Proving programs correct - Anderson, Robert Brockett, 1941- (John Wiley, 1979)