Constraint-based escape analysis
Fix handling of values that escape to global state from function calls with non-escaping return values