From 50485b3e201dda8498e799b769e624db20e86cff Mon Sep 17 00:00:00 2001
From: Tom Lane <tgl@sss.pgh.pa.us>
Date: Wed, 23 May 2018 19:04:34 -0400
Subject: [PATCH] Fix simple_prompt() to disable echo on Windows when stdin !=
 terminal.

If echo = false, simple_prompt() is supposed to prevent echoing the
input (for password input).  However, the Windows implementation applied
the mode change to STD_INPUT_HANDLE.  That would not have the desired
effect if stdin isn't actually the terminal, for instance if the user
is piping something into psql.  Fix it to apply the mode change to
the correct input file, so that passwords do not echo in such cases.

In passing, shorten and de-uglify this code by using #elif rather than
an #if nest and removing some duplicated code.

Back-patch to all supported versions.  To simplify that, also back-patch
the portions of commit 9daec77e1 that got rid of an unnecessary
malloc/free in the same area.

Matthew Stickney (cosmetic changes by me)

Discussion: https://postgr.es/m/502a1fff-862b-da52-1031-f68df6ed5a2d@gmail.com
---
 src/port/sprompt.c | 40 ++++++++++++++++------------------------
 1 file changed, 16 insertions(+), 24 deletions(-)

diff --git a/src/port/sprompt.c b/src/port/sprompt.c
index 70dfa69d7b..b617c931fc 100644
--- a/src/port/sprompt.c
+++ b/src/port/sprompt.c
@@ -40,15 +40,13 @@ simple_prompt(const char *prompt, char *destination, size_t destlen, bool echo)
 	FILE	   *termin,
 			   *termout;
 
-#ifdef HAVE_TERMIOS_H
+#if defined(HAVE_TERMIOS_H)
 	struct termios t_orig,
 				t;
-#else
-#ifdef WIN32
+#elif defined(WIN32)
 	HANDLE		t = NULL;
 	DWORD		t_orig = 0;
 #endif
-#endif
 
 #ifdef WIN32
 
@@ -66,8 +64,11 @@ simple_prompt(const char *prompt, char *destination, size_t destlen, bool echo)
 	 *
 	 * XXX fgets() still receives text in the console's input code page.  This
 	 * makes non-ASCII credentials unportable.
+	 *
+	 * Unintuitively, we also open termin in mode "w+", even though we only
+	 * read it; that's needed for SetConsoleMode() to succeed.
 	 */
-	termin = fopen("CONIN$", "r");
+	termin = fopen("CONIN$", "w+");
 	termout = fopen("CONOUT$", "w+");
 #else
 
@@ -99,29 +100,25 @@ simple_prompt(const char *prompt, char *destination, size_t destlen, bool echo)
 		termout = stderr;
 	}
 
-#ifdef HAVE_TERMIOS_H
 	if (!echo)
 	{
+#if defined(HAVE_TERMIOS_H)
+		/* disable echo via tcgetattr/tcsetattr */
 		tcgetattr(fileno(termin), &t);
 		t_orig = t;
 		t.c_lflag &= ~ECHO;
 		tcsetattr(fileno(termin), TCSAFLUSH, &t);
-	}
-#else
-#ifdef WIN32
-	if (!echo)
-	{
-		/* get a new handle to turn echo off */
-		t = GetStdHandle(STD_INPUT_HANDLE);
+#elif defined(WIN32)
+		/* need the file's HANDLE to turn echo off */
+		t = (HANDLE) _get_osfhandle(_fileno(termin));
 
 		/* save the old configuration first */
 		GetConsoleMode(t, &t_orig);
 
 		/* set to the new mode */
 		SetConsoleMode(t, ENABLE_LINE_INPUT | ENABLE_PROCESSED_INPUT);
-	}
-#endif
 #endif
+	}
 
 	if (prompt)
 	{
@@ -151,24 +148,19 @@ simple_prompt(const char *prompt, char *destination, size_t destlen, bool echo)
 		/* remove trailing newline */
 		destination[length - 1] = '\0';
 
-#ifdef HAVE_TERMIOS_H
 	if (!echo)
 	{
+		/* restore previous echo behavior, then echo \n */
+#if defined(HAVE_TERMIOS_H)
 		tcsetattr(fileno(termin), TCSAFLUSH, &t_orig);
 		fputs("\n", termout);
 		fflush(termout);
-	}
-#else
-#ifdef WIN32
-	if (!echo)
-	{
-		/* reset to the original console mode */
+#elif defined(WIN32)
 		SetConsoleMode(t, t_orig);
 		fputs("\n", termout);
 		fflush(termout);
-	}
-#endif
 #endif
+	}
 
 	if (termin != stdin)
 	{
-- 
2.40.0