Group communication protocols constitute a basic building block for highly dependable distributed applications. Designing and correctly implementing a group communication system (GCS) is a difficult task. While many theoretical algorithms have been formalized and proved for correctness, only few research projects have experimentally assessed the dependability of GCS implementations under complex error scenarios. This paper describes a thorough error-injection experimental campaign conducted on Ensemble, a popular GCS. By employing synthetic benchmark applications, we stress selected components of the GCS—the group membership service, the FIFOordered reliable multicast, and the sequencer-based, totalordered reliable multicast—under various error models, including errors in the memory (text and heap segments) and in the network messages. The data show that about 5–6% of the failures are due to an error escaping Ensemble’s error-containment mechanism and manifesting as a fail si...