To compensate, they had to build a robust capacity to recognize invalid syntax, and work around it to analyze the parts that they could analyze.
The described block rewriting extension is a perfect example of what threw them.
Another amusing challenge that they encountered is that they could correctly report on complex race conditions, but the developers who created those race conditions tended not to understand the problem reports. The result is that the engineer would wrongly become confident that the tool was crap. The "solution" was to deliberately not report provable bugs!
If this is enough to trigger anyone else's memory of an article that was going around 4 or 5 years ago, I'd love to read it again. :-)