Introduction to program verification - Apt, Krzysztof R. 1949-; Olderog, Ernst-Rüdiger 1955- (1990)