RFR: 8375653: C2: CmpUNode::sub is not monotonic

[Dean Long]

On Tue, 20 Jan 2026 02:42:41 GMT, Quan Anh Mai <qamai at openjdk.org> wrote:

> Hi,
> 
> This PR fixes the issue that `CmpUNode::sub` is not monotonic. The root cause is that it returns different values for several cases, but the cases are not mutually exclusive and the return values are not a subset of each other. This leads to the possibilities that a node satisfying both cases will return the first value, but if upon being widen it ceases to satisfy the first case but still satisfies the second case, the method will return the second value, which is not a superset of the previous result.
> 
> For example, given `r = CmpU(x, y)`.
> 
> At the first iteration, `type(x) = {0}` and `type(y) = {1, -1}`, then `CmpUNode::sub` returns `TypeInt::CC_LE` since it sees that `x` is the constant `0`.
> 
> At the second iteration, `type(x) = {0, 2}` and `type(y) = {-1, 1}`, then `CmpUNode::sub` returns `TypeInt::CC_NE` since it sees that `x` and `y` do not overlap. This is not a superset of `TypeInt::CC_LE`, which leads to an assertion.
> 
> Please take a look and leave your reviews, thanks a lot.

src/hotspot/share/opto/subnode.cpp line 767:

> 765:     return TypeInt::CC_GT;
> 766:   } else if (r0->is_con() && r1->is_con()) {
> 767:     assert(r0->get_con() == r1->get_con(), "must be equal");

Please explain why this assert must be true.  Does it need a comment?

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/29308#discussion_r2715242235