quickcheck for Rust