corpus_generator.c 24 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598
  1. /* This Source Code Form is subject to the terms of the Mozilla Public
  2. * License, v. 2.0. If a copy of the MPL was not distributed with this
  3. * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
  4. /**
  5. * This code is used to generate a binary file for every request type
  6. * which can be sent from a client to the server.
  7. * These files form the basic corpus for fuzzing the server.
  8. * This script is intended to be executed manually and then commit the new
  9. * corpus to the repository.
  10. */
  11. #ifndef UA_DEBUG_DUMP_PKGS_FILE
  12. #error UA_DEBUG_DUMP_PKGS_FILE must be defined
  13. #endif
  14. #include <open62541/client_config_default.h>
  15. #include <open62541/client_highlevel.h>
  16. #include <open62541/client_subscriptions.h>
  17. #include <open62541/server_config_default.h>
  18. #include <open62541/types.h>
  19. #include "client/ua_client_internal.h"
  20. #include <server/ua_server_internal.h>
  21. #include <dirent.h>
  22. #include <fcntl.h>
  23. #include <pthread.h>
  24. #include <stdio.h>
  25. #include <stdlib.h>
  26. #include <unistd.h>
  27. #include <sys/stat.h>
  28. UA_Server *server;
  29. UA_Boolean running;
  30. pthread_t server_thread;
  31. static void * serverloop(void *_) {
  32. while(running)
  33. UA_Server_run_iterate(server, true);
  34. return NULL;
  35. }
  36. static void start_server(void) {
  37. running = true;
  38. server = UA_Server_new();
  39. UA_ServerConfig *config = UA_Server_getConfig(server);
  40. UA_ServerConfig_setDefault(config);
  41. config->applicationDescription.applicationType = UA_APPLICATIONTYPE_SERVER;
  42. config->discovery.mdnsEnable = true;
  43. config->discovery.mdns.mdnsServerName = UA_String_fromChars("Sample Multicast Server");
  44. UA_Server_run_startup(server);
  45. pthread_create(&server_thread, NULL, serverloop, NULL);
  46. }
  47. static void teardown_server(void) {
  48. running = false;
  49. pthread_join(server_thread, NULL);
  50. UA_Server_run_shutdown(server);
  51. UA_Server_delete(server);
  52. }
  53. static void emptyCorpusDir(void) {
  54. DIR *theFolder = opendir(UA_CORPUS_OUTPUT_DIR);
  55. struct dirent *next_file;
  56. char filepath[400];
  57. while ( (next_file = readdir(theFolder)) != NULL ) {
  58. // build the path for each file in the folder
  59. sprintf(filepath, "%s/%s", UA_CORPUS_OUTPUT_DIR, next_file->d_name);
  60. remove(filepath);
  61. }
  62. closedir(theFolder);
  63. }
  64. #define ASSERT_GOOD(X) if (X != UA_STATUSCODE_GOOD) return X;
  65. /*************************************************
  66. * The following list of client requests is based
  67. * on ua_server_binary.c:getServicePointers to
  68. * cover all possible services and their inputs
  69. ************************************************/
  70. static UA_StatusCode
  71. findServersRequest(UA_Client *client) {
  72. UA_ApplicationDescription* applicationDescriptionArray = NULL;
  73. size_t applicationDescriptionArraySize = 0;
  74. size_t serverUrisSize = 1;
  75. UA_String *serverUris = UA_String_new();
  76. serverUris[0] = UA_String_fromChars("urn:some:server:uri");
