Date: Sun, 26 Apr 2026 14:32:52 -0700
From: Noah Misch <noah@leadboat.com>
To: daniel@yesql.se
Cc: pgsql-hackers@postgresql.org
Subject: Separators in pg_hosts.conf fields
Message-ID: <20260426213252.7a@rfd.leadboat.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="B9vpBcCNKuCOr/Zw"
Content-Disposition: inline
User-Agent: Mutt/2.3.0 (2026-01-25)
Archived-At: 
 <https://www.postgresql.org/message-id/20260426213252.7a%40rfd.leadboat.com>
Precedence: bulk


--B9vpBcCNKuCOr/Zw
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

If the build directory name contains a comma,
src/test/modules/ssl_passphrase_callback fails on master since commit 4f43302.
It fails because hba.c:next_token() treats a comma as a token separator:

 * Tokens can be delimited by double quotes (this allows the inclusion of
 * commas, blanks, and '#', but not newlines).  As in SQL, write two
 * double-quotes to represent a double quote.

Commit 4f43302 documented the pg_hosts.conf hostname field as a
comma-separated list, but not the other fields.  Should other pg_hosts.conf
fields continue to require quoting around commas, or not?

--B9vpBcCNKuCOr/Zw
Content-Type: text/plain; charset=us-ascii
Content-Disposition: attachment; filename=comma-test-sni-v1.patch

commit 4649408 (HEAD, master)
Author:     Noah Misch <noah@leadboat.com>
AuthorDate: Sun Apr 26 13:56:22 2026 -0700
Commit:     Noah Misch <noah@leadboat.com>
CommitDate: Sun Apr 26 14:26:08 2026 -0700

    Fix new test under comma in build directory.
    
    Quote pg_hosts.conf fields derived from the build directory, since
    hba.c:next_token() treats a comma as a token separator.  Commit
    4f433025f666fa4a6209f0e847715767fb1c7ace introduced pg_hosts.conf and
    this test.  A build directory name containing a comma worked before that
    commit.  A build directory name containing a quote character has not
    worked, so don't handle that.
---
 src/test/modules/ssl_passphrase_callback/t/001_testfunc.pl | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/test/modules/ssl_passphrase_callback/t/001_testfunc.pl b/src/test/modules/ssl_passphrase_callback/t/001_testfunc.pl
index 09ff536..d8b07d4 100644
--- a/src/test/modules/ssl_passphrase_callback/t/001_testfunc.pl
+++ b/src/test/modules/ssl_passphrase_callback/t/001_testfunc.pl
@@ -90,8 +90,8 @@ ssl_sni = on
 });
 	$node->append_conf(
 		'pg_hosts.conf', qq{
-example.org $ddir/server.crt $ddir/server.key "" "echo FooBaR1" on
-example.com $ddir/server.crt $ddir/server.key "" "echo FooBaR1" on
+example.org "$ddir/server.crt" "$ddir/server.key" "" "echo FooBaR1" on
+example.com "$ddir/server.crt" "$ddir/server.key" "" "echo FooBaR1" on
 });
 
 	# If the servers starts and runs, the bad ssl_passphrase.passphrase was

--B9vpBcCNKuCOr/Zw--