1 | //===- Verifier.cpp - MLIR Verifier Implementation ------------------------===// |
2 | // |
3 | // Part of the LLVM Project, under the Apache License v2.0 with LLVM Exceptions. |
4 | // See https://llvm.org/LICENSE.txt for license information. |
5 | // SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception |
6 | // |
7 | //===----------------------------------------------------------------------===// |
8 | // |
9 | // This file implements the verify() methods on the various IR types, performing |
10 | // (potentially expensive) checks on the holistic structure of the code. This |
11 | // can be used for detecting bugs in compiler transformations and hand written |
12 | // .mlir files. |
13 | // |
14 | // The checks in this file are only for things that can occur as part of IR |
15 | // transformations: e.g. violation of dominance information, malformed operation |
16 | // attributes, etc. MLIR supports transformations moving IR through locally |
17 | // invalid states (e.g. unlinking an operation from a block before re-inserting |
18 | // it in a new place), but each transformation must complete with the IR in a |
19 | // valid form. |
20 | // |
21 | // This should not check for things that are always wrong by construction (e.g. |
22 | // attributes or other immutable structures that are incorrect), because those |
23 | // are not mutable and can be checked at time of construction. |
24 | // |
25 | //===----------------------------------------------------------------------===// |
26 | |
27 | #include "mlir/IR/Verifier.h" |
28 | #include "mlir/IR/Attributes.h" |
29 | #include "mlir/IR/Dialect.h" |
30 | #include "mlir/IR/Dominance.h" |
31 | #include "mlir/IR/Operation.h" |
32 | #include "mlir/IR/RegionKindInterface.h" |
33 | #include "mlir/IR/Threading.h" |
34 | #include "llvm/ADT/PointerIntPair.h" |
35 | #include <optional> |
36 | |
37 | using namespace mlir; |
38 | |
39 | namespace { |
40 | /// This class encapsulates all the state used to verify an operation region. |
41 | class OperationVerifier { |
42 | public: |
43 | /// If `verifyRecursively` is true, then this will also recursively verify |
44 | /// nested operations. |
45 | explicit OperationVerifier(bool verifyRecursively) |
46 | : verifyRecursively(verifyRecursively) {} |
47 | |
48 | /// Verify the given operation. |
49 | LogicalResult verifyOpAndDominance(Operation &op); |
50 | |
51 | private: |
52 | using WorkItem = llvm::PointerUnion<Operation *, Block *>; |
53 | using WorkItemEntry = llvm::PointerIntPair<WorkItem, 1, bool>; |
54 | |
55 | /// This verifier uses a DFS of the tree of operations/blocks. The method |
56 | /// verifyOnEntrance is invoked when we visit a node for the first time, i.e. |
57 | /// before visiting its children. The method verifyOnExit is invoked |
58 | /// upon exit from the subtree, i.e. when we visit a node for the second time. |
59 | LogicalResult verifyOnEntrance(Block &block); |
60 | LogicalResult verifyOnEntrance(Operation &op); |
61 | |
62 | LogicalResult verifyOnExit(Block &block); |
63 | LogicalResult verifyOnExit(Operation &op); |
64 | |
65 | /// Verify the properties and dominance relationships of this operation. |
66 | LogicalResult verifyOperation(Operation &op); |
67 | |
68 | /// Verify the dominance property of regions contained within the given |
69 | /// Operation. |
70 | LogicalResult verifyDominanceOfContainedRegions(Operation &op, |
71 | DominanceInfo &domInfo); |
72 | |
73 | /// A flag indicating if this verifier should recursively verify nested |
74 | /// operations. |
75 | bool verifyRecursively; |
76 | }; |
77 | } // namespace |
78 | |
