Feature #13508
Updated by Kefu Chai over 8 years ago
we should always EIO rather than crash if something does not decode
* corrupt/missing object into snapset/hinfo
* rollback target invalid in those ways
* clone invalid in those ways on snap read
* all of above on replica read
write the tests
* delete unfound object
* delete object whose object info does not decoded
* delete and write clones w/o breaking the snapset
* how do we specify the metadata? snap particularity?
* how do we write a snapdir?
* what happens if there is both a snapdir and a head?