miri/shims/x86/
sse42.rs

1use rustc_abi::Size;
2use rustc_middle::mir;
3use rustc_middle::ty::Ty;
4use rustc_middle::ty::layout::LayoutOf as _;
5use rustc_span::Symbol;
6use rustc_target::callconv::{Conv, FnAbi};
7
8use crate::*;
9
10/// A bitmask constant for scrutinizing the immediate byte provided
11/// to the string comparison intrinsics. It distinuishes between
12/// 16-bit integers and 8-bit integers. See [`compare_strings`]
13/// for more details about the immediate byte.
14const USE_WORDS: u8 = 1;
15
16/// A bitmask constant for scrutinizing the immediate byte provided
17/// to the string comparison intrinsics. It distinuishes between
18/// signed integers and unsigned integers. See [`compare_strings`]
19/// for more details about the immediate byte.
20const USE_SIGNED: u8 = 2;
21
22/// The main worker for the string comparison intrinsics, where the given
23/// strings are analyzed according to the given immediate byte.
24///
25/// # Arguments
26///
27/// * `str1` - The first string argument. It is always a length 16 array of bytes
28///   or a length 8 array of two-byte words.
29/// * `str2` - The second string argument. It is always a length 16 array of bytes
30///   or a length 8 array of two-byte words.
31/// * `len` is the length values of the supplied strings. It is distinct from the operand length
32///   in that it describes how much of `str1` and `str2` will be used for the calculation and may
33///   be smaller than the array length of `str1` and `str2`. The string length is counted in bytes
34///   if using byte operands and in two-byte words when using two-byte word operands.
35///   If the value is `None`, the length of a string is determined by the first
36///   null value inside the string.
37/// * `imm` is the immediate byte argument supplied to the intrinsic. The byte influences
38///   the operation as follows:
39///
40///   ```text
41///   0babccddef
42///     || | |||- Use of bytes vs use of two-byte words inside the operation.
43///     || | ||
44///     || | ||- Use of signed values versus use of unsigned values.
45///     || | |
46///     || | |- The comparison operation performed. A total of four operations are available.
47///     || |    * Equal any: Checks which characters of `str2` are inside `str1`.
48///     || |    * String ranges: Check if characters in `str2` are inside the provided character ranges.
49///     || |      Adjacent characters in `str1` constitute one range.
50///     || |    * String comparison: Mark positions where `str1` and `str2` have the same character.
51///     || |    * Substring search: Mark positions where `str1` is a substring in `str2`.
52///     || |
53///     || |- Result Polarity. The result bits may be subjected to a bitwise complement
54///     ||    if these bits are set.
55///     ||
56///     ||- Output selection. This bit has two meanings depending on the instruction.
57///     |   If the instruction is generating a mask, it distinguishes between a bit mask
58///     |   and a byte mask. Otherwise it distinguishes between the most significand bit
59///     |   and the least significand bit when generating an index.
60///     |
61///     |- This bit is ignored. It is expected that this bit is set to zero, but it is
62///        not a requirement.
63///   ```
64///
65/// # Returns
66///
67/// A result mask. The bit at index `i` inside the mask is set if 'str2' starting at `i`
68/// fulfills the test as defined inside the immediate byte.
69/// The mask may be negated if negation flags inside the immediate byte are set.
70///
71/// For more information, see the Intel Software Developer's Manual, Vol. 2b, Chapter 4.1.
72#[expect(clippy::arithmetic_side_effects)]
73fn compare_strings<'tcx>(
74    ecx: &mut MiriInterpCx<'tcx>,
75    str1: &OpTy<'tcx>,
76    str2: &OpTy<'tcx>,
77    len: Option<(u64, u64)>,
78    imm: u8,
79) -> InterpResult<'tcx, i32> {
80    let default_len = default_len::<u64>(imm);
81    let (len1, len2) = if let Some(t) = len {
82        t
83    } else {
84        let len1 = implicit_len(ecx, str1, imm)?.unwrap_or(default_len);
85        let len2 = implicit_len(ecx, str2, imm)?.unwrap_or(default_len);
86        (len1, len2)
87    };
88
89    let mut result = 0;
90    match (imm >> 2) & 3 {
91        0 => {
92            // Equal any: Checks which characters of `str2` are inside `str1`.
