both black-box and white-box testing have weaknesses. White-box Testing does not typically find faults relating to missing functionality (referred to as Errors of Omistision). Black-box testing does not typically find faults relating to extra functionality (referred to as errors of commission)
.p.s.
1.error handling is often a source of omission faults in complex code, where incorrect input data is not identified correctly.
在复杂的代码中，错误处理常常是遗漏错误的来源，错误的输入数据不能正确地识别。
2. Misunderstanding the specification is often a source of faults of commission, where extra input conditions are identified by the programmer which were not in specification.
对软件规格说明的错误理解通常是Commission fault的一个来源，在那里，程序员额外标识了不在程序规格说明中的输入条件。
Another way of looking at this is from the coverage viewpoint：
1 block-box testing provides for coverage of the specification， but not full coverage of the implementation. That is, there may be code in the implementation that produces results not stated in the specification. ( 黑盒：实现中的代码所产生的结果没有在规格说明中陈述。）
2. White-box testing provides for coverage of the implementation, but not of specification. That is there may be behaviour stated in the specification for which there is no code in the implementation.（白盒：规格说明书中的规定的软件行为在实现中没有代码）