 /* Dummy pseudo allocator */
737 pseudo_t alloc_pseudo(struct instruction *def)
739 static int nr = 0;
740 struct pseudo * pseudo = __alloc_pseudo(0);
741 pseudo->type = PSEUDO_REG;
742 pseudo->nr = ++nr;
743 pseudo->def = def;
744 return pseudo;
747 static void clear_symbol_pseudos(struct entrypoint *ep)
749 pseudo_t pseudo;
751 FOR_EACH_PTR(ep->accesses, pseudo) {
752 pseudo->sym->pseudo = NULL;
753 } END_FOR_EACH_PTR(pseudo);
756 static pseudo_t symbol_pseudo(struct entrypoint *ep, struct symbol *sym)
758 pseudo_t pseudo;
760 if (!sym)
761 return VOID;
763 pseudo = sym->pseudo;
764 if (!pseudo) {
765 pseudo = __alloc_pseudo(0);
766 pseudo->nr = -1;
767 pseudo->type = PSEUDO_SYM;
768 pseudo->sym = sym;
769 pseudo->ident = sym->ident;
770 sym->pseudo = pseudo;
771 add_pseudo(&ep->accesses, pseudo);
773 /* Symbol pseudos have neither nr, usage nor def */
774 return pseudo;
777 pseudo_t value_pseudo(long long val)
779 #define MAX_VAL_HASH 64
780 static struct pseudo_list *prev[MAX_VAL_HASH];
781 int hash = val & (MAX_VAL_HASH-1);
782 struct pseudo_list **list = prev + hash;
783 pseudo_t pseudo;
785 FOR_EACH_PTR(*list, pseudo) {
786 if (pseudo->value == val)
787 return pseudo;
788 } END_FOR_EACH_PTR(pseudo);
790 pseudo = __alloc_pseudo(0);
791 pseudo->type = PSEUDO_VAL;
792 pseudo->value = val;
793 add_pseudo(list, pseudo);
795 /* Value pseudos have neither nr, usage nor def */
796 return pseudo;
799 static pseudo_t argument_pseudo(struct entrypoint *ep, int nr)
801 pseudo_t pseudo = __alloc_pseudo(0);
802 struct instruction *entry = ep->entry;
804 pseudo->type = PSEUDO_ARG;
805 pseudo->nr = nr;
806 pseudo->def = entry;
807 add_pseudo(&entry->arg_list, pseudo);
809 /* Argument pseudos have neither usage nor def */
810 return pseudo;
813 pseudo_t alloc_phi(struct basic_block *source, pseudo_t pseudo, int size)
815 struct instruction *insn = alloc_instruction(OP_PHISOURCE, size);
816 pseudo_t phi = __alloc_pseudo(0);
817 static int nr = 0;
819 phi->type = PSEUDO_PHI;
820 phi->nr = ++nr;
821 phi->def = insn;
823 use_pseudo(insn, pseudo, &insn->phi_src);
824 insn->bb = source;
825 insn->target = phi;
826 add_instruction(&source->insns, insn);
827 return phi;
831 * We carry the "access_data" structure around for any accesses,
832 * which simplifies things a lot. It contains all the access
833 * information in one place.
835 struct access_data {
836 struct symbol *result_type; // result ctype
837 struct symbol *source_type; // source ctype
838 pseudo_t address; // pseudo containing address ..
839 pseudo_t origval; // pseudo for original value ..
840 unsigned int offset, alignment; // byte offset
841 unsigned int bit_size, bit_offset; // which bits
842 struct position pos;
845 static void finish_address_gen(struct entrypoint *ep, struct access_data *ad)
849 static int linearize_simple_address(struct entrypoint *ep,
850 struct expression *addr,
851 struct access_data *ad)
853 if (addr->type == EXPR_SYMBOL) {
854 linearize_one_symbol(ep, addr->symbol);
855 ad->address = symbol_pseudo(ep, addr->symbol);
856 return 1;
858 if (addr->type == EXPR_BINOP) {
859 if (addr->right->type == EXPR_VALUE) {
860 if (addr->op == '+') {
861 ad->offset += get_expression_value(addr->right);
862 return linearize_simple_address(ep, addr->left, ad);
866 ad->address = linearize_expression(ep, addr);
867 return 1;
870 static struct symbol *base_type(struct symbol *sym)
872 struct symbol *base = sym;
874 if (sym) {
875 if (sym->type == SYM_NODE)
876 base = base->ctype.base_type;
877 if (base->type == SYM_BITFIELD)
878 return base->ctype.base_type;
880 return sym;
883 static int linearize_address_gen(struct entrypoint *ep,
884 struct expression *expr,
885 struct access_data *ad)
887 struct symbol *ctype = expr->ctype;
889 if (!ctype)
890 return 0;
891 ad->pos = expr->pos;
892 ad->result_type = ctype;
893 ad->source_type = base_type(ctype);
894 ad->bit_size = ctype->bit_size;
895 ad->alignment = ctype->ctype.alignment;
896 ad->bit_offset = ctype->bit_offset;
897 if (expr->type == EXPR_PREOP && expr->op == '*')
898 return linearize_simple_address(ep, expr->unop, ad);
900 warning(expr->pos, "generating address of non-lvalue (%d)", expr->type);
901 return 0;
904 static pseudo_t add_load(struct entrypoint *ep, struct access_data *ad)
906 struct instruction *insn;
907 pseudo_t new;
909 new = ad->origval;
910 if (0 && new)
911 return new;
913 insn = alloc_typed_instruction(OP_LOAD, ad->source_type);
914 new = alloc_pseudo(insn);
915 ad->origval = new;
917 insn->target = new;
918 insn->offset = ad->offset;
919 use_pseudo(insn, ad->address, &insn->src);
920 add_one_insn(ep, insn);
921 return new;
924 static void add_store(struct entrypoint *ep, struct access_data *ad, pseudo_t value)
926 struct basic_block *bb = ep->active;
928 if (bb_reachable(bb)) {
929 struct instruction *store = alloc_typed_instruction(OP_STORE, ad->source_type);
930 store->offset = ad->offset;
931 use_pseudo(store, value, &store->target);
932 use_pseudo(store, ad->address, &store->src);
