EIO: Error Handling is Occasionally Correct
CMC: a pragmatic approach to model checking real code