DNM: erasure code repair when there are two failures