Proving optimizations correct using parameterized program equivalence