incorrect string escaping breaking API

Bug #419442 reported by Kees Cook
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
python-wadllib (Ubuntu)
Confirmed
Critical
Unassigned

Bug Description

Binary package hint: python-wadllib

  File "./unembargo", line 51, in <module>
    exact_match=True)
  File "/usr/lib/python2.6/dist-packages/launchpadlib/resource.py", line 339, in __call__
    url = self.wadl_method.build_request_url(**args)
  File "/usr/lib/python2.6/dist-packages/wadllib/application.py", line 582, in build_request_url
    return self.request.build_url(param_values, **kw_param_values)
  File "/usr/lib/python2.6/dist-packages/wadllib/application.py", line 695, in build_url
    self.query_params, param_values, **kw_param_values)
  File "/usr/lib/python2.6/dist-packages/wadllib/application.py", line 169, in validate_param_values
    param_values[name], name, '", "'.join(options)))
ValueError: Invalid value '"Published"' for parameter 'status': valid values are: "Pending", "Published", "Superseded", "Deleted", "Obsolete"

19:27 < leonardr> kees, sure. the bug is caused by wadllib being smart about escaping strings, and launchpadlib/lazr.restfulclient not being smart about what it tells wadllib to escape
19:27 < leonardr> upgrade wadllib without making launchpadlib smart, and you'll get this error
19:28 < leonardr> use the launchpadlib and lazr.restfulclient currently in trunk, and the problem should be solved

ProblemType: Bug
Architecture: amd64
Date: Wed Aug 26 12:28:47 2009
DistroRelease: Ubuntu 9.10
Package: python-wadllib 1.1.2-0ubuntu1
PackageArchitecture: all
ProcEnviron:
 LANGUAGE=en_US.UTF-8
 PATH=(custom, user)
 LANG=en_US.UTF-8
 SHELL=/bin/bash
ProcVersionSignature: Ubuntu 2.6.31-7.27-generic
SourcePackage: python-wadllib
Uname: Linux 2.6.31-7-generic x86_64

Revision history for this message
Kees Cook (kees) wrote :
Changed in python-wadllib (Ubuntu):
importance: Undecided → Critical
milestone: none → karmic-alpha-6
Revision history for this message
Marc Deslauriers (mdeslaur) wrote :

I've hit this too since updating karmic. Marking as confirmed.

Changed in python-wadllib (Ubuntu):
status: New → Confirmed
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.