Robert Haas <robertmhaas@gmail.com> writes:
> Anything we do short of making all errors in this area non-fatal is
> going to leave behind startup-failure cases that exist today, and we
> have no evidence at this time that such startup failures would be
> justified by any actual data loss risk.
Yeah. Perhaps I missed it, but was the original patch motivated by
actual failures that had been seen in the field, or was it just a
hypothetical concern? Certainly, any actual failures of that sort
are few and far between compared to the number of problems we now
realize the patch introduced.
Also, we need to discuss how hard walkdir() needs to try to avoid
throwing errors of its own.
regards, tom lane