Model checking aircraft controller software: a case study. (21st November 2013)