Update link to "Formal verification of a C static analyzer"