corpus_generator.c 23 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574
  1. /* This Source Code Form is subject to the terms of the Mozilla Public
  2. * License, v. 2.0. If a copy of the MPL was not distributed with this
  3. * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
  4. /**
  5. * This code is used to generate a binary file for every request type
  6. * which can be sent from a client to the server.
  7. * These files form the basic corpus for fuzzing the server.
  8. * This script is intended to be executed manually and then commit the new
  9. * corpus to the repository.
  10. */
  11. #ifndef UA_DEBUG_DUMP_PKGS_FILE
  12. #error UA_DEBUG_DUMP_PKGS_FILE must be defined
  13. #endif
  14. #include <stdio.h>
  15. #include <stdlib.h>
  16. #include <pthread.h>
  17. #include <ua_types.h>
  18. #include <sys/stat.h>
  19. #include <server/ua_server_internal.h>
  20. #include <dirent.h>
  21. #include <fcntl.h>
  22. #include <unistd.h>
  23. #include <ua_client_highlevel.h>
  24. #include "ua_config_default.h"
  25. UA_Server *server;
  26. UA_ServerConfig *config;
  27. UA_Boolean *running;
  28. pthread_t server_thread;
  29. static void * serverloop(void *_) {
  30. while(*running)
  31. UA_Server_run_iterate(server, true);
  32. return NULL;
  33. }
  34. static void start_server(void) {
  35. running = UA_Boolean_new();
  36. *running = true;
  37. config = UA_ServerConfig_new_default();
  38. server = UA_Server_new(config);
  39. UA_Server_run_startup(server);
  40. pthread_create(&server_thread, NULL, serverloop, NULL);
  41. }
  42. static void teardown_server(void) {
  43. *running = false;
  44. pthread_join(server_thread, NULL);
  45. UA_Server_run_shutdown(server);
  46. UA_Boolean_delete(running);
  47. UA_Server_delete(server);
  48. UA_ServerConfig_delete(config);
  49. }
  50. static void emptyCorpusDir(void) {
  51. DIR *theFolder = opendir(UA_CORPUS_OUTPUT_DIR);
  52. struct dirent *next_file;
  53. char filepath[400];
  54. while ( (next_file = readdir(theFolder)) != NULL ) {
  55. // build the path for each file in the folder
  56. sprintf(filepath, "%s/%s", UA_CORPUS_OUTPUT_DIR, next_file->d_name);
  57. remove(filepath);
  58. }
  59. closedir(theFolder);
  60. }
  61. #define ASSERT_GOOD(X) if (X != UA_STATUSCODE_GOOD) return X;
  62. /*************************************************
  63. * The following list of client requests is based
  64. * on ua_server_binary.c:getServicePointers to
  65. * cover all possible services and their inputs
  66. ************************************************/
  67. static UA_StatusCode
  68. findServersRequest(UA_Client *client) {
  69. UA_ApplicationDescription* applicationDescriptionArray = NULL;
  70. size_t applicationDescriptionArraySize = 0;
  71. size_t serverUrisSize = 1;
  72. UA_String *serverUris = UA_String_new();
  73. serverUris[0] = UA_String_fromChars("urn:some:server:uri");
  74. size_t localeIdsSize = 1;
  75. UA_String *localeIds = UA_String_new();
  76. localeIds[0] = UA_String_fromChars("en");
