4.3.4 The Automata Equivalence Checker........ 62 4.3.5 The Heap Modeler 62 4.3.6 MAHJONG-based Points-.to Analysis..······· 62 4.4 Algorithms..... 66 4.4.1 MAHJONG.... 66 4.4.2 The NFA Builder..............·.... 68 4.4.3 The DFA Converter.....··· 69 4.4.4 The Automata Equivalence Checker 70 4.4.5 The Heap Modeler ........ 72 4.5 Implementation......... 72 4.6 Evaluation... 73 4.6.1 RQ1:MAHJONG's Effectiveness as a Pre-Analysis...... 75 4.6.2RQ2:MAHJONG-based Points-.to Analysis..·...···· 78 4.7 Related Work.......... 85 5 Conclusions and Future Work 88 5.1 Conclusions 88 5.2 Future Work.... 89 Bibliography 90 viii4.3.4 The Automata Equivalence Checker . . . . . . . . . . . . . . 62 4.3.5 The Heap Modeler . . . . . . . . . . . . . . . . . . . . . . . 62 4.3.6 Mahjong-based Points-to Analysis . . . . . . . . . . . . . . 62 4.4 Algorithms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66 4.4.1 Mahjong . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66 4.4.2 The NFA Builder . . . . . . . . . . . . . . . . . . . . . . . . 68 4.4.3 The DFA Converter . . . . . . . . . . . . . . . . . . . . . . . 69 4.4.4 The Automata Equivalence Checker . . . . . . . . . . . . . . 70 4.4.5 The Heap Modeler . . . . . . . . . . . . . . . . . . . . . . . 72 4.5 Implementation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72 4.6 Evaluation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73 4.6.1 RQ1: Mahjong’s Effectiveness as a Pre-Analysis . . . . . . 75 4.6.2 RQ2: Mahjong-based Points-to Analysis . . . . . . . . . . 78 4.7 Related Work . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85 5 Conclusions and Future Work 88 5.1 Conclusions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88 5.2 Future Work . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89 Bibliography 90 viii