[Description]
We check shared state each time only until we leave recovery mode. We can't re-enter recovery, so there's no need to keep checking after the shared variable has once been seen false.Note: We don't need a memory barrier when we're still in recovery. We might exit recovery immediately after return, so the caller can't rely on 'true' meaning that we're still in recovery anyway.
[System Processing]
Processing will be aborted.
[Action]
To investigate the cause of the occurrence from the message, and remove cause.