79 | LogicalResult OperationVerifier::verifyOpAndDominance(Operation &op) { |
80 | // Verify the operation first, collecting any IsolatedFromAbove operations. |
81 | if (failed(Result: verifyOperation(op))) |
82 | return failure(); |
83 | |
84 | // Since everything looks structurally ok to this point, we do a dominance |
85 | // check for any nested regions. We do this as a second pass since malformed |
86 | // CFG's can cause dominator analysis construction to crash and we want the |
87 | // verifier to be resilient to malformed code. |
88 | if (op.getNumRegions() != 0) { |
89 | DominanceInfo domInfo; |
90 | if (failed(Result: verifyDominanceOfContainedRegions(op, domInfo))) |
91 | return failure(); |
92 | } |
93 | |
94 | return success(); |
95 | } |
96 | |
97 | /// Returns true if this block may be valid without terminator. That is if: |
98 | /// - it does not have a parent region. |
99 | /// - Or the parent region have a single block and: |
100 | /// - This region does not have a parent op. |
101 | /// - Or the parent op is unregistered. |
102 | /// - Or the parent op has the NoTerminator trait. |
103 | static bool mayBeValidWithoutTerminator(Block *block) { |
104 | if (!block->getParent()) |
105 | return true; |
106 | if (!llvm::hasSingleElement(C&: *block->getParent())) |
107 | return false; |
108 | Operation *op = block->getParentOp(); |
109 | return !op || op->mightHaveTrait<OpTrait::NoTerminator>(); |
110 | } |
111 | |
112 | LogicalResult OperationVerifier::verifyOnEntrance(Block &block) { |
113 | for (auto arg : block.getArguments()) |
114 | if (arg.getOwner() != &block) |
115 | return emitError(loc: arg.getLoc(), message: "block argument not owned by block" ); |
116 | |
117 | // Verify that this block has a terminator. |
118 | if (block.empty()) { |
119 | if (mayBeValidWithoutTerminator(block: &block)) |
120 | return success(); |
121 | return emitError(loc: block.getParent()->getLoc(), |
122 | message: "empty block: expect at least a terminator" ); |
123 | } |
124 | |
125 | // Check each operation, and make sure there are no branches out of the |
126 | // middle of this block. |
127 | for (Operation &op : block) { |
128 | // Only the last instructions is allowed to have successors. |
129 | if (op.getNumSuccessors() != 0 && &op != &block.back()) |
130 | return op.emitError( |
131 | message: "operation with block successors must terminate its parent block" ); |
132 | } |
133 | |
134 | return success(); |
135 | } |
136 | |
137 | LogicalResult OperationVerifier::verifyOnExit(Block &block) { |
138 | // Verify that this block is not branching to a block of a different |
139 | // region. |
140 | for (Block *successor : block.getSuccessors()) |
141 | if (successor->getParent() != block.getParent()) |
142 | return block.back().emitOpError( |
143 | message: "branching to block of a different region" ); |
144 | |
145 | // If this block doesn't have to have a terminator, don't require it. |
146 | if (mayBeValidWithoutTerminator(block: &block)) |
147 | return success(); |
148 | |
149 | Operation &terminator = block.back(); |
150 | if (!terminator.mightHaveTrait<OpTrait::IsTerminator>()) |
151 | return block.back().emitError(message: "block with no terminator, has " ) |
152 | << terminator; |
153 | |
154 | return success(); |
155 | } |
156 | |
157 | LogicalResult OperationVerifier::verifyOnEntrance(Operation &op) { |
158 | // Check that operands are non-nil and structurally ok. |
159 | for (auto operand : op.getOperands()) |
160 | if (!operand) |
161 | return op.emitError(message: "null operand found" ); |
162 | |
163 | /// Verify that all of the attributes are okay. |
164 | for (auto attr : op.getDiscardableAttrDictionary()) { |