93            for i in 0..len2 {
94                let ch2 = ecx.read_immediate(&ecx.project_index(str2, i)?)?;
95
96                for j in 0..len1 {
97                    let ch1 = ecx.read_immediate(&ecx.project_index(str1, j)?)?;
98
99                    let eq = ecx.binary_op(mir::BinOp::Eq, &ch1, &ch2)?;
100                    if eq.to_scalar().to_bool()? {
101                        result |= 1 << i;
102                        break;
103                    }
104                }
105            }
106        }
107        1 => {
108            // String ranges: Check if characters in `str2` are inside the provided character ranges.
109            // Adjacent characters in `str1` constitute one range.
110            let len1 = len1 - (len1 & 1);
111            let get_ch = |ch: Scalar| -> InterpResult<'tcx, i32> {
112                let result = match (imm & USE_WORDS != 0, imm & USE_SIGNED != 0) {
113                    (true, true) => i32::from(ch.to_i16()?),
114                    (true, false) => i32::from(ch.to_u16()?),
115                    (false, true) => i32::from(ch.to_i8()?),
116                    (false, false) => i32::from(ch.to_u8()?),
117                };
118                interp_ok(result)
119            };
120
121            for i in 0..len2 {
122                for j in (0..len1).step_by(2) {
123                    let ch2 = get_ch(ecx.read_scalar(&ecx.project_index(str2, i)?)?)?;
124                    let ch1_1 = get_ch(ecx.read_scalar(&ecx.project_index(str1, j)?)?)?;
125                    let ch1_2 = get_ch(ecx.read_scalar(&ecx.project_index(str1, j + 1)?)?)?;
126
127                    if ch1_1 <= ch2 && ch2 <= ch1_2 {
128                        result |= 1 << i;
129                    }
130                }
131            }
132        }
133        2 => {
134            // String comparison: Mark positions where `str1` and `str2` have the same character.
135            result = (1 << default_len) - 1;
136            result ^= (1 << len1.max(len2)) - 1;
137
138            for i in 0..len1.min(len2) {
139                let ch1 = ecx.read_immediate(&ecx.project_index(str1, i)?)?;
140                let ch2 = ecx.read_immediate(&ecx.project_index(str2, i)?)?;
141                let eq = ecx.binary_op(mir::BinOp::Eq, &ch1, &ch2)?;
142                result |= i32::from(eq.to_scalar().to_bool()?) << i;
143            }
144        }
145        3 => {
146            // Substring search: Mark positions where `str1` is a substring in `str2`.
147            if len1 == 0 {
148                result = (1 << default_len) - 1;
149            } else if len1 <= len2 {
150                for i in 0..len2 {
151                    if len1 > len2 - i {
152                        break;
153                    }
154
155                    result |= 1 << i;
156
157                    for j in 0..len1 {
158                        let k = i + j;
159
160                        if k >= default_len {
161                            break;
162                        } else {
163                            let ch1 = ecx.read_immediate(&ecx.project_index(str1, j)?)?;
164                            let ch2 = ecx.read_immediate(&ecx.project_index(str2, k)?)?;
165                            let ne = ecx.binary_op(mir::BinOp::Ne, &ch1, &ch2)?;
166
167                            if ne.to_scalar().to_bool()? {
168                                result &= !(1 << i);
169                                break;
170                            }
171                        }
172                    }
173                }
174            }
175        }
176        _ => unreachable!(),
177    }
178
179    // Polarity: Possibly perform a bitwise complement on the result.
180    match (imm >> 4) & 3 {
181        3 => result ^= (1 << len1) - 1,
182        1 => result ^= (1 << default_len) - 1,
183        _ => (),
184    }
185
186    interp_ok(result)
187}
188
189/// Obtain the arguments of the intrinsic based on its name.
