dohertj2/lmxopcua
1
0
Fork 0
Code Issues 1 Pull Requests 1 Actions Packages Projects Releases Wiki Activity

fix(core): resolve Medium code-review finding (Core-006)

Browse Source 
BuildAddressSpaceAsync now checks _disposed (throws ObjectDisposedException)
and tears down the previous alarm forwarder + clears the sink registry
before re-walking, so a Galaxy-redeploy rebuild does not leak the old
forwarder and double-deliver alarm transitions.  Three regression tests
added: double-build does not double-fire, sink count is correct after
rebuild, and post-dispose call throws.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
Joseph Doherty
2026-05-22 08:24:08 -04:00
parent debe163f4d
commit 6cec98caef
2 changed files with 70 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

55
tests/Core/ZB.MOM.WW.OtOpcUa.Core.Tests/GenericDriverNodeManagerTests.cs
View File

@@ -88,6 +88,61 @@ public sealed class GenericDriverNodeManagerTests
builder.Alarms["Tank.HiHi"].Received.Count.ShouldBe(0);
}
/// <summary>
/// Core-006 regression: a second call to BuildAddressSpaceAsync (e.g. on Galaxy redeploy)
/// must unsubscribe the old alarm forwarder and clear the sink registry before re-walking,
/// so alarm transitions are not delivered twice.
/// </summary>
[Fact]
public async Task Second_BuildAddressSpaceAsync_Does_Not_Double_Fire_Alarms()
{
var driver = new FakeDriver();
var builder1 = new RecordingBuilder();
var builder2 = new RecordingBuilder();
using var nm = new GenericDriverNodeManager(driver);
await nm.BuildAddressSpaceAsync(builder1, CancellationToken.None);
await nm.BuildAddressSpaceAsync(builder2, CancellationToken.None); // redeploy
driver.RaiseAlarm(new AlarmEventArgs(
new FakeHandle("s1"), "Tank.HiHi", "c", "t", "m", AlarmSeverity.High, DateTime.UtcNow));
// Only the second builder's sink should have received the event.
builder2.Alarms["Tank.HiHi"].Received.Count.ShouldBe(1,
"second BuildAddressSpaceAsync must replace the subscription — not add to it");
// The first builder's sink should NOT have received it (old forwarder was detached).
builder1.Alarms.TryGetValue("Tank.HiHi", out var oldSink);
(oldSink?.Received.Count ?? 0).ShouldBe(0,
"the original alarm forwarder must be unsubscribed on the second build");
}
[Fact]
public async Task Second_BuildAddressSpaceAsync_Clears_Old_Sink_Registry()
{
var driver = new FakeDriver();
using var nm = new GenericDriverNodeManager(driver);
await nm.BuildAddressSpaceAsync(new RecordingBuilder(), CancellationToken.None);
var countAfterFirst = nm.TrackedAlarmSources.Count;
await nm.BuildAddressSpaceAsync(new RecordingBuilder(), CancellationToken.None);
var countAfterSecond = nm.TrackedAlarmSources.Count;
countAfterFirst.ShouldBe(2, "FakeDriver registers 2 alarm sources");
countAfterSecond.ShouldBe(2, "second build must re-register exactly the same sources, not accumulate");
}
[Fact]
public async Task BuildAddressSpaceAsync_After_Dispose_Throws_ObjectDisposedException()
{
var driver = new FakeDriver();
var nm = new GenericDriverNodeManager(driver);
nm.Dispose();
await Should.ThrowAsync<ObjectDisposedException>(() =>
nm.BuildAddressSpaceAsync(new RecordingBuilder(), CancellationToken.None));
}
// --- test doubles ---
private sealed class FakeDriver : IDriver, ITagDiscovery, IAlarmSource