most pedantic & formally verified

The code compiles clean under most pedantic settings by using either
clan or gcc (see makefile)

Also, now we can formally verified it by using CBMC Prover,
http://www.cprover.org/cbmc/