Model Checking Java Programs With Msvl