Verifying Object-Oriented Programs that Use Subtypes (1992)

by G T Leavens