[AliasAnalysis] CatchPad and CatchRet can modify escaped memory