  77. size_t localeIdsSize = 1;
  78. UA_String *localeIds = UA_String_new();
  79. localeIds[0] = UA_String_fromChars("en");
  80. ASSERT_GOOD(UA_Client_findServers(client, "opc.tcp://localhost:4840",
  81. serverUrisSize, serverUris, localeIdsSize, localeIds,
  82. &applicationDescriptionArraySize, &applicationDescriptionArray));
  83. UA_Array_delete(serverUris, serverUrisSize, &UA_TYPES[UA_TYPES_STRING]);
  84. UA_Array_delete(localeIds, localeIdsSize, &UA_TYPES[UA_TYPES_STRING]);
  85. UA_Array_delete(applicationDescriptionArray, applicationDescriptionArraySize,
  86. &UA_TYPES[UA_TYPES_APPLICATIONDESCRIPTION]);
  87. return UA_STATUSCODE_GOOD;
  88. }
  89. static UA_StatusCode
  90. findServersOnNetworkRequest(UA_Client *client) {
  91. UA_ServerOnNetwork* serverOnNetwork = NULL;
  92. size_t serverOnNetworkSize = 0;
  93. size_t serverCapabilityFilterSize = 2;
  94. UA_String *serverCapabilityFilter = (UA_String*)UA_malloc(sizeof(UA_String) * serverCapabilityFilterSize);
  95. serverCapabilityFilter[0] = UA_String_fromChars("LDS");
  96. serverCapabilityFilter[1] = UA_String_fromChars("NA");
  97. ASSERT_GOOD(UA_Client_findServersOnNetwork(client, "opc.tcp://localhost:4840", 0, 0,
  98. serverCapabilityFilterSize, serverCapabilityFilter,
  99. &serverOnNetworkSize, &serverOnNetwork));
  100. UA_Array_delete(serverCapabilityFilter, serverCapabilityFilterSize,
  101. &UA_TYPES[UA_TYPES_STRING]);
  102. UA_Array_delete(serverOnNetwork, serverOnNetworkSize, &UA_TYPES[UA_TYPES_SERVERONNETWORK]);
  103. return UA_STATUSCODE_GOOD;
  104. }
  105. static void
  106. initUaRegisterServer(UA_RegisteredServer *requestServer) {
  107. requestServer->isOnline = UA_TRUE;
  108. requestServer->serverUri = server->config.applicationDescription.applicationUri;
  109. requestServer->productUri = server->config.applicationDescription.productUri;
  110. requestServer->serverType = server->config.applicationDescription.applicationType;
  111. requestServer->gatewayServerUri = server->config.applicationDescription.gatewayServerUri;
  112. // create the semaphore
  113. int fd = open("/tmp/open62541-corpus-semaphore", O_RDWR|O_CREAT, S_IRWXU | S_IRWXG | S_IRWXO);
  114. close(fd);
  115. requestServer->semaphoreFilePath = UA_STRING("/tmp/open62541-corpus-semaphore");
  116. requestServer->serverNames = &server->config.applicationDescription.applicationName;
  117. requestServer->serverNamesSize = 1;
  118. size_t nl_discurls = server->config.networkLayersSize;
  119. requestServer->discoveryUrls = (UA_String*)UA_malloc(sizeof(UA_String) * nl_discurls);
  120. requestServer->discoveryUrlsSize = nl_discurls;
  121. for(size_t i = 0; i < nl_discurls; ++i) {
  122. UA_ServerNetworkLayer *nl = &server->config.networkLayers[i];
  123. requestServer->discoveryUrls[i] = nl->discoveryUrl;
  124. }
  125. }
  126. static UA_StatusCode
  127. registerServerRequest(UA_Client *client) {
  128. /* Prepare the request. Do not cleanup the request after the service call,
  129. * as the members are stack-allocated or point into the server config. */
  130. UA_RegisterServerRequest request;
  131. UA_RegisterServerRequest_init(&request);
  132. /* Copy from RegisterServer2 request */