933 add_one_insn(ep, store);
937 static pseudo_t linearize_store_gen(struct entrypoint *ep,
938 pseudo_t value,
939 struct access_data *ad)
941 pseudo_t store = value;
943 if (type_size(ad->source_type) != type_size(ad->result_type)) {
944 pseudo_t orig = add_load(ep, ad);
945 int shift = ad->bit_offset;
946 unsigned long long mask = (1ULL << ad->bit_size)-1;
948 if (shift) {
949 store = add_binary_op(ep, ad->source_type, OP_SHL, value, value_pseudo(shift));
950 mask <<= shift;
952 orig = add_binary_op(ep, ad->source_type, OP_AND, orig, value_pseudo(~mask));
953 store = add_binary_op(ep, ad->source_type, OP_OR, orig, store);
955 add_store(ep, ad, store);
956 return value;
959 static pseudo_t add_binary_op(struct entrypoint *ep, struct symbol *ctype, int op, pseudo_t left, pseudo_t right)
961 struct instruction *insn = alloc_typed_instruction(op, ctype);
962 pseudo_t target = alloc_pseudo(insn);
963 insn->target = target;
964 use_pseudo(insn, left, &insn->src1);
965 use_pseudo(insn, right, &insn->src2);
966 add_one_insn(ep, insn);
967 return target;
970 static pseudo_t add_setval(struct entrypoint *ep, struct symbol *ctype, struct expression *val)
972 struct instruction *insn = alloc_typed_instruction(OP_SETVAL, ctype);
973 pseudo_t target = alloc_pseudo(insn);
974 insn->target = target;
975 insn->val = val;
976 add_one_insn(ep, insn);
977 return target;
980 static pseudo_t add_symbol_address(struct entrypoint *ep, struct symbol *sym)
982 struct instruction *insn = alloc_instruction(OP_SYMADDR, bits_in_pointer);
983 pseudo_t target = alloc_pseudo(insn);
985 insn->target = target;
986 use_pseudo(insn, symbol_pseudo(ep, sym), &insn->symbol);
987 add_one_insn(ep, insn);
988 return target;
991 static pseudo_t linearize_load_gen(struct entrypoint *ep, struct access_data *ad)
993 pseudo_t new = add_load(ep, ad);
995 if (ad->bit_offset) {
996 pseudo_t shift = value_pseudo(ad->bit_offset);
997 pseudo_t newval = add_binary_op(ep, ad->source_type, OP_LSR, new, shift);
998 new = newval;
1001 return new;
1004 static pseudo_t linearize_access(struct entrypoint *ep, struct expression *expr)
1006 struct access_data ad = { NULL, };
1007 pseudo_t value;
1009 if (!linearize_address_gen(ep, expr, &ad))
1010 return VOID;
1011 value = linearize_load_gen(ep, &ad);
1012 finish_address_gen(ep, &ad);
1013 return value;
1016 /* FIXME: FP */
1017 static pseudo_t linearize_inc_dec(struct entrypoint *ep, struct expression *expr, int postop)
1019 struct access_data ad = { NULL, };
1020 pseudo_t old, new, one;
1021 int op = expr->op == SPECIAL_INCREMENT ? OP_ADD : OP_SUB;
1023 if (!linearize_address_gen(ep, expr->unop, &ad))
1024 return VOID;
1026 old = linearize_load_gen(ep, &ad);
1027 one = value_pseudo(expr->op_value);
1028 new = add_binary_op(ep, expr->ctype, op, old, one);
1029 linearize_store_gen(ep, new, &ad);
1030 finish_address_gen(ep, &ad);
1031 return postop ? old : new;
1034 static pseudo_t add_uniop(struct entrypoint *ep, struct expression *expr, int op, pseudo_t src)
1036 struct instruction *insn = alloc_typed_instruction(op, expr->ctype);
1037 pseudo_t new = alloc_pseudo(insn);
1039 insn->target = new;
1040 use_pseudo(insn, src, &insn->src1);
1041 add_one_insn(ep, insn);
1042 return new;
1045 static pseudo_t linearize_slice(struct entrypoint *ep, struct expression *expr)
1047 pseudo_t pre = linearize_expression(ep, expr->base);
1048 struct instruction *insn = alloc_typed_instruction(OP_SLICE, expr->ctype);
1049 pseudo_t new = alloc_pseudo(insn);
1051 insn->target = new;
1052 insn->from = expr->r_bitpos;
1053 insn->len = expr->r_nrbits;
1054 use_pseudo(insn, pre, &insn->base);
1055 add_one_insn(ep, insn);
1056 return new;
1059 static pseudo_t linearize_regular_preop(struct entrypoint *ep, struct expression *expr)
1061 pseudo_t pre = linearize_expression(ep, expr->unop);
1062 switch (expr->op) {
1063 case '+':
1064 return pre;
1065 case '!': {
1066 pseudo_t zero = value_pseudo(0);
1067 return add_binary_op(ep, expr->unop->ctype, OP_SET_EQ, pre, zero);
1069 case '~':
1070 return add_uniop(ep, expr, OP_NOT, pre);
1071 case '-':
1072 return add_uniop(ep, expr, OP_NEG, pre);
1074 return VOID;
1077 static pseudo_t linearize_preop(struct entrypoint *ep, struct expression *expr)
1080 * '*' is an lvalue access, and is fundamentally different
1081 * from an arithmetic operation. Maybe it should have an
1082 * expression type of its own..
1084 if (expr->op == '*')
1085 return linearize_access(ep, expr);
1086 if (expr->op == SPECIAL_INCREMENT || expr->op == SPECIAL_DECREMENT)
1087 return linearize_inc_dec(ep, expr, 0);
1088 return linearize_regular_preop(ep, expr);
1091 static pseudo_t linearize_postop(struct entrypoint *ep, struct expression *expr)
1093 return linearize_inc_dec(ep, expr, 1);
1097 * Casts to pointers are "less safe" than other casts, since
1098 * they imply type-unsafe accesses. "void *" is a special
1099 * case, since you can't access through it anyway without another
1100 * cast.
