Formal Verification With Frama-C: A Case Study in the Space Software Domain
Z3: An Efficient SMT Solver