replace executor with locking. the interaction between the executor service terminating and the CFS was inherently unsafe -- you would have to lock anyway to make it safe, the atomic reference wasn't enough, so at that point you might as well get rid of the executor.
incubator/cassandra/trunk/src/java/org/apache/cassandra/db/ColumnFamilyStore.java