C algorithms verified with frama-c and verifast