Membrane: Operating system support for restartable file systems
an empirical study of operating system errors .