  133. request.requestHeader.timestamp = UA_DateTime_now();
  134. request.requestHeader.timeoutHint = 10000;
  135. initUaRegisterServer(&request.server);
  136. UA_RegisterServerResponse response;
  137. UA_RegisterServerResponse_init(&response);
  138. __UA_Client_Service(client, &request, &UA_TYPES[UA_TYPES_REGISTERSERVERREQUEST],
  139. &response, &UA_TYPES[UA_TYPES_REGISTERSERVERRESPONSE]);
  140. UA_free(request.server.discoveryUrls);
  141. ASSERT_GOOD(response.responseHeader.serviceResult);
  142. return UA_STATUSCODE_GOOD;
  143. }
  144. static UA_StatusCode
  145. registerServer2Request(UA_Client *client) {
  146. /* Prepare the request. Do not cleanup the request after the service call,
  147. * as the members are stack-allocated or point into the server config. */
  148. UA_RegisterServer2Request request;
  149. UA_RegisterServer2Request_init(&request);
  150. request.requestHeader.timestamp = UA_DateTime_now();
  151. request.requestHeader.timeoutHint = 10000;
  152. initUaRegisterServer(&request.server);
  153. request.discoveryConfigurationSize = 1;
  154. request.discoveryConfiguration = UA_ExtensionObject_new();
  155. UA_ExtensionObject_init(&request.discoveryConfiguration[0]);
  156. // Set to NODELETE so that we can just use a pointer to the mdns config
  157. request.discoveryConfiguration[0].encoding = UA_EXTENSIONOBJECT_DECODED_NODELETE;
  158. request.discoveryConfiguration[0].content.decoded.type = &UA_TYPES[UA_TYPES_MDNSDISCOVERYCONFIGURATION];
  159. request.discoveryConfiguration[0].content.decoded.data = &server->config.discovery.mdns;
  160. // First try with RegisterServer2, if that isn't implemented, use RegisterServer
  161. UA_RegisterServer2Response response;
  162. UA_RegisterServer2Response_init(&response);
  163. __UA_Client_Service(client, &request, &UA_TYPES[UA_TYPES_REGISTERSERVER2REQUEST],
  164. &response, &UA_TYPES[UA_TYPES_REGISTERSERVER2RESPONSE]);
  165. ASSERT_GOOD(response.responseHeader.serviceResult);
  166. UA_free(request.server.discoveryUrls);
  167. UA_ExtensionObject_delete(request.discoveryConfiguration);
  168. UA_RegisterServer2Response_deleteMembers(&response);
  169. return UA_STATUSCODE_GOOD;
  170. }
  171. static UA_StatusCode
  172. readValueRequest(UA_Client *client) {
  173. UA_ReadValueId rvi;
  174. UA_ReadValueId_init(&rvi);
  175. rvi.nodeId = UA_NODEID_NUMERIC(0, UA_NS0ID_SERVER_SERVERSTATUS_STARTTIME);
  176. rvi.attributeId = UA_ATTRIBUTEID_VALUE;
  177. UA_DataValue resp = UA_Server_read(server, &rvi, UA_TIMESTAMPSTORETURN_BOTH);
  178. ASSERT_GOOD(resp.status);
  179. UA_DataValue_deleteMembers(&resp);
  180. return UA_STATUSCODE_GOOD;
  181. }
  182. static UA_StatusCode
  183. writeValueRequest(UA_Client *client) {
  184. UA_WriteValue wValue;
  185. UA_WriteValue_init(&wValue);
  186. UA_LocalizedText testValue = UA_LOCALIZEDTEXT("en-EN", "MyServer");
  187. UA_Variant_setScalar(&wValue.value.value, &testValue, &UA_TYPES[UA_TYPES_LOCALIZEDTEXT]);
  188. wValue.value.hasValue = true;
  189. wValue.nodeId = UA_NODEID_NUMERIC(0, UA_NS0ID_SERVER);
  190. wValue.attributeId = UA_ATTRIBUTEID_DISPLAYNAME;
  191. ASSERT_GOOD(UA_Server_write(server, &wValue));
