The effect of program and model structure on mc/dc test adequacy coverage