190/// The result is a tuple with the following values:
191/// * The first string argument.
192/// * The second string argument.
193/// * The string length values, if the intrinsic requires them.
194/// * The immediate instruction byte.
195///
196/// The string arguments will be transmuted into arrays of bytes
197/// or two-byte words, depending on the value of the immediate byte.
198/// Originally, they are [__m128i](https://doc.rust-lang.org/stable/core/arch/x86_64/struct.__m128i.html) values
199/// corresponding to the x86 128-bit integer SIMD type.
200fn deconstruct_args<'tcx>(
201    unprefixed_name: &str,
202    ecx: &mut MiriInterpCx<'tcx>,
203    link_name: Symbol,
204    abi: &FnAbi<'tcx, Ty<'tcx>>,
205    args: &[OpTy<'tcx>],
206) -> InterpResult<'tcx, (OpTy<'tcx>, OpTy<'tcx>, Option<(u64, u64)>, u8)> {
207    let array_layout_fn = |ecx: &mut MiriInterpCx<'tcx>, imm: u8| {
208        if imm & USE_WORDS != 0 {
209            ecx.layout_of(Ty::new_array(ecx.tcx.tcx, ecx.tcx.types.u16, 8))
210        } else {
211            ecx.layout_of(Ty::new_array(ecx.tcx.tcx, ecx.tcx.types.u8, 16))
212        }
213    };
214
215    // The fourth letter of each string comparison intrinsic is either 'e' for "explicit" or 'i' for "implicit".
216    // The distinction will correspond to the intrinsics type signature. In this constext, "explicit" and "implicit"
217    // refer to the way the string length is determined. The length is either passed explicitly in the "explicit"
218    // case or determined by a null terminator in the "implicit" case.
219    let is_explicit = match unprefixed_name.as_bytes().get(4) {
220        Some(&b'e') => true,
221        Some(&b'i') => false,
222        _ => unreachable!(),
223    };
224
225    if is_explicit {
226        let [str1, len1, str2, len2, imm] = ecx.check_shim(abi, Conv::C, link_name, args)?;
227        let imm = ecx.read_scalar(imm)?.to_u8()?;
228
229        let default_len = default_len::<u32>(imm);
230        let len1 = u64::from(ecx.read_scalar(len1)?.to_u32()?.min(default_len));
231        let len2 = u64::from(ecx.read_scalar(len2)?.to_u32()?.min(default_len));
232
233        let array_layout = array_layout_fn(ecx, imm)?;
234        let str1 = str1.transmute(array_layout, ecx)?;
235        let str2 = str2.transmute(array_layout, ecx)?;
236
237        interp_ok((str1, str2, Some((len1, len2)), imm))
238    } else {
239        let [str1, str2, imm] = ecx.check_shim(abi, Conv::C, link_name, args)?;
240        let imm = ecx.read_scalar(imm)?.to_u8()?;
241
242        let array_layout = array_layout_fn(ecx, imm)?;
243        let str1 = str1.transmute(array_layout, ecx)?;
244        let str2 = str2.transmute(array_layout, ecx)?;
245
246        interp_ok((str1, str2, None, imm))
247    }
248}
249
250/// Calculate the c-style string length for a given string `str`.
251/// The string is either a length 16 array of bytes a length 8 array of two-byte words.