  192. return UA_STATUSCODE_GOOD;
  193. }
  194. static UA_StatusCode
  195. browseAndBrowseNextRequest(UA_Client *client) {
  196. // Browse node in server folder
  197. UA_BrowseRequest bReq;
  198. UA_BrowseRequest_init(&bReq);
  199. // normally is set to 0, to get all the nodes, but we want to test browse next
  200. bReq.requestedMaxReferencesPerNode = 1;
  201. bReq.nodesToBrowse = UA_BrowseDescription_new();
  202. bReq.nodesToBrowseSize = 1;
  203. bReq.nodesToBrowse[0].nodeId = UA_NODEID_NUMERIC(0, UA_NS0ID_SERVER);
  204. bReq.nodesToBrowse[0].resultMask = UA_BROWSERESULTMASK_ALL;
  205. UA_BrowseResponse bResp = UA_Client_Service_browse(client, bReq);
  206. ASSERT_GOOD(bResp.responseHeader.serviceResult);
  207. // browse next
  208. UA_BrowseNextRequest bNextReq;
  209. UA_BrowseNextRequest_init(&bNextReq);
  210. // normally is set to 0, to get all the nodes, but we want to test browse next
  211. bNextReq.releaseContinuationPoints = UA_FALSE;
  212. bNextReq.continuationPoints = &bResp.results[0].continuationPoint;
  213. bNextReq.continuationPointsSize = 1;
  214. UA_BrowseNextResponse bNextResp = UA_Client_Service_browseNext(client, bNextReq);
  215. ASSERT_GOOD(bNextResp.responseHeader.serviceResult);
  216. UA_BrowseNextResponse_deleteMembers(&bNextResp);
  217. bNextResp = UA_Client_Service_browseNext(client, bNextReq);
  218. ASSERT_GOOD(bNextResp.responseHeader.serviceResult);
  219. UA_BrowseNextResponse_deleteMembers(&bNextResp);
  220. // release continuation point. Result is then empty
  221. bNextReq.releaseContinuationPoints = UA_TRUE;
  222. bNextResp = UA_Client_Service_browseNext(client, bNextReq);
  223. UA_BrowseNextResponse_deleteMembers(&bNextResp);
  224. ASSERT_GOOD(bNextResp.responseHeader.serviceResult);
  225. UA_BrowseRequest_deleteMembers(&bReq);
  226. UA_BrowseResponse_deleteMembers(&bResp);
  227. // already deleted by browse request
  228. bNextReq.continuationPoints = NULL;
  229. bNextReq.continuationPointsSize = 0;
  230. UA_BrowseNextRequest_deleteMembers(&bNextReq);
  231. return UA_STATUSCODE_GOOD;
  232. }
  233. static UA_StatusCode
  234. registerUnregisterNodesRequest(UA_Client *client) {
  235. UA_RegisterNodesRequest req;
  236. UA_RegisterNodesRequest_init(&req);
  237. req.nodesToRegister = UA_NodeId_new();
  238. req.nodesToRegister[0] = UA_NODEID_NUMERIC(0, UA_NS0ID_SERVER_SERVERSTATUS_CURRENTTIME);
  239. req.nodesToRegisterSize = 1;
  240. UA_RegisterNodesResponse res = UA_Client_Service_registerNodes(client, req);
  241. ASSERT_GOOD(res.responseHeader.serviceResult);
  242. UA_UnregisterNodesRequest reqUn;
  243. UA_UnregisterNodesRequest_init(&reqUn);
  244. reqUn.nodesToUnregister = UA_NodeId_new();
  245. reqUn.nodesToUnregister[0] = res.registeredNodeIds[0];
  246. reqUn.nodesToUnregisterSize = 1;
  247. UA_UnregisterNodesResponse resUn = UA_Client_Service_unregisterNodes(client, reqUn);
  248. ASSERT_GOOD(resUn.responseHeader.serviceResult);
  249. UA_UnregisterNodesRequest_deleteMembers(&reqUn);
  250. UA_UnregisterNodesResponse_deleteMembers(&resUn);
  251. UA_RegisterNodesRequest_deleteMembers(&req);
  252. UA_RegisterNodesResponse_deleteMembers(&res);
  253. return UA_STATUSCODE_GOOD;
