[PR 78365] Prudent type handling in IPA VR-prop
[gcc.git] / gcc / ipa-prop.c
index d790e4481772ed7f55362109b176ebe4e21ffb14..1f68f736e465994ede277fc655cf7f4b3b120095 100644 (file)
@@ -1,5 +1,5 @@
 /* Interprocedural analyses.
-   Copyright (C) 2005-2014 Free Software Foundation, Inc.
+   Copyright (C) 2005-2017 Free Software Foundation, Inc.
 
 This file is part of GCC.
 
@@ -20,113 +20,49 @@ along with GCC; see the file COPYING3.  If not see
 #include "config.h"
 #include "system.h"
 #include "coretypes.h"
+#include "backend.h"
+#include "rtl.h"
 #include "tree.h"
-#include "basic-block.h"
-#include "tree-ssa-alias.h"
-#include "internal-fn.h"
+#include "gimple.h"
+#include "alloc-pool.h"
+#include "tree-pass.h"
+#include "ssa.h"
+#include "tree-streamer.h"
+#include "cgraph.h"
+#include "diagnostic.h"
+#include "fold-const.h"
 #include "gimple-fold.h"
 #include "tree-eh.h"
-#include "gimple-expr.h"
-#include "is-a.h"
-#include "gimple.h"
-#include "expr.h"
+#include "calls.h"
 #include "stor-layout.h"
 #include "print-tree.h"
 #include "gimplify.h"
 #include "gimple-iterator.h"
 #include "gimplify-me.h"
 #include "gimple-walk.h"
-#include "langhooks.h"
-#include "target.h"
+#include "symbol-summary.h"
 #include "ipa-prop.h"
-#include "bitmap.h"
-#include "gimple-ssa.h"
 #include "tree-cfg.h"
-#include "tree-phinodes.h"
-#include "ssa-iterators.h"
-#include "tree-into-ssa.h"
 #include "tree-dfa.h"
-#include "tree-pass.h"
 #include "tree-inline.h"
 #include "ipa-inline.h"
-#include "flags.h"
-#include "diagnostic.h"
 #include "gimple-pretty-print.h"
-#include "lto-streamer.h"
-#include "data-streamer.h"
-#include "tree-streamer.h"
 #include "params.h"
 #include "ipa-utils.h"
-#include "stringpool.h"
-#include "tree-ssanames.h"
 #include "dbgcnt.h"
 #include "domwalk.h"
 #include "builtins.h"
-#include "calls.h"
-
-/* Intermediate information that we get from alias analysis about a particular
-   parameter in a particular basic_block.  When a parameter or the memory it
-   references is marked modified, we use that information in all dominatd
-   blocks without cosulting alias analysis oracle.  */
-
-struct param_aa_status
-{
-  /* Set when this structure contains meaningful information.  If not, the
-     structure describing a dominating BB should be used instead.  */
-  bool valid;
-
-  /* Whether we have seen something which might have modified the data in
-     question.  PARM is for the parameter itself, REF is for data it points to
-     but using the alias type of individual accesses and PT is the same thing
-     but for computing aggregate pass-through functions using a very inclusive
-     ao_ref.  */
-  bool parm_modified, ref_modified, pt_modified;
-};
-
-/* Information related to a given BB that used only when looking at function
-   body.  */
-
-struct ipa_bb_info
-{
-  /* Call graph edges going out of this BB.  */
-  vec<cgraph_edge *> cg_edges;
-  /* Alias analysis statuses of each formal parameter at this bb.  */
-  vec<param_aa_status> param_aa_statuses;
-};
-
-/* Structure with global information that is only used when looking at function
-   body. */
 
-struct func_body_info
-{
-  /* The node that is being analyzed.  */
-  cgraph_node *node;
-
-  /* Its info.  */
-  struct ipa_node_params *info;
-
-  /* Information about individual BBs. */
-  vec<ipa_bb_info> bb_infos;
-
-  /* Number of parameters.  */
-  int param_count;
-
-  /* Number of statements already walked by when analyzing this function.  */
-  unsigned int aa_walked;
-};
-
-/* Vector where the parameter infos are actually stored. */
-vec<ipa_node_params> ipa_node_params_vector;
-/* Vector of known aggregate values in cloned nodes.  */
-vec<ipa_agg_replacement_value_p, va_gc> *ipa_node_agg_replacements;
+/* Function summary where the parameter infos are actually stored. */
+ipa_node_params_t *ipa_node_params_sum = NULL;
+/* Vector of IPA-CP transformation data for each clone.  */
+vec<ipcp_transformation_summary, va_gc> *ipcp_transformations;
 /* Vector where the parameter infos are actually stored. */
 vec<ipa_edge_args, va_gc> *ipa_edge_args_vector;
 
 /* Holders of ipa cgraph hooks: */
 static struct cgraph_edge_hook_list *edge_removal_hook_holder;
-static struct cgraph_node_hook_list *node_removal_hook_holder;
 static struct cgraph_2edge_hook_list *edge_duplication_hook_holder;
-static struct cgraph_2node_hook_list *node_duplication_hook_holder;
 static struct cgraph_node_hook_list *function_insertion_hook_holder;
 
 /* Description of a reference to an IPA constant.  */
@@ -143,7 +79,8 @@ struct ipa_cst_ref_desc
 
 /* Allocation pool for reference descriptions.  */
 
-static alloc_pool ipa_refdesc_pool;
+static object_allocator<ipa_cst_ref_desc> ipa_refdesc_pool
+  ("IPA-PROP ref descriptions");
 
 /* Return true if DECL_FUNCTION_SPECIFIC_OPTIMIZATION of the decl associated
    with NODE should prevent us from analyzing it for the purposes of IPA-CP.  */
@@ -152,12 +89,10 @@ static bool
 ipa_func_spec_opts_forbid_analysis_p (struct cgraph_node *node)
 {
   tree fs_opts = DECL_FUNCTION_SPECIFIC_OPTIMIZATION (node->decl);
-  struct cl_optimization *os;
 
   if (!fs_opts)
     return false;
-  os = TREE_OPTIMIZATION (fs_opts);
-  return !os->x_optimize || !os->x_flag_ipa_cp;
+  return !opt_for_fn (node->decl, optimize) || !opt_for_fn (node->decl, flag_ipa_cp);
 }
 
 /* Return index of the formal whose tree is PTREE in function which corresponds
@@ -170,7 +105,7 @@ ipa_get_param_decl_index_1 (vec<ipa_param_descriptor> descriptors, tree ptree)
 
   count = descriptors.length ();
   for (i = 0; i < count; i++)
-    if (descriptors[i].decl == ptree)
+    if (descriptors[i].decl_or_type == ptree)
       return i;
 
   return -1;
@@ -203,7 +138,7 @@ ipa_populate_param_decls (struct cgraph_node *node,
   param_num = 0;
   for (parm = fnargs; parm; parm = DECL_CHAIN (parm))
     {
-      descriptors[param_num].decl = parm;
+      descriptors[param_num].decl_or_type = parm;
       descriptors[param_num].move_cost = estimate_move_cost (TREE_TYPE (parm),
                                                             true);
       param_num++;
@@ -233,10 +168,10 @@ void
 ipa_dump_param (FILE *file, struct ipa_node_params *info, int i)
 {
   fprintf (file, "param #%i", i);
-  if (info->descriptors[i].decl)
+  if (info->descriptors[i].decl_or_type)
     {
       fprintf (file, " ");
-      print_generic_expr (file, info->descriptors[i].decl, 0);
+      print_generic_expr (file, info->descriptors[i].decl_or_type, 0);
     }
 }
 
@@ -287,15 +222,6 @@ ipa_print_node_jump_functions_for_edge (FILE *f, struct cgraph_edge *cs)
       fprintf (f, "       param %d: ", i);
       if (type == IPA_JF_UNKNOWN)
        fprintf (f, "UNKNOWN\n");
-      else if (type == IPA_JF_KNOWN_TYPE)
-       {
-         fprintf (f, "KNOWN TYPE: base  ");
-         print_generic_expr (f, jump_func->value.known_type.base_type, 0);
-         fprintf (f, ", offset "HOST_WIDE_INT_PRINT_DEC", component ",
-                  jump_func->value.known_type.offset);
-         print_generic_expr (f, jump_func->value.known_type.component_type, 0);
-         fprintf (f, "\n");
-       }
       else if (type == IPA_JF_CONST)
        {
          tree val = jump_func->value.constant.value;
@@ -324,21 +250,16 @@ ipa_print_node_jump_functions_for_edge (FILE *f, struct cgraph_edge *cs)
            }
          if (jump_func->value.pass_through.agg_preserved)
            fprintf (f, ", agg_preserved");
-         if (jump_func->value.pass_through.type_preserved)
-           fprintf (f, ", type_preserved");
          fprintf (f, "\n");
        }
       else if (type == IPA_JF_ANCESTOR)
        {
          fprintf (f, "ANCESTOR: ");
-         fprintf (f, "%d, offset "HOST_WIDE_INT_PRINT_DEC", ",
+         fprintf (f, "%d, offset " HOST_WIDE_INT_PRINT_DEC,
                   jump_func->value.ancestor.formal_id,
                   jump_func->value.ancestor.offset);
-         print_generic_expr (f, jump_func->value.ancestor.type, 0);
          if (jump_func->value.ancestor.agg_preserved)
            fprintf (f, ", agg_preserved");
-         if (jump_func->value.ancestor.type_preserved)
-           fprintf (f, ", type_preserved");
          fprintf (f, "\n");
        }
 
@@ -364,6 +285,36 @@ ipa_print_node_jump_functions_for_edge (FILE *f, struct cgraph_edge *cs)
              fprintf (f, "\n");
            }
        }
+
+      struct ipa_polymorphic_call_context *ctx
+       = ipa_get_ith_polymorhic_call_context (IPA_EDGE_REF (cs), i);
+      if (ctx && !ctx->useless_p ())
+       {
+         fprintf (f, "         Context: ");
+         ctx->dump (dump_file);
+       }
+
+      if (jump_func->bits.known)
+       {
+         fprintf (f, "         value: "); print_hex (jump_func->bits.value, f);
+         fprintf (f, ", mask: "); print_hex (jump_func->bits.mask, f);
+         fprintf (f, "\n");
+       }
+      else
+       fprintf (f, "         Unknown bits\n");
+
+      if (jump_func->vr_known)
+       {
+         fprintf (f, "         VR  ");
+         fprintf (f, "%s[",
+                  (jump_func->m_vr.type == VR_ANTI_RANGE) ? "~" : "");
+         print_decs (jump_func->m_vr.min, f);
+         fprintf (f, ", ");
+         print_decs (jump_func->m_vr.max, f);
+         fprintf (f, "]\n");
+       }
+      else
+       fprintf (f, "         Unknown VR\n");
     }
 }
 
@@ -384,8 +335,8 @@ ipa_print_node_jump_functions (FILE *f, struct cgraph_node *node)
        continue;
 
       fprintf (f, "    callsite  %s/%i -> %s/%i : \n",
-              xstrdup (node->name ()), node->order,
-              xstrdup (cs->callee->name ()),
+              xstrdup_for_dump (node->name ()), node->order,
+              xstrdup_for_dump (cs->callee->name ()),
               cs->callee->order);
       ipa_print_node_jump_functions_for_edge (f, cs);
     }
@@ -416,6 +367,8 @@ ipa_print_node_jump_functions (FILE *f, struct cgraph_node *node)
        }
       else
        fprintf (f, "\n");
+      if (ii->polymorphic)
+       ii->context.dump (f);
       ipa_print_node_jump_functions_for_edge (f, cs);
     }
 }
@@ -434,26 +387,14 @@ ipa_print_all_jump_functions (FILE *f)
     }
 }
 
-/* Set JFUNC to be a known type jump function.  */
+/* Set jfunc to be a know-really nothing jump function.  */
 
 static void
-ipa_set_jf_known_type (struct ipa_jump_func *jfunc, HOST_WIDE_INT offset,
-                      tree base_type, tree component_type)
+ipa_set_jf_unknown (struct ipa_jump_func *jfunc)
 {
-  /* Recording and propagating main variants increases change that types
-     will match.  */
-  base_type = TYPE_MAIN_VARIANT (base_type);
-  component_type = TYPE_MAIN_VARIANT (component_type);
-
-  gcc_assert (contains_polymorphic_type_p (base_type)
-             && contains_polymorphic_type_p (component_type));
-  if (!flag_devirtualize)
-    return;
-  jfunc->type = IPA_JF_KNOWN_TYPE;
-  jfunc->value.known_type.offset = offset,
-  jfunc->value.known_type.base_type = base_type;
-  jfunc->value.known_type.component_type = component_type;
-  gcc_assert (component_type);
+  jfunc->type = IPA_JF_UNKNOWN;
+  jfunc->bits.known = false;
+  jfunc->vr_known = false;
 }
 
 /* Set JFUNC to be a copy of another jmp (to be used by jump function
@@ -475,9 +416,6 @@ static void
 ipa_set_jf_constant (struct ipa_jump_func *jfunc, tree constant,
                     struct cgraph_edge *cs)
 {
-  constant = unshare_expr (constant);
-  if (constant && EXPR_P (constant))
-    SET_EXPR_LOCATION (constant, UNKNOWN_LOCATION);
   jfunc->type = IPA_JF_CONST;
   jfunc->value.constant.value = unshare_expr_without_location (constant);
 
@@ -485,11 +423,8 @@ ipa_set_jf_constant (struct ipa_jump_func *jfunc, tree constant,
       && TREE_CODE (TREE_OPERAND (constant, 0)) == FUNCTION_DECL)
     {
       struct ipa_cst_ref_desc *rdesc;
-      if (!ipa_refdesc_pool)
-       ipa_refdesc_pool = create_alloc_pool ("IPA-PROP ref descriptions",
-                                       sizeof (struct ipa_cst_ref_desc), 32);
 
-      rdesc = (struct ipa_cst_ref_desc *) pool_alloc (ipa_refdesc_pool);
+      rdesc = ipa_refdesc_pool.allocate ();
       rdesc->cs = cs;
       rdesc->next_duplicate = NULL;
       rdesc->refcount = 1;
@@ -502,16 +437,27 @@ ipa_set_jf_constant (struct ipa_jump_func *jfunc, tree constant,
 /* Set JFUNC to be a simple pass-through jump function.  */
 static void
 ipa_set_jf_simple_pass_through (struct ipa_jump_func *jfunc, int formal_id,
-                               bool agg_preserved, bool type_preserved)
+                               bool agg_preserved)
 {
   jfunc->type = IPA_JF_PASS_THROUGH;
   jfunc->value.pass_through.operand = NULL_TREE;
   jfunc->value.pass_through.formal_id = formal_id;
   jfunc->value.pass_through.operation = NOP_EXPR;
   jfunc->value.pass_through.agg_preserved = agg_preserved;
-  jfunc->value.pass_through.type_preserved = type_preserved;
 }
 
+/* Set JFUNC to be an unary pass through jump function.  */
+
+static void
+ipa_set_jf_unary_pass_through (struct ipa_jump_func *jfunc, int formal_id,
+                              enum tree_code operation)
+{
+  jfunc->type = IPA_JF_PASS_THROUGH;
+  jfunc->value.pass_through.operand = NULL_TREE;
+  jfunc->value.pass_through.formal_id = formal_id;
+  jfunc->value.pass_through.operation = operation;
+  jfunc->value.pass_through.agg_preserved = false;
+}
 /* Set JFUNC to be an arithmetic pass through jump function.  */
 
 static void
@@ -523,67 +469,25 @@ ipa_set_jf_arith_pass_through (struct ipa_jump_func *jfunc, int formal_id,
   jfunc->value.pass_through.formal_id = formal_id;
   jfunc->value.pass_through.operation = operation;
   jfunc->value.pass_through.agg_preserved = false;
-  jfunc->value.pass_through.type_preserved = false;
 }
 
 /* Set JFUNC to be an ancestor jump function.  */
 
 static void
 ipa_set_ancestor_jf (struct ipa_jump_func *jfunc, HOST_WIDE_INT offset,
-                    tree type, int formal_id, bool agg_preserved,
-                    bool type_preserved)
+                    int formal_id, bool agg_preserved)
 {
-  if (!flag_devirtualize)
-    type_preserved = false;
-  if (!type_preserved)
-    type = NULL_TREE;
-  if (type)
-    type = TYPE_MAIN_VARIANT (type);
-  gcc_assert (!type_preserved || contains_polymorphic_type_p (type));
   jfunc->type = IPA_JF_ANCESTOR;
   jfunc->value.ancestor.formal_id = formal_id;
   jfunc->value.ancestor.offset = offset;
-  jfunc->value.ancestor.type = type_preserved ? type : NULL;
   jfunc->value.ancestor.agg_preserved = agg_preserved;
-  jfunc->value.ancestor.type_preserved = type_preserved;
-}
-
-/* Extract the acual BINFO being described by JFUNC which must be a known type
-   jump function.  */
-
-tree
-ipa_binfo_from_known_type_jfunc (struct ipa_jump_func *jfunc)
-{
-  if (!RECORD_OR_UNION_TYPE_P (jfunc->value.known_type.base_type))
-    return NULL_TREE;
-
-  tree base_binfo = TYPE_BINFO (jfunc->value.known_type.base_type);
-
-  if (!base_binfo)
-    return NULL_TREE;
-  /* FIXME: At LTO we can't propagate to non-polymorphic type, because
-     we have no ODR equivalency on those.  This should be fixed by
-     propagating on types rather than binfos that would make type
-     matching here unnecesary.  */
-  if (in_lto_p
-      && (TREE_CODE (jfunc->value.known_type.component_type) != RECORD_TYPE
-         || !TYPE_BINFO (jfunc->value.known_type.component_type)
-         || !BINFO_VTABLE (TYPE_BINFO (jfunc->value.known_type.component_type))))
-    {
-      if (!jfunc->value.known_type.offset)
-       return base_binfo;
-      return NULL;
-    }
-  return get_binfo_at_offset (base_binfo,
-                             jfunc->value.known_type.offset,
-                             jfunc->value.known_type.component_type);
 }
 
 /* Get IPA BB information about the given BB.  FBI is the context of analyzis
    of this function body.  */
 
 static struct ipa_bb_info *
-ipa_get_bb_info (struct func_body_info *fbi, basic_block bb)
+ipa_get_bb_info (struct ipa_func_body_info *fbi, basic_block bb)
 {
   gcc_checking_assert (fbi);
   return &fbi->bb_infos[bb->index];
@@ -600,14 +504,8 @@ struct prop_type_change_info
   /* The declaration or SSA_NAME pointer of the base that we are checking for
      type change.  */
   tree object;
-  /* If we actually can tell the type that the object has changed to, it is
-     stored in this field.  Otherwise it remains NULL_TREE.  */
-  tree known_current_type;
   /* Set to true if dynamic type change has been detected.  */
   bool type_maybe_changed;
-  /* Set to true if multiple types have been encountered.  known_current_type
-     must be disregarded in that case.  */
-  bool multiple_types_encountered;
 };
 
 /* Return true if STMT can modify a virtual method table pointer.
@@ -648,7 +546,7 @@ struct prop_type_change_info
   */
 
 static bool
-stmt_may_be_vtbl_ptr_store (gimple stmt)
+stmt_may_be_vtbl_ptr_store (gimple *stmt)
 {
   if (is_gimple_call (stmt))
     return false;
@@ -675,75 +573,19 @@ stmt_may_be_vtbl_ptr_store (gimple stmt)
   return true;
 }
 
