Test coverage and post-verification defects: A multiple case study