On Fri, 20 May 2011 07:10:45 +0000, Steven D'Aprano wrote: > How confident are we that the verification software tests every possible > vulnerability,
Formal verification is based upon mathematical proof, not empirical results. As Dijkstra said: "Program testing can be used to show the presence of bugs, but never to show their absence". For complex algorithms, it may be infeasible to cover even all of the "interesting" cases, let alone a representative sample of all possible cases. For concurrent (multi-threaded) code, it's often impractical to methodically test various interleavings. -- http://mail.python.org/mailman/listinfo/python-list