Verified compiles under GCC