Static ownership inference for reasoning against concurrency errors