Two Mainstreams of Points-to Analysis Techniques Model control-flow Context-sensitivity Call-site-sensitivity (PLDI'04,PLDI'06) Object-sensitivity (ISSTA'02,TOSEM'05,SAS'16) Type-sensitivity (POPL'II) ●Model data-flow Heap abstraction Allocation-site abstraction Type-based abstraction 12Two Mainstreams of Points-to Analysis Techniques  Model control-flow ◦ Context-sensitivity  Call-site-sensitivity (PLDI’04, PLDI’06)  Object-sensitivity (ISSTA’02, TOSEM’05, SAS’16)  Type-sensitivity (POPL’11)  …  Model data-flow ◦ Heap abstraction  Allocation-site abstraction  Type-based abstraction  … 12