252fn implicit_len<'tcx>(
253    ecx: &mut MiriInterpCx<'tcx>,
254    str: &OpTy<'tcx>,
255    imm: u8,
256) -> InterpResult<'tcx, Option<u64>> {
257    let mut result = None;
258    let zero = ImmTy::from_int(0, str.layout.field(ecx, 0));
259
260    for i in 0..default_len::<u64>(imm) {
261        let ch = ecx.read_immediate(&ecx.project_index(str, i)?)?;
262        let is_zero = ecx.binary_op(mir::BinOp::Eq, &ch, &zero)?;
263        if is_zero.to_scalar().to_bool()? {
264            result = Some(i);
265            break;
266        }
267    }
268    interp_ok(result)
269}
270
271#[inline]
272fn default_len<T: From<u8>>(imm: u8) -> T {
273    if imm & USE_WORDS != 0 { T::from(8u8) } else { T::from(16u8) }
274}
275
276impl<'tcx> EvalContextExt<'tcx> for crate::MiriInterpCx<'tcx> {}
277pub(super) trait EvalContextExt<'tcx>: crate::MiriInterpCxExt<'tcx> {
278    fn emulate_x86_sse42_intrinsic(
279        &mut self,
280        link_name: Symbol,
281        abi: &FnAbi<'tcx, Ty<'tcx>>,
282        args: &[OpTy<'tcx>],
283        dest: &MPlaceTy<'tcx>,
284    ) -> InterpResult<'tcx, EmulateItemResult> {
285        let this = self.eval_context_mut();
286        this.expect_target_feature_for_intrinsic(link_name, "sse4.2")?;
287        // Prefix should have already been checked.
288        let unprefixed_name = link_name.as_str().strip_prefix("llvm.x86.sse42.").unwrap();
289
290        match unprefixed_name {
291            // Used to implement the `_mm_cmpestrm` and the `_mm_cmpistrm` functions.
292            // These functions compare the input strings and return the resulting mask.
293            // https://www.intel.com/content/www/us/en/docs/intrinsics-guide/index.html#ig_expand=1044,922
294            "pcmpistrm128" | "pcmpestrm128" => {
295                let (str1, str2, len, imm) =
296                    deconstruct_args(unprefixed_name, this, link_name, abi, args)?;
297                let mask = compare_strings(this, &str1, &str2, len, imm)?;
298
299                // The sixth bit inside the immediate byte distiguishes
300                // between a bit mask or a byte mask when generating a mask.
301                if imm & 0b100_0000 != 0 {
302                    let (array_layout, size) = if imm & USE_WORDS != 0 {
303                        (this.layout_of(Ty::new_array(this.tcx.tcx, this.tcx.types.u16, 8))?, 2)
304                    } else {
305                        (this.layout_of(Ty::new_array(this.tcx.tcx, this.tcx.types.u8, 16))?, 1)
306                    };
307                    let size = Size::from_bytes(size);
308                    let dest = dest.transmute(array_layout, this)?;
309
310                    for i in 0..default_len::<u64>(imm) {
311                        let result = helpers::bool_to_simd_element(mask & (1 << i) != 0, size);
312                        this.write_scalar(result, &this.project_index(&dest, i)?)?;
313                    }
314                } else {
315                    let layout = this.layout_of(this.tcx.types.i128)?;
316                    let dest = dest.transmute(layout, this)?;
317                    this.write_scalar(Scalar::from_i128(i128::from(mask)), &dest)?;
318                }
319            }
320
321            // Used to implement the `_mm_cmpestra` and the `_mm_cmpistra` functions.
322            // These functions compare the input strings and return `1` if the end of the second
323            // input string is not reached and the resulting mask is zero, and `0` otherwise.
324            // https://www.intel.com/content/www/us/en/docs/intrinsics-guide/index.html#ig_expand=919,1041
325            "pcmpistria128" | "pcmpestria128" => {
326                let (str1, str2, len, imm) =
327                    deconstruct_args(unprefixed_name, this, link_name, abi, args)?;
328                let result = if compare_strings(this, &str1, &str2, len, imm)? != 0 {
329                    false
330                } else if let Some((_, len)) = len {
331                    len >= default_len::<u64>(imm)
332                } else {
333                    implicit_len(this, &str1, imm)?.is_some()
334                };
335
336                this.write_scalar(Scalar::from_i32(i32::from(result)), dest)?;
337            }
338
339            // Used to implement the `_mm_cmpestri` and the `_mm_cmpistri` functions.
340            // These functions compare the input strings and return the bit index
341            // for most significant or least significant bit of the resulting mask.
