Fixing the Java Memory Model