Fix optimiseAssuming() to do something sensible when static aliasing
analysis is turned on.
Fix up ced_to_cep now that Mul is classed as an associative operator.
Fix silly bug in canonicalise_crash_summary0 related to changing
cfg_roots from a map to a vector.
Fix up enforce_crash to not try to compare BDDs from different scopes
by simply rewriting everything into a single scope.
Re-introduce the multi-fix rules for md_test_dir.
Add some more debug for enforce_crash.
Tweak the expression stash map a little so that we stash for every
needed entry point in the thread as soon as we enter the thread.  This
often allows us to eval those expressions a bit earlier, which is
often useful.
Fix a bloody stupid bug in stripUninterpretableSideEffects.
Work around linker weirdness in ced_to_cep.
Try to make it a bit more obvious when a crash enforcement plan
actually succeeds, to distinguish it from random other crashage.
Keep the atomic survival and crash constraints separate in the crash
summary, rather than mashing them together into a single verification
condition.  This makes it easier to just enforce the crash constraint,
which makes it a little bit more likely that we'll actually manage to
repro an interesting set of bugs.
The bound wait time should usually be greater than the unbound one.
Make it so.
Make sure that the CEP interpreter can correctly handle double-free
type bugs.
Rejigger the CEP interpreter so that debug() doesn't ever call into
libc, since that seems to be causing problems with the double free
detector.