Compositional model checking of software product lines using variation point obligations