A Scalable Flow-Sensitive Points-To Analysis

Points-to analysis for large object-oriented systems is currently too imprecise or too slow. This prevents or hampers many useful client analyses, refactorings, or optimizations. In this paper, we present an SSA-based approach to points-to analysis that simulates the actual execution of a program. It is precise since it is both locally and globally flow-sensitive, more precise by construction compared to other scalable approaches. We confirm this statement with experiments. The experiments also show that in practice our approach is also more efficient (on average) in spite of a higher worst-case time complexity.