static void dumpDatabases(PGconn *conn);
static void dumpTimestamp(char *msg);
static void doShellQuoting(PQExpBuffer buf, const char *str);
+static void doConnStrQuoting(PQExpBuffer buf, const char *str);
static int runPgDump(const char *dbname);
static void buildShSecLabels(PGconn *conn, const char *catalog_name,
static int
runPgDump(const char *dbname)
{
+ PQExpBuffer connstr = createPQExpBuffer();
PQExpBuffer cmd = createPQExpBuffer();
int ret;
else
appendPQExpBuffer(cmd, " -Fp ");
- doShellQuoting(cmd, dbname);
+ /*
+ * Construct a connection string from the database name, like
+ * dbname='<database name>'. pg_dump would usually also accept the
+ * database name as is, but if it contains any = characters, it would
+ * incorrectly treat it as a connection string.
+ */
+ appendPQExpBuffer(connstr, "dbname='");
+ doConnStrQuoting(connstr, dbname);
+ appendPQExpBuffer(connstr, "'");
+
+ doShellQuoting(cmd, connstr->data);
appendPQExpBuffer(cmd, "%s", SYSTEMQUOTE);
ret = system(cmd->data);
destroyPQExpBuffer(cmd);
+ destroyPQExpBuffer(connstr);
return ret;
}
}
+/*
+ * Append the given string to the buffer, with suitable quoting for passing
+ * the string as a value, in a keyword/pair value in a libpq connection
+ * string
+ */
+static void
+doConnStrQuoting(PQExpBuffer buf, const char *str)
+{
+ while (*str)
+ {
+ /* ' and \ must be escaped by to \' and \\ */
+ if (*str == '\'' || *str == '\\')
+ appendPQExpBufferChar(buf, '\\');
+
+ appendPQExpBufferChar(buf, *str);
+ str++;
+ }
+}
+
/*
* Append the given string to the shell command being built in the buffer,
* with suitable shell-style quoting.