165 | // Check for any optional dialect specific attributes. |
166 | if (auto *dialect = attr.getNameDialect()) |
167 | if (failed(dialect->verifyOperationAttribute(&op, attr))) |
168 | return failure(); |
169 | } |
170 | |
171 | // If we can get operation info for this, check the custom hook. |
172 | OperationName opName = op.getName(); |
173 | std::optional<RegisteredOperationName> registeredInfo = |
174 | opName.getRegisteredInfo(); |
175 | if (registeredInfo && failed(Result: registeredInfo->verifyInvariants(op: &op))) |
176 | return failure(); |
177 | |
178 | unsigned numRegions = op.getNumRegions(); |
179 | if (!numRegions) |
180 | return success(); |
181 | auto kindInterface = dyn_cast<RegionKindInterface>(&op); |
182 | // Verify that all child regions are ok. |
183 | MutableArrayRef<Region> regions = op.getRegions(); |
184 | for (unsigned i = 0; i < numRegions; ++i) { |
185 | Region ®ion = regions[i]; |
186 | RegionKind kind = |
187 | kindInterface ? kindInterface.getRegionKind(i) : RegionKind::SSACFG; |
188 | // Check that Graph Regions only have a single basic block. This is |
189 | // similar to the code in SingleBlockImplicitTerminator, but doesn't |
190 | // require the trait to be specified. This arbitrary limitation is |
191 | // designed to limit the number of cases that have to be handled by |
192 | // transforms and conversions. |
193 | if (op.isRegistered() && kind == RegionKind::Graph) { |
194 | // Non-empty regions must contain a single basic block. |
195 | if (!region.empty() && !region.hasOneBlock()) |
196 | return op.emitOpError(message: "expects graph region #" ) |
197 | << i << " to have 0 or 1 blocks" ; |
198 | } |
199 | |
200 | if (region.empty()) |
201 | continue; |
202 | |
203 | // Verify the first block has no predecessors. |
204 | Block *firstBB = ®ion.front(); |
205 | if (!firstBB->hasNoPredecessors()) |
206 | return emitError(loc: op.getLoc(), |
207 | message: "entry block of region may not have predecessors" ); |
208 | } |
209 | return success(); |
210 | } |
211 | |
212 | LogicalResult OperationVerifier::verifyOnExit(Operation &op) { |
213 | SmallVector<Operation *> opsWithIsolatedRegions; |
214 | if (verifyRecursively) { |
215 | for (Region ®ion : op.getRegions()) |
216 | for (Block &block : region) |
217 | for (Operation &o : block) |
218 | if (o.getNumRegions() != 0 && |
219 | o.hasTrait<OpTrait::IsIsolatedFromAbove>()) |
220 | opsWithIsolatedRegions.push_back(Elt: &o); |
221 | } |
222 | |
223 | std::atomic<bool> opFailedVerify = false; |
224 | parallelForEach(context: op.getContext(), range&: opsWithIsolatedRegions, func: [&](Operation *o) { |
225 | if (failed(Result: verifyOpAndDominance(op&: *o))) |
226 | opFailedVerify.store(i: true, m: std::memory_order_relaxed); |
227 | }); |
228 | if (opFailedVerify.load(m: std::memory_order_relaxed)) |
229 | return failure(); |
230 | |
231 | OperationName opName = op.getName(); |
232 | std::optional<RegisteredOperationName> registeredInfo = |
233 | opName.getRegisteredInfo(); |
234 | // After the region ops are verified, run the verifiers that have additional |
235 | // region invariants need to veirfy. |
236 | if (registeredInfo && failed(Result: registeredInfo->verifyRegionInvariants(op: &op))) |
237 | return failure(); |
238 | |
239 | // If this is a registered operation, there is nothing left to do. |
240 | if (registeredInfo) |
241 | return success(); |
242 | |
243 | // Otherwise, verify that the parent dialect allows un-registered operations. |
244 | Dialect *dialect = opName.getDialect(); |
245 | if (!dialect) { |
246 | if (!op.getContext()->allowsUnregisteredDialects()) { |
247 | return op.emitOpError() |
