QuickCheck for Rust