-/* If STMT can be proved to be an assignment to the virtual method table
-   pointer of ANALYZED_OBJ and the type associated with the new table
-   identified, return the type.  Otherwise return NULL_TREE.  */
-
-static tree
-extr_type_from_vtbl_ptr_store (gimple stmt, struct prop_type_change_info *tci)
-{
-  HOST_WIDE_INT offset, size, max_size;
-  tree lhs, rhs, base, binfo;
-
-  if (!gimple_assign_single_p (stmt))
-    return NULL_TREE;
-
-  lhs = gimple_assign_lhs (stmt);
-  rhs = gimple_assign_rhs1 (stmt);
-  if (TREE_CODE (lhs) != COMPONENT_REF
-      || !DECL_VIRTUAL_P (TREE_OPERAND (lhs, 1)))
-    return NULL_TREE;
-
-  base = get_ref_base_and_extent (lhs, &offset, &size, &max_size);
-  if (offset != tci->offset
-      || size != POINTER_SIZE
-      || max_size != POINTER_SIZE)
-    return NULL_TREE;
-  if (TREE_CODE (base) == MEM_REF)
-    {
-      if (TREE_CODE (tci->object) != MEM_REF
-         || TREE_OPERAND (tci->object, 0) != TREE_OPERAND (base, 0)
-         || !tree_int_cst_equal (TREE_OPERAND (tci->object, 1),
-                                 TREE_OPERAND (base, 1)))
-       return NULL_TREE;
-    }
-  else if (tci->object != base)
-    return NULL_TREE;
-
-  binfo = vtable_pointer_value_to_binfo (rhs);
-
-  /* FIXME: vtable_pointer_value_to_binfo may return BINFO of a
-     base of outer type.  In this case we would need to either
-     work on binfos or translate it back to outer type and offset.
-     KNOWN_TYPE jump functions are not ready for that, yet.  */
-  if (!binfo || TYPE_BINFO (BINFO_TYPE (binfo)) != binfo)
-   return NULL;
-
-  return BINFO_TYPE (binfo);
-}
-
-/* Callback of walk_aliased_vdefs and a helper function for
-   detect_type_change to check whether a particular statement may modify
-   the virtual table pointer, and if possible also determine the new type of
-   the (sub-)object.  It stores its result into DATA, which points to a
+/* Callback of walk_aliased_vdefs and a helper function for detect_type_change
+   to check whether a particular statement may modify the virtual table
+   pointerIt stores its result into DATA, which points to a
    prop_type_change_info structure.  */
 
 static bool
 check_stmt_for_type_change (ao_ref *ao ATTRIBUTE_UNUSED, tree vdef, void *data)
 {
-  gimple stmt = SSA_NAME_DEF_STMT (vdef);
+  gimple *stmt = SSA_NAME_DEF_STMT (vdef);
   struct prop_type_change_info *tci = (struct prop_type_change_info *) data;
 
   if (stmt_may_be_vtbl_ptr_store (stmt))
     {
-      tree type;
-
-      type = extr_type_from_vtbl_ptr_store (stmt, tci);
-      gcc_assert (!type || TYPE_MAIN_VARIANT (type) == type);
-      if (tci->type_maybe_changed
-         && type != tci->known_current_type)
-       tci->multiple_types_encountered = true;
-      tci->known_current_type = type;
       tci->type_maybe_changed = true;
       return true;
     }
@@ -761,7 +603,7 @@ check_stmt_for_type_change (ao_ref *ao ATTRIBUTE_UNUSED, tree vdef, void *data)
    type of the THIS pointer.  */
 
 static bool
-param_type_may_change_p (tree function, tree arg, gimple call)
+param_type_may_change_p (tree function, tree arg, gimple *call)
 {
   /* Pure functions can not do any changes on the dynamic type;
      that require writting to memory.  */
@@ -786,7 +628,7 @@ param_type_may_change_p (tree function, tree arg, gimple call)
       /* Normal (non-THIS) argument.  */
       if ((SSA_NAME_VAR (arg) != DECL_ARGUMENTS (function)
           || TREE_CODE (TREE_TYPE (function)) != METHOD_TYPE)
-         /* THIS pointer of an method - here we we want to watch constructors
+         /* THIS pointer of an method - here we want to watch constructors
             and destructors as those definitely may change the dynamic
             type.  */
          || (TREE_CODE (TREE_TYPE (function)) == METHOD_TYPE
@@ -797,18 +639,8 @@ param_type_may_change_p (tree function, tree arg, gimple call)
          /* Walk the inline stack and watch out for ctors/dtors.  */
          for (tree block = gimple_block (call); block && TREE_CODE (block) == BLOCK;
               block = BLOCK_SUPERCONTEXT (block))
-           if (BLOCK_ABSTRACT_ORIGIN (block)
-               && TREE_CODE (BLOCK_ABSTRACT_ORIGIN (block)) == FUNCTION_DECL)
-             {
-               tree fn = BLOCK_ABSTRACT_ORIGIN (block);
-
-               if (flags_from_decl_or_type (fn) & (ECF_PURE | ECF_CONST))
-                 continue;
-               if (TREE_CODE (TREE_TYPE (fn)) == METHOD_TYPE
-                   && (DECL_CXX_CONSTRUCTOR_P (fn)
-                       || DECL_CXX_DESTRUCTOR_P (fn)))
-                 return true;
-             }
+           if (inlined_polymorphic_ctor_dtor_block_p (block, false))
+             return true;
          return false;
        }
     }
@@ -827,7 +659,7 @@ param_type_may_change_p (tree function, tree arg, gimple call)
 
 static bool
 detect_type_change_from_memory_writes (tree arg, tree base, tree comp_type,
-                                      gimple call, struct ipa_jump_func *jfunc,
+                                      gcall *call, struct ipa_jump_func *jfunc,
                                       HOST_WIDE_INT offset)
 {
   struct prop_type_change_info tci;
@@ -858,25 +690,14 @@ detect_type_change_from_memory_writes (tree arg, tree base, tree comp_type,
 
   tci.offset = offset;
   tci.object = get_base_address (arg);
-  tci.known_current_type = NULL_TREE;
   tci.type_maybe_changed = false;
-  tci.multiple_types_encountered = false;
 
   walk_aliased_vdefs (&ao, gimple_vuse (call), check_stmt_for_type_change,
                      &tci, NULL, &entry_reached);
   if (!tci.type_maybe_changed)
     return false;
 
-  if (!tci.known_current_type
-      || tci.multiple_types_encountered
-      || offset != 0
-      /* When the walk reached function entry, it means that type
-        is set along some paths but not along others.  */
-      || entry_reached)
-    jfunc->type = IPA_JF_UNKNOWN;
-  else
-    ipa_set_jf_known_type (jfunc, 0, tci.known_current_type, comp_type);
-
+  ipa_set_jf_unknown (jfunc);
   return true;
 }
 
@@ -887,7 +708,7 @@ detect_type_change_from_memory_writes (tree arg, tree base, tree comp_type,
    returned by get_ref_base_and_extent, as is the offset.  */
 
 static bool
-detect_type_change (tree arg, tree base, tree comp_type, gimple call,
+detect_type_change (tree arg, tree base, tree comp_type, gcall *call,
                    struct ipa_jump_func *jfunc, HOST_WIDE_INT offset)
 {
   if (!flag_devirtualize)
@@ -908,7 +729,7 @@ detect_type_change (tree arg, tree base, tree comp_type, gimple call,
 
 static bool
 detect_type_change_ssa (tree arg, tree comp_type,
-                       gimple call, struct ipa_jump_func *jfunc)
+                       gcall *call, struct ipa_jump_func *jfunc)
 {
   gcc_checking_assert (TREE_CODE (arg) == SSA_NAME);
   if (!flag_devirtualize
@@ -941,7 +762,7 @@ mark_modified (ao_ref *ao ATTRIBUTE_UNUSED, tree vdef ATTRIBUTE_UNUSED,
    should really just start giving up.  */
 
 static bool
-aa_overwalked (struct func_body_info *fbi)
+aa_overwalked (struct ipa_func_body_info *fbi)
 {
   gcc_checking_assert (fbi);
   return fbi->aa_walked > (unsigned) PARAM_VALUE (PARAM_IPA_MAX_AA_STEPS);
@@ -950,8 +771,8 @@ aa_overwalked (struct func_body_info *fbi)
 /* Find the nearest valid aa status for parameter specified by INDEX that
    dominates BB.  */
 
-static struct param_aa_status *
-find_dominating_aa_status (struct func_body_info *fbi, basic_block bb,
+static struct ipa_param_aa_status *
+find_dominating_aa_status (struct ipa_func_body_info *fbi, basic_block bb,
                           int index)
 {
   while (true)
@@ -970,21 +791,21 @@ find_dominating_aa_status (struct func_body_info *fbi, basic_block bb,
    structures and/or intialize the result with a dominating description as
    necessary.  */
 
-static struct param_aa_status *
-parm_bb_aa_status_for_bb (struct func_body_info *fbi, basic_block bb,
+static struct ipa_param_aa_status *
+parm_bb_aa_status_for_bb (struct ipa_func_body_info *fbi, basic_block bb,
                          int index)
 {
   gcc_checking_assert (fbi);
   struct ipa_bb_info *bi = ipa_get_bb_info (fbi, bb);
   if (bi->param_aa_statuses.is_empty ())
     bi->param_aa_statuses.safe_grow_cleared (fbi->param_count);
-  struct param_aa_status *paa = &bi->param_aa_statuses[index];
+  struct ipa_param_aa_status *paa = &bi->param_aa_statuses[index];
   if (!paa->valid)
     {
       gcc_checking_assert (!paa->parm_modified
                           && !paa->ref_modified
                           && !paa->pt_modified);
-      struct param_aa_status *dom_paa;
+      struct ipa_param_aa_status *dom_paa;
       dom_paa = find_dominating_aa_status (fbi, bb, index);
       if (dom_paa)
        *paa = *dom_paa;
@@ -1001,13 +822,18 @@ parm_bb_aa_status_for_bb (struct func_body_info *fbi, basic_block bb,
    gathered but do not survive the summary building stage.  */
 
 static bool
-parm_preserved_before_stmt_p (struct func_body_info *fbi, int index,
-                             gimple stmt, tree parm_load)
+parm_preserved_before_stmt_p (struct ipa_func_body_info *fbi, int index,
+                             gimple *stmt, tree parm_load)
 {
-  struct param_aa_status *paa;
+  struct ipa_param_aa_status *paa;
   bool modified = false;
   ao_ref refd;
 
+  tree base = get_base_address (parm_load);
+  gcc_assert (TREE_CODE (base) == PARM_DECL);
+  if (TREE_READONLY (base))
+    return true;
+
   /* FIXME: FBI can be NULL if we are being called from outside
      ipa_node_analysis or ipcp_transform_function, which currently happens
      during inlining analysis.  It would be great to extend fbi's lifetime and
@@ -1035,21 +861,19 @@ parm_preserved_before_stmt_p (struct func_body_info *fbi, int index,
   return !modified;
 }
 
-/* If STMT is an assignment that loads a value from an parameter declaration,
-   return the index of the parameter in ipa_node_params which has not been
-   modified.  Otherwise return -1.  */
+/* Main worker for load_from_unmodified_param and load_from_param.
+   If STMT is an assignment that loads a value from an parameter declaration,
+   return the index of the parameter in ipa_node_params.  Otherwise return -1.  */
 
 static int
-load_from_unmodified_param (struct func_body_info *fbi,
-                           vec<ipa_param_descriptor> descriptors,
-                           gimple stmt)
+load_from_param_1 (struct ipa_func_body_info *fbi,
+                  vec<ipa_param_descriptor> descriptors,
+                  gimple *stmt)
 {
   int index;
   tree op1;
 
-  if (!gimple_assign_single_p (stmt))
-    return -1;
-
+  gcc_checking_assert (is_gimple_assign (stmt));
   op1 = gimple_assign_rhs1 (stmt);
   if (TREE_CODE (op1) != PARM_DECL)
     return -1;
@@ -1062,15 +886,49 @@ load_from_unmodified_param (struct func_body_info *fbi,
   return index;
 }
 
+/* If STMT is an assignment that loads a value from an parameter declaration,
+   return the index of the parameter in ipa_node_params which has not been
+   modified.  Otherwise return -1.  */
+
+static int
+load_from_unmodified_param (struct ipa_func_body_info *fbi,
+                           vec<ipa_param_descriptor> descriptors,
+                           gimple *stmt)
+{
+  if (!gimple_assign_single_p (stmt))
+    return -1;
+
+  return load_from_param_1 (fbi, descriptors, stmt);
+}
+
+/* If STMT is an assignment that loads a value from an parameter declaration,
+   return the index of the parameter in ipa_node_params.  Otherwise return -1.  */
+
+static int
+load_from_param (struct ipa_func_body_info *fbi,
+                vec<ipa_param_descriptor> descriptors,
+                gimple *stmt)
+{
+  if (!is_gimple_assign (stmt))
+    return -1;
+
+  enum tree_code rhs_code = gimple_assign_rhs_code (stmt);
+  if ((get_gimple_rhs_class (rhs_code) != GIMPLE_SINGLE_RHS)
+      && (get_gimple_rhs_class (rhs_code) != GIMPLE_UNARY_RHS))
+    return -1;
+
+  return load_from_param_1 (fbi, descriptors, stmt);
+}
+
 /* Return true if memory reference REF (which must be a load through parameter
    with INDEX) loads data that are known to be unmodified in this function
    before reaching statement STMT.  */
 
 static bool
-parm_ref_data_preserved_p (struct func_body_info *fbi,
-                          int index, gimple stmt, tree ref)
+parm_ref_data_preserved_p (struct ipa_func_body_info *fbi,
+                          int index, gimple *stmt, tree ref)
 {
-  struct param_aa_status *paa;
+  struct ipa_param_aa_status *paa;
   bool modified = false;
   ao_ref refd;
 
@@ -1106,8 +964,8 @@ parm_ref_data_preserved_p (struct func_body_info *fbi,
    CALL into which it is passed.  FBI describes the function body.  */
 
 static bool
-parm_ref_data_pass_through_p (struct func_body_info *fbi, int index,
-                             gimple call, tree parm)
+parm_ref_data_pass_through_p (struct ipa_func_body_info *fbi, int index,
+                             gimple *call, tree parm)
 {
   bool modified = false;
   ao_ref refd;
@@ -1120,8 +978,9 @@ parm_ref_data_pass_through_p (struct func_body_info *fbi, int index,
       || aa_overwalked (fbi))
     return false;
 
-  struct param_aa_status *paa = parm_bb_aa_status_for_bb (fbi, gimple_bb (call),
-                                                         index);
+  struct ipa_param_aa_status *paa = parm_bb_aa_status_for_bb (fbi,
+                                                             gimple_bb (call),
+                                                             index);
   if (paa->pt_modified)
     return false;
 
@@ -1134,26 +993,33 @@ parm_ref_data_pass_through_p (struct func_body_info *fbi, int index,
   return !modified;
 }
 
-/* Return true if we can prove that OP is a memory reference loading unmodified
-   data from an aggregate passed as a parameter and if the aggregate is passed
-   by reference, that the alias type of the load corresponds to the type of the
-   formal parameter (so that we can rely on this type for TBAA in callers).
+/* Return true if we can prove that OP is a memory reference loading
+   data from an aggregate passed as a parameter.
+
+   The function works in two modes.  If GUARANTEED_UNMODIFIED is NULL, it return
+   false if it cannot prove that the value has not been modified before the
+   load in STMT.  If GUARANTEED_UNMODIFIED is not NULL, it will return true even
+   if it cannot prove the value has not been modified, in that case it will
+   store false to *GUARANTEED_UNMODIFIED, otherwise it will store true there.
+
    INFO and PARMS_AINFO describe parameters of the current function (but the
    latter can be NULL), STMT is the load statement.  If function returns true,
    *INDEX_P, *OFFSET_P and *BY_REF is filled with the parameter index, offset
    within the aggregate and whether it is a load from a value passed by
    reference respectively.  */
 
-static bool
-ipa_load_from_parm_agg_1 (struct func_body_info *fbi,
-                         vec<ipa_param_descriptor> descriptors,
-                         gimple stmt, tree op, int *index_p,
-                         HOST_WIDE_INT *offset_p, HOST_WIDE_INT *size_p,
-                         bool *by_ref_p)
+bool
+ipa_load_from_parm_agg (struct ipa_func_body_info *fbi,
+                       vec<ipa_param_descriptor> descriptors,
+                       gimple *stmt, tree op, int *index_p,
+                       HOST_WIDE_INT *offset_p, HOST_WIDE_INT *size_p,
+                       bool *by_ref_p, bool *guaranteed_unmodified)
 {
   int index;
   HOST_WIDE_INT size, max_size;
-  tree base = get_ref_base_and_extent (op, offset_p, &size, &max_size);
+  bool reverse;
+  tree base
+    = get_ref_base_and_extent (op, offset_p, &size, &max_size, &reverse);
 
   if (max_size == -1 || max_size != size || *offset_p < 0)
     return false;
@@ -1168,6 +1034,8 @@ ipa_load_from_parm_agg_1 (struct func_body_info *fbi,
          *by_ref_p = false;
          if (size_p)
            *size_p = size;
+         if (guaranteed_unmodified)
+           *guaranteed_unmodified = true;
          return true;
        }
       return false;
@@ -1200,34 +1068,27 @@ ipa_load_from_parm_agg_1 (struct func_body_info *fbi,
         gdp = &p;
       */
 
-      gimple def = SSA_NAME_DEF_STMT (TREE_OPERAND (base, 0));
+      gimple *def = SSA_NAME_DEF_STMT (TREE_OPERAND (base, 0));
       index = load_from_unmodified_param (fbi, descriptors, def);
     }
 
-  if (index >= 0
-      && parm_ref_data_preserved_p (fbi, index, stmt, op))
+  if (index >= 0)
     {
+      bool data_preserved = parm_ref_data_preserved_p (fbi, index, stmt, op);
+      if (!data_preserved && !guaranteed_unmodified)
+       return false;
+
       *index_p = index;
       *by_ref_p = true;
       if (size_p)
        *size_p = size;
+      if (guaranteed_unmodified)
+       *guaranteed_unmodified = data_preserved;
       return true;
     }
   return false;
 }
 
-/* Just like the previous function, just without the param_analysis_info
-   pointer, for users outside of this file.  */
-
-bool
-ipa_load_from_parm_agg (struct ipa_node_params *info, gimple stmt,
-                       tree op, int *index_p, HOST_WIDE_INT *offset_p,
-                       bool *by_ref_p)
-{
-  return ipa_load_from_parm_agg_1 (NULL, info->descriptors, stmt, op, index_p,
-                                  offset_p, NULL, by_ref_p);
-}
-
 /* Given that an actual argument is an SSA_NAME (given in NAME) and is a result
    of an assignment statement STMT, try to determine whether we are actually
    handling any of the following cases and construct an appropriate jump
@@ -1282,15 +1143,17 @@ ipa_load_from_parm_agg (struct ipa_node_params *info, gimple stmt,
    only needed for intraprocedural analysis.  */
 
 static void
-compute_complex_assign_jump_func (struct func_body_info *fbi,
+compute_complex_assign_jump_func (struct ipa_func_body_info *fbi,
                                  struct ipa_node_params *info,
                                  struct ipa_jump_func *jfunc,
-                                 gimple call, gimple stmt, tree name,
+                                 gcall *call, gimple *stmt, tree name,
                                  tree param_type)
 {
   HOST_WIDE_INT offset, size, max_size;
   tree op1, tc_ssa, base, ssa;
+  bool reverse;
   int index;
+  gimple *stmt2 = stmt;
 
   op1 = gimple_assign_rhs1 (stmt);
 
