Partial failure: Ensure that running out of memory always leaves the system in a safe state.

• 局部故障:确保内存溢出时,系统总是处于安全状态。