🚀 go-pugleaf

In <7695@pt.cs.cmu.edu>, lindsay@MATHOM.GANDALF.CS.CMU.EDU (Donald Lindsay)
mentions, as a drawback of shared memory, the example where a commit log
for reliable transactions might be written to battery-backed memory
instead of to disk. The idea was that, by complicating the instruction
sequence necessary to do the write, you lessen the chance of a wild program
corrupting the log.

Lindsay says this works, but "only partially", as the wild program can
still corrupt the log by calling the subroutine that knows how to write to it.

It seems to me the same objection applies to an on-disk log.

How about if you don't have a subroutine to do the write, but only in-line
code? Of course, this would lead to even more strange behaviour if you
should accidentally branch to the code.