klibc Verification with Frama-C and WP