Promela exercises for formal verification ( model checking )