Model Checking Java Programs Using Java Pathfinder