  77. ASSERT_GOOD(UA_Client_findServers(client, "opc.tcp://localhost:4840",
  78. serverUrisSize, serverUris, localeIdsSize, localeIds,
  79. &applicationDescriptionArraySize, &applicationDescriptionArray));
  80. UA_Array_delete(serverUris, serverUrisSize, &UA_TYPES[UA_TYPES_STRING]);
  81. UA_Array_delete(localeIds, localeIdsSize, &UA_TYPES[UA_TYPES_STRING]);
  82. UA_Array_delete(applicationDescriptionArray, applicationDescriptionArraySize,
  83. &UA_TYPES[UA_TYPES_APPLICATIONDESCRIPTION]);
  84. return UA_STATUSCODE_GOOD;
  85. }
  86. static UA_StatusCode
  87. findServersOnNetworkRequest(UA_Client *client) {
  88. UA_ServerOnNetwork* serverOnNetwork = NULL;
  89. size_t serverOnNetworkSize = 0;
  90. size_t serverCapabilityFilterSize = 2;
  91. UA_String *serverCapabilityFilter = (UA_String*)UA_malloc(sizeof(UA_String) * serverCapabilityFilterSize);
  92. serverCapabilityFilter[0] = UA_String_fromChars("LDS");
  93. serverCapabilityFilter[1] = UA_String_fromChars("NA");
  94. ASSERT_GOOD(UA_Client_findServersOnNetwork(client, "opc.tcp://localhost:4840", 0, 0,
  95. serverCapabilityFilterSize, serverCapabilityFilter,
  96. &serverOnNetworkSize, &serverOnNetwork));
  97. UA_Array_delete(serverCapabilityFilter, serverCapabilityFilterSize,
  98. &UA_TYPES[UA_TYPES_STRING]);
  99. UA_Array_delete(serverOnNetwork, serverOnNetworkSize, &UA_TYPES[UA_TYPES_SERVERONNETWORK]);
  100. return UA_STATUSCODE_GOOD;
  101. }
  102. static void
  103. initUaRegisterServer(UA_RegisteredServer *requestServer) {
  104. requestServer->isOnline = UA_TRUE;
  105. requestServer->serverUri = server->config.applicationDescription.applicationUri;
  106. requestServer->productUri = server->config.applicationDescription.productUri;
  107. requestServer->serverType = server->config.applicationDescription.applicationType;
  108. requestServer->gatewayServerUri = server->config.applicationDescription.gatewayServerUri;
  109. // create the semaphore
  110. int fd = open("/tmp/open62541-corpus-semaphore", O_RDWR|O_CREAT, S_IRWXU | S_IRWXG | S_IRWXO);
  111. close(fd);
  112. requestServer->semaphoreFilePath = UA_STRING("/tmp/open62541-corpus-semaphore");
  113. requestServer->serverNames = &server->config.applicationDescription.applicationName;
  114. requestServer->serverNamesSize = 1;
  115. size_t nl_discurls = server->config.networkLayersSize;
  116. requestServer->discoveryUrls = (UA_String*)UA_malloc(sizeof(UA_String) * nl_discurls);
  117. requestServer->discoveryUrlsSize = nl_discurls;
  118. for(size_t i = 0; i < nl_discurls; ++i) {
  119. UA_ServerNetworkLayer *nl = &server->config.networkLayers[i];
  120. requestServer->discoveryUrls[i] = nl->discoveryUrl;
  121. }
  122. }
  123. static UA_StatusCode
  124. registerServerRequest(UA_Client *client) {
  125. /* Prepare the request. Do not cleanup the request after the service call,
  126. * as the members are stack-allocated or point into the server config. */
  127. UA_RegisterServerRequest request;
  128. UA_RegisterServerRequest_init(&request);
  129. /* Copy from RegisterServer2 request */