1102 static struct instruction *alloc_cast_instruction(struct symbol *src, struct symbol *ctype)
1104 int opcode = OP_CAST;
1105 struct symbol *base = src;
1107 if (base->ctype.modifiers & MOD_SIGNED)
1108 opcode = OP_SCAST;
1109 if (base->type == SYM_NODE)
1110 base = base->ctype.base_type;
1111 if (base->type == SYM_PTR) {
1112 base = base->ctype.base_type;
1113 if (base != &void_ctype)
1114 opcode = OP_PTRCAST;
1116 if (base->ctype.base_type == &fp_type)
1117 opcode = OP_FPCAST;
1118 return alloc_typed_instruction(opcode, ctype);
1121 static pseudo_t cast_pseudo(struct entrypoint *ep, pseudo_t src, struct symbol *from, struct symbol *to)
1123 pseudo_t result;
1124 struct instruction *insn;
1126 if (src == VOID)
1127 return VOID;
1128 if (!from || !to)
1129 return VOID;
1130 if (from->bit_size < 0 || to->bit_size < 0)
1131 return VOID;
1132 insn = alloc_cast_instruction(from, to);
1133 result = alloc_pseudo(insn);
1134 insn->target = result;
1135 insn->orig_type = from;
1136 use_pseudo(insn, src, &insn->src);
1137 add_one_insn(ep, insn);
1138 return result;
1141 static int opcode_sign(int opcode, struct symbol *ctype)
1143 if (ctype && (ctype->ctype.modifiers & MOD_SIGNED)) {
1144 switch(opcode) {
1145 case OP_MULU: case OP_DIVU: case OP_MODU: case OP_LSR:
1146 opcode++;
1149 return opcode;
1152 static pseudo_t linearize_assignment(struct entrypoint *ep, struct expression *expr)
1154 struct access_data ad = { NULL, };
1155 struct expression *target = expr->left;
1156 struct expression *src = expr->right;
1157 pseudo_t value;
1159 value = linearize_expression(ep, src);
1160 if (!target || !linearize_address_gen(ep, target, &ad))
1161 return value;
1162 if (expr->op != '=') {
1163 pseudo_t oldvalue = linearize_load_gen(ep, &ad);
1164 pseudo_t dst;
1165 static const int op_trans[] = {
1166 [SPECIAL_ADD_ASSIGN - SPECIAL_BASE] = OP_ADD,
1167 [SPECIAL_SUB_ASSIGN - SPECIAL_BASE] = OP_SUB,
1168 [SPECIAL_MUL_ASSIGN - SPECIAL_BASE] = OP_MULU,
1169 [SPECIAL_DIV_ASSIGN - SPECIAL_BASE] = OP_DIVU,
1170 [SPECIAL_MOD_ASSIGN - SPECIAL_BASE] = OP_MODU,
1171 [SPECIAL_SHL_ASSIGN - SPECIAL_BASE] = OP_SHL,
1172 [SPECIAL_SHR_ASSIGN - SPECIAL_BASE] = OP_LSR,
1173 [SPECIAL_AND_ASSIGN - SPECIAL_BASE] = OP_AND,
1174 [SPECIAL_OR_ASSIGN - SPECIAL_BASE] = OP_OR,
1175 [SPECIAL_XOR_ASSIGN - SPECIAL_BASE] = OP_XOR
1177 int opcode;
1179 if (!src)
1180 return VOID;
1182 oldvalue = cast_pseudo(ep, oldvalue, src->ctype, expr->ctype);
1183 opcode = opcode_sign(op_trans[expr->op - SPECIAL_BASE], src->ctype);
1184 dst = add_binary_op(ep, src->ctype, opcode, oldvalue, value);
1185 value = cast_pseudo(ep, dst, expr->ctype, src->ctype);
1187 value = linearize_store_gen(ep, value, &ad);
1188 finish_address_gen(ep, &ad);
1189 return value;
1192 static pseudo_t linearize_call_expression(struct entrypoint *ep, struct expression *expr)
1194 struct expression *arg, *fn;
1195 struct instruction *insn = alloc_typed_instruction(OP_CALL, expr->ctype);
1196 pseudo_t retval, call;
1197 struct ctype *ctype = NULL;
1198 struct context *context;
1200 if (!expr->ctype) {
1201 warning(expr->pos, "call with no type!");
1202 return VOID;
1205 FOR_EACH_PTR(expr->args, arg) {
1206 pseudo_t new = linearize_expression(ep, arg);
1207 use_pseudo(insn, new, add_pseudo(&insn->arguments, new));
1208 } END_FOR_EACH_PTR(arg);
1210 fn = expr->fn;
1212 if (fn->ctype)
1213 ctype = &fn->ctype->ctype;
1215 if (fn->type == EXPR_PREOP) {
1216 if (fn->unop->type == EXPR_SYMBOL) {
1217 struct symbol *sym = fn->unop->symbol;
1218 if (sym->ctype.base_type->type == SYM_FN)
1219 fn = fn->unop;
1222 if (fn->type == EXPR_SYMBOL) {
1223 call = symbol_pseudo(ep, fn->symbol);
1224 } else {
1225 call = linearize_expression(ep, fn);
1227 use_pseudo(insn, call, &insn->func);
1228 retval = VOID;
1229 if (expr->ctype != &void_ctype)
1230 retval = alloc_pseudo(insn);
1231 insn->target = retval;
1232 add_one_insn(ep, insn);
1234 if (ctype) {
1235 FOR_EACH_PTR(ctype->contexts, context) {
1236 int in = context->in;
1237 int out = context->out;
1238 int check = 0;
1239 int context_diff;
1240 if (in < 0) {
1241 check = 1;
1242 in = 0;
1244 if (out < 0) {
1245 check = 0;
1246 out = 0;
1248 context_diff = out - in;
1249 if (check || context_diff) {
1250 insn = alloc_instruction(OP_CONTEXT, 0);
1251 insn->increment = context_diff;
1252 insn->check = check;
1253 insn->context_expr = context->context;
1254 add_one_insn(ep, insn);
1256 } END_FOR_EACH_PTR(context);
1259 return retval;
1262 static pseudo_t linearize_binop(struct entrypoint *ep, struct expression *expr)
1264 pseudo_t src1, src2, dst;
1265 static const int opcode[] = {
1266 ['+'] = OP_ADD, ['-'] = OP_SUB,
1267 ['*'] = OP_MULU, ['/'] = OP_DIVU,
1268 ['%'] = OP_MODU, ['&'] = OP_AND,
1269 ['|'] = OP_OR, ['^'] = OP_XOR,
1270 [SPECIAL_LEFTSHIFT] = OP_SHL,
1271 [SPECIAL_RIGHTSHIFT] = OP_LSR,
1272 [SPECIAL_LOGICAL_AND] = OP_AND_BOOL,
1273 [SPECIAL_LOGICAL_OR] = OP_OR_BOOL,
1275 int op;
1277 src1 = linearize_expression(ep, expr->left);
1278 src2 = linearize_expression(ep, expr->right);
1279 op = opcode_sign(opcode[expr->op], expr->ctype);
1280 dst = add_binary_op(ep, expr->ctype, op, src1, src2);
1281 return dst;
