﻿ticket,summary,type,release,owner,status,created,modified,_description,_reporter
11422,"Exception: dependency.getMaxTicketId: object of type 'type' has no len()Traceback (most recent call last):  File ""/usr/local/lib/python2.7/dist-packages/TracXMLRPC-1.1.2_r13203-py2.7.egg/tracrpc/web_ui.py"", line 101, in _dump_docs    (method.signature,  File ""/usr/local/lib/python2.7/dist-packages/TracXMLRPC-1.1.2_r13203-py2.7.egg/tracrpc/api.py"", line 230, in _get_signature    if len(sig) < len(sigcand):TypeError: object of type 'type' has no len()",defect,1.0,Yuji OKAZAKI,new,2013-12-02T11:24:57+01:00,2013-12-02T14:47:42+01:00,"when i select the API documentation, trac 1.0 fails:

==== How to Reproduce ====

While doing a GET operation on `/rpc`, Trac issued an internal error.

''(please provide additional details here)''

Request parameters:
{{{
{}
}}}

User agent: `Mozilla/5.0 (X11; Linux x86_64; rv:22.0) Gecko/20100101 Firefox/22.0`

==== System Information ====
|| '''`Trac`''' || `1.0` ||
|| '''`Genshi`''' || `0.7 (without speedups)` ||
|| '''`mod_python`''' || `3.3.1` ||
|| '''`pysqlite`''' || `2.6.0` ||
|| '''`Python`''' || `2.7.3 (default, Jan  2 2013, 14:09:21) ` [[br]] `[GCC 4.7.2]` ||
|| '''`RPC`''' || `1.1.2-r13203` ||
|| '''`setuptools`''' || `0.6` ||
|| '''`SQLite`''' || `3.7.13` ||
|| '''`jQuery`''' || `1.7.2` ||

==== Enabled Plugins ====
|| '''`NoteBox`''' || `1.0dev-r11779` ||
|| '''`PlantUML`''' || `2.0dev-r12389` ||
|| '''`SvnAuthzAdminPlugin`''' || `0.2` ||
|| '''`TestManager`''' || `1.7.2` ||
|| '''`TicketImport`''' || `0.8.3` ||
|| '''`TracCodeReview`''' || `2.2dev` ||
|| '''`TracDependencyPlugin`''' || `0.11.2.1` ||
|| '''`TracGenericClass`''' || `1.1.5` ||
|| '''`TracGenericWorkflow`''' || `1.0.4` ||
|| '''`TracNewsFlash`''' || `1.0.1` ||
|| '''`TracSectionEditPlugin`''' || `0.2.6-r11208` ||
|| '''`TracXMLRPC`''' || `1.1.2-r13203` ||
|| '''`VisitCounter`''' || `0.2` ||

==== Python Traceback ====
{{{
Traceback (most recent call last):
  File ""/usr/local/lib/python2.7/dist-packages/Trac-1.0-py2.7.egg/trac/web/main.py"", line 497, in _dispatch_request
    dispatcher.dispatch(req)
  File ""/usr/local/lib/python2.7/dist-packages/Trac-1.0-py2.7.egg/trac/web/main.py"", line 214, in dispatch
    resp = chosen_handler.process_request(req)
  File ""/usr/local/lib/python2.7/dist-packages/TracXMLRPC-1.1.2_r13203-py2.7.egg/tracrpc/web_ui.py"", line 72, in process_request
    return self._dump_docs(req)
  File ""/usr/local/lib/python2.7/dist-packages/TracXMLRPC-1.1.2_r13203-py2.7.egg/tracrpc/web_ui.py"", line 111, in _dump_docs
    str(e), out.getvalue()))
Exception: dependency.getMaxTicketId: object of type 'type' has no len()
Traceback (most recent call last):
  File ""/usr/local/lib/python2.7/dist-packages/TracXMLRPC-1.1.2_r13203-py2.7.egg/tracrpc/web_ui.py"", line 101, in _dump_docs
    (method.signature,
  File ""/usr/local/lib/python2.7/dist-packages/TracXMLRPC-1.1.2_r13203-py2.7.egg/tracrpc/api.py"", line 230, in _get_signature
    if len(sig) < len(sigcand):
TypeError: object of type 'type' has no len()

}}}",alejandro.saavedra@…
7449,Unicode error when TracDependency is enabled,defect,0.11,Yuji OKAZAKI,assigned,2010-08-03T10:46:13+02:00,2010-08-15T14:42:22+02:00,"The following error occurs when i enable TracDependency of the TracDependency plugin.

Traceback (most recent call last):
  File ""/usr/lib/python2.6/site-packages/trac/web/api.py"", line 367, in send_error
    'text/html')
  File ""/usr/lib/python2.6/site-packages/trac/web/chrome.py"", line 758, in render_template
    location=location))
TracError: Genshi UnicodeDecodeError error while rendering template '/usr/lib/python2.6/site-packages/trac/templates/error.html', line 81, char -1",andhos@…
7462,Implement a date time validator.,enhancement,0.11,Yuji OKAZAKI,new,2010-08-08T17:18:38+02:00,2010-08-08T17:18:38+02:00,,Yuji OKAZAKI
6958,1004 errors in TicketEdit.xls,defect,0.11,Yuji OKAZAKI,assigned,2010-04-08T23:00:03+02:00,2010-04-11T17:17:21+02:00,I can't get !TicketEdit to work.  I can't even tell if I'm connecting to Trac.  I see Debug.print() stuff in the VB code but I don't know where that might be coming out.  Can you suggest some strategies for diagnosing the problems?  ,Chris.Nelson@…
6381,RPC executeQuery is open to SQL Injection,defect,0.11,Yuji OKAZAKI,assigned,2009-12-27T15:54:41+01:00,2010-03-26T00:24:58+01:00,"
Please adjust the implementation of the executeQuery Method so that it prevents SQL Injection.

Both parameters ""query"" and ""sort"" are not tested against common types of SQL Injection attacks.

E.g. providing for '''sort''' a value of e.g. ""start_time asc; DELETE FROM ticket WHERE 1=1; DELETE FROM wiki WHERE 1=1;"" would remove all of your important ticket and wiki data. Actual table names and field names may be different from the ones used in the above example, but you should get the picture.

",carstenklein@…
