This pass must run after escape-analysis.