verification of an implementation of tomasulo ' s algorithm by compositional model checking .
Automatic Verification of Pipelined Microprocessor Control