On The Effectiveness Of Specification-Based Structural Test-Coverage Criteria As Test-Data Generators For Safety-Critical Systems