LCLint: a tool for using specifications to check code (1994)

by D Evans, J Guttag, J Horning, Y M Tan
Venue:In Proceedings of the 2nd ACM SIGSOFT symposium on Foundations of software engineering