Slicing: FSS, reference called functions

Sometimes call can reference a function by value (indirect call). We
have to leave the value and its loads at place. So take care of this
by adding those values to the RC set.
test: add framework