  130. request.requestHeader.timestamp = UA_DateTime_now();
  131. request.requestHeader.timeoutHint = 10000;
  132. initUaRegisterServer(&request.server);
  133. UA_RegisterServerResponse response;
  134. UA_RegisterServerResponse_init(&response);
  135. __UA_Client_Service(client, &request, &UA_TYPES[UA_TYPES_REGISTERSERVERREQUEST],
  136. &response, &UA_TYPES[UA_TYPES_REGISTERSERVERRESPONSE]);
  137. UA_free(request.server.discoveryUrls);
  138. ASSERT_GOOD(response.responseHeader.serviceResult);
  139. return UA_STATUSCODE_GOOD;
  140. }
  141. static UA_StatusCode
  142. registerServer2Request(UA_Client *client) {
  143. /* Prepare the request. Do not cleanup the request after the service call,
  144. * as the members are stack-allocated or point into the server config. */
  145. UA_RegisterServer2Request request;
  146. UA_RegisterServer2Request_init(&request);
  147. request.requestHeader.timestamp = UA_DateTime_now();
  148. request.requestHeader.timeoutHint = 10000;
  149. initUaRegisterServer(&request.server);
  150. UA_MdnsDiscoveryConfiguration mdnsConfig;
  151. UA_MdnsDiscoveryConfiguration_init(&mdnsConfig);
  152. request.discoveryConfigurationSize = 1;
  153. request.discoveryConfiguration = UA_ExtensionObject_new();
  154. UA_ExtensionObject_init(&request.discoveryConfiguration[0]);
  155. request.discoveryConfiguration[0].encoding = UA_EXTENSIONOBJECT_DECODED_NODELETE;
  156. request.discoveryConfiguration[0].content.decoded.type = &UA_TYPES[UA_TYPES_MDNSDISCOVERYCONFIGURATION];
  157. request.discoveryConfiguration[0].content.decoded.data = &mdnsConfig;
  158. mdnsConfig.mdnsServerName = server->config.mdnsServerName;
  159. mdnsConfig.serverCapabilities = server->config.serverCapabilities;
  160. mdnsConfig.serverCapabilitiesSize = server->config.serverCapabilitiesSize;
  161. // First try with RegisterServer2, if that isn't implemented, use RegisterServer
  162. UA_RegisterServer2Response response;
  163. UA_RegisterServer2Response_init(&response);
  164. __UA_Client_Service(client, &request, &UA_TYPES[UA_TYPES_REGISTERSERVER2REQUEST],
  165. &response, &UA_TYPES[UA_TYPES_REGISTERSERVER2RESPONSE]);
  166. ASSERT_GOOD(response.responseHeader.serviceResult);
  167. UA_free(request.server.discoveryUrls);
  168. UA_ExtensionObject_delete(request.discoveryConfiguration);
  169. UA_RegisterServer2Response_deleteMembers(&response);
  170. return UA_STATUSCODE_GOOD;
  171. }
  172. static UA_StatusCode
  173. readValueRequest(UA_Client *client) {
  174. UA_ReadValueId rvi;
  175. UA_ReadValueId_init(&rvi);
  176. rvi.nodeId = UA_NODEID_NUMERIC(0, UA_NS0ID_SERVER_SERVERSTATUS_STARTTIME);
  177. rvi.attributeId = UA_ATTRIBUTEID_VALUE;
  178. UA_DataValue resp = UA_Server_read(server, &rvi, UA_TIMESTAMPSTORETURN_BOTH);
  179. ASSERT_GOOD(resp.status);
  180. UA_DataValue_deleteMembers(&resp);
  181. return UA_STATUSCODE_GOOD;
  182. }
  183. static UA_StatusCode
  184. writeValueRequest(UA_Client *client) {
  185. UA_WriteValue wValue;
  186. UA_WriteValue_init(&wValue);
