> Warning for pointer generation is going to be a *lot* harder and I > suspect will always result in more false positives.
In order to increase the accuracy of the data dependence analysis, i do, at some point, plan on tracking the sizes of malloc sites, and giving an upper bound on them (for cases of loops, etc) when possible on an interprocedural basis, that should allow you to generate at least "this is obviously wrong" warnings.