Construct CFG from execution traces