  187. UA_LocalizedText testValue = UA_LOCALIZEDTEXT("en-EN", "MyServer");
  188. UA_Variant_setScalar(&wValue.value.value, &testValue, &UA_TYPES[UA_TYPES_LOCALIZEDTEXT]);
  189. wValue.value.hasValue = true;
  190. wValue.nodeId = UA_NODEID_NUMERIC(0, UA_NS0ID_SERVER);
  191. wValue.attributeId = UA_ATTRIBUTEID_DISPLAYNAME;
  192. ASSERT_GOOD(UA_Server_write(server, &wValue));
  193. return UA_STATUSCODE_GOOD;
  194. }
  195. static UA_StatusCode
  196. browseAndBrowseNextRequest(UA_Client *client) {
  197. // Browse node in server folder
  198. UA_BrowseRequest bReq;
  199. UA_BrowseRequest_init(&bReq);
  200. // normally is set to 0, to get all the nodes, but we want to test browse next
  201. bReq.requestedMaxReferencesPerNode = 1;
  202. bReq.nodesToBrowse = UA_BrowseDescription_new();
  203. bReq.nodesToBrowseSize = 1;
  204. bReq.nodesToBrowse[0].nodeId = UA_NODEID_NUMERIC(0, UA_NS0ID_SERVER);
  205. bReq.nodesToBrowse[0].resultMask = UA_BROWSERESULTMASK_ALL;
  206. UA_BrowseResponse bResp = UA_Client_Service_browse(client, bReq);
  207. ASSERT_GOOD(bResp.responseHeader.serviceResult);
  208. // browse next
  209. UA_BrowseNextRequest bNextReq;
  210. UA_BrowseNextRequest_init(&bNextReq);
  211. // normally is set to 0, to get all the nodes, but we want to test browse next
  212. bNextReq.releaseContinuationPoints = UA_FALSE;
  213. bNextReq.continuationPoints = &bResp.results[0].continuationPoint;
  214. bNextReq.continuationPointsSize = 1;
  215. UA_BrowseNextResponse bNextResp = UA_Client_Service_browseNext(client, bNextReq);
  216. ASSERT_GOOD(bNextResp.responseHeader.serviceResult);
  217. UA_BrowseNextResponse_deleteMembers(&bNextResp);
  218. bNextResp = UA_Client_Service_browseNext(client, bNextReq);
  219. ASSERT_GOOD(bNextResp.responseHeader.serviceResult);
  220. UA_BrowseNextResponse_deleteMembers(&bNextResp);
  221. // release continuation point. Result is then empty
  222. bNextReq.releaseContinuationPoints = UA_TRUE;
  223. bNextResp = UA_Client_Service_browseNext(client, bNextReq);
  224. UA_BrowseNextResponse_deleteMembers(&bNextResp);
  225. ASSERT_GOOD(bNextResp.responseHeader.serviceResult);
  226. UA_BrowseRequest_deleteMembers(&bReq);
  227. UA_BrowseResponse_deleteMembers(&bResp);
  228. // already deleted by browse request
  229. bNextReq.continuationPoints = NULL;
  230. bNextReq.continuationPointsSize = 0;
  231. UA_BrowseNextRequest_deleteMembers(&bNextReq);
  232. return UA_STATUSCODE_GOOD;
  233. }
  234. static UA_StatusCode
  235. registerUnregisterNodesRequest(UA_Client *client) {
  236. UA_RegisterNodesRequest req;
  237. UA_RegisterNodesRequest_init(&req);
  238. req.nodesToRegister = UA_NodeId_new();
  239. req.nodesToRegister[0] = UA_NODEID_NUMERIC(0, UA_NS0ID_SERVER_SERVERSTATUS_CURRENTTIME);
  240. req.nodesToRegisterSize = 1;
  241. UA_RegisterNodesResponse res = UA_Client_Service_registerNodes(client, req);
  242. ASSERT_GOOD(res.responseHeader.serviceResult);
  243. UA_UnregisterNodesRequest reqUn;
  244. UA_UnregisterNodesRequest_init(&reqUn);
  245. reqUn.nodesToUnregister = UA_NodeId_new();
