I answer my own question. The log record may not hit the stable storage in case of failure and that's ok (use sync flag otherwise) but as far as the indirect block allocation and log record to stable storage operations are atomically done in this order the fs is always in a consistent state. I thought this invariant was violated from reading the code, sorry.
Jerome. -- This message posted from opensolaris.org
