Model-based testing of safety-critical avionics systems