  246. reqUn.nodesToUnregister[0] = res.registeredNodeIds[0];
  247. reqUn.nodesToUnregisterSize = 1;
  248. UA_UnregisterNodesResponse resUn = UA_Client_Service_unregisterNodes(client, reqUn);
  249. ASSERT_GOOD(resUn.responseHeader.serviceResult);
  250. UA_UnregisterNodesRequest_deleteMembers(&reqUn);
  251. UA_UnregisterNodesResponse_deleteMembers(&resUn);
  252. UA_RegisterNodesRequest_deleteMembers(&req);
  253. UA_RegisterNodesResponse_deleteMembers(&res);
  254. return UA_STATUSCODE_GOOD;
  255. }
  256. static UA_StatusCode
  257. translateBrowsePathsToNodeIdsRequest(UA_Client *client) {
  258. // Just for testing we want to translate the following path to its corresponding node id
  259. // /Objects/Server/ServerStatus/State
  260. // Equals the following node IDs:
  261. // /85/2253/2256/2259
  262. #define BROWSE_PATHS_SIZE 3
  263. char *paths[BROWSE_PATHS_SIZE] = {"Server", "ServerStatus", "State"};
  264. UA_UInt32 ids[BROWSE_PATHS_SIZE] = {UA_NS0ID_ORGANIZES, UA_NS0ID_HASCOMPONENT, UA_NS0ID_HASCOMPONENT};
  265. UA_BrowsePath browsePath;
  266. UA_BrowsePath_init(&browsePath);
  267. browsePath.startingNode = UA_NODEID_NUMERIC(0, UA_NS0ID_OBJECTSFOLDER);
  268. browsePath.relativePath.elements = (UA_RelativePathElement*)UA_Array_new(BROWSE_PATHS_SIZE, &UA_TYPES[UA_TYPES_RELATIVEPATHELEMENT]);
  269. browsePath.relativePath.elementsSize = BROWSE_PATHS_SIZE;
  270. for(size_t i = 0; i < BROWSE_PATHS_SIZE; i++) {
  271. UA_RelativePathElement *elem = &browsePath.relativePath.elements[i];
  272. elem->referenceTypeId = UA_NODEID_NUMERIC(0, ids[i]);
  273. elem->targetName = UA_QUALIFIEDNAME_ALLOC(0, paths[i]);
  274. }
  275. UA_TranslateBrowsePathsToNodeIdsRequest request;
  276. UA_TranslateBrowsePathsToNodeIdsRequest_init(&request);
  277. request.browsePaths = &browsePath;
  278. request.browsePathsSize = 1;
  279. UA_TranslateBrowsePathsToNodeIdsResponse response = UA_Client_Service_translateBrowsePathsToNodeIds(client, request);
  280. ASSERT_GOOD(response.responseHeader.serviceResult);
  281. UA_BrowsePath_deleteMembers(&browsePath);
  282. UA_TranslateBrowsePathsToNodeIdsResponse_deleteMembers(&response);
  283. return UA_STATUSCODE_GOOD;
  284. }
  285. static void
  286. monitoredItemHandler(UA_UInt32 monId, UA_DataValue *value, void *context) {
  287. }
  288. static UA_StatusCode
  289. subscriptionRequests(UA_Client *client) {
  290. UA_UInt32 subId;
  291. // createSubscriptionRequest
  292. ASSERT_GOOD(UA_Client_Subscriptions_new(client, UA_SubscriptionSettings_default, &subId));
  293. // modifySubscription
  294. UA_ModifySubscriptionRequest modifySubscriptionRequest;
  295. UA_ModifySubscriptionRequest_init(&modifySubscriptionRequest);
  296. modifySubscriptionRequest.subscriptionId = subId;
  297. modifySubscriptionRequest.maxNotificationsPerPublish = UA_SubscriptionSettings_default.maxNotificationsPerPublish;
  298. modifySubscriptionRequest.priority = UA_SubscriptionSettings_default.priority;
  299. modifySubscriptionRequest.requestedLifetimeCount = UA_SubscriptionSettings_default.requestedLifetimeCount;
