Large programs with manual memory management (like web browsers and network servers) typically have object lifetime bugs, such as use-after-free or double-free errors. Discovering these bugs manually is a time consuming process that requires reasoning about object lifetimes at many possible code paths. PointsTo operates on LLVM bitcode, and uses points-to and alias analyses to statically identify object lifetime errors.