@@ -1299,41 +1162,51 @@ compute_complex_assign_jump_func (struct func_body_info *fbi,
       if (SSA_NAME_IS_DEFAULT_DEF (op1))
        index = ipa_get_param_decl_index (info, SSA_NAME_VAR (op1));
       else
-       index = load_from_unmodified_param (fbi, info->descriptors,
-                                           SSA_NAME_DEF_STMT (op1));
+       {
+         index = load_from_param (fbi, info->descriptors,
+                                  SSA_NAME_DEF_STMT (op1));
+         stmt2 = SSA_NAME_DEF_STMT (op1);
+       }
       tc_ssa = op1;
     }
   else
     {
-      index = load_from_unmodified_param (fbi, info->descriptors, stmt);
+      index = load_from_param (fbi, info->descriptors, stmt);
       tc_ssa = gimple_assign_lhs (stmt);
     }
 
   if (index >= 0)
     {
-      tree op2 = gimple_assign_rhs2 (stmt);
-
-      if (op2)
+      switch (gimple_assign_rhs_class (stmt))
        {
-         if (!is_gimple_ip_invariant (op2)
-             || (TREE_CODE_CLASS (gimple_expr_code (stmt)) != tcc_comparison
-                 && !useless_type_conversion_p (TREE_TYPE (name),
-                                                TREE_TYPE (op1))))
-           return;
-
-         ipa_set_jf_arith_pass_through (jfunc, index, op2,
-                                        gimple_assign_rhs_code (stmt));
-       }
-      else if (gimple_assign_single_p (stmt))
-       {
-         bool agg_p = parm_ref_data_pass_through_p (fbi, index, call, tc_ssa);
-         bool type_p = false;
-
-         if (param_type && POINTER_TYPE_P (param_type))
-           type_p = !detect_type_change_ssa (tc_ssa, TREE_TYPE (param_type),
-                                             call, jfunc);
-         if (type_p || jfunc->type == IPA_JF_UNKNOWN)
-           ipa_set_jf_simple_pass_through (jfunc, index, agg_p, type_p);
+       case GIMPLE_BINARY_RHS:
+         {
+           tree op2 = gimple_assign_rhs2 (stmt);
+           if (!is_gimple_ip_invariant (op2)
+               || ((TREE_CODE_CLASS (gimple_assign_rhs_code (stmt))
+                    != tcc_comparison)
+                   && !useless_type_conversion_p (TREE_TYPE (name),
+                                                  TREE_TYPE (op1))))
+             return;
+
+           ipa_set_jf_arith_pass_through (jfunc, index, op2,
+                                          gimple_assign_rhs_code (stmt));
+           break;
+         }
+       case GIMPLE_SINGLE_RHS:
+         {
+           bool agg_p = parm_ref_data_pass_through_p (fbi, index, call,
+                                                      tc_ssa);
+           ipa_set_jf_simple_pass_through (jfunc, index, agg_p);
+           break;
+         }
+       case GIMPLE_UNARY_RHS:
+         if (is_gimple_assign (stmt2)
+             && gimple_assign_rhs_class (stmt2) == GIMPLE_UNARY_RHS
+             && ! CONVERT_EXPR_CODE_P (gimple_assign_rhs_code (stmt2)))
+           ipa_set_jf_unary_pass_through (jfunc, index,
+                                          gimple_assign_rhs_code (stmt2));
+       default:;
        }
       return;
     }
@@ -1343,7 +1216,7 @@ compute_complex_assign_jump_func (struct func_body_info *fbi,
   op1 = TREE_OPERAND (op1, 0);
   if (TREE_CODE (TREE_TYPE (op1)) != RECORD_TYPE)
     return;
-  base = get_ref_base_and_extent (op1, &offset, &size, &max_size);
+  base = get_ref_base_and_extent (op1, &offset, &size, &max_size, &reverse);
   if (TREE_CODE (base) != MEM_REF
       /* If this is a varying address, punt.  */
       || max_size == -1
@@ -1359,16 +1232,8 @@ compute_complex_assign_jump_func (struct func_body_info *fbi,
   /* Dynamic types are changed in constructors and destructors.  */
   index = ipa_get_param_decl_index (info, SSA_NAME_VAR (ssa));
   if (index >= 0 && param_type && POINTER_TYPE_P (param_type))
-    {
-      bool type_p = (contains_polymorphic_type_p (TREE_TYPE (param_type))
-                    && !detect_type_change (op1, base, TREE_TYPE (param_type),
-                                            call, jfunc, offset));
-      if (type_p || jfunc->type == IPA_JF_UNKNOWN)
-       ipa_set_ancestor_jf (jfunc, offset,
-                            type_p ? TREE_TYPE (param_type) : NULL, index,
-                            parm_ref_data_pass_through_p (fbi, index,
-                                                          call, ssa), type_p);
-    }
+    ipa_set_ancestor_jf (jfunc, offset,  index,
+                        parm_ref_data_pass_through_p (fbi, index, call, ssa));
 }
 
 /* Extract the base, offset and MEM_REF expression from a statement ASSIGN if
@@ -1383,10 +1248,11 @@ compute_complex_assign_jump_func (struct func_body_info *fbi,
    RHS stripped off the ADDR_EXPR is stored into *OBJ_P.  */
 
 static tree
-get_ancestor_addr_info (gimple assign, tree *obj_p, HOST_WIDE_INT *offset)
+get_ancestor_addr_info (gimple *assign, tree *obj_p, HOST_WIDE_INT *offset)
 {
   HOST_WIDE_INT size, max_size;
   tree expr, parm, obj;
+  bool reverse;
 
   if (!gimple_assign_single_p (assign))
     return NULL_TREE;
@@ -1396,7 +1262,7 @@ get_ancestor_addr_info (gimple assign, tree *obj_p, HOST_WIDE_INT *offset)
     return NULL_TREE;
   expr = TREE_OPERAND (expr, 0);
   obj = expr;
-  expr = get_ref_base_and_extent (expr, offset, &size, &max_size);
+  expr = get_ref_base_and_extent (expr, offset, &size, &max_size, &reverse);
 
   if (TREE_CODE (expr) != MEM_REF
       /* If this is a varying address, punt.  */
@@ -1438,13 +1304,13 @@ get_ancestor_addr_info (gimple assign, tree *obj_p, HOST_WIDE_INT *offset)
      return D.1879_6;  */
 
 static void
-compute_complex_ancestor_jump_func (struct func_body_info *fbi,
+compute_complex_ancestor_jump_func (struct ipa_func_body_info *fbi,
                                    struct ipa_node_params *info,
                                    struct ipa_jump_func *jfunc,
-                                   gimple call, gimple phi, tree param_type)
+                                   gcall *call, gphi *phi)
 {
   HOST_WIDE_INT offset;
-  gimple assign, cond;
+  gimple *assign, *cond;
   basic_block phi_bb, assign_bb, cond_bb;
   tree tmp, parm, expr, obj;
   int index, i;
@@ -1493,56 +1359,8 @@ compute_complex_ancestor_jump_func (struct func_body_info *fbi,
        return;
     }
 
-  bool type_p = false;
-  if (param_type && POINTER_TYPE_P (param_type)
-      && contains_polymorphic_type_p (TREE_TYPE (param_type)))
-    type_p = !detect_type_change (obj, expr, TREE_TYPE (param_type),
-                                 call, jfunc, offset);
-  if (type_p || jfunc->type == IPA_JF_UNKNOWN)
-    ipa_set_ancestor_jf (jfunc, offset, type_p ? TREE_TYPE (param_type) : NULL,
-                        index,
-                        parm_ref_data_pass_through_p (fbi, index, call, parm),
-                        type_p);
-}
-
-/* Given OP which is passed as an actual argument to a called function,
-   determine if it is possible to construct a KNOWN_TYPE jump function for it
-   and if so, create one and store it to JFUNC.
-   EXPECTED_TYPE represents a type the argument should be in  */
-
-static void
-compute_known_type_jump_func (tree op, struct ipa_jump_func *jfunc,
-                             gimple call, tree expected_type)
-{
-  HOST_WIDE_INT offset, size, max_size;
-  tree base;
-
-  if (!flag_devirtualize
-      || TREE_CODE (op) != ADDR_EXPR
-      || !contains_polymorphic_type_p (TREE_TYPE (TREE_TYPE (op)))
-      /* Be sure expected_type is polymorphic.  */
-      || !expected_type
-      || !contains_polymorphic_type_p (expected_type))
-    return;
-
-  op = TREE_OPERAND (op, 0);
-  base = get_ref_base_and_extent (op, &offset, &size, &max_size);
-  if (!DECL_P (base)
-      || max_size == -1
-      || max_size != size
-      || !contains_polymorphic_type_p (TREE_TYPE (base)))
-    return;
-
-  if (decl_maybe_in_construction_p (base, TREE_TYPE (base),
-                                   call, current_function_decl)
-      /* Even if the var seems to be in construction by inline call stack,
-        we may work out the actual type by walking memory writes.  */
-      && (is_global_var (base)
-         || detect_type_change (op, base, expected_type, call, jfunc, offset)))
-    return;
-
-  ipa_set_jf_known_type (jfunc, offset, TREE_TYPE (base),
-                        expected_type);
+  ipa_set_ancestor_jf (jfunc, offset, index,
+                      parm_ref_data_pass_through_p (fbi, index, call, parm));
 }
 
 /* Inspect the given TYPE and return true iff it has the same structure (the
@@ -1589,7 +1407,7 @@ get_ssa_def_if_simple_copy (tree rhs)
 {
   while (TREE_CODE (rhs) == SSA_NAME && !SSA_NAME_IS_DEFAULT_DEF (rhs))
     {
-      gimple def_stmt = SSA_NAME_DEF_STMT (rhs);
+      gimple *def_stmt = SSA_NAME_DEF_STMT (rhs);
 
       if (gimple_assign_single_p (def_stmt))
        rhs = gimple_assign_rhs1 (def_stmt);
@@ -1676,7 +1494,8 @@ build_agg_jump_func_from_list (struct ipa_known_agg_contents_list *list,
    subsequently stored.  */
 
 static void
-determine_locally_known_aggregate_parts (gimple call, tree arg, tree arg_type,
+determine_locally_known_aggregate_parts (gcall *call, tree arg,
+                                        tree arg_type,
                                         struct ipa_jump_func *jfunc)
 {
   struct ipa_known_agg_contents_list *list = NULL;
@@ -1687,6 +1506,9 @@ determine_locally_known_aggregate_parts (gimple call, tree arg, tree arg_type,
   bool check_ref, by_ref;
   ao_ref r;
 
+  if (PARAM_VALUE (PARAM_IPA_MAX_AGG_ITEMS) == 0)
+    return;
+
   /* The function operates in three stages.  First, we prepare check_ref, r,
      arg_base and arg_offset based on what is actually passed as an actual
      argument.  */
@@ -1709,10 +1531,11 @@ determine_locally_known_aggregate_parts (gimple call, tree arg, tree arg_type,
       else if (TREE_CODE (arg) == ADDR_EXPR)
        {
          HOST_WIDE_INT arg_max_size;
+         bool reverse;
 
          arg = TREE_OPERAND (arg, 0);
          arg_base = get_ref_base_and_extent (arg, &arg_offset, &arg_size,
-                                         &arg_max_size);
+                                             &arg_max_size, &reverse);
          if (arg_max_size == -1
              || arg_max_size != arg_size
              || arg_offset < 0)
@@ -1731,13 +1554,14 @@ determine_locally_known_aggregate_parts (gimple call, tree arg, tree arg_type,
   else
     {
       HOST_WIDE_INT arg_max_size;
+      bool reverse;
 
       gcc_checking_assert (AGGREGATE_TYPE_P (TREE_TYPE (arg)));
 
       by_ref = false;
       check_ref = false;
       arg_base = get_ref_base_and_extent (arg, &arg_offset, &arg_size,
-                                         &arg_max_size);
+                                         &arg_max_size, &reverse);
       if (arg_max_size == -1
          || arg_max_size != arg_size
          || arg_offset < 0)
@@ -1755,9 +1579,10 @@ determine_locally_known_aggregate_parts (gimple call, tree arg, tree arg_type,
   for (; !gsi_end_p (gsi); gsi_prev (&gsi))
     {
       struct ipa_known_agg_contents_list *n, **p;
-      gimple stmt = gsi_stmt (gsi);
+      gimple *stmt = gsi_stmt (gsi);
       HOST_WIDE_INT lhs_offset, lhs_size, lhs_max_size;
       tree lhs, rhs, lhs_base;
+      bool reverse;
 
       if (!stmt_may_clobber_ref_p_1 (stmt, &r))
        continue;
@@ -1772,7 +1597,7 @@ determine_locally_known_aggregate_parts (gimple call, tree arg, tree arg_type,
        break;
 
       lhs_base = get_ref_base_and_extent (lhs, &lhs_offset, &lhs_size,
-                                         &lhs_max_size);
+                                         &lhs_max_size, &reverse);
       if (lhs_max_size == -1
          || lhs_max_size != lhs_size)
        break;
@@ -1831,7 +1656,10 @@ determine_locally_known_aggregate_parts (gimple call, tree arg, tree arg_type,
     }
 }
 
-static tree
+/* Return the Ith param type of callee associated with call graph
+   edge E.  */
+
+tree
 ipa_get_callee_param_type (struct cgraph_edge *e, int i)
 {
   int n;
@@ -1867,17 +1695,20 @@ ipa_get_callee_param_type (struct cgraph_edge *e, int i)
    to this callsite.  */
 
 static void
-ipa_compute_jump_functions_for_edge (struct func_body_info *fbi,
+ipa_compute_jump_functions_for_edge (struct ipa_func_body_info *fbi,
                                     struct cgraph_edge *cs)
 {
   struct ipa_node_params *info = IPA_NODE_REF (cs->caller);
   struct ipa_edge_args *args = IPA_EDGE_REF (cs);
-  gimple call = cs->call_stmt;
+  gcall *call = cs->call_stmt;
   int n, arg_num = gimple_call_num_args (call);
+  bool useful_context = false;
 
   if (arg_num == 0 || args->jump_functions)
     return;
   vec_safe_grow_cleared (args->jump_functions, arg_num);
+  if (flag_devirtualize)
+    vec_safe_grow_cleared (args->polymorphic_call_contexts, arg_num);
 
   if (gimple_call_internal_p (call))
     return;
@@ -1889,8 +1720,105 @@ ipa_compute_jump_functions_for_edge (struct func_body_info *fbi,
       struct ipa_jump_func *jfunc = ipa_get_ith_jump_func (args, n);
       tree arg = gimple_call_arg (call, n);
       tree param_type = ipa_get_callee_param_type (cs, n);
+      if (flag_devirtualize && POINTER_TYPE_P (TREE_TYPE (arg)))
+       {
+         tree instance;
+         struct ipa_polymorphic_call_context context (cs->caller->decl,
+                                                      arg, cs->call_stmt,
+                                                      &instance);
+         context.get_dynamic_type (instance, arg, NULL, cs->call_stmt);
+         *ipa_get_ith_polymorhic_call_context (args, n) = context;
+         if (!context.useless_p ())
+           useful_context = true;
+       }
+
+      if (POINTER_TYPE_P (TREE_TYPE (arg)))
+       {
+         bool addr_nonzero = false;
+         bool strict_overflow = false;
 
-      if (is_gimple_ip_invariant (arg))
+         if (TREE_CODE (arg) == SSA_NAME
+             && param_type
+             && get_ptr_nonnull (arg))
+           addr_nonzero = true;
+         else if (tree_single_nonzero_warnv_p (arg, &strict_overflow))
+           addr_nonzero = true;
+
+         if (addr_nonzero)
+           {
+             jfunc->vr_known = true;
+             jfunc->m_vr.type = VR_ANTI_RANGE;
+             jfunc->m_vr.min = build_int_cst (TREE_TYPE (arg), 0);
+             jfunc->m_vr.max = build_int_cst (TREE_TYPE (arg), 0);
+             jfunc->m_vr.equiv = NULL;
+           }
+         else
+           gcc_assert (!jfunc->vr_known);
+       }
+      else
+       {
+         wide_int min, max;
+         value_range_type type;
+         if (TREE_CODE (arg) == SSA_NAME
+             && param_type
+             && (type = get_range_info (arg, &min, &max))
+             && (type == VR_RANGE || type == VR_ANTI_RANGE))
+           {
+             value_range vr;
+
+             vr.type = type;
+             vr.min = wide_int_to_tree (TREE_TYPE (arg), min);
+             vr.max = wide_int_to_tree (TREE_TYPE (arg), max);
+             vr.equiv = NULL;
+             extract_range_from_unary_expr (&jfunc->m_vr,
+                                            NOP_EXPR,
+                                            param_type,
+                                            &vr, TREE_TYPE (arg));
+             if (jfunc->m_vr.type == VR_RANGE
+                 || jfunc->m_vr.type == VR_ANTI_RANGE)
+               jfunc->vr_known = true;
+             else
+               jfunc->vr_known = false;
+           }
+         else
+           gcc_assert (!jfunc->vr_known);
+       }
+
+      if (INTEGRAL_TYPE_P (TREE_TYPE (arg))
+         && (TREE_CODE (arg) == SSA_NAME || TREE_CODE (arg) == INTEGER_CST))
+       {
+         jfunc->bits.known = true;
+         
+         if (TREE_CODE (arg) == SSA_NAME)
+           {
+             jfunc->bits.value = 0;
+             jfunc->bits.mask = widest_int::from (get_nonzero_bits (arg),
+                                                  TYPE_SIGN (TREE_TYPE (arg)));
+           }
+         else
+           {
+             jfunc->bits.value = wi::to_widest (arg);
+             jfunc->bits.mask = 0;
+           }
+       }
+      else if (POINTER_TYPE_P (TREE_TYPE (arg)))
+       {
+         unsigned HOST_WIDE_INT bitpos;
+         unsigned align;
+
+         jfunc->bits.known = true;
+         get_pointer_alignment_1 (arg, &align, &bitpos);
+         jfunc->bits.mask = wi::mask<widest_int>(TYPE_PRECISION (TREE_TYPE (arg)), false)
+                            .and_not (align / BITS_PER_UNIT - 1);
+         jfunc->bits.value = bitpos / BITS_PER_UNIT;
+       }
+      else
+       gcc_assert (!jfunc->bits.known);
+
+      if (is_gimple_ip_invariant (arg)
+         || (VAR_P (arg)
+             && is_global_var (arg)
+             && TREE_READONLY (arg)))
        ipa_set_jf_constant (jfunc, arg, cs);
       else if (!is_gimple_reg_type (TREE_TYPE (arg))
               && TREE_CODE (arg) == PARM_DECL)
@@ -1903,7 +1831,7 @@ ipa_compute_jump_functions_for_edge (struct func_body_info *fbi,
             for cycle.  */
          if (parm_preserved_before_stmt_p (fbi, index, call, arg))
            {
-             ipa_set_jf_simple_pass_through (jfunc, index, false, false);
+             ipa_set_jf_simple_pass_through (jfunc, index, false);
              continue;
            }
        }
@@ -1914,35 +1842,23 @@ ipa_compute_jump_functions_for_edge (struct func_body_info *fbi,
              int index = ipa_get_param_decl_index (info, SSA_NAME_VAR (arg));
              if (index >= 0)
                {
-                 bool agg_p, type_p;
+                 bool agg_p;
                  agg_p = parm_ref_data_pass_through_p (fbi, index, call, arg);
-                 if (param_type && POINTER_TYPE_P (param_type))
-                   type_p = !detect_type_change_ssa (arg, TREE_TYPE (param_type),
-                                                     call, jfunc);
-                 else
-                   type_p = false;
-                 if (type_p || jfunc->type == IPA_JF_UNKNOWN)
-                   ipa_set_jf_simple_pass_through (jfunc, index, agg_p,
-                                                   type_p);
+                 ipa_set_jf_simple_pass_through (jfunc, index, agg_p);
                }
            }
          else
            {
-             gimple stmt = SSA_NAME_DEF_STMT (arg);
+             gimple *stmt = SSA_NAME_DEF_STMT (arg);
              if (is_gimple_assign (stmt))
                compute_complex_assign_jump_func (fbi, info, jfunc,
                                                  call, stmt, arg, param_type);
              else if (gimple_code (stmt) == GIMPLE_PHI)
                compute_complex_ancestor_jump_func (fbi, info, jfunc,
-                                                   call, stmt, param_type);
+                                                   call,
+                                                   as_a <gphi *> (stmt));
            }
        }
-      else
-       compute_known_type_jump_func (arg, jfunc, call,
-                                     param_type
-                                     && POINTER_TYPE_P (param_type)
-                                     ? TREE_TYPE (param_type)
-                                     : NULL);
 
       /* If ARG is pointer, we can not use its type to determine the type of aggregate
         passed (because type conversions are ignored in gimple).  Usually we can
@@ -1961,13 +1877,15 @@ ipa_compute_jump_functions_for_edge (struct func_body_info *fbi,
              || POINTER_TYPE_P (param_type)))
        determine_locally_known_aggregate_parts (call, arg, param_type, jfunc);
     }
+  if (!useful_context)
+    vec_free (args->polymorphic_call_contexts);
 }
 
