Member predicate Function::mayPanic

Holds if calling this function may cause a runtime panic.

This predicate is an over-approximation: it may hold for functions that can never cause a runtime panic, but it never fails to hold for functions that can.