Towards a Testing Methodology for Reactive Systems: A Case Study of a Landing Gear Controller