and yes you're certainly right that BDB is embedded into the application process. Then any slight memory corruption may destroy the database and lockup the whole service. We've seen that, especially with graphics libraries.

But BDB offers tremendous speed, so it won't be easy to decouple the DB engine from the application process.