On the Use of a High-level Fault Model to Check Properties Incompleteness