Memories of S-expressions: Proving properties of Lisp-like programs that destructively alter memory (1985)

by I A Mason, C L Talcott