Abstract Interpretation meets model checking near the 1000000 LOC mark: Finding errors in the Linux Kernel Source (AVIS '06)
Checking for Deadlock, Double Free, and Other Abuses in the Linux Kernel Source Code Tree (CSSSE '06)