Richard Bornat Proving Pointer Programs in Hoare Logic. 102-126 2000 conf/mpc/2000 MPC db/conf/mpc/mpc2000.html#Bornat00