We present Phoenix, a modular pointer analysis framework for C/C++ that unifies multiple state-of-the-art alias analysis algorithms behind a single, stable interface. Phoenix addresses the fragmentation of today's C/C++ pointer analysis ecosystem by cleanly separating IR construction, constraint generation, solver backends, and client-facing queries, making analyses easy to compare, swap, and compose while exposing explicit precision-performance trade-offs. We evaluate Phoenix against SVF under two representative configurations: a flow- and context-insensitive setting and a more precise flow- and context-sensitive setting, on 28 GNU coreutils programs. Phoenix delivers robust speedups in the baseline configuration (up to 2.88x) and remains competitive, and often faster, even in the stronger precision regime (up to 2.91x), without a systematic runtime penalty. In production, Phoenix serves as the analysis substrate for static analysis and fuzzing tools that have uncovered hundreds of new bugs and enabled deployments reporting more than 1000 bugs found in an industrial toolchain.

翻译：本文提出Phoenix，一个用于C/C++的模块化指针分析框架，该框架在统一且稳定的接口下整合了多种最先进的别名分析算法。Phoenix通过清晰分离中间表示构建、约束生成、求解器后端及面向客户端的查询，解决了当前C/C++指针分析生态的碎片化问题，使得分析算法易于比较、替换与组合，同时显式地揭示了精度与性能之间的权衡关系。我们在28个GNU核心工具程序上，以两种典型配置（流不敏感且上下文不敏感设置，以及更高精度的流敏感且上下文敏感设置）将Phoenix与SVF进行对比评估。Phoenix在基线配置中实现了显著的加速（最高达2.88倍），而在更高精度的配置下仍保持竞争力且通常更快（最高达2.91倍），且未引入系统性运行时开销。在实际应用中，Phoenix作为静态分析与模糊测试工具的分析基础，已成功检测出数百个新错误，并支持在工业级工具链中部署报告超过1000个已发现错误。