1284 static pseudo_t linearize_logical_branch(struct entrypoint *ep, struct expression *expr, struct basic_block *bb_true, struct basic_block *bb_false);
1286 pseudo_t linearize_cond_branch(struct entrypoint *ep, struct expression *expr, struct basic_block *bb_true, struct basic_block *bb_false);
1288 static pseudo_t linearize_select(struct entrypoint *ep, struct expression *expr)
1290 pseudo_t cond, true, false, res;
1291 struct instruction *insn;
1293 true = linearize_expression(ep, expr->cond_true);
1294 false = linearize_expression(ep, expr->cond_false);
1295 cond = linearize_expression(ep, expr->conditional);
1297 insn = alloc_typed_instruction(OP_SEL, expr->ctype);
1298 if (!expr->cond_true)
1299 true = cond;
1300 use_pseudo(insn, cond, &insn->src1);
1301 use_pseudo(insn, true, &insn->src2);
1302 use_pseudo(insn, false, &insn->src3);
1304 res = alloc_pseudo(insn);
1305 insn->target = res;
1306 add_one_insn(ep, insn);
1307 return res;
1310 static pseudo_t add_join_conditional(struct entrypoint *ep, struct expression *expr,
1311 pseudo_t phi1, pseudo_t phi2)
1313 pseudo_t target;
1314 struct instruction *phi_node;
1316 if (phi1 == VOID)
1317 return phi2;
1318 if (phi2 == VOID)
1319 return phi1;
1321 phi_node = alloc_typed_instruction(OP_PHI, expr->ctype);
1322 use_pseudo(phi_node, phi1, add_pseudo(&phi_node->phi_list, phi1));
1323 use_pseudo(phi_node, phi2, add_pseudo(&phi_node->phi_list, phi2));
1324 phi_node->target = target = alloc_pseudo(phi_node);
1325 add_one_insn(ep, phi_node);
1326 return target;
1329 static pseudo_t linearize_short_conditional(struct entrypoint *ep, struct expression *expr,
1330 struct expression *cond,
1331 struct expression *expr_false)
1333 pseudo_t src1, src2;
1334 struct basic_block *bb_false;
1335 struct basic_block *merge = alloc_basic_block(ep, expr->pos);
1336 pseudo_t phi1, phi2;
1337 int size = type_size(expr->ctype);
1339 if (!expr_false || !ep->active)
1340 return VOID;
1342 bb_false = alloc_basic_block(ep, expr_false->pos);
1343 src1 = linearize_expression(ep, cond);
1344 phi1 = alloc_phi(ep->active, src1, size);
1345 add_branch(ep, expr, src1, merge, bb_false);
1347 set_activeblock(ep, bb_false);
1348 src2 = linearize_expression(ep, expr_false);
1349 phi2 = alloc_phi(ep->active, src2, size);
1350 set_activeblock(ep, merge);
1352 return add_join_conditional(ep, expr, phi1, phi2);
1355 static pseudo_t linearize_conditional(struct entrypoint *ep, struct expression *expr,
1356 struct expression *cond,
1357 struct expression *expr_true,
1358 struct expression *expr_false)
1360 pseudo_t src1, src2;
1361 pseudo_t phi1, phi2;
1362 struct basic_block *bb_true, *bb_false, *merge;
1363 int size = type_size(expr->ctype);
1365 if (!cond || !expr_true || !expr_false || !ep->active)
1366 return VOID;
1367 bb_true = alloc_basic_block(ep, expr_true->pos);
1368 bb_false = alloc_basic_block(ep, expr_false->pos);
1369 merge = alloc_basic_block(ep, expr->pos);
1371 linearize_cond_branch(ep, cond, bb_true, bb_false);
1373 set_activeblock(ep, bb_true);
1374 src1 = linearize_expression(ep, expr_true);
1375 phi1 = alloc_phi(ep->active, src1, size);
1376 add_goto(ep, merge);
1378 set_activeblock(ep, bb_false);
1379 src2 = linearize_expression(ep, expr_false);
1380 phi2 = alloc_phi(ep->active, src2, size);
1381 set_activeblock(ep, merge);
1383 return add_join_conditional(ep, expr, phi1, phi2);
1386 static pseudo_t linearize_logical(struct entrypoint *ep, struct expression *expr)
1388 struct expression *shortcut;
1390 shortcut = alloc_const_expression(expr->pos, expr->op == SPECIAL_LOGICAL_OR);
1391 shortcut->ctype = expr->ctype;
1392 if (expr->op == SPECIAL_LOGICAL_OR)
1393 return linearize_conditional(ep, expr, expr->left, shortcut, expr->right);
1394 return linearize_conditional(ep, expr, expr->left, expr->right, shortcut);
1397 static pseudo_t linearize_compare(struct entrypoint *ep, struct expression *expr)
1399 static const int cmpop[] = {
1400 ['>'] = OP_SET_GT, ['<'] = OP_SET_LT,
1401 [SPECIAL_EQUAL] = OP_SET_EQ,
1402 [SPECIAL_NOTEQUAL] = OP_SET_NE,
1403 [SPECIAL_GTE] = OP_SET_GE,
1404 [SPECIAL_LTE] = OP_SET_LE,
1405 [SPECIAL_UNSIGNED_LT] = OP_SET_B,
1406 [SPECIAL_UNSIGNED_GT] = OP_SET_A,
1407 [SPECIAL_UNSIGNED_LTE] = OP_SET_BE,
1408 [SPECIAL_UNSIGNED_GTE] = OP_SET_AE,
1411 pseudo_t src1 = linearize_expression(ep, expr->left);
1412 pseudo_t src2 = linearize_expression(ep, expr->right);
1413 pseudo_t dst = add_binary_op(ep, expr->left->ctype, cmpop[expr->op], src1, src2);
1414 return dst;
1418 pseudo_t linearize_cond_branch(struct entrypoint *ep, struct expression *expr, struct basic_block *bb_true, struct basic_block *bb_false)
1420 pseudo_t cond;
1422 if (!expr || !bb_reachable(ep->active))
1423 return VOID;
1425 switch (expr->type) {
1427 case EXPR_STRING:
1428 case EXPR_VALUE:
1429 add_goto(ep, expr->value ? bb_true : bb_false);
1430 return VOID;
1432 case EXPR_FVALUE:
1433 add_goto(ep, expr->fvalue ? bb_true : bb_false);
1434 return VOID;
1436 case EXPR_LOGICAL:
1437 linearize_logical_branch(ep, expr, bb_true, bb_false);
1438 return VOID;
1440 case EXPR_COMPARE:
1441 cond = linearize_compare(ep, expr);
1442 add_branch(ep, expr, cond, bb_true, bb_false);
1443 break;
1445 case EXPR_PREOP:
1446 if (expr->op == '!')
