Comment on PostgreSQL 9.2.4, 9.1.9, 9.0.13 and 8.4.17 releasedparentComments−danielweber13yCan someone follow up on this? Do you need the db name to already begin with "-" to exploit this?EDIT: No, the problem is in parsing, not the existing names: https://news.ycombinator.com/item?id=5492508−ashray13yThanks for clearing that up. I read the commit notes but it wasn't 100% clear and I was quite sure there's more to it considering this was all so hush-hush!
Comments
Can someone follow up on this? Do you need the db name to already begin with "-" to exploit this?
EDIT: No, the problem is in parsing, not the existing names: https://news.ycombinator.com/item?id=5492508
Thanks for clearing that up. I read the commit notes but it wasn't 100% clear and I was quite sure there's more to it considering this was all so hush-hush!