CTL model checking based on forward state traversal