https://123dok.net/document/yngg8g0z-formal-verification-of-a-memory-allocation-module-of-contiki-with-frama-c-a-case-study.html