  300. modifySubscriptionRequest.requestedMaxKeepAliveCount = UA_SubscriptionSettings_default.requestedMaxKeepAliveCount;
  301. modifySubscriptionRequest.requestedPublishingInterval = UA_SubscriptionSettings_default.requestedPublishingInterval;
  302. UA_ModifySubscriptionResponse modifySubscriptionResponse;
  303. __UA_Client_Service(client, &modifySubscriptionRequest, &UA_TYPES[UA_TYPES_MODIFYSUBSCRIPTIONREQUEST],
  304. &modifySubscriptionResponse, &UA_TYPES[UA_TYPES_MODIFYSUBSCRIPTIONRESPONSE]);
  305. ASSERT_GOOD(modifySubscriptionResponse.responseHeader.serviceResult);
  306. UA_ModifySubscriptionRequest_deleteMembers(&modifySubscriptionRequest);
  307. UA_ModifySubscriptionResponse_deleteMembers(&modifySubscriptionResponse);
  308. // setPublishingMode
  309. UA_SetPublishingModeRequest setPublishingModeRequest;
  310. UA_SetPublishingModeRequest_init(&setPublishingModeRequest);
  311. setPublishingModeRequest.subscriptionIdsSize = 1;
  312. setPublishingModeRequest.subscriptionIds = UA_UInt32_new();
  313. setPublishingModeRequest.subscriptionIds[0] = subId;
  314. setPublishingModeRequest.publishingEnabled = UA_TRUE;
  315. UA_SetPublishingModeResponse setPublishingModeResponse;
  316. __UA_Client_Service(client, &setPublishingModeRequest, &UA_TYPES[UA_TYPES_SETPUBLISHINGMODEREQUEST],
  317. &setPublishingModeResponse, &UA_TYPES[UA_TYPES_SETPUBLISHINGMODERESPONSE]);
  318. ASSERT_GOOD(setPublishingModeResponse.responseHeader.serviceResult);
  319. UA_SetPublishingModeRequest_deleteMembers(&setPublishingModeRequest);
  320. UA_SetPublishingModeResponse_deleteMembers(&setPublishingModeResponse);
  321. // createMonitoredItemsRequest
  322. UA_UInt32 monId;
  323. ASSERT_GOOD(UA_Client_Subscriptions_addMonitoredItem(client, subId, UA_NODEID_NUMERIC(0, 2259),
  324. UA_ATTRIBUTEID_VALUE, monitoredItemHandler,
  325. NULL, &monId, 250));
  326. // publishRequest
  327. ASSERT_GOOD(UA_Client_Subscriptions_manuallySendPublishRequest(client));
  328. // republishRequest
  329. UA_RepublishRequest republishRequest;
  330. UA_RepublishRequest_init(&republishRequest);
  331. republishRequest.retransmitSequenceNumber = 0;
  332. republishRequest.subscriptionId = subId;
  333. UA_RepublishResponse republishResponse;
  334. __UA_Client_Service(client, &republishRequest, &UA_TYPES[UA_TYPES_REPUBLISHREQUEST],
  335. &republishResponse, &UA_TYPES[UA_TYPES_REPUBLISHRESPONSE]);
  336. // here we don't care about the return value since it may be UA_STATUSCODE_BADMESSAGENOTAVAILABLE
  337. // ASSERT_GOOD(republishResponse.responseHeader.serviceResult);
  338. UA_RepublishRequest_deleteMembers(&republishRequest);
  339. UA_RepublishResponse_deleteMembers(&republishResponse);
  340. // modifyMonitoredItems
  341. UA_ModifyMonitoredItemsRequest modifyMonitoredItemsRequest;
  342. UA_ModifyMonitoredItemsRequest_init(&modifyMonitoredItemsRequest);
  343. modifyMonitoredItemsRequest.subscriptionId = subId;
  344. modifyMonitoredItemsRequest.itemsToModifySize = 1;
