Formal verification of a realistic compiler
CIL: Intermediate language and tools for analysis and transformation of C programs