Java program verification challenges (2003)

by Bart P F Jacobs, Joseph R Kinirya, Martijn E Warnier