Efficient Testing of Recovery Code Using Fault Injection
EIO: Error Handling is Occasionally Correct