Model checking LTL properties over ANSI-C programs with bounded traces