| | 1 | == Points-to Analysis == |
| | 2 | This analysis computes the set of objects or components that a pointer can reference to. There are a lot of different categories of methods. The method described here is based on: |
| | 3 | * flow-sensitive analysis: control-flow information is considered during analysis; |
| | 4 | * context-sensitive analysis: when calling a function, values flow from one call through the function and return to another caller; |
| | 5 | * heap modeling: objects named by allocation site |
| | 6 | * aggregate modeling: elements of struct/array are distinguished |
| | 7 | |
| | 8 | |
| | 9 | |
