From: | Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> |
---|---|
To: | Andres Freund <andres(at)anarazel(dot)de> |
Cc: | Andrew Dunstan <andrew(at)dunslane(dot)net>, Alvaro Herrera <alvherre(at)alvh(dot)no-ip(dot)org>, Joe Conway <mail(at)joeconway(dot)com>, Robert Haas <robertmhaas(at)gmail(dot)com>, Corey Huinker <corey(dot)huinker(at)gmail(dot)com>, Nikita Glukhov <n(dot)gluhov(at)postgrespro(dot)ru>, PostgreSQL Hackers <pgsql-hackers(at)lists(dot)postgresql(dot)org> |
Subject: | Re: Error-safe user functions |
Date: | 2022-12-06 14:42:17 |
Message-ID: | 3614822.1670337737@sss.pgh.pa.us |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-hackers |
[ continuing the naming quagmire... ]
I wrote:
> Andres Freund <andres(at)anarazel(dot)de> writes:
>> Not that I have a suggestion for a better name, but I don't particularly
>> like "Safe" denoting non-erroring input function calls. There's too many
>> interpretations of safe - e.g. safe against privilege escalation issues
>> or such.
> Yeah, I'm not that thrilled with it either --- but it's a reasonably
> on-point modifier, and short.
It occurs to me that another spelling could be NoError (or _noerror
where not using camel case). There's some precedent for that already;
and where we have it, it has the same implication of reporting rather
than throwing certain errors, without making a guarantee about all
errors. For instance lookup_rowtype_tupdesc_noerror won't prevent
throwing errors if catalog corruption is detected inside the catcaches.
I'm not sure this is any *better* than Safe ... it's longer, less
mellifluous, and still subject to misinterpretation. But it's
a possible alternative.
regards, tom lane
From | Date | Subject | |
---|---|---|---|
Next Message | Tom Lane | 2022-12-06 14:52:51 | Re: Missing MaterialPath support in reparameterize_path_by_child |
Previous Message | Ashutosh Bapat | 2022-12-06 14:37:57 | Re: Missing MaterialPath support in reparameterize_path_by_child |