1447 return linearize_cond_branch(ep, expr->unop, bb_false, bb_true);
1448 /* fall through */
1449 default: {
1450 cond = linearize_expression(ep, expr);
1451 add_branch(ep, expr, cond, bb_true, bb_false);
1453 return VOID;
1456 return VOID;
1461 static pseudo_t linearize_logical_branch(struct entrypoint *ep, struct expression *expr, struct basic_block *bb_true, struct basic_block *bb_false)
1463 struct basic_block *next = alloc_basic_block(ep, expr->pos);
1465 if (expr->op == SPECIAL_LOGICAL_OR)
1466 linearize_cond_branch(ep, expr->left, bb_true, next);
1467 else
1468 linearize_cond_branch(ep, expr->left, next, bb_false);
1469 set_activeblock(ep, next);
1470 linearize_cond_branch(ep, expr->right, bb_true, bb_false);
1471 return VOID;
1474 static pseudo_t linearize_cast(struct entrypoint *ep, struct expression *expr)
1476 pseudo_t src;
1477 struct expression *orig = expr->cast_expression;
1479 if (!orig)
1480 return VOID;
1482 src = linearize_expression(ep, orig);
1483 return cast_pseudo(ep, src, orig->ctype, expr->ctype);
1486 static pseudo_t linearize_position(struct entrypoint *ep, struct expression *pos, struct access_data *ad)
1488 struct expression *init_expr = pos->init_expr;
1490 ad->offset = pos->init_offset;
1491 ad->source_type = base_type(init_expr->ctype);
1492 ad->result_type = init_expr->ctype;
1493 return linearize_initializer(ep, init_expr, ad);
1496 static pseudo_t linearize_initializer(struct entrypoint *ep, struct expression *initializer, struct access_data *ad)
1498 switch (initializer->type) {
1499 case EXPR_INITIALIZER: {
1500 struct expression *expr;
1501 FOR_EACH_PTR(initializer->expr_list, expr) {
1502 linearize_initializer(ep, expr, ad);
1503 } END_FOR_EACH_PTR(expr);
1504 break;
1506 case EXPR_POS:
1507 linearize_position(ep, initializer, ad);
1508 break;
1509 default: {
1510 pseudo_t value = linearize_expression(ep, initializer);
1511 ad->source_type = base_type(initializer->ctype);
1512 ad->result_type = initializer->ctype;
1513 linearize_store_gen(ep, value, ad);
1514 return value;
1518 return VOID;
1521 static void linearize_argument(struct entrypoint *ep, struct symbol *arg, int nr)
1523 struct access_data ad = { NULL, };
1525 ad.source_type = arg;
1526 ad.result_type = arg;
1527 ad.address = symbol_pseudo(ep, arg);
1528 linearize_store_gen(ep, argument_pseudo(ep, nr), &ad);
1529 finish_address_gen(ep, &ad);
1532 pseudo_t linearize_expression(struct entrypoint *ep, struct expression *expr)
1534 if (!expr)
1535 return VOID;
1537 current_pos = expr->pos;
1538 switch (expr->type) {
1539 case EXPR_SYMBOL:
1540 linearize_one_symbol(ep, expr->symbol);
1541 return add_symbol_address(ep, expr->symbol);
1543 case EXPR_VALUE:
1544 return value_pseudo(expr->value);
1546 case EXPR_STRING: case EXPR_FVALUE: case EXPR_LABEL:
1547 return add_setval(ep, expr->ctype, expr);
1549 case EXPR_STATEMENT:
1550 return linearize_statement(ep, expr->statement);
1552 case EXPR_CALL:
1553 return linearize_call_expression(ep, expr);
1555 case EXPR_BINOP:
1556 return linearize_binop(ep, expr);
1558 case EXPR_LOGICAL:
1559 return linearize_logical(ep, expr);
1561 case EXPR_COMPARE:
1562 return linearize_compare(ep, expr);
1564 case EXPR_SELECT:
1565 return linearize_select(ep, expr);
1567 case EXPR_CONDITIONAL:
1568 if (!expr->cond_true)
1569 return linearize_short_conditional(ep, expr, expr->conditional, expr->cond_false);
1571 return linearize_conditional(ep, expr, expr->conditional,
1572 expr->cond_true, expr->cond_false);
1574 case EXPR_COMMA:
1575 linearize_expression(ep, expr->left);
1576 return linearize_expression(ep, expr->right);
1578 case EXPR_ASSIGNMENT:
1579 return linearize_assignment(ep, expr);
1581 case EXPR_PREOP:
1582 return linearize_preop(ep, expr);
1584 case EXPR_POSTOP:
1585 return linearize_postop(ep, expr);
1587 case EXPR_CAST:
1588 case EXPR_FORCE_CAST:
1589 case EXPR_IMPLIED_CAST:
1590 return linearize_cast(ep, expr);
1592 case EXPR_SLICE:
1593 return linearize_slice(ep, expr);
1595 case EXPR_INITIALIZER:
1596 case EXPR_POS:
1597 warning(expr->pos, "unexpected initializer expression (%d %d)", expr->type, expr->op);
1598 return VOID;
1599 default:
1600 warning(expr->pos, "unknown expression (%d %d)", expr->type, expr->op);
1601 return VOID;
1603 return VOID;
1606 static pseudo_t linearize_one_symbol(struct entrypoint *ep, struct symbol *sym)
1608 struct access_data ad = { NULL, };
1609 pseudo_t value;
1611 if (!sym || !sym->initializer || sym->initialized)
1612 return VOID;
1614 /* We need to output these puppies some day too.. */
1615 if (sym->ctype.modifiers & (MOD_STATIC | MOD_TOPLEVEL))
1616 return VOID;
1618 sym->initialized = 1;
1619 ad.address = symbol_pseudo(ep, sym);
1620 value = linearize_initializer(ep, sym->initializer, &ad);
1621 finish_address_gen(ep, &ad);
1622 return value;
1625 static pseudo_t linearize_compound_statement(struct entrypoint *ep, struct statement *stmt)
1627 pseudo_t pseudo;
1628 struct statement *s;
1629 struct symbol *ret = stmt->ret;
1631 pseudo = VOID;
