GH-1083: Fix Input Framework 'change' events for 'set' destinations

src/input/Manager.cc

@@ -515,8 +515,19 @@ bool Manager::CreateTableStream(zeek::RecordVal* fval)
 		}
 
 	auto want_record = fval->GetFieldOrDefault("want_record");
+	auto destination_is_set = dst->GetType()->IsSet();
 
 	if ( val )
+		{
+		if ( destination_is_set )
+			{
+			reporter->Error("Input stream %s: 'destination' field is a set, "
+			                "but the 'val' field was also specified "
+			                "(did you mean to use a table instead of a set?)",
+			                stream_name.data());
+			return false;
+			}
+		else
 			{
 			const auto& table_yield = dst->GetType()->AsTableType()->Yield();
 			const auto& compare_type = want_record->InternalInt() == 0 ? val->GetFieldType(0) : val;
@@ -527,14 +538,15 @@ bool Manager::CreateTableStream(zeek::RecordVal* fval)
 				ODesc desc2;
 				compare_type->Describe(&desc1);
 				table_yield->Describe(&desc2);
-			reporter->Error("Input stream %s: Table type does not match value type. Need type '%s', got '%s'", stream_name.c_str(),
+				reporter->Error("Input stream %s: Table type does not match value type. Need type '%s', got '%s'",
-					desc1.Description(), desc2.Description());
+				                stream_name.c_str(), desc1.Description(), desc2.Description());
 				return false;
 				}
 			}
+		}
 	else
 		{
-		if ( ! dst->GetType()->IsSet() )
+		if ( ! destination_is_set )
 			{
 			reporter->Error("Input stream %s: 'destination' field is a table,"
 			                " but 'val' field is not provided"
@@ -558,10 +570,12 @@ bool Manager::CreateTableStream(zeek::RecordVal* fval)
 			}
 
 		const auto& args = etype->ParamList()->GetTypes();
+		size_t required_arg_count = destination_is_set ? 3 : 4;
 
-		if ( args.size() != 4 )
+		if ( args.size() != required_arg_count )
 			{
-			reporter->Error("Input stream %s: Table event must take 4 arguments", stream_name.c_str());
+			reporter->Error("Input stream %s: Table event must take %zu arguments",
+			                stream_name.c_str(), required_arg_count);
 			return false;
 			}
 
@@ -588,31 +602,34 @@ bool Manager::CreateTableStream(zeek::RecordVal* fval)
 			return false;
 			}
 
+		if ( ! destination_is_set )
+			{
 			if ( want_record->InternalInt() == 1 && val && ! same_type(args[3], val) )
 				{
 				ODesc desc1;
 				ODesc desc2;
 				val->Describe(&desc1);
 				args[3]->Describe(&desc2);
-			reporter->Error("Input stream %s: Table event's value attributes do not match. