A Formal Definition of JML in Coq: and its Application to Runtime Assertion Checking | DealShopping Deutschland