 /* Compute jump functions for all edges - both direct and indirect - outgoing
    from BB.  */
 
 static void
-ipa_compute_jump_functions_for_bb (struct func_body_info *fbi, basic_block bb)
+ipa_compute_jump_functions_for_bb (struct ipa_func_body_info *fbi, basic_block bb)
 {
   struct ipa_bb_info *bi = ipa_get_bb_info (fbi, bb);
   int i;
@@ -1996,7 +1914,7 @@ ipa_compute_jump_functions_for_bb (struct func_body_info *fbi, basic_block bb)
    field rather than the pfn.  */
 
 static tree
-ipa_get_stmt_member_ptr_load_param (gimple stmt, bool use_delta,
+ipa_get_stmt_member_ptr_load_param (gimple *stmt, bool use_delta,
                                    HOST_WIDE_INT *offset_p)
 {
   tree rhs, rec, ref_field, ref_offset, fld, ptr_field, delta_field;
@@ -2058,7 +1976,8 @@ ipa_is_ssa_with_stmt_def (tree t)
    indirect call graph edge.  */
 
 static struct cgraph_edge *
-ipa_note_param_call (struct cgraph_node *node, int param_index, gimple stmt)
+ipa_note_param_call (struct cgraph_node *node, int param_index,
+                    gcall *stmt)
 {
   struct cgraph_edge *cs;
 
@@ -2066,6 +1985,7 @@ ipa_note_param_call (struct cgraph_node *node, int param_index, gimple stmt)
   cs->indirect_info->param_index = param_index;
   cs->indirect_info->agg_contents = 0;
   cs->indirect_info->member_ptr = 0;
+  cs->indirect_info->guaranteed_unmodified = 0;
   return cs;
 }
 
@@ -2129,7 +2049,7 @@ ipa_note_param_call (struct cgraph_node *node, int param_index, gimple stmt)
    passed by value or reference.  */
 
 static void
-ipa_analyze_indirect_call_uses (struct func_body_info *fbi, gimple call,
+ipa_analyze_indirect_call_uses (struct ipa_func_body_info *fbi, gcall *call,
                                tree target)
 {
   struct ipa_node_params *info = fbi->info;
@@ -2146,18 +2066,18 @@ ipa_analyze_indirect_call_uses (struct func_body_info *fbi, gimple call,
     }
 
   int index;
-  gimple def = SSA_NAME_DEF_STMT (target);
+  gimple *def = SSA_NAME_DEF_STMT (target);
+  bool guaranteed_unmodified;
   if (gimple_assign_single_p (def)
-      && ipa_load_from_parm_agg_1 (fbi, info->descriptors, def,
-                                  gimple_assign_rhs1 (def), &index, &offset,
-                                  NULL, &by_ref))
+      && ipa_load_from_parm_agg (fbi, info->descriptors, def,
+                                gimple_assign_rhs1 (def), &index, &offset,
+                                NULL, &by_ref, &guaranteed_unmodified))
     {
       struct cgraph_edge *cs = ipa_note_param_call (fbi->node, index, call);
-      if (cs->indirect_info->offset != offset)
-       cs->indirect_info->outer_type = NULL;
       cs->indirect_info->offset = offset;
       cs->indirect_info->agg_contents = 1;
       cs->indirect_info->by_ref = by_ref;
+      cs->indirect_info->guaranteed_unmodified = guaranteed_unmodified;
       return;
     }
 
@@ -2175,8 +2095,8 @@ ipa_analyze_indirect_call_uses (struct func_body_info *fbi, gimple call,
   tree n2 = PHI_ARG_DEF (def, 1);
   if (!ipa_is_ssa_with_stmt_def (n1) || !ipa_is_ssa_with_stmt_def (n2))
     return;
-  gimple d1 = SSA_NAME_DEF_STMT (n1);
-  gimple d2 = SSA_NAME_DEF_STMT (n2);
+  gimple *d1 = SSA_NAME_DEF_STMT (n1);
+  gimple *d2 = SSA_NAME_DEF_STMT (n2);
 
   tree rec;
   basic_block bb, virt_bb;
@@ -2208,7 +2128,7 @@ ipa_analyze_indirect_call_uses (struct func_body_info *fbi, gimple call,
   /* Third, let's see that the branching is done depending on the least
      significant bit of the pfn. */
 
-  gimple branch = last_stmt (bb);
+  gimple *branch = last_stmt (bb);
   if (!branch || gimple_code (branch) != GIMPLE_COND)
     return;
 
@@ -2255,11 +2175,10 @@ ipa_analyze_indirect_call_uses (struct func_body_info *fbi, gimple call,
       && parm_preserved_before_stmt_p (fbi, index, call, rec))
     {
       struct cgraph_edge *cs = ipa_note_param_call (fbi->node, index, call);
-      if (cs->indirect_info->offset != offset)
-       cs->indirect_info->outer_type = NULL;
       cs->indirect_info->offset = offset;
       cs->indirect_info->agg_contents = 1;
       cs->indirect_info->member_ptr = 1;
+      cs->indirect_info->guaranteed_unmodified = 1;
     }
 
   return;
@@ -2271,8 +2190,8 @@ ipa_analyze_indirect_call_uses (struct func_body_info *fbi, gimple call,
    statement.  */
 
 static void
-ipa_analyze_virtual_call_uses (struct func_body_info *fbi,
-                              gimple call, tree target)
+ipa_analyze_virtual_call_uses (struct ipa_func_body_info *fbi,
+                              gcall *call, tree target)
 {
   tree obj = OBJ_TYPE_REF_OBJECT (target);
   int index;
@@ -2301,7 +2220,7 @@ ipa_analyze_virtual_call_uses (struct func_body_info *fbi,
   else
     {
       struct ipa_jump_func jfunc;
-      gimple stmt = SSA_NAME_DEF_STMT (obj);
+      gimple *stmt = SSA_NAME_DEF_STMT (obj);
       tree expr;
 
       expr = get_ancestor_addr_info (stmt, &obj, &anc_offset);
@@ -2328,7 +2247,7 @@ ipa_analyze_virtual_call_uses (struct func_body_info *fbi,
    containing intermediate information about each formal parameter.  */
 
 static void
-ipa_analyze_call_uses (struct func_body_info *fbi, gimple call)
+ipa_analyze_call_uses (struct ipa_func_body_info *fbi, gcall *call)
 {
   tree target = gimple_call_fn (call);
 
@@ -2343,37 +2262,23 @@ ipa_analyze_call_uses (struct func_body_info *fbi, gimple call)
   if (cs && !cs->indirect_unknown_callee)
     return;
 
-  if (cs->indirect_info->polymorphic)
+  if (cs->indirect_info->polymorphic && flag_devirtualize)
     {
-      tree otr_type;
-      HOST_WIDE_INT otr_token;
       tree instance;
       tree target = gimple_call_fn (call);
       ipa_polymorphic_call_context context (current_function_decl,
                                            target, call, &instance);
 
-      otr_type = obj_type_ref_class (target);
-      otr_token = tree_to_uhwi (OBJ_TYPE_REF_TOKEN (target));
+      gcc_checking_assert (cs->indirect_info->otr_type
+                          == obj_type_ref_class (target));
+      gcc_checking_assert (cs->indirect_info->otr_token
+                          == tree_to_shwi (OBJ_TYPE_REF_TOKEN (target)));
 
-      if (context.get_dynamic_type (instance,
-                                   OBJ_TYPE_REF_OBJECT (target),
-                                   otr_type, call))
-       {
-         gcc_assert (TREE_CODE (otr_type) == RECORD_TYPE);
-         cs->indirect_info->polymorphic = true;
-         cs->indirect_info->param_index = -1;
-         cs->indirect_info->otr_token = otr_token;
-         cs->indirect_info->otr_type = otr_type;
-         cs->indirect_info->outer_type = context.outer_type;
-         cs->indirect_info->speculative_outer_type = context.speculative_outer_type;
-         cs->indirect_info->offset = context.offset;
-         cs->indirect_info->speculative_offset = context.speculative_offset;
-         cs->indirect_info->maybe_in_construction
-            = context.maybe_in_construction;
-         cs->indirect_info->maybe_derived_type = context.maybe_derived_type;
-         cs->indirect_info->speculative_maybe_derived_type
-            = context.speculative_maybe_derived_type;
-       }
+      cs->indirect_info->vptr_changed
+       = !context.get_dynamic_type (instance,
+                                    OBJ_TYPE_REF_OBJECT (target),
+                                    obj_type_ref_class (target), call);
+      cs->indirect_info->context = context;
     }
 
   if (TREE_CODE (target) == SSA_NAME)
@@ -2388,10 +2293,10 @@ ipa_analyze_call_uses (struct func_body_info *fbi, gimple call)
    formal parameters are called.  */
 
 static void
-ipa_analyze_stmt_uses (struct func_body_info *fbi, gimple stmt)
+ipa_analyze_stmt_uses (struct ipa_func_body_info *fbi, gimple *stmt)
 {
   if (is_gimple_call (stmt))
-    ipa_analyze_call_uses (fbi, stmt);
+    ipa_analyze_call_uses (fbi, as_a <gcall *> (stmt));
 }
 
 /* Callback of walk_stmt_load_store_addr_ops for the visit_load.
@@ -2399,7 +2304,7 @@ ipa_analyze_stmt_uses (struct func_body_info *fbi, gimple stmt)
    passed in DATA.  */
 
 static bool
-visit_ref_for_mod_analysis (gimple, tree op, tree, void *data)
+visit_ref_for_mod_analysis (gimple *, tree op, tree, void *data)
 {
   struct ipa_node_params *info = (struct ipa_node_params *) data;
 
@@ -2421,12 +2326,12 @@ visit_ref_for_mod_analysis (gimple, tree op, tree, void *data)
    the function being analyzed.  */
 
 static void
-ipa_analyze_params_uses_in_bb (struct func_body_info *fbi, basic_block bb)
+ipa_analyze_params_uses_in_bb (struct ipa_func_body_info *fbi, basic_block bb)
 {
   gimple_stmt_iterator gsi;
   for (gsi = gsi_start_bb (bb); !gsi_end_p (gsi); gsi_next (&gsi))
     {
-      gimple stmt = gsi_stmt (gsi);
+      gimple *stmt = gsi_stmt (gsi);
 
       if (is_gimple_debug (stmt))
        continue;
@@ -2503,30 +2408,44 @@ free_ipa_bb_info (struct ipa_bb_info *bi)
 class analysis_dom_walker : public dom_walker
 {
 public:
-  analysis_dom_walker (struct func_body_info *fbi)
+  analysis_dom_walker (struct ipa_func_body_info *fbi)
     : dom_walker (CDI_DOMINATORS), m_fbi (fbi) {}
 
-  virtual void before_dom_children (basic_block);
+  virtual edge before_dom_children (basic_block);
 
 private:
-  struct func_body_info *m_fbi;
+  struct ipa_func_body_info *m_fbi;
 };
 
-void
+edge
 analysis_dom_walker::before_dom_children (basic_block bb)
 {
   ipa_analyze_params_uses_in_bb (m_fbi, bb);
   ipa_compute_jump_functions_for_bb (m_fbi, bb);
+  return NULL;
 }
 
-/* Initialize the array describing properties of of formal parameters
+/* Release body info FBI.  */
+
+void
+ipa_release_body_info (struct ipa_func_body_info *fbi)
+{
+  int i;
+  struct ipa_bb_info *bi;
+
+  FOR_EACH_VEC_ELT (fbi->bb_infos, i, bi)
+    free_ipa_bb_info (bi);
+  fbi->bb_infos.release ();
+}
+
+/* Initialize the array describing properties of formal parameters
    of NODE, analyze their uses and compute jump functions associated
    with actual arguments of calls from within NODE.  */
 
 void
 ipa_analyze_node (struct cgraph_node *node)
 {
-  struct func_body_info fbi;
+  struct ipa_func_body_info fbi;
   struct ipa_node_params *info;
 
   ipa_check_create_node_params ();
@@ -2574,71 +2493,11 @@ ipa_analyze_node (struct cgraph_node *node)
 
   analysis_dom_walker (&fbi).walk (ENTRY_BLOCK_PTR_FOR_FN (cfun));
 
-  int i;
-  struct ipa_bb_info *bi;
-  FOR_EACH_VEC_ELT (fbi.bb_infos, i, bi)
-    free_ipa_bb_info (bi);
-  fbi.bb_infos.release ();
+  ipa_release_body_info (&fbi);
   free_dominance_info (CDI_DOMINATORS);
   pop_cfun ();
 }
 
-/* Given a statement CALL which must be a GIMPLE_CALL calling an OBJ_TYPE_REF
-   attempt a type-based devirtualization.  If successful, return the
-   target function declaration, otherwise return NULL.  */
-
-tree
-ipa_intraprocedural_devirtualization (gimple call)
-{
-  tree binfo, token, fndecl;
-  struct ipa_jump_func jfunc;
-  tree otr = gimple_call_fn (call);
-
-  jfunc.type = IPA_JF_UNKNOWN;
-  compute_known_type_jump_func (OBJ_TYPE_REF_OBJECT (otr), &jfunc,
-                               call, obj_type_ref_class (otr));
-  if (jfunc.type != IPA_JF_KNOWN_TYPE)
-    return NULL_TREE;
-  binfo = ipa_binfo_from_known_type_jfunc (&jfunc);
-  if (!binfo)
-    return NULL_TREE;
-  token = OBJ_TYPE_REF_TOKEN (otr);
-  fndecl = gimple_get_virt_method_for_binfo (tree_to_uhwi (token),
-                                            binfo);
-#ifdef ENABLE_CHECKING
-  if (fndecl)
-    gcc_assert (possible_polymorphic_call_target_p
-                 (otr, call, cgraph_node::get (fndecl)));
-#endif
-  return fndecl;
-}
-
-/* Update the jump function DST when the call graph edge corresponding to SRC is
-   is being inlined, knowing that DST is of type ancestor and src of known
-   type.  */
-
-static void
-combine_known_type_and_ancestor_jfs (struct ipa_jump_func *src,
-                                    struct ipa_jump_func *dst)
-{
-  HOST_WIDE_INT combined_offset;
-  tree combined_type;
-
-  if (!ipa_get_jf_ancestor_type_preserved (dst))
-    {
-      dst->type = IPA_JF_UNKNOWN;
-      return;
-    }
-
-  combined_offset = ipa_get_jf_known_type_offset (src)
-    + ipa_get_jf_ancestor_offset (dst);
-  combined_type = ipa_get_jf_ancestor_type (dst);
-
-  ipa_set_jf_known_type (dst, combined_offset,
-                        ipa_get_jf_known_type_base_type (src),
-                        combined_type);
-}
-
 /* Update the jump functions associated with call graph edge E when the call
    graph edge CS is being inlined, assuming that E->caller is already (possibly
    indirectly) inlined into CS->callee and that E has not been inlined.  */
@@ -2655,23 +2514,48 @@ update_jump_functions_after_inlining (struct cgraph_edge *cs,
   for (i = 0; i < count; i++)
     {
       struct ipa_jump_func *dst = ipa_get_ith_jump_func (args, i);
+      struct ipa_polymorphic_call_context *dst_ctx
+       = ipa_get_ith_polymorhic_call_context (args, i);
 
       if (dst->type == IPA_JF_ANCESTOR)
        {
          struct ipa_jump_func *src;
          int dst_fid = dst->value.ancestor.formal_id;
+         struct ipa_polymorphic_call_context *src_ctx
+           = ipa_get_ith_polymorhic_call_context (top, dst_fid);
 
          /* Variable number of arguments can cause havoc if we try to access
             one that does not exist in the inlined edge.  So make sure we
             don't.  */
          if (dst_fid >= ipa_get_cs_argument_count (top))
            {
-             dst->type = IPA_JF_UNKNOWN;
+             ipa_set_jf_unknown (dst);
              continue;
            }
 
          src = ipa_get_ith_jump_func (top, dst_fid);
 
+         if (src_ctx && !src_ctx->useless_p ())
+           {
+             struct ipa_polymorphic_call_context ctx = *src_ctx;
+
+             /* TODO: Make type preserved safe WRT contexts.  */
+             if (!ipa_get_jf_ancestor_type_preserved (dst))
+               ctx.possible_dynamic_type_change (e->in_polymorphic_cdtor);
+             ctx.offset_by (dst->value.ancestor.offset);
+             if (!ctx.useless_p ())
+               {
+                 if (!dst_ctx)
+                   {
+                     vec_safe_grow_cleared (args->polymorphic_call_contexts,
+                                            count);
+                     dst_ctx = ipa_get_ith_polymorhic_call_context (args, i);
+                   }
+
+                 dst_ctx->combine_with (ctx);
+               }
+           }
+
          if (src->agg.items
              && (dst->value.ancestor.agg_preserved || !src->agg.by_ref))
            {
@@ -2688,16 +2572,18 @@ update_jump_functions_after_inlining (struct cgraph_edge *cs,
                item->offset -= dst->value.ancestor.offset;
            }
 
-         if (src->type == IPA_JF_KNOWN_TYPE)
-           combine_known_type_and_ancestor_jfs (src, dst);
-         else if (src->type == IPA_JF_PASS_THROUGH
-                  && src->value.pass_through.operation == NOP_EXPR)
+         if (src->type == IPA_JF_PASS_THROUGH
+             && src->value.pass_through.operation == NOP_EXPR)
            {
              dst->value.ancestor.formal_id = src->value.pass_through.formal_id;
              dst->value.ancestor.agg_preserved &=
                src->value.pass_through.agg_preserved;
-             dst->value.ancestor.type_preserved &=
-               src->value.pass_through.type_preserved;
+           }
+         else if (src->type == IPA_JF_PASS_THROUGH
+                  && TREE_CODE_CLASS (src->value.pass_through.operation) == tcc_unary)
+           {
+             dst->value.ancestor.formal_id = src->value.pass_through.formal_id;
+             dst->value.ancestor.agg_preserved = false;
            }
          else if (src->type == IPA_JF_ANCESTOR)
            {
@@ -2705,11 +2591,9 @@ update_jump_functions_after_inlining (struct cgraph_edge *cs,
              dst->value.ancestor.offset += src->value.ancestor.offset;
              dst->value.ancestor.agg_preserved &=
                src->value.ancestor.agg_preserved;
-             dst->value.ancestor.type_preserved &=
-               src->value.ancestor.type_preserved;
            }
          else
-           dst->type = IPA_JF_UNKNOWN;
+           ipa_set_jf_unknown (dst);
        }
       else if (dst->type == IPA_JF_PASS_THROUGH)
        {
@@ -2723,20 +2607,31 @@ update_jump_functions_after_inlining (struct cgraph_edge *cs,
              int dst_fid = dst->value.pass_through.formal_id;
              src = ipa_get_ith_jump_func (top, dst_fid);
              bool dst_agg_p = ipa_get_jf_pass_through_agg_preserved (dst);
+             struct ipa_polymorphic_call_context *src_ctx
+               = ipa_get_ith_polymorhic_call_context (top, dst_fid);
+
+             if (src_ctx && !src_ctx->useless_p ())
+               {
+                 struct ipa_polymorphic_call_context ctx = *src_ctx;
 
