ESP: path-sensitive program verification in polynomial time
Flow-sensitive type qualifiers