On: NULL: The worst mistake of computer science? (2015)

[nsajko]

Also, when you are aiming for full test coverage null dereferences will be caught during testing.

[adrianN → nsajko]

Nobody does full path coverage, not even NASA.

[plopz → adrianN]

sqlite is 100% branch test covered

https://www.sqlite.org/testing.html

[monocasa → plopz]

Full path coverage is much more difficult than 100% branch coverage. It's next to impossible in any non trivial codebase that wasn't designed specifically for formal verification.