"Private message coordinators" stuck in sending

[ubremer1234]

Describe the bug
When on a case page like the below it's not possible to use the "private message" function as the messages can't be sent

To Reproduce
Steps to reproduce the behavior:

1. Go to https://kb.cert.org/vince/comm/case/2467/
2. Click on 'Private Message Coordinators'
3. Put message in the content field and click "Send" button
4. no error, but the button only changes to "sending" and then nothing more happens

Expected behavior
Messages is being sent and the UI reflects that (given that I haven't received a response after several weeks, I think it's safe to assume this is not a display issue of the UI, but the message really isn't sent.

Platform details
several users tried Windows and Mac, Safari, FF, Edge, Brave, ...

[SEI-gstrom]

Hi @ubremer1234

Thank you for reporting this issue. Our investigation so far suggests that the "Private Message" tool failed for you earlier today because the application was unable to process an attachment that you wanted to include with your message. To help our diagnosis, it will be useful to know whatever you are able to tell us about that attachment (file type, size, etc.). And--if this works for what you need to communicate with the coordinators--you can try sending the message without the attachment.

[ubremer1234]

I never tried to attach anything ...

[sei-vsarvepalli]

In this Case the problem seems to be the Title field of this Vulnerability Case is too long. When creating a new Thread for Discussion, the subject field includes the full Title field of the Case which is limited too 150 characters. So it failed in line below

VINCE/vinny/models.py

Lines 1556 to 1558 in c55d9c9

	class Thread(models.Model):
	subject = models.CharField(max_length=150)

TacePath is

VINCE/vinny/forms.py

Lines 376 to 379 in c55d9c9

	elif why == 2 and data["case"]:
	vc = Case.objects.filter(id=data["case"]).first()
	if vc:
	subject = "Question about Case " + vc.get_title()

to

VINCE/vinny/forms.py

Line 456 in c55d9c9

msg = Message.new_message(self.user, to_users, data["case"], subject, data["content"])

to

VINCE/vinny/models.py

Lines 1693 to 1703 in c55d9c9

	def new_message(cls, from_user, to_users, case, subject, content, signal=True):
	"""
	Create a new Message and Thread.
	Mark thread as unread for all recipients, and
	mark thread as read and deleted from inbox by creator.
	"""
	if case:
	vc = Case.objects.filter(id=case).first()
	else:
	vc = None
	thread = Thread.objects.create(subject=subject, case=vc)

to

VINCE/vinny/models.py

Lines 1556 to 1558 in c55d9c9

	class Thread(models.Model):
	subject = models.CharField(max_length=150)

So my recommendation is to truncate the Subject field in the thread if longer than 150 characters in the Message class helper method new_message

[ubremer1234]

Hi,
thank you for attempting to provide a workaround, but:

1. it would only be a workaround, so I'd recommend that the code is fixed to deal with longer subject lines (which are derived from the case title, which is out of the control of the author of the resp. message)
2. as the subject is outside of control of the author the workaround can't be applied.
   Regards
   Ulf

[sei-vsarvepalli]

Hi, thank you for attempting to provide a workaround, but:

1. it would only be a workaround, so I'd recommend that the code is fixed to deal with longer subject lines (which are derived from the case title, which is out of the control of the author of the resp. message)
2. as the subject is outside of control of the author the workaround can't be applied.
   Regards
   Ulf

BTW As a work around, the Coordinator has also reduced the Title field for this specific Case to allow for your posting to work as expected. The Bug tag is being tracked for fixing in our next release in the code for long term.

[ubremer1234]

Thanks for shortening the title: That allowed me to send my message.