+                 /* TODO: Make type preserved safe WRT contexts.  */
+                 if (!ipa_get_jf_pass_through_type_preserved (dst))
+                   ctx.possible_dynamic_type_change (e->in_polymorphic_cdtor);
+                 if (!ctx.useless_p ())
+                   {
+                     if (!dst_ctx)
+                       {
+                         vec_safe_grow_cleared (args->polymorphic_call_contexts,
+                                                count);
+                         dst_ctx = ipa_get_ith_polymorhic_call_context (args, i);
+                       }
+                     dst_ctx->combine_with (ctx);
+                   }
+               }
              switch (src->type)
                {
                case IPA_JF_UNKNOWN:
-                 dst->type = IPA_JF_UNKNOWN;
-                 break;
-               case IPA_JF_KNOWN_TYPE:
-                 if (ipa_get_jf_pass_through_type_preserved (dst))
-                   ipa_set_jf_known_type (dst,
-                                          ipa_get_jf_known_type_offset (src),
-                                          ipa_get_jf_known_type_base_type (src),
-                                          ipa_get_jf_known_type_component_type (src));
-                 else
-                   dst->type = IPA_JF_UNKNOWN;
+                 ipa_set_jf_unknown (dst);
                  break;
                case IPA_JF_CONST:
                  ipa_set_jf_cst_copy (dst, src);
@@ -2750,14 +2645,13 @@ update_jump_functions_after_inlining (struct cgraph_edge *cs,
 
                    if (operation == NOP_EXPR)
                      {
-                       bool agg_p, type_p;
+                       bool agg_p;
                        agg_p = dst_agg_p
                          && ipa_get_jf_pass_through_agg_preserved (src);
-                       type_p = ipa_get_jf_pass_through_type_preserved (src)
-                         && ipa_get_jf_pass_through_type_preserved (dst);
-                       ipa_set_jf_simple_pass_through (dst, formal_id,
-                                                       agg_p, type_p);
+                       ipa_set_jf_simple_pass_through (dst, formal_id, agg_p);
                      }
+                   else if (TREE_CODE_CLASS (operation) == tcc_unary)
+                     ipa_set_jf_unary_pass_through (dst, formal_id, operation);
                    else
                      {
                        tree operand = ipa_get_jf_pass_through_operand (src);
@@ -2768,16 +2662,13 @@ update_jump_functions_after_inlining (struct cgraph_edge *cs,
                  }
                case IPA_JF_ANCESTOR:
                  {
-                   bool agg_p, type_p;
+                   bool agg_p;
                    agg_p = dst_agg_p
                      && ipa_get_jf_ancestor_agg_preserved (src);
-                   type_p = ipa_get_jf_ancestor_type_preserved (src)
-                     && ipa_get_jf_pass_through_type_preserved (dst);
                    ipa_set_ancestor_jf (dst,
                                         ipa_get_jf_ancestor_offset (src),
-                                        ipa_get_jf_ancestor_type (src),
                                         ipa_get_jf_ancestor_formal_id (src),
-                                        agg_p, type_p);
+                                        agg_p);
                    break;
                  }
                default:
@@ -2796,16 +2687,18 @@ update_jump_functions_after_inlining (struct cgraph_edge *cs,
                }
            }
          else
-           dst->type = IPA_JF_UNKNOWN;
+           ipa_set_jf_unknown (dst);
        }
     }
 }
 
-/* If TARGET is an addr_expr of a function declaration, make it the destination
-   of an indirect edge IE and return the edge.  Otherwise, return NULL.  */
+/* If TARGET is an addr_expr of a function declaration, make it the 
+   (SPECULATIVE)destination of an indirect edge IE and return the edge.
+   Otherwise, return NULL.  */
 
 struct cgraph_edge *
-ipa_make_edge_direct_to_target (struct cgraph_edge *ie, tree target)
+ipa_make_edge_direct_to_target (struct cgraph_edge *ie, tree target,
+                               bool speculative)
 {
   struct cgraph_node *callee;
   struct inline_edge_summary *es = inline_edge_summary (ie);
@@ -2818,9 +2711,29 @@ ipa_make_edge_direct_to_target (struct cgraph_edge *ie, tree target)
       target = canonicalize_constructor_val (target, NULL);
       if (!target || TREE_CODE (target) != FUNCTION_DECL)
        {
-         if (ie->indirect_info->member_ptr)
-           /* Member pointer call that goes through a VMT lookup.  */
-           return NULL;
+         /* Member pointer call that goes through a VMT lookup.  */
+         if (ie->indirect_info->member_ptr
+             /* Or if target is not an invariant expression and we do not
+                know if it will evaulate to function at runtime.
+                This can happen when folding through &VAR, where &VAR
+                is IP invariant, but VAR itself is not.
+
+                TODO: Revisit this when GCC 5 is branched.  It seems that
+                member_ptr check is not needed and that we may try to fold
+                the expression and see if VAR is readonly.  */
+             || !is_gimple_ip_invariant (target))
+           {
+             if (dump_enabled_p ())
+               {
+                 location_t loc = gimple_location_safe (ie->call_stmt);
+                 dump_printf_loc (MSG_OPTIMIZED_LOCATIONS, loc,
+                                  "discovered direct call non-invariant "
+                                  "%s/%i\n",
+                                  ie->caller->name (), ie->caller->order);
+               }
+             return NULL;
+           }
+
 
           if (dump_enabled_p ())
            {
@@ -2856,15 +2769,47 @@ ipa_make_edge_direct_to_target (struct cgraph_edge *ie, tree target)
          if (dump_file)
            fprintf (dump_file, "ipa-prop: Discovered call to a known target "
                     "(%s/%i -> %s/%i) but can not refer to it. Giving up.\n",
-                    xstrdup (ie->caller->name ()),
+                    xstrdup_for_dump (ie->caller->name ()),
                     ie->caller->order,
-                    xstrdup (ie->callee->name ()),
+                    xstrdup_for_dump (ie->callee->name ()),
                     ie->callee->order);
          return NULL;
        }
       callee = cgraph_node::get_create (target);
     }
 
+  /* If the edge is already speculated.  */
+  if (speculative && ie->speculative)
+    {
+      struct cgraph_edge *e2;
+      struct ipa_ref *ref;
+      ie->speculative_call_info (e2, ie, ref);
+      if (e2->callee->ultimate_alias_target ()
+         != callee->ultimate_alias_target ())
+       {
+         if (dump_file)
+           fprintf (dump_file, "ipa-prop: Discovered call to a speculative target "
+                    "(%s/%i -> %s/%i) but the call is already speculated to %s/%i. Giving up.\n",
+                    xstrdup_for_dump (ie->caller->name ()),
+                    ie->caller->order,
+                    xstrdup_for_dump (callee->name ()),
+                    callee->order,
+                    xstrdup_for_dump (e2->callee->name ()),
+                    e2->callee->order);
+       }
+      else
+       {
+         if (dump_file)
+           fprintf (dump_file, "ipa-prop: Discovered call to a speculative target "
+                    "(%s/%i -> %s/%i) this agree with previous speculation.\n",
+                    xstrdup_for_dump (ie->caller->name ()),
+                    ie->caller->order,
+                    xstrdup_for_dump (callee->name ()),
+                    callee->order);
+       }
+      return NULL;
+    }
+
   if (!dbg_cnt (devirt))
     return NULL;
 
@@ -2876,12 +2821,13 @@ ipa_make_edge_direct_to_target (struct cgraph_edge *ie, tree target)
 
   if (dump_file && !unreachable)
     {
-      fprintf (dump_file, "ipa-prop: Discovered %s call to a known target "
+      fprintf (dump_file, "ipa-prop: Discovered %s call to a %s target "
               "(%s/%i -> %s/%i), for stmt ",
               ie->indirect_info->polymorphic ? "a virtual" : "an indirect",
-              xstrdup (ie->caller->name ()),
+              speculative ? "speculative" : "known",
+              xstrdup_for_dump (ie->caller->name ()),
               ie->caller->order,
-              xstrdup (callee->name ()),
+              xstrdup_for_dump (callee->name ()),
               callee->order);
       if (ie->call_stmt)
        print_gimple_stmt (dump_file, ie->call_stmt, 2, TDF_SLIM);
@@ -2892,32 +2838,161 @@ ipa_make_edge_direct_to_target (struct cgraph_edge *ie, tree target)
     {
       location_t loc = gimple_location_safe (ie->call_stmt);
 
-      dump_printf_loc (MSG_OPTIMIZED_LOCATIONS, loc,
-                      "converting indirect call in %s to direct call to %s\n",
-                      ie->caller->name (), callee->name ());
+      dump_printf_loc (MSG_OPTIMIZED_LOCATIONS, loc,
+                      "converting indirect call in %s to direct call to %s\n",
+                      ie->caller->name (), callee->name ());
+    }
+  if (!speculative)
+    {
+      struct cgraph_edge *orig = ie;
+      ie = ie->make_direct (callee);
+      /* If we resolved speculative edge the cost is already up to date
+        for direct call (adjusted by inline_edge_duplication_hook).  */
+      if (ie == orig)
+       {
+         es = inline_edge_summary (ie);
+         es->call_stmt_size -= (eni_size_weights.indirect_call_cost
+                                - eni_size_weights.call_cost);
+         es->call_stmt_time -= (eni_time_weights.indirect_call_cost
+                                - eni_time_weights.call_cost);
+       }
+    }
+  else
+    {
+      if (!callee->can_be_discarded_p ())
+       {
+         cgraph_node *alias;
+         alias = dyn_cast<cgraph_node *> (callee->noninterposable_alias ());
+         if (alias)
+           callee = alias;
+       }
+      /* make_speculative will update ie's cost to direct call cost. */
+      ie = ie->make_speculative
+            (callee, ie->count * 8 / 10, ie->frequency * 8 / 10);
+    }
+
+  return ie;
+}
+
+/* Attempt to locate an interprocedural constant at a given REQ_OFFSET in
+   CONSTRUCTOR and return it.  Return NULL if the search fails for some
+   reason.  */
+
+static tree
+find_constructor_constant_at_offset (tree constructor, HOST_WIDE_INT req_offset)
+{
+  tree type = TREE_TYPE (constructor);
+  if (TREE_CODE (type) != ARRAY_TYPE
+      && TREE_CODE (type) != RECORD_TYPE)
+    return NULL;
+
+  unsigned ix;
+  tree index, val;
+  FOR_EACH_CONSTRUCTOR_ELT (CONSTRUCTOR_ELTS (constructor), ix, index, val)
+    {
+      HOST_WIDE_INT elt_offset;
+      if (TREE_CODE (type) == ARRAY_TYPE)
+       {
+         offset_int off;
+         tree unit_size = TYPE_SIZE_UNIT (TREE_TYPE (type));
+         gcc_assert (TREE_CODE (unit_size) == INTEGER_CST);
+
+         if (index)
+           {
+             off = wi::to_offset (index);
+             if (TYPE_DOMAIN (type) && TYPE_MIN_VALUE (TYPE_DOMAIN (type)))
+               {
+                 tree low_bound = TYPE_MIN_VALUE (TYPE_DOMAIN (type));
+                 gcc_assert (TREE_CODE (unit_size) == INTEGER_CST);
+                 off = wi::sext (off - wi::to_offset (low_bound),
+                                 TYPE_PRECISION (TREE_TYPE (index)));
+               }
+             off *= wi::to_offset (unit_size);
+           }
+         else
+           off = wi::to_offset (unit_size) * ix;
+
+         off = wi::lshift (off, LOG2_BITS_PER_UNIT);
+         if (!wi::fits_shwi_p (off) || wi::neg_p (off))
+           continue;
+         elt_offset = off.to_shwi ();
+       }
+      else if (TREE_CODE (type) == RECORD_TYPE)
+       {
+         gcc_checking_assert (index && TREE_CODE (index) == FIELD_DECL);
+         if (DECL_BIT_FIELD (index))
+           continue;
+         elt_offset = int_bit_position (index);
+       }
+      else
+       gcc_unreachable ();
+
+      if (elt_offset > req_offset)
+       return NULL;
+
+      if (TREE_CODE (val) == CONSTRUCTOR)
+       return find_constructor_constant_at_offset (val,
+                                                   req_offset - elt_offset);
+
+      if (elt_offset == req_offset
+         && is_gimple_reg_type (TREE_TYPE (val))
+         && is_gimple_ip_invariant (val))
+       return val;
+    }
+  return NULL;
+}
+
+/* Check whether SCALAR could be used to look up an aggregate interprocedural
+   invariant from a static constructor and if so, return it.  Otherwise return
+   NULL. */
+
+static tree
+ipa_find_agg_cst_from_init (tree scalar, HOST_WIDE_INT offset, bool by_ref)
+{
+  if (by_ref)
+    {
+      if (TREE_CODE (scalar) != ADDR_EXPR)
+       return NULL;
+      scalar = TREE_OPERAND (scalar, 0);
     }
-  ie = ie->make_direct (callee);
-  es = inline_edge_summary (ie);
-  es->call_stmt_size -= (eni_size_weights.indirect_call_cost
-                        - eni_size_weights.call_cost);
-  es->call_stmt_time -= (eni_time_weights.indirect_call_cost
-                        - eni_time_weights.call_cost);
 
-  return ie;
+  if (!VAR_P (scalar)
+      || !is_global_var (scalar)
+      || !TREE_READONLY (scalar)
+      || !DECL_INITIAL (scalar)
+      || TREE_CODE (DECL_INITIAL (scalar)) != CONSTRUCTOR)
+    return NULL;
+
+  return find_constructor_constant_at_offset (DECL_INITIAL (scalar), offset);
 }
 
-/* Retrieve value from aggregate jump function AGG for the given OFFSET or
-   return NULL if there is not any.  BY_REF specifies whether the value has to
-   be passed by reference or by value.  */
+/* Retrieve value from aggregate jump function AGG or static initializer of
+   SCALAR (which can be NULL) for the given OFFSET or return NULL if there is
+   none.  BY_REF specifies whether the value has to be passed by reference or
+   by value.  If FROM_GLOBAL_CONSTANT is non-NULL, then the boolean it points
+   to is set to true if the value comes from an initializer of a constant.  */
 
 tree
-ipa_find_agg_cst_for_param (struct ipa_agg_jump_function *agg,
-                           HOST_WIDE_INT offset, bool by_ref)
+ipa_find_agg_cst_for_param (struct ipa_agg_jump_function *agg, tree scalar,
+                           HOST_WIDE_INT offset, bool by_ref,
+                           bool *from_global_constant)
 {
   struct ipa_agg_jf_item *item;
   int i;
 
-  if (by_ref != agg->by_ref)
+  if (scalar)
+    {
+      tree res = ipa_find_agg_cst_from_init (scalar, offset, by_ref);
+      if (res)
+       {
+         if (from_global_constant)
+           *from_global_constant = true;
+         return res;
+       }
+    }
+
+  if (!agg
+      || by_ref != agg->by_ref)
     return NULL;
 
   FOR_EACH_VEC_SAFE_ELT (agg->items, i, item)
@@ -2926,6 +3001,8 @@ ipa_find_agg_cst_for_param (struct ipa_agg_jump_function *agg,
        /* Currently we do not have clobber values, return NULL for them once
           we do.  */
        gcc_checking_assert (is_gimple_ip_invariant (item->value));
+       if (from_global_constant)
+         *from_global_constant = false;
        return item->value;
       }
   return NULL;
@@ -2952,8 +3029,8 @@ remove_described_reference (symtab_node *symbol, struct ipa_cst_ref_desc *rdesc)
   to_del->remove_reference ();
   if (dump_file)
     fprintf (dump_file, "ipa-prop: Removed a reference from %s/%i to %s.\n",
-            xstrdup (origin->caller->name ()),
-            origin->caller->order, xstrdup (symbol->name ()));
+            xstrdup_for_dump (origin->caller->name ()),
+            origin->caller->order, xstrdup_for_dump (symbol->name ()));
   return true;
 }
 
@@ -3024,13 +3101,21 @@ try_make_edge_direct_simple_call (struct cgraph_edge *ie,
   struct cgraph_edge *cs;
   tree target;
   bool agg_contents = ie->indirect_info->agg_contents;
-
-  if (ie->indirect_info->agg_contents)
-    target = ipa_find_agg_cst_for_param (&jfunc->agg,
-                                        ie->indirect_info->offset,
-                                        ie->indirect_info->by_ref);
+  tree scalar = ipa_value_from_jfunc (new_root_info, jfunc);
+  if (agg_contents)
+    {
+      bool from_global_constant;
+      target = ipa_find_agg_cst_for_param (&jfunc->agg, scalar,
+                                          ie->indirect_info->offset,
+                                          ie->indirect_info->by_ref,
+                                          &from_global_constant);
+      if (target
+         && !from_global_constant
+         && !ie->indirect_info->guaranteed_unmodified)
+       return NULL;
+    }
   else
-    target = ipa_value_from_jfunc (new_root_info, jfunc);
+    target = scalar;
   if (!target)
     return NULL;
   cs = ipa_make_edge_direct_to_target (ie, target);
@@ -3076,83 +3161,106 @@ ipa_impossible_devirt_target (struct cgraph_edge *ie, tree target)
 /* Try to find a destination for indirect edge IE that corresponds to a virtual
    call based on a formal parameter which is described by jump function JFUNC
    and if it can be determined, make it direct and return the direct edge.
-   Otherwise, return NULL.  NEW_ROOT_INFO is the node info that JFUNC lattices
-   are relative to.  */
+   Otherwise, return NULL.  CTX describes the polymorphic context that the
+   parameter the call is based on brings along with it.  */
 
 static struct cgraph_edge *
 try_make_edge_direct_virtual_call (struct cgraph_edge *ie,
                                   struct ipa_jump_func *jfunc,
-                                  struct ipa_node_params *new_root_info)
+                                  struct ipa_polymorphic_call_context ctx)
 {
-  tree binfo, target;
+  tree target = NULL;
+  bool speculative = false;
 
-  if (!flag_devirtualize)
+  if (!opt_for_fn (ie->caller->decl, flag_devirtualize))
     return NULL;
 
-  /* First try to do lookup via known virtual table pointer value.  */
-  if (!ie->indirect_info->by_ref)
+  gcc_assert (!ie->indirect_info->by_ref);
+
+  /* Try to do lookup via known virtual table pointer value.  */
+  if (!ie->indirect_info->vptr_changed
+      || opt_for_fn (ie->caller->decl, flag_devirtualize_speculatively))
     {
       tree vtable;
       unsigned HOST_WIDE_INT offset;
-      tree t = ipa_find_agg_cst_for_param (&jfunc->agg,
+      tree scalar = (jfunc->type == IPA_JF_CONST) ? ipa_get_jf_constant (jfunc)
+       : NULL;
+      tree t = ipa_find_agg_cst_for_param (&jfunc->agg, scalar,
                                           ie->indirect_info->offset,
                                           true);
       if (t && vtable_pointer_value_to_vtable (t, &vtable, &offset))
        {
-         target = gimple_get_virt_method_for_vtable (ie->indirect_info->otr_token,
-                                                     vtable, offset);
-         if (target)
+         bool can_refer;
+         t = gimple_get_virt_method_for_vtable (ie->indirect_info->otr_token,
+                                                vtable, offset, &can_refer);
+         if (can_refer)
            {
-             if ((TREE_CODE (TREE_TYPE (target)) == FUNCTION_TYPE
-                  && DECL_FUNCTION_CODE (target) == BUILT_IN_UNREACHABLE)
+             if (!t
+                 || (TREE_CODE (TREE_TYPE (t)) == FUNCTION_TYPE
+                     && DECL_FUNCTION_CODE (t) == BUILT_IN_UNREACHABLE)
                  || !possible_polymorphic_call_target_p
-                      (ie, cgraph_node::get (target)))
-               target = ipa_impossible_devirt_target (ie, target);
-             return ipa_make_edge_direct_to_target (ie, target);
+                      (ie, cgraph_node::get (t)))
+               {
+                 /* Do not speculate builtin_unreachable, it is stupid!  */
+                 if (!ie->indirect_info->vptr_changed)
+                   target = ipa_impossible_devirt_target (ie, target);
+                 else
+                   target = NULL;
+               }
+             else
+               {
+                 target = t;
+                 speculative = ie->indirect_info->vptr_changed;
+               }
            }
        }
     }
 
