"Efficient Bounded Model Checking of Heap-Manipulating Programs using Tight Field Bounds" paper homepage