D for JML
for random test