-  binfo = ipa_value_from_jfunc (new_root_info, jfunc);
-
-  if (!binfo)
-    return NULL;
-
-  if (TREE_CODE (binfo) != TREE_BINFO)
+  ipa_polymorphic_call_context ie_context (ie);
+  vec <cgraph_node *>targets;
+  bool final;
+
+  ctx.offset_by (ie->indirect_info->offset);
+  if (ie->indirect_info->vptr_changed)
+    ctx.possible_dynamic_type_change (ie->in_polymorphic_cdtor,
+                                     ie->indirect_info->otr_type);
+  ctx.combine_with (ie_context, ie->indirect_info->otr_type);
+  targets = possible_polymorphic_call_targets
+    (ie->indirect_info->otr_type,
+     ie->indirect_info->otr_token,
+     ctx, &final);
+  if (final && targets.length () <= 1)
     {
-      ipa_polymorphic_call_context context (binfo,
-                                           ie->indirect_info->otr_type,
-                                           ie->indirect_info->offset);
-      vec <cgraph_node *>targets;
-      bool final;
-
-      targets = possible_polymorphic_call_targets
-                (ie->indirect_info->otr_type,
-                 ie->indirect_info->otr_token,
-                 context, &final);
-      if (!final || targets.length () > 1)
-       return NULL;
+      speculative = false;
       if (targets.length () == 1)
        target = targets[0]->decl;
       else
        target = ipa_impossible_devirt_target (ie, NULL_TREE);
     }
-  else
+  else if (!target && opt_for_fn (ie->caller->decl, flag_devirtualize_speculatively)
+          && !ie->speculative && ie->maybe_hot_p ())
     {
-      binfo = get_binfo_at_offset (binfo, ie->indirect_info->offset,
-                                  ie->indirect_info->otr_type);
-      if (binfo)
-       target = gimple_get_virt_method_for_binfo (ie->indirect_info->otr_token,
-                                                  binfo);
-      else
-       return NULL;
+      cgraph_node *n;
+      n = try_speculative_devirtualization (ie->indirect_info->otr_type,
+                                           ie->indirect_info->otr_token,
+                                           ie->indirect_info->context);
+      if (n)
+       {
+         target = n->decl;
+         speculative = true;
+       }
     }
 
   if (target)
     {
-      if (!possible_polymorphic_call_target_p (ie, cgraph_node::get (target)))
-       target = ipa_impossible_devirt_target (ie, target);
-      return ipa_make_edge_direct_to_target (ie, target);
+      if (!possible_polymorphic_call_target_p
+         (ie, cgraph_node::get_create (target)))
+       {
+         if (speculative)
+           return NULL;
+         target = ipa_impossible_devirt_target (ie, target);
+       }
+      return ipa_make_edge_direct_to_target (ie, target, speculative);
     }
   else
     return NULL;
@@ -3185,6 +3293,7 @@ update_indirect_edges_after_inlining (struct cgraph_edge *cs,
       struct cgraph_indirect_call_info *ici = ie->indirect_info;
       struct ipa_jump_func *jfunc;
       int param_index;
+      cgraph_node *spec_target = NULL;
 
       next_ie = ie->next_callee;
 
@@ -3201,20 +3310,34 @@ update_indirect_edges_after_inlining (struct cgraph_edge *cs,
       param_index = ici->param_index;
       jfunc = ipa_get_ith_jump_func (top, param_index);
 
-      if (!flag_indirect_inlining)
+      if (ie->speculative)
+       {
+         struct cgraph_edge *de;
+          struct ipa_ref *ref;
+         ie->speculative_call_info (de, ie, ref);
+         spec_target = de->callee;
+       }
+
+      if (!opt_for_fn (node->decl, flag_indirect_inlining))
        new_direct_edge = NULL;
       else if (ici->polymorphic)
-       new_direct_edge = try_make_edge_direct_virtual_call (ie, jfunc,
-                                                            new_root_info);
+       {
+          ipa_polymorphic_call_context ctx;
+         ctx = ipa_context_from_jfunc (new_root_info, cs, param_index, jfunc);
+         new_direct_edge = try_make_edge_direct_virtual_call (ie, jfunc, ctx);
+       }
       else
        new_direct_edge = try_make_edge_direct_simple_call (ie, jfunc,
                                                            new_root_info);
       /* If speculation was removed, then we need to do nothing.  */
-      if (new_direct_edge && new_direct_edge != ie)
+      if (new_direct_edge && new_direct_edge != ie
+         && new_direct_edge->callee == spec_target)
        {
          new_direct_edge->indirect_inlining_edge = 1;
          top = IPA_EDGE_REF (cs);
          res = true;
+         if (!new_direct_edge->speculative)
+           continue;
        }
       else if (new_direct_edge)
        {
@@ -3230,31 +3353,39 @@ update_indirect_edges_after_inlining (struct cgraph_edge *cs,
              res = true;
            }
          top = IPA_EDGE_REF (cs);
+         /* If speculative edge was introduced we still need to update
+            call info of the indirect edge.  */
+         if (!new_direct_edge->speculative)
+           continue;
        }
-      else if (jfunc->type == IPA_JF_PASS_THROUGH
-              && ipa_get_jf_pass_through_operation (jfunc) == NOP_EXPR)
+      if (jfunc->type == IPA_JF_PASS_THROUGH
+          && ipa_get_jf_pass_through_operation (jfunc) == NOP_EXPR)
        {
-         if ((ici->agg_contents
-              && !ipa_get_jf_pass_through_agg_preserved (jfunc))
-             || (ici->polymorphic
-                 && !ipa_get_jf_pass_through_type_preserved (jfunc)))
+         if (ici->agg_contents
+             && !ipa_get_jf_pass_through_agg_preserved (jfunc)
+             && !ici->polymorphic)
            ici->param_index = -1;
          else
-           ici->param_index = ipa_get_jf_pass_through_formal_id (jfunc);
+           {
+             ici->param_index = ipa_get_jf_pass_through_formal_id (jfunc);
+             if (ici->polymorphic
+                 && !ipa_get_jf_pass_through_type_preserved (jfunc))
+               ici->vptr_changed = true;
+           }
        }
       else if (jfunc->type == IPA_JF_ANCESTOR)
        {
-         if ((ici->agg_contents
-              && !ipa_get_jf_ancestor_agg_preserved (jfunc))
-             || (ici->polymorphic
-                 && !ipa_get_jf_ancestor_type_preserved (jfunc)))
+         if (ici->agg_contents
+             && !ipa_get_jf_ancestor_agg_preserved (jfunc)
+             && !ici->polymorphic)
            ici->param_index = -1;
          else
            {
              ici->param_index = ipa_get_jf_ancestor_formal_id (jfunc);
-             if (ipa_get_jf_ancestor_offset (jfunc))
-               ici->outer_type = NULL;
              ici->offset += ipa_get_jf_ancestor_offset (jfunc);
+             if (ici->polymorphic
+                 && !ipa_get_jf_ancestor_type_preserved (jfunc))
+               ici->vptr_changed = true;
            }
        }
       else
@@ -3340,7 +3471,7 @@ propagate_controlled_uses (struct cgraph_edge *cs)
            {
              struct cgraph_node *n;
              struct ipa_ref *ref;
-             tree t = new_root_info->known_vals[src_idx];
+             tree t = new_root_info->known_csts[src_idx];
 
              if (t && TREE_CODE (t) == ADDR_EXPR
                  && TREE_CODE (TREE_OPERAND (t, 0)) == FUNCTION_DECL
@@ -3350,9 +3481,9 @@ propagate_controlled_uses (struct cgraph_edge *cs)
                  if (dump_file)
                    fprintf (dump_file, "ipa-prop: Removing cloning-created "
                             "reference from %s/%i to %s/%i.\n",
-                            xstrdup (new_root->name ()),
+                            xstrdup_for_dump (new_root->name ()),
                             new_root->order,
-                            xstrdup (n->name ()), n->order);
+                            xstrdup_for_dump (n->name ()), n->order);
                  ref->remove_reference ();
                }
            }
@@ -3391,9 +3522,9 @@ propagate_controlled_uses (struct cgraph_edge *cs)
                            fprintf (dump_file, "ipa-prop: Removing "
                                     "cloning-created reference "
                                     "from %s/%i to %s/%i.\n",
-                                    xstrdup (clone->name ()),
+                                    xstrdup_for_dump (clone->name ()),
                                     clone->order,
-                                    xstrdup (n->name ()),
+                                    xstrdup_for_dump (n->name ()),
                                     n->order);
                          ref->remove_reference ();
                        }
@@ -3436,7 +3567,7 @@ ipa_propagate_indirect_call_infos (struct cgraph_edge *cs,
   bool changed;
   /* Do nothing if the preparation phase has not been carried out yet
      (i.e. during early inlining).  */
-  if (!ipa_node_params_vector.exists ())
+  if (!ipa_node_params_sum)
     return false;
   gcc_assert (ipa_edge_args_vector);
 
@@ -3476,15 +3607,22 @@ ipa_free_all_edge_args (void)
 /* Frees all dynamically allocated structures that the param info points
    to.  */
 
-void
-ipa_free_node_params_substructures (struct ipa_node_params *info)
+ipa_node_params::~ipa_node_params ()
 {
-  info->descriptors.release ();
-  free (info->lattices);
+  descriptors.release ();
+  free (lattices);
   /* Lattice values and their sources are deallocated with their alocation
      pool.  */
-  info->known_vals.release ();
-  memset (info, 0, sizeof (*info));
+  known_csts.release ();
+  known_contexts.release ();
+
+  lattices = NULL;
+  ipcp_orig_node = NULL;
+  analysis_done = 0;
+  node_enqueued = 0;
+  do_clone_for_all_contexts = 0;
+  is_all_contexts_clone = 0;
+  node_dead = 0;
 }
 
 /* Free all ipa_node_params structures.  */
@@ -3492,13 +3630,18 @@ ipa_free_node_params_substructures (struct ipa_node_params *info)
 void
 ipa_free_all_node_params (void)
 {
-  int i;
-  struct ipa_node_params *info;
+  delete ipa_node_params_sum;
+  ipa_node_params_sum = NULL;
+}
 
-  FOR_EACH_VEC_ELT (ipa_node_params_vector, i, info)
-    ipa_free_node_params_substructures (info);
+/* Grow ipcp_transformations if necessary.  */
 
-  ipa_node_params_vector.release ();
+void
+ipcp_grow_transformations_if_necessary (void)
+{
+  if (vec_safe_length (ipcp_transformations)
+      <= (unsigned) symtab->cgraph_max_uid)
+    vec_safe_grow_cleared (ipcp_transformations, symtab->cgraph_max_uid + 1);
 }
 
 /* Set the aggregate replacements of NODE to be AGGVALS.  */
@@ -3507,12 +3650,8 @@ void
 ipa_set_node_agg_value_chain (struct cgraph_node *node,
                              struct ipa_agg_replacement_value *aggvals)
 {
-  if (vec_safe_length (ipa_node_agg_replacements)
-      <= (unsigned) symtab->cgraph_max_uid)
-    vec_safe_grow_cleared (ipa_node_agg_replacements,
-                          symtab->cgraph_max_uid + 1);
-
-  (*ipa_node_agg_replacements)[node->uid] = aggvals;
+  ipcp_grow_transformations_if_necessary ();
+  (*ipcp_transformations)[node->uid].agg_values = aggvals;
 }
 
 /* Hook that is called by cgraph.c when an edge is removed.  */
@@ -3545,23 +3684,11 @@ ipa_edge_removal_hook (struct cgraph_edge *cs, void *data ATTRIBUTE_UNUSED)
   ipa_free_edge_args_substructures (IPA_EDGE_REF (cs));
 }
 
-/* Hook that is called by cgraph.c when a node is removed.  */
-
-static void
-ipa_node_removal_hook (struct cgraph_node *node, void *data ATTRIBUTE_UNUSED)
-{
-  /* During IPA-CP updating we can be called on not-yet analyze clones.  */
-  if (ipa_node_params_vector.length () > (unsigned)node->uid)
-    ipa_free_node_params_substructures (IPA_NODE_REF (node));
-  if (vec_safe_length (ipa_node_agg_replacements) > (unsigned)node->uid)
-    (*ipa_node_agg_replacements)[(unsigned)node->uid] = NULL;
-}
-
 /* Hook that is called by cgraph.c when an edge is duplicated.  */
 
 static void
 ipa_edge_duplication_hook (struct cgraph_edge *src, struct cgraph_edge *dst,
-                          __attribute__((unused)) void *data)
+                          void *)
 {
   struct ipa_edge_args *old_args, *new_args;
   unsigned int i;
@@ -3572,6 +3699,9 @@ ipa_edge_duplication_hook (struct cgraph_edge *src, struct cgraph_edge *dst,
   new_args = IPA_EDGE_REF (dst);
 
   new_args->jump_functions = vec_safe_copy (old_args->jump_functions);
+  if (old_args->polymorphic_call_contexts)
+    new_args->polymorphic_call_contexts
+      = vec_safe_copy (old_args->polymorphic_call_contexts);
 
   for (i = 0; i < vec_safe_length (old_args->jump_functions); i++)
     {
@@ -3596,9 +3726,7 @@ ipa_edge_duplication_hook (struct cgraph_edge *src, struct cgraph_edge *dst,
              gcc_checking_assert (ref);
              dst->caller->clone_reference (ref, ref->stmt);
 
-             gcc_checking_assert (ipa_refdesc_pool);
-             struct ipa_cst_ref_desc *dst_rdesc
-               = (struct ipa_cst_ref_desc *) pool_alloc (ipa_refdesc_pool);
+             struct ipa_cst_ref_desc *dst_rdesc = ipa_refdesc_pool.allocate ();
              dst_rdesc->cs = dst;
              dst_rdesc->refcount = src_rdesc->refcount;
              dst_rdesc->next_duplicate = NULL;
@@ -3606,10 +3734,7 @@ ipa_edge_duplication_hook (struct cgraph_edge *src, struct cgraph_edge *dst,
            }
          else if (src_rdesc->cs == src)
            {
-             struct ipa_cst_ref_desc *dst_rdesc;
-             gcc_checking_assert (ipa_refdesc_pool);
-             dst_rdesc
-               = (struct ipa_cst_ref_desc *) pool_alloc (ipa_refdesc_pool);
+             struct ipa_cst_ref_desc *dst_rdesc = ipa_refdesc_pool.allocate ();
              dst_rdesc->cs = dst;
              dst_rdesc->refcount = src_rdesc->refcount;
              dst_rdesc->next_duplicate = src_rdesc->next_duplicate;
@@ -3640,21 +3765,41 @@ ipa_edge_duplication_hook (struct cgraph_edge *src, struct cgraph_edge *dst,
              dst_jf->value.constant.rdesc = dst_rdesc;
            }
        }
+      else if (dst_jf->type == IPA_JF_PASS_THROUGH
+              && src->caller == dst->caller)
+       {
+         struct cgraph_node *inline_root = dst->caller->global.inlined_to
+           ? dst->caller->global.inlined_to : dst->caller;
+         struct ipa_node_params *root_info = IPA_NODE_REF (inline_root);
+         int idx = ipa_get_jf_pass_through_formal_id (dst_jf);
+
+         int c = ipa_get_controlled_uses (root_info, idx);
+         if (c != IPA_UNDESCRIBED_USE)
+           {
+             c++;
+             ipa_set_controlled_uses (root_info, idx, c);
+           }
+       }
     }
 }
 
-/* Hook that is called by cgraph.c when a node is duplicated.  */
+/* Analyze newly added function into callgraph.  */
 
 static void
-ipa_node_duplication_hook (struct cgraph_node *src, struct cgraph_node *dst,
-                          ATTRIBUTE_UNUSED void *data)
+ipa_add_new_function (cgraph_node *node, void *data ATTRIBUTE_UNUSED)
 {
-  struct ipa_node_params *old_info, *new_info;
-  struct ipa_agg_replacement_value *old_av, *new_av;
+  if (node->has_gimple_body_p ())
+    ipa_analyze_node (node);
+}
 
-  ipa_check_create_node_params ();
-  old_info = IPA_NODE_REF (src);
-  new_info = IPA_NODE_REF (dst);
+/* Hook that is called by summary when a node is duplicated.  */
+
+void
+ipa_node_params_t::duplicate(cgraph_node *src, cgraph_node *dst,
+                            ipa_node_params *old_info,
+                            ipa_node_params *new_info)
+{
+  ipa_agg_replacement_value *old_av, *new_av;
 
   new_info->descriptors = old_info->descriptors.copy ();
   new_info->lattices = NULL;
@@ -3662,33 +3807,53 @@ ipa_node_duplication_hook (struct cgraph_node *src, struct cgraph_node *dst,
 
   new_info->analysis_done = old_info->analysis_done;
   new_info->node_enqueued = old_info->node_enqueued;
+  new_info->versionable = old_info->versionable;
 
   old_av = ipa_get_agg_replacements_for_node (src);
-  if (!old_av)
-    return;
-
-  new_av = NULL;
-  while (old_av)
+  if (old_av)
     {
-      struct ipa_agg_replacement_value *v;
+      new_av = NULL;
+      while (old_av)
+       {
+         struct ipa_agg_replacement_value *v;
 
-      v = ggc_alloc<ipa_agg_replacement_value> ();
-      memcpy (v, old_av, sizeof (*v));
-      v->next = new_av;
-      new_av = v;
-      old_av = old_av->next;
+         v = ggc_alloc<ipa_agg_replacement_value> ();
+         memcpy (v, old_av, sizeof (*v));
+         v->next = new_av;
+         new_av = v;
+         old_av = old_av->next;
+       }
+      ipa_set_node_agg_value_chain (dst, new_av);
     }
-  ipa_set_node_agg_value_chain (dst, new_av);
-}
 
+  ipcp_transformation_summary *src_trans = ipcp_get_transformation_summary (src);
 
-/* Analyze newly added function into callgraph.  */
+  if (src_trans)
+    {
+      ipcp_grow_transformations_if_necessary ();
+      src_trans = ipcp_get_transformation_summary (src);
+      const vec<ipa_vr, va_gc> *src_vr = src_trans->m_vr;
+      vec<ipa_vr, va_gc> *&dst_vr
+       = ipcp_get_transformation_summary (dst)->m_vr;
+      if (vec_safe_length (src_trans->m_vr) > 0)
+       {
+         vec_safe_reserve_exact (dst_vr, src_vr->length ());
+         for (unsigned i = 0; i < src_vr->length (); ++i)
+           dst_vr->quick_push ((*src_vr)[i]);
+       }
+    }
 
-static void
-ipa_add_new_function (struct cgraph_node *node, void *data ATTRIBUTE_UNUSED)
-{
-  if (node->has_gimple_body_p ())
-    ipa_analyze_node (node);
+  if (src_trans && vec_safe_length (src_trans->bits) > 0)
+    {
+      ipcp_grow_transformations_if_necessary ();
+      src_trans = ipcp_get_transformation_summary (src);
+      const vec<ipa_bits, va_gc> *src_bits = src_trans->bits;
+      vec<ipa_bits, va_gc> *&dst_bits
+       = ipcp_get_transformation_summary (dst)->bits;
+      vec_safe_reserve_exact (dst_bits, src_bits->length ());
+      for (unsigned i = 0; i < src_bits->length (); ++i)
+       dst_bits->quick_push ((*src_bits)[i]);
+    }
 }
 
 /* Register our cgraph hooks if they are not already there.  */
@@ -3696,18 +3861,14 @@ ipa_add_new_function (struct cgraph_node *node, void *data ATTRIBUTE_UNUSED)
 void
 ipa_register_cgraph_hooks (void)
 {
+  ipa_check_create_node_params ();
+
   if (!edge_removal_hook_holder)
     edge_removal_hook_holder =
       symtab->add_edge_removal_hook (&ipa_edge_removal_hook, NULL);
-  if (!node_removal_hook_holder)
-    node_removal_hook_holder =
-      symtab->add_cgraph_removal_hook (&ipa_node_removal_hook, NULL);
   if (!edge_duplication_hook_holder)
     edge_duplication_hook_holder =
       symtab->add_edge_duplication_hook (&ipa_edge_duplication_hook, NULL);
-  if (!node_duplication_hook_holder)
-    node_duplication_hook_holder =
-      symtab->add_cgraph_duplication_hook (&ipa_node_duplication_hook, NULL);
   function_insertion_hook_holder =
       symtab->add_cgraph_insertion_hook (&ipa_add_new_function, NULL);
 }
@@ -3719,12 +3880,8 @@ ipa_unregister_cgraph_hooks (void)
 {
   symtab->remove_edge_removal_hook (edge_removal_hook_holder);
   edge_removal_hook_holder = NULL;
-  symtab->remove_cgraph_removal_hook (node_removal_hook_holder);
-  node_removal_hook_holder = NULL;
   symtab->remove_edge_duplication_hook (edge_duplication_hook_holder);
   edge_duplication_hook_holder = NULL;
-  symtab->remove_cgraph_duplication_hook (node_duplication_hook_holder);
-  node_duplication_hook_holder = NULL;
   symtab->remove_cgraph_insertion_hook (function_insertion_hook_holder);
   function_insertion_hook_holder = NULL;
 }
@@ -3735,16 +3892,16 @@ ipa_unregister_cgraph_hooks (void)
 void
 ipa_free_all_structures_after_ipa_cp (void)
 {
-  if (!optimize)
+  if (!optimize && !in_lto_p)
     {
       ipa_free_all_edge_args ();
       ipa_free_all_node_params ();
-      free_alloc_pool (ipcp_sources_pool);
-      free_alloc_pool (ipcp_values_pool);
-      free_alloc_pool (ipcp_agg_lattice_pool);
+      ipcp_sources_pool.release ();
+      ipcp_cst_values_pool.release ();
+      ipcp_poly_ctx_values_pool.release ();
+      ipcp_agg_lattice_pool.release ();
       ipa_unregister_cgraph_hooks ();
-      if (ipa_refdesc_pool)
-       free_alloc_pool (ipa_refdesc_pool);
+      ipa_refdesc_pool.release ();
     }
 }
 
