Esben Sparre Andreasen

Function calls done inside with-statements can receive the wrong base object. It seems that function calls always are treated as function calls while they should be treated as method calls...

The numeric postfix operation instrumentations does not preserve floating point semantics. # Example Source: ``` javascript var a = 0.15; console.log(a); console.log(a++); console.log(a); ``` Uninstrumented & Instrumented runs: ``` $...

Reusing iids in src/js/runtime/analysis.js:A

2

The implementation of `A` in src/js/runtime/analysis.js is a bit odd. It uses the same iids for the calls to `G`, `B` and `P`: ``` javascript function A(iid, base, offset, op,...

isComputed & binary delete

2

`analysis.getField` and `analysis.putField` have a parameter named `isComputed`, it would be nice if `analysis.binary` also had that, for use in `delete o[p]` expressions.

ATM: undo unsound performance optimizations

2

For an ordinary path-problem query, it is a requirement that at least one sink exists, otherwise there is nothing to alert on. Thus the optimization with checking `isSink(_, this, _)`...