the error handler shall not fail