> I think that unless we come up with some ideas on how to implement this,
> we should drop it.
>
> 1. How are we going to implement issues like timings? Think about the
> recent TCP-stall problem for one.
Timings and race conditions are difficult to test. Another problem is
that we'll hardly will be able to cover all the possible cases. If
you try to check for things like for example the handling of hardware
errors (r/w errors on disks, ...) you'll have to add special code to
"inject" errors.
Ralf