  345. modifyMonitoredItemsRequest.itemsToModify = UA_MonitoredItemModifyRequest_new();
  346. modifyMonitoredItemsRequest.itemsToModify[0].monitoredItemId = monId;
  347. UA_MonitoringParameters_init(&modifyMonitoredItemsRequest.itemsToModify[0].requestedParameters);
  348. UA_ModifyMonitoredItemsResponse modifyMonitoredItemsResponse;
  349. __UA_Client_Service(client, &modifyMonitoredItemsRequest, &UA_TYPES[UA_TYPES_MODIFYMONITOREDITEMSREQUEST],
  350. &modifyMonitoredItemsResponse, &UA_TYPES[UA_TYPES_MODIFYMONITOREDITEMSRESPONSE]);
  351. ASSERT_GOOD(modifyMonitoredItemsResponse.responseHeader.serviceResult);
  352. UA_ModifyMonitoredItemsRequest_deleteMembers(&modifyMonitoredItemsRequest);
  353. UA_ModifyMonitoredItemsResponse_deleteMembers(&modifyMonitoredItemsResponse);
  354. // setMonitoringMode
  355. UA_SetMonitoringModeRequest setMonitoringModeRequest;
  356. UA_SetMonitoringModeRequest_init(&setMonitoringModeRequest);
  357. setMonitoringModeRequest.subscriptionId = subId;
  358. setMonitoringModeRequest.monitoredItemIdsSize = 1;
  359. setMonitoringModeRequest.monitoredItemIds = UA_UInt32_new();
  360. setMonitoringModeRequest.monitoredItemIds[0] = monId;
  361. setMonitoringModeRequest.monitoringMode = UA_MONITORINGMODE_REPORTING;
  362. UA_SetMonitoringModeResponse setMonitoringModeResponse;
  363. __UA_Client_Service(client, &setMonitoringModeRequest, &UA_TYPES[UA_TYPES_SETMONITORINGMODEREQUEST],
  364. &setMonitoringModeResponse, &UA_TYPES[UA_TYPES_SETMONITORINGMODERESPONSE]);
  365. ASSERT_GOOD(setMonitoringModeResponse.responseHeader.serviceResult);
  366. UA_SetMonitoringModeRequest_deleteMembers(&setMonitoringModeRequest);
  367. UA_SetMonitoringModeResponse_deleteMembers(&setMonitoringModeResponse);
  368. // deleteMonitoredItemsRequest
  369. ASSERT_GOOD(UA_Client_Subscriptions_removeMonitoredItem(client, subId, monId));
  370. // deleteSubscriptionRequest
  371. ASSERT_GOOD(UA_Client_Subscriptions_remove(client, subId));
  372. return UA_STATUSCODE_GOOD;
  373. }
  374. static UA_StatusCode
  375. callRequest(UA_Client *client) {
  376. /* Set up the request */
  377. UA_CallRequest request;
  378. UA_CallRequest_init(&request);
  379. UA_CallMethodRequest item;
  380. UA_CallMethodRequest_init(&item);
  381. item.methodId = UA_NODEID_NUMERIC(0, UA_NS0ID_SERVER_GETMONITOREDITEMS);
  382. item.objectId = UA_NODEID_NUMERIC(0, UA_NS0ID_SERVER);
  383. UA_Variant input;
  384. UA_UInt32 subId = 12345;
  385. UA_Variant_init(&input);
  386. UA_Variant_setScalarCopy(&input, &subId, &UA_TYPES[UA_TYPES_UINT32]);
  387. item.inputArgumentsSize = 1;
  388. item.inputArguments = &input;
  389. request.methodsToCall = &item;
  390. request.methodsToCallSize = 1;
  391. /* Call the service */
  392. UA_CallResponse response = UA_Client_Service_call(client, request);
  393. ASSERT_GOOD(response.responseHeader.serviceResult);
  394. UA_CallResponse_deleteMembers(&response);
  395. UA_Variant_deleteMembers(&input);
  396. return UA_STATUSCODE_GOOD;
  397. }
  398. static UA_StatusCode
  399. nodemanagementRequests(UA_Client *client) {
