Verifying the Mathematical Library of an UAV Autopilot with Frama-C