248 | << "created with unregistered dialect. If this is " |
249 | "intended, please call allowUnregisteredDialects() on the " |
250 | "MLIRContext, or use -allow-unregistered-dialect with " |
251 | "the MLIR opt tool used" ; |
252 | } |
253 | return success(); |
254 | } |
255 | |
256 | if (!dialect->allowsUnknownOperations()) { |
257 | return op.emitError(message: "unregistered operation '" ) |
258 | << op.getName() << "' found in dialect ('" << dialect->getNamespace() |
259 | << "') that does not allow unknown operations" ; |
260 | } |
261 | |
262 | return success(); |
263 | } |
264 | |
265 | /// Verify the properties and dominance relationships of this operation, |
266 | /// stopping region "recursion" at any "isolated from above operations". |
267 | /// Such ops are collected separately and verified inside |
268 | /// verifyBlockPostChildren. |
269 | LogicalResult OperationVerifier::verifyOperation(Operation &op) { |
270 | SmallVector<WorkItemEntry> worklist{{&op, false}}; |
271 | while (!worklist.empty()) { |
272 | WorkItemEntry &top = worklist.back(); |
273 | |
274 | auto visit = [](auto &&visitor, WorkItem w) { |
275 | if (auto *o = dyn_cast<Operation *>(Val&: w)) |
276 | return visitor(o); |
277 | return visitor(cast<Block *>(Val&: w)); |
278 | }; |
279 | |
280 | const bool isExit = top.getInt(); |
281 | top.setInt(true); |
282 | auto item = top.getPointer(); |
283 | |
284 | // 2nd visit of this work item ("exit"). |
285 | if (isExit) { |
286 | if (failed( |
287 | Result: visit([this](auto *workItem) { return verifyOnExit(*workItem); }, |
288 | item))) |
289 | return failure(); |
290 | worklist.pop_back(); |
291 | continue; |
292 | } |
293 | |
294 | // 1st visit of this work item ("entrance"). |
295 | if (failed(Result: visit( |
296 | [this](auto *workItem) { return verifyOnEntrance(*workItem); }, |
297 | item))) |
298 | return failure(); |
299 | |
300 | if (Block *currentBlock = dyn_cast<Block *>(Val&: item)) { |
301 | // Skip "isolated from above operations". |
302 | for (Operation &o : llvm::reverse(C&: *currentBlock)) { |
303 | if (o.getNumRegions() == 0 || |
304 | !o.hasTrait<OpTrait::IsIsolatedFromAbove>()) |
305 | worklist.emplace_back(Args: &o); |
306 | } |
307 | continue; |
308 | } |
309 | |
310 | Operation ¤tOp = *cast<Operation *>(Val&: item); |
311 | if (verifyRecursively) |
312 | for (Region ®ion : llvm::reverse(C: currentOp.getRegions())) |
313 | for (Block &block : llvm::reverse(C&: region)) |
314 | worklist.emplace_back(Args: &block); |
315 | } |
316 | return success(); |
317 | } |
318 | |
319 | //===----------------------------------------------------------------------===// |
320 | // Dominance Checking |
321 | //===----------------------------------------------------------------------===// |
322 | |
323 | /// Emit an error when the specified operand of the specified operation is an |
324 | /// invalid use because of dominance properties. |
325 | static void diagnoseInvalidOperandDominance(Operation &op, unsigned operandNo) { |
326 | InFlightDiagnostic diag = op.emitError(message: "operand #" ) |
327 | << operandNo << " does not dominate this use" ; |
328 | |
329 | Value operand = op.getOperand(idx: operandNo); |
330 | |
331 | /// Attach a note to an in-flight diagnostic that provide more information |
332 | /// about where an op operand is defined. |
333 | if (auto *useOp = operand.getDefiningOp()) { |
334 | Diagnostic ¬e = diag.attachNote(noteLoc: useOp->getLoc()); |
335 | note << "operand defined here" ; |
336 | Block *block1 = op.getBlock(); |
337 | Block *block2 = useOp->getBlock(); |
338 | Region *region1 = block1->getParent(); |
339 | Region *region2 = block2->getParent(); |