  254. }
  255. static UA_StatusCode
  256. translateBrowsePathsToNodeIdsRequest(UA_Client *client) {
  257. // Just for testing we want to translate the following path to its corresponding node id
  258. // /Objects/Server/ServerStatus/State
  259. // Equals the following node IDs:
  260. // /85/2253/2256/2259
  261. #define BROWSE_PATHS_SIZE 3
  262. char *paths[BROWSE_PATHS_SIZE] = {"Server", "ServerStatus", "State"};
  263. UA_UInt32 ids[BROWSE_PATHS_SIZE] = {UA_NS0ID_ORGANIZES, UA_NS0ID_HASCOMPONENT, UA_NS0ID_HASCOMPONENT};
  264. UA_BrowsePath browsePath;
  265. UA_BrowsePath_init(&browsePath);
  266. browsePath.startingNode = UA_NODEID_NUMERIC(0, UA_NS0ID_OBJECTSFOLDER);
  267. browsePath.relativePath.elements = (UA_RelativePathElement*)UA_Array_new(BROWSE_PATHS_SIZE, &UA_TYPES[UA_TYPES_RELATIVEPATHELEMENT]);
  268. browsePath.relativePath.elementsSize = BROWSE_PATHS_SIZE;
  269. for(size_t i = 0; i < BROWSE_PATHS_SIZE; i++) {
  270. UA_RelativePathElement *elem = &browsePath.relativePath.elements[i];
  271. elem->referenceTypeId = UA_NODEID_NUMERIC(0, ids[i]);
  272. elem->targetName = UA_QUALIFIEDNAME_ALLOC(0, paths[i]);
  273. }
  274. UA_TranslateBrowsePathsToNodeIdsRequest request;
  275. UA_TranslateBrowsePathsToNodeIdsRequest_init(&request);
  276. request.browsePaths = &browsePath;
  277. request.browsePathsSize = 1;
  278. UA_TranslateBrowsePathsToNodeIdsResponse response = UA_Client_Service_translateBrowsePathsToNodeIds(client, request);
  279. ASSERT_GOOD(response.responseHeader.serviceResult);
  280. UA_BrowsePath_deleteMembers(&browsePath);
  281. UA_TranslateBrowsePathsToNodeIdsResponse_deleteMembers(&response);
  282. return UA_STATUSCODE_GOOD;
  283. }
  284. static void
  285. monitoredItemHandler(UA_Client *client, UA_UInt32 subId, void *subContext,
  286. UA_UInt32 monId, void *monContext, UA_DataValue *value) {
  287. }
  288. static UA_StatusCode
  289. subscriptionRequests(UA_Client *client) {
  290. UA_UInt32 subId;
  291. // createSubscriptionRequest
  292. UA_CreateSubscriptionRequest request = UA_CreateSubscriptionRequest_default();
  293. UA_CreateSubscriptionResponse response = UA_Client_Subscriptions_create(client, request,
  294. NULL, NULL, NULL);
  295. ASSERT_GOOD(response.responseHeader.serviceResult);
  296. subId = response.subscriptionId;
  297. // modifySubscription
  298. UA_ModifySubscriptionRequest modifySubscriptionRequest;
  299. UA_ModifySubscriptionRequest_init(&modifySubscriptionRequest);
  300. modifySubscriptionRequest.subscriptionId = subId;
  301. modifySubscriptionRequest.maxNotificationsPerPublish = request.maxNotificationsPerPublish;
  302. modifySubscriptionRequest.priority = request.priority;
  303. modifySubscriptionRequest.requestedLifetimeCount = request.requestedLifetimeCount;
  304. modifySubscriptionRequest.requestedMaxKeepAliveCount = request.requestedMaxKeepAliveCount;
  305. modifySubscriptionRequest.requestedPublishingInterval = request.requestedPublishingInterval;
  306. UA_ModifySubscriptionResponse modifySubscriptionResponse;
  307. __UA_Client_Service(client, &modifySubscriptionRequest, &UA_TYPES[UA_TYPES_MODIFYSUBSCRIPTIONREQUEST],
  308. &modifySubscriptionResponse, &UA_TYPES[UA_TYPES_MODIFYSUBSCRIPTIONRESPONSE]);
