A model checker for LTL and CTL formulas