1632 FOR_EACH_PTR(stmt->stmts, s) {
1633 pseudo = linearize_statement(ep, s);
1634 } END_FOR_EACH_PTR(s);
1636 if (ret) {
1637 struct basic_block *bb = add_label(ep, ret);
1638 struct instruction *phi_node = first_instruction(bb->insns);
1640 if (!phi_node)
1641 return pseudo;
1643 if (pseudo_list_size(phi_node->phi_list)==1) {
1644 pseudo = first_pseudo(phi_node->phi_list);
1645 assert(pseudo->type == PSEUDO_PHI);
1646 return pseudo->def->src1;
1648 return phi_node->target;
1651 return pseudo;
1654 static pseudo_t linearize_inlined_call(struct entrypoint *ep, struct statement *stmt)
1656 struct instruction *insn = alloc_instruction(OP_INLINED_CALL, 0);
1657 struct statement *args = stmt->args;
1658 struct basic_block *bb;
1659 pseudo_t pseudo;
1661 if (args) {
1662 struct symbol *sym;
1664 concat_symbol_list(args->declaration, &ep->syms);
1665 FOR_EACH_PTR(args->declaration, sym) {
1666 pseudo_t value = linearize_one_symbol(ep, sym);
1667 use_pseudo(insn, value, add_pseudo(&insn->arguments, value));
1668 } END_FOR_EACH_PTR(sym);
1671 insn->target = pseudo = linearize_compound_statement(ep, stmt);
1672 use_pseudo(insn, symbol_pseudo(ep, stmt->inline_fn), &insn->func);
1673 bb = ep->active;
1674 if (bb && !bb->insns)
1675 bb->pos = stmt->pos;
1676 add_one_insn(ep, insn);
1677 return pseudo;
1680 static pseudo_t linearize_context(struct entrypoint *ep, struct statement *stmt)
1682 struct instruction *insn = alloc_instruction(OP_CONTEXT, 0);
1683 struct expression *expr = stmt->expression;
1684 int value = 0;
1686 if (expr->type == EXPR_VALUE)
1687 value = expr->value;
1689 insn->increment = value;
1690 insn->context_expr = stmt->context;
1691 add_one_insn(ep, insn);
1692 return VOID;
1695 static pseudo_t linearize_range(struct entrypoint *ep, struct statement *stmt)
1697 struct instruction *insn = alloc_instruction(OP_RANGE, 0);
1699 use_pseudo(insn, linearize_expression(ep, stmt->range_expression), &insn->src1);
1700 use_pseudo(insn, linearize_expression(ep, stmt->range_low), &insn->src2);
1701 use_pseudo(insn, linearize_expression(ep, stmt->range_high), &insn->src3);
1702 add_one_insn(ep, insn);
1703 return VOID;
1706 ALLOCATOR(asm_rules, "asm rules");
1707 ALLOCATOR(asm_constraint, "asm constraints");
1709 static void add_asm_input(struct entrypoint *ep, struct instruction *insn, struct expression *expr,
1710 const char *constraint, const struct ident *ident)
1712 pseudo_t pseudo = linearize_expression(ep, expr);
1713 struct asm_constraint *rule = __alloc_asm_constraint(0);
1715 rule->ident = ident;
1716 rule->constraint = constraint;
1717 use_pseudo(insn, pseudo, &rule->pseudo);
1718 add_ptr_list(&insn->asm_rules->inputs, rule);
1721 static void add_asm_output(struct entrypoint *ep, struct instruction *insn, struct expression *expr,
1722 const char *constraint, const struct ident *ident)
1724 struct access_data ad = { NULL, };
1725 pseudo_t pseudo = alloc_pseudo(insn);
1726 struct asm_constraint *rule;
1728 if (!expr || !linearize_address_gen(ep, expr, &ad))
1729 return;
1730 linearize_store_gen(ep, pseudo, &ad);
1731 finish_address_gen(ep, &ad);
1732 rule = __alloc_asm_constraint(0);
1733 rule->ident = ident;
1734 rule->constraint = constraint;
1735 use_pseudo(insn, pseudo, &rule->pseudo);
1736 add_ptr_list(&insn->asm_rules->outputs, rule);
1739 static pseudo_t linearize_asm_statement(struct entrypoint *ep, struct statement *stmt)
1741 int state;
1742 struct expression *expr;
1743 struct instruction *insn;
1744 struct asm_rules *rules;
1745 const char *constraint;
1746 struct ident *ident;
1748 insn = alloc_instruction(OP_ASM, 0);
1749 expr = stmt->asm_string;
1750 if (!expr || expr->type != EXPR_STRING) {
1751 warning(stmt->pos, "expected string in inline asm");
1752 return VOID;
1754 insn->string = expr->string->data;
1756 rules = __alloc_asm_rules(0);
1757 insn->asm_rules = rules;
1759 /* Gather the inputs.. */
1760 state = 0;
1761 ident = NULL;
1762 constraint = NULL;
1763 FOR_EACH_PTR(stmt->asm_inputs, expr) {
1764 switch (state) {
1765 case 0: /* Identifier */
1766 state = 1;
1767 ident = (struct ident *)expr;
1768 continue;
1770 case 1: /* Constraint */
1771 state = 2;
1772 constraint = expr ? expr->string->data : "";
1773 continue;
1775 case 2: /* Expression */
1776 state = 0;
1777 add_asm_input(ep, insn, expr, constraint, ident);
1779 } END_FOR_EACH_PTR(expr);
1781 add_one_insn(ep, insn);
1783 /* Assign the outputs */
1784 state = 0;
1785 ident = NULL;
1786 constraint = NULL;
1787 FOR_EACH_PTR(stmt->asm_outputs, expr) {
1788 switch (state) {
1789 case 0: /* Identifier */
1790 state = 1;
1791 ident = (struct ident *)expr;
1792 continue;
1794 case 1: /* Constraint */
1795 state = 2;
1796 constraint = expr ? expr->string->data : "";
1797 continue;
1799 case 2:
1800 state = 0;
1801 add_asm_output(ep, insn, expr, constraint, ident);
1803 } END_FOR_EACH_PTR(expr);
1805 return VOID;
1808 static int multijmp_cmp(const void *_a, const void *_b)
1810 const struct multijmp *a = _a;
1811 const struct multijmp *b = _b;
1813 // "default" case?