342            // https://www.intel.com/content/www/us/en/docs/intrinsics-guide/index.html#ig_expand=921,1043
343            "pcmpistri128" | "pcmpestri128" => {
344                let (str1, str2, len, imm) =
345                    deconstruct_args(unprefixed_name, this, link_name, abi, args)?;
346                let mask = compare_strings(this, &str1, &str2, len, imm)?;
347
348                let len = default_len::<u32>(imm);
349                // The sixth bit inside the immediate byte distiguishes between the least
350                // significant bit and the most significant bit when generating an index.
351                let result = if imm & 0b100_0000 != 0 {
352                    // most significant bit
353                    31u32.wrapping_sub(mask.leading_zeros()).min(len)
354                } else {
355                    // least significant bit
356                    mask.trailing_zeros().min(len)
357                };
358                this.write_scalar(Scalar::from_i32(i32::try_from(result).unwrap()), dest)?;
359            }
360
361            // Used to implement the `_mm_cmpestro` and the `_mm_cmpistro` functions.
362            // These functions compare the input strings and return the lowest bit of the
363            // resulting mask.
364            // https://www.intel.com/content/www/us/en/docs/intrinsics-guide/index.html#ig_expand=923,1045
365            "pcmpistrio128" | "pcmpestrio128" => {
366                let (str1, str2, len, imm) =
367                    deconstruct_args(unprefixed_name, this, link_name, abi, args)?;
368                let mask = compare_strings(this, &str1, &str2, len, imm)?;
369                this.write_scalar(Scalar::from_i32(mask & 1), dest)?;
370            }
371
372            // Used to implement the `_mm_cmpestrc` and the `_mm_cmpistrc` functions.
373            // These functions compare the input strings and return `1` if the resulting
374            // mask was non-zero, and `0` otherwise.
375            // https://www.intel.com/content/www/us/en/docs/intrinsics-guide/index.html#ig_expand=920,1042
376            "pcmpistric128" | "pcmpestric128" => {
377                let (str1, str2, len, imm) =
378                    deconstruct_args(unprefixed_name, this, link_name, abi, args)?;
379                let mask = compare_strings(this, &str1, &str2, len, imm)?;
380                this.write_scalar(Scalar::from_i32(i32::from(mask != 0)), dest)?;
381            }
382
383            // Used to implement the `_mm_cmpistrz` and the `_mm_cmpistrs` functions.
384            // These functions return `1` if the string end has been reached and `0` otherwise.
385            // Since these functions define the string length implicitly, it is equal to a
386            // search for a null terminator (see `deconstruct_args` for more details).
387            // https://www.intel.com/content/www/us/en/docs/intrinsics-guide/index.html#ig_expand=924,925
388            "pcmpistriz128" | "pcmpistris128" => {
389                let [str1, str2, imm] = this.check_shim(abi, Conv::C, link_name, args)?;
390                let imm = this.read_scalar(imm)?.to_u8()?;
391
392                let str = if unprefixed_name == "pcmpistris128" { str1 } else { str2 };
393                let array_layout = if imm & USE_WORDS != 0 {
394                    this.layout_of(Ty::new_array(this.tcx.tcx, this.tcx.types.u16, 8))?
395                } else {
396                    this.layout_of(Ty::new_array(this.tcx.tcx, this.tcx.types.u8, 16))?
397                };
398                let str = str.transmute(array_layout, this)?;
399                let result = implicit_len(this, &str, imm)?.is_some();
400
401                this.write_scalar(Scalar::from_i32(i32::from(result)), dest)?;
402            }
403
404            // Used to implement the `_mm_cmpestrz` and the `_mm_cmpestrs` functions.
405            // These functions return 1 if the explicitly passed string length is smaller
406            // than 16 for byte-sized operands or 8 for word-sized operands.
407            // https://www.intel.com/content/www/us/en/docs/intrinsics-guide/index.html#ig_expand=1046,1047
408            "pcmpestriz128" | "pcmpestris128" => {
409                let [_, len1, _, len2, imm] = this.check_shim(abi, Conv::C, link_name, args)?;
410                let len = if unprefixed_name == "pcmpestris128" { len1 } else { len2 };
411                let len = this.read_scalar(len)?.to_i32()?;
412                let imm = this.read_scalar(imm)?.to_u8()?;
413                this.write_scalar(
414                    Scalar::from_i32(i32::from(len < default_len::<i32>(imm))),
415                    dest,
416                )?;
417            }
418
419            // Used to implement the `_mm_crc32_u{8, 16, 32, 64}` functions.
