Recovering using an undo/redo log