  400. UA_ObjectAttributes attr = UA_ObjectAttributes_default;
  401. attr.description = UA_LOCALIZEDTEXT("en-US", "Some Coordinates");
  402. attr.displayName = UA_LOCALIZEDTEXT("en-US", "Coordinates");
  403. UA_NodeId newObjectId;
  404. ASSERT_GOOD(UA_Client_addObjectNode(client, UA_NODEID_NULL,
  405. UA_NODEID_NUMERIC(0, UA_NS0ID_OBJECTSFOLDER),
  406. UA_NODEID_NUMERIC(0, UA_NS0ID_ORGANIZES),
  407. UA_QUALIFIEDNAME(1, "Coordinates"),
  408. UA_NODEID_NUMERIC(0, UA_NS0ID_FOLDERTYPE), attr, &newObjectId));
  409. UA_ExpandedNodeId target = UA_EXPANDEDNODEID_NULL;
  410. target.nodeId = newObjectId;
  411. ASSERT_GOOD(UA_Client_addReference(client, UA_NODEID_NUMERIC(0, UA_NS0ID_ROOTFOLDER),
  412. UA_NODEID_NUMERIC(0, UA_NS0ID_ORGANIZES),
  413. UA_TRUE, UA_STRING_NULL, target, UA_NODECLASS_OBJECT));
  414. ASSERT_GOOD(UA_Client_deleteReference(client, UA_NODEID_NUMERIC(0, UA_NS0ID_ROOTFOLDER),
  415. UA_NODEID_NUMERIC(0, UA_NS0ID_ORGANIZES),
  416. true, target, true));
  417. ASSERT_GOOD(UA_Client_deleteNode(client, newObjectId, UA_TRUE));
  418. return UA_STATUSCODE_GOOD;
  419. }
  420. static UA_StatusCode
  421. executeClientServices(UA_Client *client) {
  422. ASSERT_GOOD(findServersRequest(client));
  423. ASSERT_GOOD(findServersOnNetworkRequest(client));
  424. ASSERT_GOOD(registerServerRequest(client));
  425. ASSERT_GOOD(registerServer2Request(client));
  426. ASSERT_GOOD(readValueRequest(client));
  427. ASSERT_GOOD(writeValueRequest(client));
  428. ASSERT_GOOD(browseAndBrowseNextRequest(client));
  429. ASSERT_GOOD(registerUnregisterNodesRequest(client));
  430. ASSERT_GOOD(translateBrowsePathsToNodeIdsRequest(client));
  431. ASSERT_GOOD(subscriptionRequests(client));
  432. ASSERT_GOOD(callRequest(client));
  433. ASSERT_GOOD(nodemanagementRequests(client));
  434. return UA_STATUSCODE_GOOD;
  435. }
  436. int main(void) {
  437. emptyCorpusDir();
  438. start_server();
  439. UA_Client *client = UA_Client_new(UA_ClientConfig_default);
  440. // this will also call getEndpointsRequest
  441. UA_StatusCode retval = UA_Client_connect(client, "opc.tcp://localhost:4840");
  442. if(retval == UA_STATUSCODE_GOOD)
  443. retval = executeClientServices(client);
  444. UA_Client_disconnect(client);
  445. UA_Client_delete(client);
  446. if(retval == UA_STATUSCODE_GOOD) {
  447. // now also connect with user/pass so that fuzzer also knows how to do that
  448. client = UA_Client_new(UA_ClientConfig_default);
  449. retval = UA_Client_connect_username(client, "opc.tcp://localhost:4840", "user", "password");
  450. retval = retval == UA_STATUSCODE_BADUSERACCESSDENIED ? UA_STATUSCODE_GOOD : retval;
  451. UA_Client_disconnect(client);
  452. UA_Client_delete(client);
  453. }
  454. teardown_server();
  455. if(retval != UA_STATUSCODE_GOOD) {
  456. printf("\n--------- AN ERROR OCCURRED ----------\nStatus = %s\n", UA_StatusCode_name(retval));
  457. exit(1);
  458. } else {
  459. printf("\n--------- SUCCESS -------\nThe corpus is stored in %s", UA_CORPUS_OUTPUT_DIR);
  460. }
  461. return 0;
  462. }