Validating the unit correctness of spreadsheet programs