Formalization and Analysis of Class Loading in Java