> This snippet in xlog.c makes we wonder...
>
> else if (ControlFile->state == DB_IN_RECOVERY)
> {
> elog(LOG, "Data Base System was interrupted
> being in recovery at %s\n"
> "\tThis propably means that some data
> blocks are corrupted\n"
> "\tAnd you will have to use last
> backup for recovery",
> str_time(ControlFile->time));
> }
>
> I thought this was going to be crash safe.
WAL doesn't protect against disk block corruption what
could be reason of crash (or elog(STOP)) during recovery
in most cases. Apart from disk corruption recovery is
(or should be -:)) crash safe.
Vadim