  309. ASSERT_GOOD(modifySubscriptionResponse.responseHeader.serviceResult);
  310. UA_ModifySubscriptionRequest_deleteMembers(&modifySubscriptionRequest);
  311. UA_ModifySubscriptionResponse_deleteMembers(&modifySubscriptionResponse);
  312. // setPublishingMode
  313. UA_SetPublishingModeRequest setPublishingModeRequest;
  314. UA_SetPublishingModeRequest_init(&setPublishingModeRequest);
  315. setPublishingModeRequest.subscriptionIdsSize = 1;
  316. setPublishingModeRequest.subscriptionIds = UA_UInt32_new();
  317. setPublishingModeRequest.subscriptionIds[0] = subId;
  318. setPublishingModeRequest.publishingEnabled = UA_TRUE;
  319. UA_SetPublishingModeResponse setPublishingModeResponse;
  320. __UA_Client_Service(client, &setPublishingModeRequest, &UA_TYPES[UA_TYPES_SETPUBLISHINGMODEREQUEST],
  321. &setPublishingModeResponse, &UA_TYPES[UA_TYPES_SETPUBLISHINGMODERESPONSE]);
  322. ASSERT_GOOD(setPublishingModeResponse.responseHeader.serviceResult);
  323. UA_SetPublishingModeRequest_deleteMembers(&setPublishingModeRequest);
  324. UA_SetPublishingModeResponse_deleteMembers(&setPublishingModeResponse);
  325. // createMonitoredItemsRequest
  326. UA_UInt32 monId;
  327. UA_MonitoredItemCreateRequest monRequest =
  328. UA_MonitoredItemCreateRequest_default(UA_NODEID_NUMERIC(0, UA_NS0ID_SERVER_SERVERSTATUS_STATE));
  329. UA_MonitoredItemCreateResult monResponse =
  330. UA_Client_MonitoredItems_createDataChange(client, response.subscriptionId,
  331. UA_TIMESTAMPSTORETURN_BOTH,
  332. monRequest, NULL, monitoredItemHandler, NULL);
  333. ASSERT_GOOD(monResponse.statusCode);
  334. monId = monResponse.monitoredItemId;
  335. // publishRequest
  336. UA_PublishRequest publishRequest;
  337. UA_PublishRequest_init(&publishRequest);
  338. ASSERT_GOOD(UA_Client_preparePublishRequest(client, &publishRequest));
  339. UA_PublishResponse publishResponse;
  340. __UA_Client_Service(client, &publishRequest, &UA_TYPES[UA_TYPES_PUBLISHREQUEST],
  341. &publishResponse, &UA_TYPES[UA_TYPES_PUBLISHRESPONSE]);
  342. // here we don't care about the return value since it may be UA_STATUSCODE_BADMESSAGENOTAVAILABLE
  343. // ASSERT_GOOD(publishResponse.responseHeader.serviceResult);
  344. UA_PublishRequest_deleteMembers(&publishRequest);
  345. UA_PublishResponse_deleteMembers(&publishResponse);
  346. // republishRequest
  347. UA_RepublishRequest republishRequest;
  348. UA_RepublishRequest_init(&republishRequest);
  349. republishRequest.retransmitSequenceNumber = 0;
  350. republishRequest.subscriptionId = subId;
  351. UA_RepublishResponse republishResponse;
  352. __UA_Client_Service(client, &republishRequest, &UA_TYPES[UA_TYPES_REPUBLISHREQUEST],
  353. &republishResponse, &UA_TYPES[UA_TYPES_REPUBLISHRESPONSE]);
  354. // here we don't care about the return value since it may be UA_STATUSCODE_BADMESSAGENOTAVAILABLE
  355. // ASSERT_GOOD(republishResponse.responseHeader.serviceResult);
  356. UA_RepublishRequest_deleteMembers(&republishRequest);
  357. UA_RepublishResponse_deleteMembers(&republishResponse);
  358. // modifyMonitoredItems
  359. UA_ModifyMonitoredItemsRequest modifyMonitoredItemsRequest;
