Verifying Aspect-Oriented Models Against Crosscutting Properties.