mirror of
https://github.com/mulgadc/spinifex.git
synced 2026-10-20 03:11:46 +00:00
Julian Sommer
4f5cde03bb
DBName was passed through unvalidated, so a name such as my-db was accepted at CreateDBInstance and only quoted into safety by psql inside the guest. Engine gains a validateDBName rule and ValidateDBName, and rds-init re-checks the same rule in load_handoff before initdb, where a failure would clear the datadir and spend the one-shot master password. PostgreSQL caps the name at NAMEDATALEN-1.