Sort out paired double quotes in \connect, \password and \crosstabview. In arguments, these meta-commands wrongly treated each pair as closing the double quoted string. Make the behavior match the documentation. This is a compatibility break, but I more expect to find software with untested reliance on the documented behavior than software reliant on today's behavior. Back-patch to 9.1 (all supported versions).
Reviewed by Tom Lane and Peter Eisentraut. Security: CVE-2016-5424 Branch ------ master Details ------- http://git.postgresql.org/pg/commitdiff/984e5beb38a7c79a5a9243865d9598c405df17f6 Modified Files -------------- src/bin/psql/psqlscanslash.l | 3 ++- src/test/regress/expected/psql_crosstab.out | 16 ++++++++-------- src/test/regress/sql/psql_crosstab.sql | 4 ++-- 3 files changed, 12 insertions(+), 11 deletions(-) -- Sent via pgsql-committers mailing list ([email protected]) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-committers
