Bastian Schlich Stefan Kowalewski Model checking C source code for embedded systems. 187-202 2009 11 STTT 3 http://dx.doi.org/10.1007/s10009-009-0106-5 db/journals/sttt/sttt11.html#SchlichK09