1814 if (a->begin > a->end) {
1815 if (b->begin > b->end)
1816 return 0;
1817 return 1;
1819 if (b->begin > b->end)
1820 return -1;
1821 if (a->begin == b->begin) {
1822 if (a->end == b->end)
1823 return 0;
1824 return (a->end < b->end) ? -1 : 1;
1826 return a->begin < b->begin ? -1 : 1;
1829 static void sort_switch_cases(struct instruction *insn)
1831 sort_list((struct ptr_list **)&insn->multijmp_list, multijmp_cmp);
1834 static pseudo_t linearize_declaration(struct entrypoint *ep, struct statement *stmt)
1836 struct symbol *sym;
1838 concat_symbol_list(stmt->declaration, &ep->syms);
1840 FOR_EACH_PTR(stmt->declaration, sym) {
1841 linearize_one_symbol(ep, sym);
1842 } END_FOR_EACH_PTR(sym);
1843 return VOID;
1846 pseudo_t linearize_statement(struct entrypoint *ep, struct statement *stmt)
1848 struct basic_block *bb;
1850 if (!stmt)
1851 return VOID;
1853 bb = ep->active;
1854 if (bb && !bb->insns)
1855 bb->pos = stmt->pos;
1856 current_pos = stmt->pos;
1858 switch (stmt->type) {
1859 case STMT_NONE:
1860 break;
1862 case STMT_DECLARATION:
1863 return linearize_declaration(ep, stmt);
1865 case STMT_CONTEXT:
1866 return linearize_context(ep, stmt);
1868 case STMT_RANGE:
1869 return linearize_range(ep, stmt);
1871 case STMT_EXPRESSION:
1872 return linearize_expression(ep, stmt->expression);
1874 case STMT_ASM:
1875 return linearize_asm_statement(ep, stmt);
1877 case STMT_RETURN: {
1878 struct expression *expr = stmt->expression;
1879 struct basic_block *bb_return = get_bound_block(ep, stmt->ret_target);
1880 struct basic_block *active;
1881 pseudo_t src = linearize_expression(ep, expr);
1882 active = ep->active;
1883 if (active && src != &void_pseudo) {
1884 struct instruction *phi_node = first_instruction(bb_return->insns);
1885 pseudo_t phi;
1886 if (!phi_node) {
1887 phi_node = alloc_typed_instruction(OP_PHI, expr->ctype);
1888 phi_node->target = alloc_pseudo(phi_node);
1889 phi_node->bb = bb_return;
1890 add_instruction(&bb_return->insns, phi_node);
1892 phi = alloc_phi(active, src, type_size(expr->ctype));
1893 phi->ident = &return_ident;
1894 use_pseudo(phi_node, phi, add_pseudo(&phi_node->phi_list, phi));
1896 add_goto(ep, bb_return);
1897 return VOID;
1900 case STMT_CASE: {
1901 add_label(ep, stmt->case_label);
1902 linearize_statement(ep, stmt->case_statement);
1903 break;
1906 case STMT_LABEL: {
1907 struct symbol *label = stmt->label_identifier;
1909 if (label->used) {
1910 add_label(ep, label);
1911 linearize_statement(ep, stmt->label_statement);
1913 break;
1916 case STMT_GOTO: {
1917 struct symbol *sym;
1918 struct expression *expr;
1919 struct instruction *goto_ins;
1920 struct basic_block *active;
1921 pseudo_t pseudo;
1923 active = ep->active;
1924 if (!bb_reachable(active))
1925 break;
1927 if (stmt->goto_label) {
1928 add_goto(ep, get_bound_block(ep, stmt->goto_label));
1929 break;
1932 expr = stmt->goto_expression;
1933 if (!expr)
1934 break;
1936 /* This can happen as part of simplification */
1937 if (expr->type == EXPR_LABEL) {
1938 add_goto(ep, get_bound_block(ep, expr->label_symbol));
1939 break;
1942 pseudo = linearize_expression(ep, expr);
1943 goto_ins = alloc_instruction(OP_COMPUTEDGOTO, 0);
1944 use_pseudo(goto_ins, pseudo, &goto_ins->target);
1945 add_one_insn(ep, goto_ins);
1947 FOR_EACH_PTR(stmt->target_list, sym) {
1948 struct basic_block *bb_computed = get_bound_block(ep, sym);
1949 struct multijmp *jmp = alloc_multijmp(bb_computed, 1, 0);
1950 add_multijmp(&goto_ins->multijmp_list, jmp);
1951 add_bb(&bb_computed->parents, ep->active);
1952 add_bb(&active->children, bb_computed);
1953 } END_FOR_EACH_PTR(sym);
1955 finish_block(ep);
1956 break;
1959 case STMT_COMPOUND:
1960 if (stmt->inline_fn)
1961 return linearize_inlined_call(ep, stmt);
1962 return linearize_compound_statement(ep, stmt);
1965 * This could take 'likely/unlikely' into account, and
1966 * switch the arms around appropriately..
