I have always regarded white box testing as creating tests based on access
to and knowledge of the code and data structures but NOT executing code
under the de*.
For example - you see a loop in the code and note it's characteristics, and
design a test in your test case document to test it's boundaries and error
checks and performance...but you don't run it under the de* to exam it
at runtime.
I had always thought that executing code under the de* was unit
testing.
Is there a standard for the clear/glass box testing?
Martin Fensome