fix(ab): destroy the native libplctag tag a failed initialisation leaves behind (T21 press pass 1 crash)

The T21 press pass 1 test host died at exit with "A callback was made on a garbage collected delegate of type ...plctag+callback_func_ex::Invoke". The cause is in libplctag.NET 1.5.2. When a tag's create fails, for example with NotFound, InitializeAsync throws with the callback still registered. Dispose() destroys a tag only if it is initialised, so the native tag outlives its wrapper. The GC then frees the delegate, and libplctag's atexit plc_tag_shutdown raises DESTROYED into it. Reproduced against ab_server: the production LibplctagTagRuntime with a NotFound tag exits 134 with that exact message, and exits 0 with this fix. A timed-out create unregisters its callback but never destroys the handle either, so that native tag keeps reconnecting for the life of the process. The fix adds LibplctagOrphanRelease (AbCip and AbLegacy). After a failed initialise/read/write that leaves the tag uninitialised, it reads the handle through the pinned wrapper's private fields, unregisters the callback and destroys the tag. If those fields cannot be read, it roots the tag for the life of the process instead. It is applied in both tag runtimes, the symbol-listing reader and the template reader. GetStatus keeps the status the tag held before it was destroyed. Pins: offline refused-connection tests in AbCip.Tests and AbLegacy.Tests, a live NotFound test on ab_server, and a reflection-shape pin. All go red with the release disabled. The differential harness also asserts that no orphan had to be rooted. Claude-Session: https://claude.ai/code/session_01Ef2ozxS7QPanGT8uoATbTe
2026-10-07 19:49:03 -04:00
parent c306c6f674
commit 6cd6876229
10 changed files with 462 additions and 12 deletions
@@ -0,0 +1,40 @@
+using libplctag.NativeImport;
+using Shouldly;
+using Xunit;
+using ZB.MOM.WW.OtOpcUa.Driver.Ab.Transport;
+
+namespace ZB.MOM.WW.OtOpcUa.Driver.AbLegacy.Tests;
+
+/// <summary>
+///     T21 press pass 1, AbLegacy side: a failed libplctag initialisation must destroy the native tag it created
+///     (libplctag.NET 1.5.2's <c>Dispose()</c> skips an uninitialised tag, leaving a native tag whose callback can fire
+///     into a collected delegate and kill the process). See <c>LibplctagOrphanRelease</c>.
+/// </summary>
+public sealed class LibplctagLegacyOrphanReleaseTests
+{
+    [Fact]
+    public void The_pinned_libplctag_wrapper_still_exposes_the_native_handle() =>
+        LibplctagOrphanRelease.CanReadHandles.ShouldBeTrue();
+
+    [Fact]
+    public async Task A_failed_initialisation_destroys_the_native_tag_it_created()
+    {
+        var rt = new LibplctagLegacyTagRuntime(new AbLegacyTagCreateParams(
+            Gateway: "127.0.0.1", Port: 1, CipPath: "1,0", LibplctagPlcAttribute: "slc500",
+            TagName: "N7:0", Timeout: TimeSpan.FromMilliseconds(300)));
+        try
+        {
+            await Should.ThrowAsync<AbTransportException>(() => rt.InitializeAsync(CancellationToken.None));
+            var handle = rt.NativeHandle;
+            handle.ShouldBeGreaterThan(0, "plc_tag_create_ex returned a handle before the failure");
+            var exists = plctag.plc_tag_lock(handle) == 0;
+            if (exists) plctag.plc_tag_unlock(handle);
+            exists.ShouldBeFalse("the failed tag's native handle must be destroyed, not orphaned");
+            rt.GetStatus().ShouldNotBe((int)AbStatus.NotFound);
+        }
+        finally
+        {
+            rt.Dispose();
+        }
+    }
+}