Function Multiverse

Function multiverse is a compiler plugin for the GNU C compiler (GCC) to generate multiple versions of a function, each specialized with different variable settings. An additional multiverse run-time library allows to switch between the different function versions by means of binary patching.

Consider the following function foo() whose control flow is altered by a global variable config_A. At some point during execution we may know that the current mode of operation of foo() is fixed for a certain amount of time or simply forever. Then we also know that foo() could run more efficiently since the branch (including compare and jump) could be avoided. In this case, function multiverse generates two versions of foo() one with the variable setting config_A=true another with config_A=false.

static bool config_A;

void foo()
{
    if (config_A) {
        do_a();
    } else {
        do_b();
    }
}

Function multiverse entails several benefits:

• Code executes and performs as efficiently as possible
• No register clobbering
• No instruction- and data-cache pollution
• Ability to identify and compartmentalize dead code
• Ability to decide how to handle dead code at run time

An expected negative impact is the size increase of the binary, so that function multiverse should be used with care. However, optimizations such as clone detection help to reduce the size overhead.

Using Function Multiverse

The paradigm of function multiverse is that everything must be made explicit. First, we need to let the compiler know which functions should be multiversed with which variables. In terms of GCC, this means we have to attribute functions and variables with __attribute__((multiverse)) when they are declared. Second, the moment at which the current functionality is captured is explicit. After a variable has changed, the developer commits one or more functions (e.g., via multiverse_commit_fn() or multiverse_commit_refs()): the run-time system captures the referenced multiverse variables, decides which variant fits best, and nails down the functionality.

The code below is an example of how multiverse can be used:

static __attribute__((multiverse)) bool config_A;

void __attribute__((multiverse)) foo()
{
    if (config_A) {
        do_a();
    } else {
        do_b();
    }
    return 0;
}

int main()
{
    foo();

    config_A = true;

    // All functions, referencing config_A, are comitted
    // In this case: foo()
    multiverse_commit_refs(&config_A);

    foo();

    return 0;
}

Compiling the upper code with the multiverse plugin will additionally compile the following two specialized versions of the generic foo() in the binary. Internally, the plugin clones the generic function with the corresponding variable settings. Later compiler optimizations such as constant propagation and dead-code elimination further optimize the code. With multiverse_commit_refs(&config_A), we indicate that the configuration has changed and that all multiverse functions referencing config_A have to be reexamined. The run-time system will then determine the specialized function version foo_config_A_true() and binary patch all call sites to use foo_config_A_true() instead of the generic foo(). The generic function version of foo() will also be patched to jump to the new version, since foo() might still be reachable, for instance via function pointers.

void foo_config_A_true()
{
  do_a();
  return 0;
}

void foo_config_A_false()
{
  do_b();
  return 0;
}

Another use case of multiverse is the replacement of indirect calls to a function pointer by direct calls to its currently assigned function. Therefore function pointers can also be attributed with __attribute__((multiverse)). In this case multiverse does not perform variant generation. Instead, variants are provided manually by the programmer when assigning values to the function pointer. Like above the run-time patching must be performed via an explicit commit call.

__attribute__((multiverse)) int (*my_fn_ptr)(void);

int foo(void) {
    return do_someting();
}

int main()
{
    my_fn_ptr = foo;
    // Any function that matches my_fn_ptr's signature can be assigned to it

    // The function pointer my_fn_ptr is comitted
    multiverse_commit_fn(&my_fn_ptr);

    my_fn_ptr()

    return 0;
}

What Can Be Multiversed?

• Variables
  • Enumeral Types: For every value of the enum, we generate one multiverse variant.
  • Integer Types: Integer types are a bit more complex, since their domain is much larger in general ([0, INT_MAX]). Therefore, we guess useful assignments from referencing function bodies. If we find no comparision with a constant (config_A == 3), we fall back to specializing it to 0 and 1
• Functions
  • In general, all functions can be attributed with multiverse. Nevertheless, multiverse functions are not inlined anymore.
• Function Pointers
  • Function pointers can be also be attributed with multiverse. Unlike functions, there is no variant generation. The compiler plugin only records the function-pointer call sites in order to give the run-time library the capability to replace the indirect calls with direct calls.

How Does Function Multiverse Work?

Function multiverse is implemented as a GCC plugin, which adds several passes to the middle-end and back-end of the compiler. The first step is the attribution of variables and functions. As aforementioned, only boolean-like variables are supported and multiverse functions cannot be inlined. The second step is to determine how many specialized versions of a multiverse-attributed function must be generated. Thus, the plugin checks which multiverse variables are referenced in a multiverse function and builds all combinations of those variables. Currently, all multiverse variables are considered to be independent, so the plugin generates an exponential amount of combinations in the first place. Let's consider the following code snippet:

static __attribute__((multiverse)) bool config_A;
static __attribute__((multiverse)) bool config_B;

void __attribute__((multiverse)) foo()
{
  if (config_A)
    do_a();
  if (config_B)
    do_b();
}

The upper function foo() references the multiverse variables config_A and config_B, so that there are 2^2 combinations and thus 4 specialized versions of foo() with the variable settings (config_A=[0,1], config_B=[0,1]). Notice, that a multiverse variable is excluded from the variable settings if the current function assigns some value to it. For instance, if the upper function foo() had the statement config_A=42; the plugin would throw a compiler warning and exclude config_A from the variable setting. In this case, only two specialized version of foo() would be generated, one with config_B=0 another with config_B=1.

If multiverse function bodies are equivalent after the optimization passes, the plugin does only emit one function body and uses it for multiple multiverses.

The Run-Time Library

See documentation in /doc.

Building and Using Multiverse

To build the plugin you need the following packages:

• Debian:
  • g++-$VERSION
  • gcc-$VERSION
  • gcc-$VERSION-source
  • gcc-$VERSION-plugin-dev
• openSUSE:
  • gcc
  • gcc-c++
  • gcc-devel

After having built the plugin with make you can use it via gcc -fplugin=multiverse.so.

You can install multiverse (compiler plugin & run-time library) with make install. Note that the compiler plugin always gets installed in the plugin directory reported by GCC regardless of the current $PREFIX (however, $DESTDIR is obeyed).