An Experience in Embedded Control Software Verification