Cross-checking oracles from intrinsic software redundancy