Formally Verifying IEEE Compliance of Floating-Point Hardware