Use quote_identifier() to properly escape column names in UPDATE statement, per report from Dimitrije Radojevic.

schmiddy · dvarrazzo · commit bc20ace32bfa · 2012-09-22T19:33:40.000+01:00
diff --git a/lib/pg_reorg.sql.in b/lib/pg_reorg.sql.in
@@ -80,7 +80,7 @@ LANGUAGE sql STABLE STRICT;
 
 CREATE FUNCTION reorg.get_assign(oid, text) RETURNS text AS
 $$
-  SELECT '(' || array_to_string(reorg.array_accum(attname), ', ') ||
+  SELECT '(' || array_to_string(reorg.array_accum(quote_ident(attname)), ', ') ||
          ') = (' || $2 || '.' ||
          array_to_string(reorg.array_accum(quote_ident(attname)), ', ' || $2 || '.') || ')'
     FROM (SELECT attname FROM pg_attribute
