Back-patch fix for not shell-quoting editor name, as it also fixes

silly buffer overrun (someone needs to learn to count characters...)

diff --git a/src/bin/psql/command.c b/src/bin/psql/command.c
index 8cf8a7dbe5f5eb6bdef330c27c7d684cfa1f1d65..e3a1043b047dc54c26f1c56ec8bc16a36a2c7030 100644 (file)
--- a/src/bin/psql/command.c
+++ b/src/bin/psql/command.c
@@ -1518,7 +1518,7 @@ editFile(const char *fname)
        sys = malloc(strlen(editorName) + strlen(fname) + 10 + 1);
        if (!sys)
                return false;
-       sprintf(sys, "exec  '%s' '%s'", editorName, fname);
+       sprintf(sys, "exec  %s '%s'", editorName, fname);
        result = system(sys);
        if (result == -1)
                psql_error("could not start editor %s\n", editorName);