Magnus Hagander wrote:


The solution would be put --restrictedexec earlier on the
new command
line. I'll work on that.
The probem is apparently the one I identified above, and is fixed by the attached patch, which I will apply soon unless there are objections.

As for why we saw this on loris but not snake, I suspect they might have different getopt libraries installed.

Isn't that just fixing the symptom and not the actual bug? In this case,
if we cause the bug, we should do this as well, but doesn't it crash the
same way if you *manually* put arguments in the "wrong order" on the
commandline? Like "inidb foo --no-locale" or somehting like that?

(I still can't reproduce it on my machines, so I guess I have a better
getopt as well.)



We don't promise that you can put the pgdata argument anywhere except at the end of the command line. In fact, our manual page requires it at the end. Even on systems with GNU getopt, if POSIXLY_CORRECT is set then processing would stop at the first non-getopt argument.

So I can live with bombing, even if it's a bit unpleasant, in the case of "initdb foo --no-locale", but we cannot *cause* that by appending a secret argument ourselves, so that "initdb foo" also bombs.

The logic to detect and correct this in the general case before getopt is called is not worth the pain.

cheers

andrew

---------------------------(end of broadcast)---------------------------
TIP 5: don't forget to increase your free space map settings

Reply via email to