Anna Zaks Rajeev Joshi Verifying Multi-threaded C Programs with SPIN. 325-342 2008 SPIN http://dx.doi.org/10.1007/978-3-540-85114-1_22 conf/spin/2008 db/conf/spin/spin2008.html#ZaksJ08