Tighten up allowed names for custom GUC parameters.
authorTom Lane <tgl@sss.pgh.pa.us>
Wed, 7 Apr 2021 15:22:22 +0000 (11:22 -0400)
committerTom Lane <tgl@sss.pgh.pa.us>
Wed, 7 Apr 2021 15:22:22 +0000 (11:22 -0400)
commit3db826bd55cd1df0dd8c3d811f8e5b936d7ba1e4
tree58aa2d1b51b3ce1e8990ab2b516f7a8be68287f4
parent23607a8156d595522c232ff3933d77041d3adaa1
Tighten up allowed names for custom GUC parameters.

Formerly we were pretty lax about what a custom GUC's name could
be; so long as it had at least one dot in it, we'd take it.
However, corner cases such as dashes or equal signs in the name
would cause various bits of functionality to misbehave.  Rather
than trying to make the world perfectly safe for that, let's
just require that custom names look like "identifier.identifier",
where "identifier" means something that scan.l would accept
without double quotes.

Along the way, this patch refactors things slightly in guc.c
so that find_option() is responsible for reporting GUC-not-found
cases, allowing removal of duplicative code from its callers.

Per report from Hubert Depesz Lubaczewski.  No back-patch,
since the consequences of the problem don't seem to warrant
changing behavior in stable branches.

Discussion: https://postgr.es/m/951335.1612910077@sss.pgh.pa.us
src/backend/utils/misc/guc-file.l
src/backend/utils/misc/guc.c
src/test/regress/expected/guc.out
src/test/regress/sql/guc.sql