Harvey Tuch Formal Verification of C Systems Code. 125-187 2009 42 J. Autom. Reasoning 2-4 http://dx.doi.org/10.1007/s10817-009-9120-2 db/journals/jar/jar42.html#Tuch09