Text this: Specification and verification of synchronization with condition variables.