State coverage: a structural test adequacy criterion for behavior checking.