Assertion to check underapproximation when resolving indirect calls

[l-kent]

This adds an assertion before an indirect call resolved to multiple possible targets that asserts that the indirect call target variable can only contain one of the values determined by the static analysis.