Can't delete badly-versioned release

[osvenskan]

Describe the bug
I'm the author & maintainer of sysv_ipc. Ten years ago I accidentally uploaded a release that contained the description in the version field, so instead of a standard version string like this --

3.2.1

the version is this --

Sysv_ipc gives Python programs access to System V semaphores, shared memory 
and message queues. Most (all?) Unixes (including OS X) support System V IPC. 
Windows+Cygwin 1.7 might also work. 

Sample code is included.

This extension is released under the GPL. 

You might also be interested in the similar POSIX IPC module at:
http://semanchuk.com/philip/posix_ipc/

Apparently this mess I created causes problems for some automated tools and I would like to delete this one release. (The sysv_ipc package as a whole is fine, I just want to delete this one release.) However, deleting the release requires me to enter the version for confirmation, and I can't seem to enter the multi-line version into the single-line text field, even via copy&paste.

Expected behavior
To be able to delete this release

To Reproduce

1. Go to https://pypi.org/manage/project/sysv-ipc/releases/#modal-close
2. Try to delete the release with the ridiculous version string

[yeraydiazdiaz]

Hello @osvenskan, I've tried deleting this release myself but the admin UI also has trouble showing the release as it also uses the release name and the escaping confuses it badly. Maybe @ewdurbin can access the database and remove it there?

As far as a bug I'd say there should be some checks around what constitutes a valid release version on twine first (assuming that's what you used to upload the release). The Warehouse user and admin UI should then make changes according to these if necessary.

[osvenskan]

Thanks @yeraydiazdiaz for looking into it!

As far as a bug I'd say there should be some checks around what constitutes a valid release version on twine first (assuming that's what you used to upload the release).

It was 10 years ago, I don't remember what I used to upload it. :-) But it predates twine.

One way to fix this that might not be too hard (famous last words) would be to disallow (on the PyPI side) newlines in versions, or map all whitespace (newline, tab, NBSP, etc.) to ASCII 0x20.

[dstufft]

PyPI rejects non PEP-440 versions now, so a version like this isn’t possible anymore. We just didn’t remove existing versions that weren’t PEP440 compliant.

…

Sent from my iPhone

On Feb 23, 2019, at 3:02 PM, Philip Semanchuk ***@***.***> wrote: Thanks @yeraydiazdiaz for looking into it! As far as a bug I'd say there should be some checks around what constitutes a valid release version on twine first (assuming that's what you used to upload the release). It was 10 years ago, I don't remember what I used to upload it. :-) But it predates twine. One way to fix this that might not be too hard (famous last words) would be to disallow (on the PyPI side) newlines in versions, or map all whitespace (newline, tab, NBSP, etc.) to ASCII 0x20. — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or mute the thread.

[ewdurbin]

Notes:

Release ID is dbea92f6-a9e5-4840-95f5-4534cf6dadea
Version is:

        | Sysv_ipc gives Python programs access to System V semaphores, shared memory   +
        | and message queues. Most (all?) Unixes (including OS X) support System V IPC. +
        | Windows+Cygwin 1.7 might also work.                                           +
        |                                                                               +
        | Sample code is included.                                                      +
        |                                                                               +
        | This extension is released under the GPL.                                     +
        |                                                                               +
        | You might also be interested in the similar POSIX IPC module at:              +
        | http://semanchuk.com/philip/posix_ipc/

[di]

Assigning @ewdurbin to do some database magic here.

[osvenskan]

If I can help (other than "don't do this again!"), please LMK.

[ewdurbin]

completed.

[osvenskan]

Thank you so much @ewdurbin!