Generating consistent test data: Restricting the search space by a generator formula