AIB 2007-6: Verifying Concurrent List-Manipulating Programs by LTL Model Checking