Interprocedural Invariants