  360. UA_ModifyMonitoredItemsRequest_init(&modifyMonitoredItemsRequest);
  361. modifyMonitoredItemsRequest.subscriptionId = subId;
  362. modifyMonitoredItemsRequest.itemsToModifySize = 1;
  363. modifyMonitoredItemsRequest.itemsToModify = UA_MonitoredItemModifyRequest_new();
  364. modifyMonitoredItemsRequest.itemsToModify[0].monitoredItemId = monId;
  365. UA_MonitoringParameters_init(&modifyMonitoredItemsRequest.itemsToModify[0].requestedParameters);
  366. UA_ModifyMonitoredItemsResponse modifyMonitoredItemsResponse;
  367. __UA_Client_Service(client, &modifyMonitoredItemsRequest, &UA_TYPES[UA_TYPES_MODIFYMONITOREDITEMSREQUEST],
  368. &modifyMonitoredItemsResponse, &UA_TYPES[UA_TYPES_MODIFYMONITOREDITEMSRESPONSE]);
  369. ASSERT_GOOD(modifyMonitoredItemsResponse.responseHeader.serviceResult);
  370. UA_ModifyMonitoredItemsRequest_deleteMembers(&modifyMonitoredItemsRequest);
  371. UA_ModifyMonitoredItemsResponse_deleteMembers(&modifyMonitoredItemsResponse);
  372. // setMonitoringMode
  373. UA_SetMonitoringModeRequest setMonitoringModeRequest;
  374. UA_SetMonitoringModeRequest_init(&setMonitoringModeRequest);
  375. setMonitoringModeRequest.subscriptionId = subId;
  376. setMonitoringModeRequest.monitoredItemIdsSize = 1;
  377. setMonitoringModeRequest.monitoredItemIds = UA_UInt32_new();
  378. setMonitoringModeRequest.monitoredItemIds[0] = monId;
  379. setMonitoringModeRequest.monitoringMode = UA_MONITORINGMODE_REPORTING;
  380. UA_SetMonitoringModeResponse setMonitoringModeResponse;
  381. __UA_Client_Service(client, &setMonitoringModeRequest, &UA_TYPES[UA_TYPES_SETMONITORINGMODEREQUEST],
  382. &setMonitoringModeResponse, &UA_TYPES[UA_TYPES_SETMONITORINGMODERESPONSE]);
  383. ASSERT_GOOD(setMonitoringModeResponse.responseHeader.serviceResult);
  384. UA_SetMonitoringModeRequest_deleteMembers(&setMonitoringModeRequest);
  385. UA_SetMonitoringModeResponse_deleteMembers(&setMonitoringModeResponse);
  386. // deleteMonitoredItemsRequest
  387. ASSERT_GOOD(UA_Client_MonitoredItems_deleteSingle(client, subId, monId));
  388. // deleteSubscriptionRequest
  389. ASSERT_GOOD(UA_Client_Subscriptions_deleteSingle(client, subId));
  390. return UA_STATUSCODE_GOOD;
  391. }
  392. static UA_StatusCode
  393. callRequest(UA_Client *client) {
  394. /* Set up the request */
  395. UA_CallRequest request;
  396. UA_CallRequest_init(&request);
  397. UA_CallMethodRequest item;
  398. UA_CallMethodRequest_init(&item);
  399. item.methodId = UA_NODEID_NUMERIC(0, UA_NS0ID_SERVER_GETMONITOREDITEMS);
  400. item.objectId = UA_NODEID_NUMERIC(0, UA_NS0ID_SERVER);
  401. UA_Variant input;
  402. UA_UInt32 subId = 12345;
  403. UA_Variant_init(&input);
  404. UA_Variant_setScalarCopy(&input, &subId, &UA_TYPES[UA_TYPES_UINT32]);
  405. item.inputArgumentsSize = 1;
  406. item.inputArguments = &input;
  407. request.methodsToCall = &item;
  408. request.methodsToCallSize = 1;
  409. /* Call the service */
  410. UA_CallResponse response = UA_Client_Service_call(client, request);
  411. ASSERT_GOOD(response.responseHeader.serviceResult);
  412. UA_CallResponse_deleteMembers(&response);
  413. UA_Variant_deleteMembers(&input);
  414. return UA_STATUSCODE_GOOD;
  415. }
  416. static UA_StatusCode
