Formal Verification of Object-Oriented Software