@@ -3757,14 +3914,11 @@ ipa_free_all_structures_after_iinln (void)
   ipa_free_all_edge_args ();
   ipa_free_all_node_params ();
   ipa_unregister_cgraph_hooks ();
-  if (ipcp_sources_pool)
-    free_alloc_pool (ipcp_sources_pool);
-  if (ipcp_values_pool)
-    free_alloc_pool (ipcp_values_pool);
-  if (ipcp_agg_lattice_pool)
-    free_alloc_pool (ipcp_agg_lattice_pool);
-  if (ipa_refdesc_pool)
-    free_alloc_pool (ipa_refdesc_pool);
+  ipcp_sources_pool.release ();
+  ipcp_cst_values_pool.release ();
+  ipcp_poly_ctx_values_pool.release ();
+  ipcp_agg_lattice_pool.release ();
+  ipa_refdesc_pool.release ();
 }
 
 /* Print ipa_tree_map data structures of all functions in the
@@ -3920,7 +4074,7 @@ ipa_modify_formal_parameters (tree fndecl, ipa_parm_adjustment_vec adjustments)
              if (is_gimple_reg_type (ptype))
                {
                  unsigned malign = GET_MODE_ALIGNMENT (TYPE_MODE (ptype));
-                 if (TYPE_ALIGN (ptype) < malign)
+                 if (TYPE_ALIGN (ptype) != malign)
                    ptype = build_aligned_type (ptype, malign);
                }
            }
@@ -3994,21 +4148,6 @@ ipa_modify_formal_parameters (tree fndecl, ipa_parm_adjustment_vec adjustments)
       DECL_FUNCTION_CODE (fndecl) = (enum built_in_function) 0;
     }
 
-  /* This is a new type, not a copy of an old type.  Need to reassociate
-     variants.  We can handle everything except the main variant lazily.  */
-  tree t = TYPE_MAIN_VARIANT (orig_type);
-  if (orig_type != t)
-    {
-      TYPE_MAIN_VARIANT (new_type) = t;
-      TYPE_NEXT_VARIANT (new_type) = TYPE_NEXT_VARIANT (t);
-      TYPE_NEXT_VARIANT (t) = new_type;
-    }
-  else
-    {
-      TYPE_MAIN_VARIANT (new_type) = new_type;
-      TYPE_NEXT_VARIANT (new_type) = NULL;
-    }
-
   TREE_TYPE (fndecl) = new_type;
   DECL_VIRTUAL_P (fndecl) = 0;
   DECL_LANG_SPECIFIC (fndecl) = NULL;
@@ -4021,13 +4160,13 @@ ipa_modify_formal_parameters (tree fndecl, ipa_parm_adjustment_vec adjustments)
    contain the corresponding call graph edge.  */
 
 void
-ipa_modify_call_arguments (struct cgraph_edge *cs, gimple stmt,
+ipa_modify_call_arguments (struct cgraph_edge *cs, gcall *stmt,
                           ipa_parm_adjustment_vec adjustments)
 {
   struct cgraph_node *current_node = cgraph_node::get (current_function_decl);
   vec<tree> vargs;
   vec<tree, va_gc> **debug_args = NULL;
-  gimple new_stmt;
+  gcall *new_stmt;
   gimple_stmt_iterator gsi, prev_gsi;
   tree callee_decl;
   int i, len;
@@ -4153,24 +4292,25 @@ ipa_modify_call_arguments (struct cgraph_edge *cs, gimple stmt,
                           * BITS_PER_UNIT);
              misalign = misalign & (align - 1);
              if (misalign != 0)
-               align = (misalign & -misalign);
+               align = least_bit_hwi (misalign);
              if (align < TYPE_ALIGN (type))
                type = build_aligned_type (type, align);
              base = force_gimple_operand_gsi (&gsi, base,
                                               true, NULL, true, GSI_SAME_STMT);
              expr = fold_build2_loc (loc, MEM_REF, type, base, off);
+             REF_REVERSE_STORAGE_ORDER (expr) = adj->reverse;
              /* If expr is not a valid gimple call argument emit
                 a load into a temporary.  */
              if (is_gimple_reg_type (TREE_TYPE (expr)))
                {
-                 gimple tem = gimple_build_assign (NULL_TREE, expr);
+                 gimple *tem = gimple_build_assign (NULL_TREE, expr);
                  if (gimple_in_ssa_p (cfun))
                    {
                      gimple_set_vuse (tem, gimple_vuse (stmt));
                      expr = make_ssa_name (TREE_TYPE (expr), tem);
                    }
                  else
-                   expr = create_tmp_reg (TREE_TYPE (expr), NULL);
+                   expr = create_tmp_reg (TREE_TYPE (expr));
                  gimple_assign_set_lhs (tem, expr);
                  gsi_insert_before (&gsi, tem, GSI_SAME_STMT);
                }
@@ -4178,6 +4318,7 @@ ipa_modify_call_arguments (struct cgraph_edge *cs, gimple stmt,
          else
            {
              expr = fold_build2_loc (loc, MEM_REF, adj->type, base, off);
+             REF_REVERSE_STORAGE_ORDER (expr) = adj->reverse;
              expr = build_fold_addr_expr (expr);
              expr = force_gimple_operand_gsi (&gsi, expr,
                                               true, NULL, true, GSI_SAME_STMT);
@@ -4188,7 +4329,7 @@ ipa_modify_call_arguments (struct cgraph_edge *cs, gimple stmt,
        {
          unsigned int ix;
          tree ddecl = NULL_TREE, origin = DECL_ORIGIN (adj->base), arg;
-         gimple def_temp;
+         gimple *def_temp;
 
          arg = gimple_call_arg (stmt, adj->base_index);
          if (!useless_type_conversion_p (TREE_TYPE (origin), TREE_TYPE (arg)))
@@ -4211,7 +4352,7 @@ ipa_modify_call_arguments (struct cgraph_edge *cs, gimple stmt,
              ddecl = make_node (DEBUG_EXPR_DECL);
              DECL_ARTIFICIAL (ddecl) = 1;
              TREE_TYPE (ddecl) = TREE_TYPE (origin);
-             DECL_MODE (ddecl) = DECL_MODE (origin);
+             SET_DECL_MODE (ddecl, DECL_MODE (origin));
 
              vec_safe_push (*debug_args, origin);
              vec_safe_push (*debug_args, ddecl);
@@ -4282,7 +4423,10 @@ ipa_modify_expr (tree *expr, bool convert,
 
   tree src;
   if (cand->by_ref)
-    src = build_simple_mem_ref (cand->new_decl);
+    {
+      src = build_simple_mem_ref (cand->new_decl);
+      REF_REVERSE_STORAGE_ORDER (src) = cand->reverse;
+    }
   else
     src = cand->new_decl;
 
@@ -4349,7 +4493,9 @@ ipa_get_adjustment_candidate (tree **expr, bool *convert,
     }
 
   HOST_WIDE_INT offset, size, max_size;
-  tree base = get_ref_base_and_extent (**expr, &offset, &size, &max_size);
+  bool reverse;
+  tree base
+    = get_ref_base_and_extent (**expr, &offset, &size, &max_size, &reverse);
   if (!base || size == -1 || max_size == -1)
     return NULL;
 
@@ -4575,11 +4721,6 @@ ipa_write_jump_function (struct output_block *ob,
     {
     case IPA_JF_UNKNOWN:
       break;
-    case IPA_JF_KNOWN_TYPE:
-      streamer_write_uhwi (ob, jump_func->value.known_type.offset);
-      stream_write_tree (ob, jump_func->value.known_type.base_type, true);
-      stream_write_tree (ob, jump_func->value.known_type.component_type, true);
-      break;
     case IPA_JF_CONST:
       gcc_assert (
          EXPR_LOCATION (jump_func->value.constant.value) == UNKNOWN_LOCATION);
@@ -4592,9 +4733,11 @@ ipa_write_jump_function (struct output_block *ob,
          streamer_write_uhwi (ob, jump_func->value.pass_through.formal_id);
          bp = bitpack_create (ob->main_stream);
          bp_pack_value (&bp, jump_func->value.pass_through.agg_preserved, 1);
-         bp_pack_value (&bp, jump_func->value.pass_through.type_preserved, 1);
          streamer_write_bitpack (&bp);
        }
+      else if (TREE_CODE_CLASS (jump_func->value.pass_through.operation)
+              == tcc_unary)
+       streamer_write_uhwi (ob, jump_func->value.pass_through.formal_id);
       else
        {
          stream_write_tree (ob, jump_func->value.pass_through.operand, true);
@@ -4603,11 +4746,9 @@ ipa_write_jump_function (struct output_block *ob,
       break;
     case IPA_JF_ANCESTOR:
       streamer_write_uhwi (ob, jump_func->value.ancestor.offset);
-      stream_write_tree (ob, jump_func->value.ancestor.type, true);
       streamer_write_uhwi (ob, jump_func->value.ancestor.formal_id);
       bp = bitpack_create (ob->main_stream);
       bp_pack_value (&bp, jump_func->value.ancestor.agg_preserved, 1);
-      bp_pack_value (&bp, jump_func->value.ancestor.type_preserved, 1);
       streamer_write_bitpack (&bp);
       break;
     }
@@ -4626,6 +4767,24 @@ ipa_write_jump_function (struct output_block *ob,
       streamer_write_uhwi (ob, item->offset);
       stream_write_tree (ob, item->value, true);
     }
+
+  bp = bitpack_create (ob->main_stream);
+  bp_pack_value (&bp, jump_func->bits.known, 1);
+  streamer_write_bitpack (&bp);
+  if (jump_func->bits.known)
+    {
+      streamer_write_widest_int (ob, jump_func->bits.value);
+      streamer_write_widest_int (ob, jump_func->bits.mask);
+    }
+  bp_pack_value (&bp, jump_func->vr_known, 1);
+  streamer_write_bitpack (&bp);
+  if (jump_func->vr_known)
+    {
+      streamer_write_enum (ob->main_stream, value_rang_type,
+                          VR_LAST, jump_func->m_vr.type);
+      stream_write_tree (ob, jump_func->m_vr.min, true);
+      stream_write_tree (ob, jump_func->m_vr.max, true);
+    }
 }
 
 /* Read in jump function JUMP_FUNC from IB.  */
@@ -4644,17 +4803,8 @@ ipa_read_jump_function (struct lto_input_block *ib,
   switch (jftype)
     {
     case IPA_JF_UNKNOWN:
-      jump_func->type = IPA_JF_UNKNOWN;
+      ipa_set_jf_unknown (jump_func);
       break;
-    case IPA_JF_KNOWN_TYPE:
-      {
-       HOST_WIDE_INT offset = streamer_read_uhwi (ib);
-       tree base_type = stream_read_tree (ib, data_in);
-       tree component_type = stream_read_tree (ib, data_in);
-
-       ipa_set_jf_known_type (jump_func, offset, base_type, component_type);
-       break;
-      }
     case IPA_JF_CONST:
       ipa_set_jf_constant (jump_func, stream_read_tree (ib, data_in), cs);
       break;
@@ -4665,9 +4815,12 @@ ipa_read_jump_function (struct lto_input_block *ib,
          int formal_id =  streamer_read_uhwi (ib);
          struct bitpack_d bp = streamer_read_bitpack (ib);
          bool agg_preserved = bp_unpack_value (&bp, 1);
-         bool type_preserved = bp_unpack_value (&bp, 1);
-         ipa_set_jf_simple_pass_through (jump_func, formal_id, agg_preserved,
-                                         type_preserved);
+         ipa_set_jf_simple_pass_through (jump_func, formal_id, agg_preserved);
+       }
+      else if (TREE_CODE_CLASS (operation) == tcc_unary)
+       {
+         int formal_id =  streamer_read_uhwi (ib);
+         ipa_set_jf_unary_pass_through (jump_func, formal_id, operation);
        }
       else
        {
@@ -4680,14 +4833,10 @@ ipa_read_jump_function (struct lto_input_block *ib,
     case IPA_JF_ANCESTOR:
       {
        HOST_WIDE_INT offset = streamer_read_uhwi (ib);
-       tree type = stream_read_tree (ib, data_in);
        int formal_id = streamer_read_uhwi (ib);
        struct bitpack_d bp = streamer_read_bitpack (ib);
        bool agg_preserved = bp_unpack_value (&bp, 1);
-       bool type_preserved = bp_unpack_value (&bp, 1);
-
-       ipa_set_ancestor_jf (jump_func, offset, type, formal_id, agg_preserved,
-                            type_preserved);
+       ipa_set_ancestor_jf (jump_func, offset, formal_id, agg_preserved);
        break;
       }
     }
@@ -4706,6 +4855,31 @@ ipa_read_jump_function (struct lto_input_block *ib,
       item.value = stream_read_tree (ib, data_in);
       jump_func->agg.items->quick_push (item);
     }
+
+  struct bitpack_d bp = streamer_read_bitpack (ib);
+  bool bits_known = bp_unpack_value (&bp, 1);
+  if (bits_known)
+    {
+      jump_func->bits.known = true;
+      jump_func->bits.value = streamer_read_widest_int (ib);
+      jump_func->bits.mask = streamer_read_widest_int (ib);
+    }
+  else
+    jump_func->bits.known = false;
+
+  struct bitpack_d vr_bp = streamer_read_bitpack (ib);
+  bool vr_known = bp_unpack_value (&vr_bp, 1);
+  if (vr_known)
+    {
+      jump_func->vr_known = true;
+      jump_func->m_vr.type = streamer_read_enum (ib,
+                                                value_range_type,
+                                                VR_LAST);
+      jump_func->m_vr.min = stream_read_tree (ib, data_in);
+      jump_func->m_vr.max = stream_read_tree (ib, data_in);
+    }
+  else
+    jump_func->vr_known = false;
 }
 
 /* Stream out parts of cgraph_indirect_call_info corresponding to CS that are
@@ -4719,25 +4893,24 @@ ipa_write_indirect_edge_info (struct output_block *ob,
   struct bitpack_d bp;
 
   streamer_write_hwi (ob, ii->param_index);
-  streamer_write_hwi (ob, ii->offset);
   bp = bitpack_create (ob->main_stream);
   bp_pack_value (&bp, ii->polymorphic, 1);
   bp_pack_value (&bp, ii->agg_contents, 1);
   bp_pack_value (&bp, ii->member_ptr, 1);
   bp_pack_value (&bp, ii->by_ref, 1);
-  bp_pack_value (&bp, ii->maybe_in_construction, 1);
-  bp_pack_value (&bp, ii->maybe_derived_type, 1);
-  bp_pack_value (&bp, ii->speculative_maybe_derived_type, 1);
+  bp_pack_value (&bp, ii->guaranteed_unmodified, 1);
+  bp_pack_value (&bp, ii->vptr_changed, 1);
   streamer_write_bitpack (&bp);
+  if (ii->agg_contents || ii->polymorphic)
+    streamer_write_hwi (ob, ii->offset);
+  else
+    gcc_assert (ii->offset == 0);
 
   if (ii->polymorphic)
     {
       streamer_write_hwi (ob, ii->otr_token);
       stream_write_tree (ob, ii->otr_type, true);
-      stream_write_tree (ob, ii->outer_type, true);
-      stream_write_tree (ob, ii->speculative_outer_type, true);
-      if (ii->speculative_outer_type)
-        streamer_write_hwi (ob, ii->speculative_offset);
+      ii->context.stream_out (ob);
     }
 }
 
@@ -4746,30 +4919,29 @@ ipa_write_indirect_edge_info (struct output_block *ob,
 
 static void
 ipa_read_indirect_edge_info (struct lto_input_block *ib,
-                            struct data_in *data_in ATTRIBUTE_UNUSED,
+                            struct data_in *data_in,
                             struct cgraph_edge *cs)
 {
   struct cgraph_indirect_call_info *ii = cs->indirect_info;
   struct bitpack_d bp;
 
   ii->param_index = (int) streamer_read_hwi (ib);
-  ii->offset = (HOST_WIDE_INT) streamer_read_hwi (ib);
   bp = streamer_read_bitpack (ib);
   ii->polymorphic = bp_unpack_value (&bp, 1);
   ii->agg_contents = bp_unpack_value (&bp, 1);
   ii->member_ptr = bp_unpack_value (&bp, 1);
   ii->by_ref = bp_unpack_value (&bp, 1);
-  ii->maybe_in_construction = bp_unpack_value (&bp, 1);
-  ii->maybe_derived_type = bp_unpack_value (&bp, 1);
-  ii->speculative_maybe_derived_type = bp_unpack_value (&bp, 1);
+  ii->guaranteed_unmodified = bp_unpack_value (&bp, 1);
+  ii->vptr_changed = bp_unpack_value (&bp, 1);
+  if (ii->agg_contents || ii->polymorphic)
+    ii->offset = (HOST_WIDE_INT) streamer_read_hwi (ib);
+  else
+    ii->offset = 0;
   if (ii->polymorphic)
     {
       ii->otr_token = (HOST_WIDE_INT) streamer_read_hwi (ib);
       ii->otr_type = stream_read_tree (ib, data_in);
-      ii->outer_type = stream_read_tree (ib, data_in);
-      ii->speculative_outer_type = stream_read_tree (ib, data_in);
-      if (ii->speculative_outer_type)
-        ii->speculative_offset = (HOST_WIDE_INT) streamer_read_hwi (ib);
+      ii->context.stream_in (ib, data_in);
     }
 }
 
@@ -4801,22 +4973,37 @@ ipa_write_node_info (struct output_block *ob, struct cgraph_node *node)
     bp_pack_value (&bp, ipa_is_param_used (info, j), 1);
   streamer_write_bitpack (&bp);
   for (j = 0; j < ipa_get_param_count (info); j++)
-    streamer_write_hwi (ob, ipa_get_controlled_uses (info, j));
+    {
+      streamer_write_hwi (ob, ipa_get_controlled_uses (info, j));
+      stream_write_tree (ob, ipa_get_type (info, j), true);
+    }
   for (e = node->callees; e; e = e->next_callee)
     {
       struct ipa_edge_args *args = IPA_EDGE_REF (e);
 
-      streamer_write_uhwi (ob, ipa_get_cs_argument_count (args));
+      streamer_write_uhwi (ob,
+                          ipa_get_cs_argument_count (args) * 2
+                          + (args->polymorphic_call_contexts != NULL));
       for (j = 0; j < ipa_get_cs_argument_count (args); j++)
-       ipa_write_jump_function (ob, ipa_get_ith_jump_func (args, j));
+       {
+         ipa_write_jump_function (ob, ipa_get_ith_jump_func (args, j));
+         if (args->polymorphic_call_contexts != NULL)
+           ipa_get_ith_polymorhic_call_context (args, j)->stream_out (ob);
+       }
     }
   for (e = node->indirect_calls; e; e = e->next_callee)
     {
       struct ipa_edge_args *args = IPA_EDGE_REF (e);
 
