Don't sweat the small stuff: formal verification of C code without the pain
An executable formal semantics of C with applications