Re:Stranger Strings: An exploitable flaw in SQLite
by kyralis on Tuesday October 25, 2022 @09:20PM
(#33338506)
> Once you have 100% branch/statement coverage in your tests, all bugs that are left are those that arise from the interaction of two or more statements, in a way that wasn't covered in the tests.
A bit tangential, but this statement is not accurate. You can have complete branch/statement coverage and still have single-line bugs due to not fully testing the domain/range of all relevant variables; the simplest example is the potential for divide-by-zero bugs in otherwise fully tested code paths.
100% branch/statement coverage is necessary for real confidence, but it is sufficient for very little.
A bit tangential, but this statement is not accurate. You can have complete branch/statement coverage and still have single-line bugs due to not fully testing the domain/range of all relevant variables; the simplest example is the potential for divide-by-zero bugs in otherwise fully tested code paths.
100% branch/statement coverage is necessary for real confidence, but it is sufficient for very little.