TypeError: must be string without null bytes, not str

[Ryan J Ollos]

From the logs:

[pid 17754 139730844530432] 2016-03-14 23:16:44,080 Trac[main] ERROR: Internal Server Error: <RequestWithSession "GET '/changeset?new_path=tags/trac-0.11.2.1<%00ScRiPt%20%0d%0a>prompt(980706)</ScRiPt>&old_path=tags/trac-0.11.2'">, referrer 'http://trac.edgewall.org/'
Traceback (most recent call last):
  File "/usr/local/virtualenv/1.1dev/lib/python2.7/site-packages/trac/web/main.py", line 607, in _dispatch_request
    dispatcher.dispatch(req)
  File "/usr/local/virtualenv/1.1dev/lib/python2.7/site-packages/trac/web/main.py", line 256, in dispatch
    resp = chosen_handler.process_request(req)
  File "/usr/local/virtualenv/1.1dev/lib/python2.7/site-packages/trac/versioncontrol/web_ui/changeset.py", line 351, in process_request
    self._render_html(req, repos, chgset, restricted, data)
  File "/usr/local/virtualenv/1.1dev/lib/python2.7/site-packages/trac/versioncontrol/web_ui/changeset.py", line 578, in _render_html
    diff_changes = list(get_changes())
  File "/usr/local/virtualenv/1.1dev/lib/python2.7/site-packages/trac/versioncontrol/web_ui/changeset.py", line 476, in get_changes
    old_path=data['old_path'], old_rev=data['old_rev']):
  File "/usr/local/virtualenv/1.1dev/lib/python2.7/site-packages/tracopt/versioncontrol/svn/svn_fs.py", line 693, in get_changes
    if self.has_node(new_path, new_rev):
  File "/usr/local/virtualenv/1.1dev/lib/python2.7/site-packages/tracopt/versioncontrol/svn/svn_fs.py", line 413, in has_node
    node_type = fs.check_path(rev_root, _to_svn(pool(), self.scope, path),
  File "/usr/local/virtualenv/1.1dev/lib/python2.7/site-packages/tracopt/versioncontrol/svn/svn_fs.py", line 96, in _to_svn
    pool)
  File "/usr/lib/python2.7/dist-packages/libsvn/core.py", line 4781, in svn_path_canonicalize
    return _core.svn_path_canonicalize(*args)
TypeError: must be string without null bytes, not str

[Jun Omae]

Null byte attack, the same issue as #12403. See also, proposed patch in comment:2:ticket:12403.

[Ryan J Ollos]

Thanks. Tons of stuff in the logs the past two days. I guess someone is trying to attack us.