  417. nodemanagementRequests(UA_Client *client) {
  418. UA_ObjectAttributes attr = UA_ObjectAttributes_default;
  419. attr.description = UA_LOCALIZEDTEXT("en-US", "Some Coordinates");
  420. attr.displayName = UA_LOCALIZEDTEXT("en-US", "Coordinates");
  421. UA_NodeId newObjectId;
  422. ASSERT_GOOD(UA_Client_addObjectNode(client, UA_NODEID_NULL,
  423. UA_NODEID_NUMERIC(0, UA_NS0ID_OBJECTSFOLDER),
  424. UA_NODEID_NUMERIC(0, UA_NS0ID_ORGANIZES),
  425. UA_QUALIFIEDNAME(1, "Coordinates"),
  426. UA_NODEID_NUMERIC(0, UA_NS0ID_FOLDERTYPE), attr, &newObjectId));
  427. UA_ExpandedNodeId target = UA_EXPANDEDNODEID_NULL;
  428. target.nodeId = newObjectId;
  429. ASSERT_GOOD(UA_Client_addReference(client, UA_NODEID_NUMERIC(0, UA_NS0ID_ROOTFOLDER),
  430. UA_NODEID_NUMERIC(0, UA_NS0ID_ORGANIZES),
  431. UA_TRUE, UA_STRING_NULL, target, UA_NODECLASS_OBJECT));
  432. ASSERT_GOOD(UA_Client_deleteReference(client, UA_NODEID_NUMERIC(0, UA_NS0ID_ROOTFOLDER),
  433. UA_NODEID_NUMERIC(0, UA_NS0ID_ORGANIZES),
  434. true, target, true));
  435. ASSERT_GOOD(UA_Client_deleteNode(client, newObjectId, UA_TRUE));
  436. return UA_STATUSCODE_GOOD;
  437. }
  438. static UA_StatusCode
  439. executeClientServices(UA_Client *client) {
  440. ASSERT_GOOD(findServersRequest(client));
  441. ASSERT_GOOD(findServersOnNetworkRequest(client));
  442. ASSERT_GOOD(registerServerRequest(client));
  443. ASSERT_GOOD(registerServer2Request(client));
  444. ASSERT_GOOD(readValueRequest(client));
  445. ASSERT_GOOD(writeValueRequest(client));
  446. ASSERT_GOOD(browseAndBrowseNextRequest(client));
  447. ASSERT_GOOD(registerUnregisterNodesRequest(client));
  448. ASSERT_GOOD(translateBrowsePathsToNodeIdsRequest(client));
  449. ASSERT_GOOD(subscriptionRequests(client));
  450. ASSERT_GOOD(callRequest(client));
  451. ASSERT_GOOD(nodemanagementRequests(client));
  452. return UA_STATUSCODE_GOOD;
  453. }
  454. int main(void) {
  455. emptyCorpusDir();
  456. start_server();
  457. UA_Client *client = UA_Client_new();
  458. UA_ClientConfig_setDefault(UA_Client_getConfig(client));
  459. // this will also call getEndpointsRequest
  460. UA_StatusCode retval = UA_Client_connect(client, "opc.tcp://localhost:4840");
  461. if(retval == UA_STATUSCODE_GOOD)
  462. retval = executeClientServices(client);
  463. UA_Client_disconnect(client);
  464. UA_Client_delete(client);
  465. if(retval == UA_STATUSCODE_GOOD) {
  466. // now also connect with user/pass so that fuzzer also knows how to do that
  467. client = UA_Client_new();
  468. UA_ClientConfig_setDefault(UA_Client_getConfig(client));
  469. retval = UA_Client_connect_username(client, "opc.tcp://localhost:4840", "user", "password");
  470. retval = retval == UA_STATUSCODE_BADUSERACCESSDENIED ? UA_STATUSCODE_GOOD : retval;
  471. UA_Client_disconnect(client);
  472. UA_Client_delete(client);
  473. }
  474. teardown_server();
  475. if(retval != UA_STATUSCODE_GOOD) {
  476. printf("\n--------- AN ERROR OCCURRED ----------\nStatus = %s\n", UA_StatusCode_name(retval));
  477. exit(1);
  478. } else {
  479. printf("\n--------- SUCCESS -------\nThe corpus is stored in %s", UA_CORPUS_OUTPUT_DIR);
  480. }
  481. return 0;
  482. }