Alvaro Herrera <alvherre(at)commandprompt(dot)com> writes:
> If sigusr1_handler needs rewriting, don't all the other sighandler as
> well?
It does not, and neither do they. I'm not sure what happened here but
it wasn't the fault of the postmaster's organization of signal handlers.
It does seem that we ought to change things so that there's a bit more
delay before trying to re-launch a failed autovac worker, though.
Whatever caused this was effectively turning the autovac logic into
a fork-bomb engine. I'm not thinking of just postponing the relaunch
into the main loop, but ensuring at least a few hundred msec delay before
we try again.
regards, tom lane