sanitize_speculative_path
err = sanitize_speculative_path(env, NULL, env->insn_idx + 1, env->insn_idx);
err = sanitize_speculative_path(env, insn, *insn_idx + 1, *insn_idx);
err = sanitize_speculative_path(env, insn, *insn_idx + insn->off + 1,