-      streamer_write_uhwi (ob, ipa_get_cs_argument_count (args));
+      streamer_write_uhwi (ob,
+                          ipa_get_cs_argument_count (args) * 2
+                          + (args->polymorphic_call_contexts != NULL));
       for (j = 0; j < ipa_get_cs_argument_count (args); j++)
-       ipa_write_jump_function (ob, ipa_get_ith_jump_func (args, j));
+       {
+         ipa_write_jump_function (ob, ipa_get_ith_jump_func (args, j));
+         if (args->polymorphic_call_contexts != NULL)
+           ipa_get_ith_polymorhic_call_context (args, j)->stream_out (ob);
+       }
       ipa_write_indirect_edge_info (ob, e);
     }
 }
@@ -4836,7 +5023,7 @@ ipa_read_node_info (struct lto_input_block *ib, struct cgraph_node *node,
 
   for (k = 0; k < ipa_get_param_count (info); k++)
     info->descriptors[k].move_cost = streamer_read_uhwi (ib);
-    
+
   bp = streamer_read_bitpack (ib);
   if (ipa_get_param_count (info) != 0)
     info->analysis_done = true;
@@ -4844,31 +5031,50 @@ ipa_read_node_info (struct lto_input_block *ib, struct cgraph_node *node,
   for (k = 0; k < ipa_get_param_count (info); k++)
     ipa_set_param_used (info, k, bp_unpack_value (&bp, 1));
   for (k = 0; k < ipa_get_param_count (info); k++)
-    ipa_set_controlled_uses (info, k, streamer_read_hwi (ib));
+    {
+      ipa_set_controlled_uses (info, k, streamer_read_hwi (ib));
+      info->descriptors[k].decl_or_type = stream_read_tree (ib, data_in);
+    }
   for (e = node->callees; e; e = e->next_callee)
     {
       struct ipa_edge_args *args = IPA_EDGE_REF (e);
       int count = streamer_read_uhwi (ib);
+      bool contexts_computed = count & 1;
+      count /= 2;
 
       if (!count)
        continue;
       vec_safe_grow_cleared (args->jump_functions, count);
+      if (contexts_computed)
+       vec_safe_grow_cleared (args->polymorphic_call_contexts, count);
 
       for (k = 0; k < ipa_get_cs_argument_count (args); k++)
-       ipa_read_jump_function (ib, ipa_get_ith_jump_func (args, k), e,
-                               data_in);
+       {
+         ipa_read_jump_function (ib, ipa_get_ith_jump_func (args, k), e,
+                                 data_in);
+         if (contexts_computed)
+           ipa_get_ith_polymorhic_call_context (args, k)->stream_in (ib, data_in);
+       }
     }
   for (e = node->indirect_calls; e; e = e->next_callee)
     {
       struct ipa_edge_args *args = IPA_EDGE_REF (e);
       int count = streamer_read_uhwi (ib);
+      bool contexts_computed = count & 1;
+      count /= 2;
 
       if (count)
        {
          vec_safe_grow_cleared (args->jump_functions, count);
+         if (contexts_computed)
+           vec_safe_grow_cleared (args->polymorphic_call_contexts, count);
           for (k = 0; k < ipa_get_cs_argument_count (args); k++)
-           ipa_read_jump_function (ib, ipa_get_ith_jump_func (args, k), e,
-                                   data_in);
+           {
+             ipa_read_jump_function (ib, ipa_get_ith_jump_func (args, k), e,
+                                     data_in);
+             if (contexts_computed)
+               ipa_get_ith_polymorhic_call_context (args, k)->stream_in (ib, data_in);
+           }
        }
       ipa_read_indirect_edge_info (ib, data_in, e);
     }
@@ -4885,8 +5091,7 @@ ipa_prop_write_jump_functions (void)
   lto_symtab_encoder_iterator lsei;
   lto_symtab_encoder_t encoder;
 
-
-  if (!ipa_node_params_vector.exists ())
+  if (!ipa_node_params_sum)
     return;
 
   ob = create_output_block (LTO_section_jump_functions);
@@ -4933,7 +5138,7 @@ ipa_prop_read_section (struct lto_file_decl_data *file_data, const char *data,
   unsigned int count;
 
   lto_input_block ib_main ((const char *) data + main_offset,
-                          header->main_size);
+                          header->main_size, file_data->mode_table);
 
   data_in =
     lto_data_in_create (file_data, (const char *) data + string_offset,
@@ -4993,7 +5198,7 @@ ipa_update_after_lto_read (void)
 }
 
 void
-write_agg_replacement_chain (struct output_block *ob, struct cgraph_node *node)
+write_ipcp_transformation_info (output_block *ob, cgraph_node *node)
 {
   int node_ref;
   unsigned int count = 0;
@@ -5021,14 +5226,58 @@ write_agg_replacement_chain (struct output_block *ob, struct cgraph_node *node)
       bp_pack_value (&bp, av->by_ref, 1);
       streamer_write_bitpack (&bp);
     }
+
+  ipcp_transformation_summary *ts = ipcp_get_transformation_summary (node);
+  if (ts && vec_safe_length (ts->m_vr) > 0)
+    {
+      count = ts->m_vr->length ();
+      streamer_write_uhwi (ob, count);
+      for (unsigned i = 0; i < count; ++i)
+       {
+         struct bitpack_d bp;
+         ipa_vr *parm_vr = &(*ts->m_vr)[i];
+         bp = bitpack_create (ob->main_stream);
+         bp_pack_value (&bp, parm_vr->known, 1);
+         streamer_write_bitpack (&bp);
+         if (parm_vr->known)
+           {
+             streamer_write_enum (ob->main_stream, value_rang_type,
+                                  VR_LAST, parm_vr->type);
+             streamer_write_wide_int (ob, parm_vr->min);
+             streamer_write_wide_int (ob, parm_vr->max);
+           }
+       }
+    }
+  else
+    streamer_write_uhwi (ob, 0);
+
+  if (ts && vec_safe_length (ts->bits) > 0)
+    {
+      count = ts->bits->length ();
+      streamer_write_uhwi (ob, count);
+
+      for (unsigned i = 0; i < count; ++i)
+       {
+         const ipa_bits& bits_jfunc = (*ts->bits)[i];
+         struct bitpack_d bp = bitpack_create (ob->main_stream);
+         bp_pack_value (&bp, bits_jfunc.known, 1);
+         streamer_write_bitpack (&bp);
+         if (bits_jfunc.known)
+           {
+             streamer_write_widest_int (ob, bits_jfunc.value);
+             streamer_write_widest_int (ob, bits_jfunc.mask);
+           }
+       }
+    }
+  else
+    streamer_write_uhwi (ob, 0);
 }
 
 /* Stream in the aggregate value replacement chain for NODE from IB.  */
 
 static void
-read_agg_replacement_chain (struct lto_input_block *ib,
-                           struct cgraph_node *node,
-                           struct data_in *data_in)
+read_ipcp_transformation_info (lto_input_block *ib, cgraph_node *node,
+                              data_in *data_in)
 {
   struct ipa_agg_replacement_value *aggvals = NULL;
   unsigned int count, i;
@@ -5049,12 +5298,56 @@ read_agg_replacement_chain (struct lto_input_block *ib,
       aggvals = av;
     }
   ipa_set_node_agg_value_chain (node, aggvals);
+  
+  count = streamer_read_uhwi (ib);
+  if (count > 0)
+    {
+      ipcp_grow_transformations_if_necessary ();
+
+      ipcp_transformation_summary *ts = ipcp_get_transformation_summary (node);
+      vec_safe_grow_cleared (ts->m_vr, count);
+      for (i = 0; i < count; i++)
+       {
+         ipa_vr *parm_vr;
+         parm_vr = &(*ts->m_vr)[i];
+         struct bitpack_d bp;
+         bp = streamer_read_bitpack (ib);
+         parm_vr->known = bp_unpack_value (&bp, 1);
+         if (parm_vr->known)
+           {
+             parm_vr->type = streamer_read_enum (ib, value_range_type,
+                                                 VR_LAST);
+             parm_vr->min = streamer_read_wide_int (ib);
+             parm_vr->max = streamer_read_wide_int (ib);
+           }
+       }
+    }
+  count = streamer_read_uhwi (ib);
+  if (count > 0)
+    {
+      ipcp_grow_transformations_if_necessary ();
+
+      ipcp_transformation_summary *ts = ipcp_get_transformation_summary (node);
+      vec_safe_grow_cleared (ts->bits, count);
+
+      for (i = 0; i < count; i++)
+       {
+         ipa_bits& bits_jfunc = (*ts->bits)[i];
+         struct bitpack_d bp = streamer_read_bitpack (ib);
+         bits_jfunc.known = bp_unpack_value (&bp, 1);
+         if (bits_jfunc.known)
+           {
+             bits_jfunc.value = streamer_read_widest_int (ib);
+             bits_jfunc.mask = streamer_read_widest_int (ib);
+           }
+       }
+    }
 }
 
 /* Write all aggregate replacement for nodes in set.  */
 
 void
-ipa_prop_write_all_agg_replacement (void)
+ipcp_write_transformation_summaries (void)
 {
   struct cgraph_node *node;
   struct output_block *ob;
@@ -5062,9 +5355,6 @@ ipa_prop_write_all_agg_replacement (void)
   lto_symtab_encoder_iterator lsei;
   lto_symtab_encoder_t encoder;
 
-  if (!ipa_node_agg_replacements)
-    return;
-
   ob = create_output_block (LTO_section_ipcp_transform);
   encoder = ob->decl_state->symtab_node_encoder;
   ob->symbol = NULL;
@@ -5072,8 +5362,7 @@ ipa_prop_write_all_agg_replacement (void)
        lsei_next_function_in_partition (&lsei))
     {
       node = lsei_cgraph_node (lsei);
-      if (node->has_gimple_body_p ()
-         && ipa_get_agg_replacements_for_node (node) != NULL)
+      if (node->has_gimple_body_p ())
        count++;
     }
 
@@ -5083,9 +5372,8 @@ ipa_prop_write_all_agg_replacement (void)
        lsei_next_function_in_partition (&lsei))
     {
       node = lsei_cgraph_node (lsei);
-      if (node->has_gimple_body_p ()
-         && ipa_get_agg_replacements_for_node (node) != NULL)
-       write_agg_replacement_chain (ob, node);
+      if (node->has_gimple_body_p ())
+       write_ipcp_transformation_info (ob, node);
     }
   streamer_write_char_stream (ob->main_stream, 0);
   produce_asm (ob, NULL);
@@ -5110,7 +5398,7 @@ read_replacements_section (struct lto_file_decl_data *file_data,
   unsigned int count;
 
   lto_input_block ib_main ((const char *) data + main_offset,
-                          header->main_size);
+                          header->main_size, file_data->mode_table);
 
   data_in = lto_data_in_create (file_data, (const char *) data + string_offset,
                                header->string_size, vNULL);
@@ -5127,7 +5415,7 @@ read_replacements_section (struct lto_file_decl_data *file_data,
       node = dyn_cast<cgraph_node *> (lto_symtab_encoder_deref (encoder,
                                                                index));
       gcc_assert (node->definition);
-      read_agg_replacement_chain (&ib_main, node, data_in);
+      read_ipcp_transformation_info (&ib_main, node, data_in);
     }
   lto_free_section_data (file_data, LTO_section_jump_functions, NULL, data,
                         len);
@@ -5137,7 +5425,7 @@ read_replacements_section (struct lto_file_decl_data *file_data,
 /* Read IPA-CP aggregate replacements.  */
 
 void
-ipa_prop_read_all_agg_replacement (void)
+ipcp_read_transformation_summaries (void)
 {
   struct lto_file_decl_data **file_data_vec = lto_get_file_decl_data ();
   struct lto_file_decl_data *file_data;
@@ -5194,30 +5482,30 @@ adjust_agg_replacement_values (struct cgraph_node *node,
 class ipcp_modif_dom_walker : public dom_walker
 {
 public:
-  ipcp_modif_dom_walker (struct func_body_info *fbi,
+  ipcp_modif_dom_walker (struct ipa_func_body_info *fbi,
                         vec<ipa_param_descriptor> descs,
                         struct ipa_agg_replacement_value *av,
                         bool *sc, bool *cc)
     : dom_walker (CDI_DOMINATORS), m_fbi (fbi), m_descriptors (descs),
       m_aggval (av), m_something_changed (sc), m_cfg_changed (cc) {}
 
-  virtual void before_dom_children (basic_block);
+  virtual edge before_dom_children (basic_block);
 
 private:
-  struct func_body_info *m_fbi;
+  struct ipa_func_body_info *m_fbi;
   vec<ipa_param_descriptor> m_descriptors;
   struct ipa_agg_replacement_value *m_aggval;
   bool *m_something_changed, *m_cfg_changed;
 };
 
-void
+edge
 ipcp_modif_dom_walker::before_dom_children (basic_block bb)
 {
   gimple_stmt_iterator gsi;
   for (gsi = gsi_start_bb (bb); !gsi_end_p (gsi); gsi_next (&gsi))
     {
       struct ipa_agg_replacement_value *v;
-      gimple stmt = gsi_stmt (gsi);
+      gimple *stmt = gsi_stmt (gsi);
       tree rhs, val, t;
       HOST_WIDE_INT offset, size;
       int index;
@@ -5245,8 +5533,8 @@ ipcp_modif_dom_walker::before_dom_children (basic_block bb)
       if (vce)
        continue;
 
-      if (!ipa_load_from_parm_agg_1 (m_fbi, m_descriptors, stmt, rhs, &index,
-                                    &offset, &size, &by_ref))
+      if (!ipa_load_from_parm_agg (m_fbi, m_descriptors, stmt, rhs, &index,
+                                  &offset, &size, &by_ref))
        continue;
       for (v = m_aggval; v; v = v->next)
        if (v->index == index
@@ -5301,7 +5589,161 @@ ipcp_modif_dom_walker::before_dom_children (basic_block bb)
          && gimple_purge_dead_eh_edges (gimple_bb (stmt)))
        *m_cfg_changed = true;
     }
+  return NULL;
+}
+
+/* Update bits info of formal parameters as described in
+   ipcp_transformation_summary.  */
+
+static void
+ipcp_update_bits (struct cgraph_node *node)
+{
+  tree parm = DECL_ARGUMENTS (node->decl);
+  tree next_parm = parm;
+  ipcp_transformation_summary *ts = ipcp_get_transformation_summary (node);
+
+  if (!ts || vec_safe_length (ts->bits) == 0)
+    return;
+
+  vec<ipa_bits, va_gc> &bits = *ts->bits;
+  unsigned count = bits.length ();
+
+  for (unsigned i = 0; i < count; ++i, parm = next_parm)
+    {
+      if (node->clone.combined_args_to_skip
+         && bitmap_bit_p (node->clone.combined_args_to_skip, i))
+       continue;
+
+      gcc_checking_assert (parm);
+      next_parm = DECL_CHAIN (parm);
+
+      if (!bits[i].known
+         || !(INTEGRAL_TYPE_P (TREE_TYPE (parm)) || POINTER_TYPE_P (TREE_TYPE (parm)))
+         || !is_gimple_reg (parm))
+       continue;       
+
+      tree ddef = ssa_default_def (DECL_STRUCT_FUNCTION (node->decl), parm);
+      if (!ddef)
+       continue;
+
+      if (dump_file)
+       {
+         fprintf (dump_file, "Adjusting mask for param %u to ", i); 
+         print_hex (bits[i].mask, dump_file);
+         fprintf (dump_file, "\n");
+       }
+
+      if (INTEGRAL_TYPE_P (TREE_TYPE (ddef)))
+       {
+         unsigned prec = TYPE_PRECISION (TREE_TYPE (ddef));
+         signop sgn = TYPE_SIGN (TREE_TYPE (ddef));
+
+         wide_int nonzero_bits = wide_int::from (bits[i].mask, prec, UNSIGNED)
+                                 | wide_int::from (bits[i].value, prec, sgn);
+         set_nonzero_bits (ddef, nonzero_bits);
+       }
+      else
+       {
+         unsigned tem = bits[i].mask.to_uhwi ();
+         unsigned HOST_WIDE_INT bitpos = bits[i].value.to_uhwi (); 
+         unsigned align = tem & -tem;
+         unsigned misalign = bitpos & (align - 1);
+
+         if (align > 1)
+           {
+             if (dump_file)
+               fprintf (dump_file, "Adjusting align: %u, misalign: %u\n", align, misalign); 
+
+             unsigned old_align, old_misalign;
+             struct ptr_info_def *pi = get_ptr_info (ddef);
+             bool old_known = get_ptr_info_alignment (pi, &old_align, &old_misalign);
+
+             if (old_known
+                 && old_align > align)
+               {
+                 if (dump_file)
+                   {
+                     fprintf (dump_file, "But alignment was already %u.\n", old_align);
+                     if ((old_misalign & (align - 1)) != misalign)
+                       fprintf (dump_file, "old_misalign (%u) and misalign (%u) mismatch\n",
+                                old_misalign, misalign);
+                   }
+                 continue;
+               }
+
+             if (old_known
+                 && ((misalign & (old_align - 1)) != old_misalign)
+                 && dump_file)
+               fprintf (dump_file, "old_misalign (%u) and misalign (%u) mismatch\n",
+                        old_misalign, misalign);
+
+             set_ptr_info_alignment (pi, align, misalign); 
+           }
+       }
+    }
+}
+
+/* Update value range of formal parameters as described in
+   ipcp_transformation_summary.  */
+
+static void
+ipcp_update_vr (struct cgraph_node *node)
+{
+  tree fndecl = node->decl;
+  tree parm = DECL_ARGUMENTS (fndecl);
+  tree next_parm = parm;
+  ipcp_transformation_summary *ts = ipcp_get_transformation_summary (node);
+  if (!ts || vec_safe_length (ts->m_vr) == 0)
+    return;
+  const vec<ipa_vr, va_gc> &vr = *ts->m_vr;
+  unsigned count = vr.length ();
+
+  for (unsigned i = 0; i < count; ++i, parm = next_parm)
+    {
+      if (node->clone.combined_args_to_skip
+         && bitmap_bit_p (node->clone.combined_args_to_skip, i))
+       continue;
+      gcc_checking_assert (parm);
+      next_parm = DECL_CHAIN (parm);
+      tree ddef = ssa_default_def (DECL_STRUCT_FUNCTION (node->decl), parm);
+
+      if (!ddef || !is_gimple_reg (parm))
+       continue;
 
+      if (vr[i].known
+         && (vr[i].type == VR_RANGE || vr[i].type == VR_ANTI_RANGE))
+       {
+         tree type = TREE_TYPE (ddef);
+         unsigned prec = TYPE_PRECISION (type);
+         if (INTEGRAL_TYPE_P (TREE_TYPE (ddef)))
+           {
+             if (dump_file)
+               {
+                 fprintf (dump_file, "Setting value range of param %u ", i);
+                 fprintf (dump_file, "%s[",
+                          (vr[i].type == VR_ANTI_RANGE) ? "~" : "");
+                 print_decs (vr[i].min, dump_file);
+                 fprintf (dump_file, ", ");
+                 print_decs (vr[i].max, dump_file);
+                 fprintf (dump_file, "]\n");
+               }
+             set_range_info (ddef, vr[i].type,
+                             wide_int_storage::from (vr[i].min, prec,
+                                                     TYPE_SIGN (type)),
+                             wide_int_storage::from (vr[i].max, prec,
+                                                     TYPE_SIGN (type)));
+           }
+         else if (POINTER_TYPE_P (TREE_TYPE (ddef))
+                  && vr[i].type == VR_ANTI_RANGE
+                  && wi::eq_p (vr[i].min, 0)
+                  && wi::eq_p (vr[i].max, 0))
+           {
+             if (dump_file)
+               fprintf (dump_file, "Setting nonnull for %u\n", i);
+             set_ptr_nonnull (ddef);
+           }
+       }
+    }
 }
 
 /* IPCP transformation phase doing propagation of aggregate values.  */
@@ -5310,7 +5752,7 @@ unsigned int
 ipcp_transform_function (struct cgraph_node *node)
 {
   vec<ipa_param_descriptor> descriptors = vNULL;
-  struct func_body_info fbi;
+  struct ipa_func_body_info fbi;
   struct ipa_agg_replacement_value *aggval;
   int param_count;
   bool cfg_changed = false, something_changed = false;
@@ -5322,6 +5764,8 @@ ipcp_transform_function (struct cgraph_node *node)
     fprintf (dump_file, "Modification phase of node %s/%i\n",
             node->name (), node->order);
 
+  ipcp_update_bits (node);
+  ipcp_update_vr (node);
   aggval = ipa_get_agg_replacements_for_node (node);
   if (!aggval)
       return 0;
@@ -5351,7 +5795,10 @@ ipcp_transform_function (struct cgraph_node *node)
     free_ipa_bb_info (bi);
   fbi.bb_infos.release ();
   free_dominance_info (CDI_DOMINATORS);
-  (*ipa_node_agg_replacements)[node->uid] = NULL;
+  (*ipcp_transformations)[node->uid].agg_values = NULL;
+  (*ipcp_transformations)[node->uid].bits = NULL;
+  (*ipcp_transformations)[node->uid].m_vr = NULL;
+
   descriptors.release ();
 
   if (!something_changed)