K. Rustan M. Leino Greg Nelson An Extended Static Checker for Modular-3. 302-305 1998 conf/cc/1998 CC db/conf/cc/cc98.html#LeinoN98 http://dx.doi.org/10.1007/BFb0026441