Comment by maehwasu

Your example is quite good, although there are far more bulletproof ways than exhaustive test cases to make sure this doesn't happen.