Source: https://www.cs.princeton.edu/courses/archive/spring16/cos217/lectures/24_ProgramVerif.pdf