Two fixes:

* Deal with path condition functions that fall within an unbounded loop
* Permit inserting a cast at an instruction in a partially written block
Don't clobber whole object when we have a set of pointers all of which have known offsets