1968 case STMT_IF: {
1969 struct basic_block *bb_true, *bb_false, *endif;
1970 struct expression *cond = stmt->if_conditional;
1972 bb_true = alloc_basic_block(ep, stmt->pos);
1973 bb_false = endif = alloc_basic_block(ep, stmt->pos);
1975 linearize_cond_branch(ep, cond, bb_true, bb_false);
1977 set_activeblock(ep, bb_true);
1978 linearize_statement(ep, stmt->if_true);
1980 if (stmt->if_false) {
1981 endif = alloc_basic_block(ep, stmt->pos);
1982 add_goto(ep, endif);
1983 set_activeblock(ep, bb_false);
1984 linearize_statement(ep, stmt->if_false);
1986 set_activeblock(ep, endif);
1987 break;
1990 case STMT_SWITCH: {
1991 struct symbol *sym;
1992 struct instruction *switch_ins;
1993 struct basic_block *switch_end = alloc_basic_block(ep, stmt->pos);
1994 struct basic_block *active, *default_case;
1995 struct multijmp *jmp;
1996 pseudo_t pseudo;
1998 pseudo = linearize_expression(ep, stmt->switch_expression);
2000 active = ep->active;
2001 if (!bb_reachable(active))
2002 break;
2004 switch_ins = alloc_instruction(OP_SWITCH, 0);
2005 use_pseudo(switch_ins, pseudo, &switch_ins->cond);
2006 add_one_insn(ep, switch_ins);
2007 finish_block(ep);
2009 default_case = NULL;
2010 FOR_EACH_PTR(stmt->switch_case->symbol_list, sym) {
2011 struct statement *case_stmt = sym->stmt;
2012 struct basic_block *bb_case = get_bound_block(ep, sym);
2014 if (!case_stmt->case_expression) {
2015 default_case = bb_case;
2016 continue;
2017 } else {
2018 int begin, end;
2020 begin = end = case_stmt->case_expression->value;
2021 if (case_stmt->case_to)
2022 end = case_stmt->case_to->value;
2023 if (begin > end)
2024 jmp = alloc_multijmp(bb_case, end, begin);
2025 else
2026 jmp = alloc_multijmp(bb_case, begin, end);
2029 add_multijmp(&switch_ins->multijmp_list, jmp);
2030 add_bb(&bb_case->parents, active);
2031 add_bb(&active->children, bb_case);
2032 } END_FOR_EACH_PTR(sym);
2034 bind_label(stmt->switch_break, switch_end, stmt->pos);
2036 /* And linearize the actual statement */
2037 linearize_statement(ep, stmt->switch_statement);
2038 set_activeblock(ep, switch_end);
2040 if (!default_case)
2041 default_case = switch_end;
2043 jmp = alloc_multijmp(default_case, 1, 0);
2044 add_multijmp(&switch_ins->multijmp_list, jmp);
2045 add_bb(&default_case->parents, active);
2046 add_bb(&active->children, default_case);
2047 sort_switch_cases(switch_ins);
2049 break;
2052 case STMT_ITERATOR: {
2053 struct statement *pre_statement = stmt->iterator_pre_statement;
2054 struct expression *pre_condition = stmt->iterator_pre_condition;
2055 struct statement *statement = stmt->iterator_statement;
2056 struct statement *post_statement = stmt->iterator_post_statement;
2057 struct expression *post_condition = stmt->iterator_post_condition;
2058 struct basic_block *loop_top, *loop_body, *loop_continue, *loop_end;
2060 concat_symbol_list(stmt->iterator_syms, &ep->syms);
2061 linearize_statement(ep, pre_statement);
2063 loop_body = loop_top = alloc_basic_block(ep, stmt->pos);
2064 loop_continue = alloc_basic_block(ep, stmt->pos);
2065 loop_end = alloc_basic_block(ep, stmt->pos);
2067 /* An empty post-condition means that it's the same as the pre-condition */
2068 if (!post_condition) {
2069 loop_top = alloc_basic_block(ep, stmt->pos);
2070 set_activeblock(ep, loop_top);
2073 if (pre_condition)
2074 linearize_cond_branch(ep, pre_condition, loop_body, loop_end);
2076 bind_label(stmt->iterator_continue, loop_continue, stmt->pos);
2077 bind_label(stmt->iterator_break, loop_end, stmt->pos);
2079 set_activeblock(ep, loop_body);
2080 linearize_statement(ep, statement);
2081 add_goto(ep, loop_continue);
2083 set_activeblock(ep, loop_continue);
2084 linearize_statement(ep, post_statement);
2085 if (!post_condition)
2086 add_goto(ep, loop_top);
2087 else
2088 linearize_cond_branch(ep, post_condition, loop_top, loop_end);
2089 set_activeblock(ep, loop_end);
2090 break;
2093 default:
2094 break;
2096 return VOID;
2099 static struct entrypoint *linearize_fn(struct symbol *sym, struct symbol *base_type)
2101 struct entrypoint *ep;
2102 struct basic_block *bb;
2103 struct symbol *arg;
2104 struct instruction *entry;
2105 pseudo_t result;
2106 int i;
2108 if (!base_type->stmt)
2109 return NULL;
2111 ep = alloc_entrypoint();
2112 bb = alloc_basic_block(ep, sym->pos);
2114 ep->name = sym;
2115 sym->ep = ep;
2116 set_activeblock(ep, bb);
2118 entry = alloc_instruction(OP_ENTRY, 0);
2119 add_one_insn(ep, entry);
2120 ep->entry = entry;
2122 concat_symbol_list(base_type->arguments, &ep->syms);
2124 /* FIXME!! We should do something else about varargs.. */
2125 i = 0;
2126 FOR_EACH_PTR(base_type->arguments, arg) {
2127 linearize_argument(ep, arg, ++i);
2128 } END_FOR_EACH_PTR(arg);
2130 result = linearize_statement(ep, base_type->stmt);
2131 if (bb_reachable(ep->active) && !bb_terminated(ep->active)) {
2132 struct symbol *ret_type = base_type->ctype.base_type;
2133 struct instruction *insn = alloc_typed_instruction(OP_RET, ret_type);
2135 if (type_size(ret_type) > 0)
2136 use_pseudo(insn, result, &insn->src);
2137 add_one_insn(ep, insn);
2141 * Do trivial flow simplification - branches to
2142 * branches, kill dead basicblocks etc
2144 kill_unreachable_bbs(ep);
2147 * Turn symbols into pseudos
2149 simplify_symbol_usage(ep);
2151 repeat:
2153 * Remove trivial instructions, and try to CSE
2154 * the rest.
2156 do {
2157 cleanup_and_cse(ep);
2158 pack_basic_blocks(ep);
2159 } while (repeat_phase & REPEAT_CSE);
2161 kill_unreachable_bbs(ep);
2162 vrfy_flow(ep);
2164 /* Cleanup */
2165 clear_symbol_pseudos(ep);
2167 /* And track pseudo register usage */
2168 track_pseudo_liveness(ep);
2171 * Some flow optimizations can only effectively
2172 * be done when we've done liveness analysis. But
2173 * if they trigger, we need to start all over
2174 * again
2176 if (simplify_flow(ep)) {
2177 clear_liveness(ep);
2178 goto repeat;
2181 /* Finally, add deathnotes to pseudos now that we have them */
2182 if (dbg_dead)
2183 track_pseudo_death(ep);
2185 return ep;
2188 struct entrypoint *linearize_symbol(struct symbol *sym)
2190 struct symbol *base_type;
2192 if (!sym)
2193 return NULL;
2194 current_pos = sym->pos;
2195 base_type = sym->ctype.base_type;
2196 if (!base_type)
2197 return NULL;
2198 if (base_type->type == SYM_FN)
2199 return linearize_fn(sym, base_type);
2200 return NULL;