340 | if (block1 == block2) |
341 | note << " (op in the same block)" ; |
342 | else if (region1 == region2) |
343 | note << " (op in the same region)" ; |
344 | else if (region2->isProperAncestor(other: region1)) |
345 | note << " (op in a parent region)" ; |
346 | else if (region1->isProperAncestor(other: region2)) |
347 | note << " (op in a child region)" ; |
348 | else |
349 | note << " (op is neither in a parent nor in a child region)" ; |
350 | return; |
351 | } |
352 | // Block argument case. |
353 | Block *block1 = op.getBlock(); |
354 | Block *block2 = llvm::cast<BlockArgument>(Val&: operand).getOwner(); |
355 | Region *region1 = block1->getParent(); |
356 | Region *region2 = block2->getParent(); |
357 | Location loc = UnknownLoc::get(op.getContext()); |
358 | if (block2->getParentOp()) |
359 | loc = block2->getParentOp()->getLoc(); |
360 | Diagnostic ¬e = diag.attachNote(noteLoc: loc); |
361 | if (!region2) { |
362 | note << " (block without parent)" ; |
363 | return; |
364 | } |
365 | if (block1 == block2) |
366 | llvm::report_fatal_error(reason: "Internal error in dominance verification" ); |
367 | int index = std::distance(first: region2->begin(), last: block2->getIterator()); |
368 | note << "operand defined as a block argument (block #" << index; |
369 | if (region1 == region2) |
370 | note << " in the same region)" ; |
371 | else if (region2->isProperAncestor(other: region1)) |
372 | note << " in a parent region)" ; |
373 | else if (region1->isProperAncestor(other: region2)) |
374 | note << " in a child region)" ; |
375 | else |
376 | note << " neither in a parent nor in a child region)" ; |
377 | } |
378 | |
379 | /// Verify the dominance of each of the nested blocks within the given operation |
380 | LogicalResult |
381 | OperationVerifier::verifyDominanceOfContainedRegions(Operation &op, |
382 | DominanceInfo &domInfo) { |
383 | llvm::SmallVector<Operation *, 8> worklist{&op}; |
384 | while (!worklist.empty()) { |
385 | auto *op = worklist.pop_back_val(); |
386 | for (auto ®ion : op->getRegions()) |
387 | for (auto &block : region.getBlocks()) { |
388 | // Dominance is only meaningful inside reachable blocks. |
389 | bool isReachable = domInfo.isReachableFromEntry(a: &block); |
390 | for (auto &op : block) { |
391 | if (isReachable) { |
392 | // Check that operands properly dominate this use. |
393 | for (const auto &operand : llvm::enumerate(First: op.getOperands())) { |
394 | if (domInfo.properlyDominates(a: operand.value(), b: &op)) |
395 | continue; |
396 | |
397 | diagnoseInvalidOperandDominance(op, operandNo: operand.index()); |
398 | return failure(); |
399 | } |
400 | } |
401 | |
402 | // Recursively verify dominance within each operation in the block, |
403 | // even if the block itself is not reachable, or we are in a region |
404 | // which doesn't respect dominance. |
405 | if (verifyRecursively && op.getNumRegions() != 0) { |
406 | // If this operation is IsolatedFromAbove, then we'll handle it in |
407 | // the outer verification loop. |
408 | if (op.hasTrait<OpTrait::IsIsolatedFromAbove>()) |
409 | continue; |
410 | worklist.push_back(Elt: &op); |
411 | } |
412 | } |
413 | } |
414 | } |
415 | |
416 | return success(); |
417 | } |
418 | |
419 | //===----------------------------------------------------------------------===// |
420 | // Entrypoint |
421 | //===----------------------------------------------------------------------===// |
422 | |
423 | LogicalResult mlir::verify(Operation *op, bool verifyRecursively) { |
424 | OperationVerifier verifier(verifyRecursively); |
425 | return verifier.verifyOpAndDominance(op&: *op); |
426 | } |
427 | |