In the MASPAR case study:
Security failures were the result of untested parts of code
The development team achieved complete statement and branch coverage butmissed a serious bug in the MASPAR operating system
An error in the code was so obscure that you had to test the function with almostevery input value to find its two special-case failures.
All of the above.