Proving Properties of Gypsy Programs (1983)

by R C Cohen