420            // These functions calculate a 32-bit CRC using `0x11EDC6F41`
421            // as the polynomial, also known as CRC32C.
422            // https://datatracker.ietf.org/doc/html/rfc3720#section-12.1
423            "crc32.32.8" | "crc32.32.16" | "crc32.32.32" | "crc32.64.64" => {
424                let bit_size = match unprefixed_name {
425                    "crc32.32.8" => 8,
426                    "crc32.32.16" => 16,
427                    "crc32.32.32" => 32,
428                    "crc32.64.64" => 64,
429                    _ => unreachable!(),
430                };
431
432                if bit_size == 64 && this.tcx.sess.target.arch != "x86_64" {
433                    return interp_ok(EmulateItemResult::NotSupported);
434                }
435
436                let [left, right] = this.check_shim(abi, Conv::C, link_name, args)?;
437                let left = this.read_scalar(left)?;
438                let right = this.read_scalar(right)?;
439
440                let crc = if bit_size == 64 {
441                    // The 64-bit version will only consider the lower 32 bits,
442                    // while the upper 32 bits get discarded.
443                    #[expect(clippy::cast_possible_truncation)]
444                    u128::from((left.to_u64()? as u32).reverse_bits())
445                } else {
446                    u128::from(left.to_u32()?.reverse_bits())
447                };
448                let v = match bit_size {
449                    8 => u128::from(right.to_u8()?.reverse_bits()),
450                    16 => u128::from(right.to_u16()?.reverse_bits()),
451                    32 => u128::from(right.to_u32()?.reverse_bits()),
452                    64 => u128::from(right.to_u64()?.reverse_bits()),
453                    _ => unreachable!(),
454                };
455
456                // Perform polynomial division modulo 2.
457                // The algorithm for the division is an adapted version of the
458                // schoolbook division algorithm used for normal integer or polynomial
459                // division. In this context, the quotient is not calculated, since
460                // only the remainder is needed.
461                //
462                // The algorithm works as follows:
463                // 1. Pull down digits until division can be performed. In the context of division
464                //    modulo 2 it means locating the most significant digit of the dividend and shifting
465                //    the divisor such that the position of the divisors most significand digit and the
466                //    dividends most significand digit match.
467                // 2. Perform a division and determine the remainder. Since it is arithmetic modulo 2,
468                //    this operation is a simple bitwise exclusive or.
469                // 3. Repeat steps 1. and 2. until the full remainder is calculated. This is the case
470                //    once the degree of the remainder polynomial is smaller than the degree of the
471                //    divisor polynomial. In other words, the number of leading zeros of the remainder
472                //    is larger than the number of leading zeros of the divisor. It is important to
473                //    note that standard arithmetic comparison is not applicable here:
474                //    0b10011 / 0b11111 = 0b01100 is a valid division, even though the dividend is
475                //    smaller than the divisor.
476                let mut dividend = (crc << bit_size) ^ (v << 32);
477                const POLYNOMIAL: u128 = 0x11EDC6F41;
478                while dividend.leading_zeros() <= POLYNOMIAL.leading_zeros() {
479                    dividend ^=
480                        (POLYNOMIAL << POLYNOMIAL.leading_zeros()) >> dividend.leading_zeros();
481                }
482
483                let result = u32::try_from(dividend).unwrap().reverse_bits();
484                let result = if bit_size == 64 {
485                    Scalar::from_u64(u64::from(result))
486                } else {
487                    Scalar::from_u32(result)
488                };
489
490                this.write_scalar(result, dest)?;
491            }
492            _ => return interp_ok(EmulateItemResult::NotSupported),
493        }
494        interp_ok(EmulateItemResult::NeedsReturn)
495    }
496}