A Model Checker for AADL