Proving memory safety of floating-point computations by combining static and dynamic program analysis