形式化方法的逆袭——如何找出Timsort算法和玉兔月球车中的Bug？

https://bindog.github.io/blog/2015/03/30/use-formal-method-to-find-the-bug-in-timsort-and-lunar-rover/

http://www.eecs.ucf.edu/~leavens/JML//index.shtml