The design of SafeJML, a specification language for SCJ with support for WCET specification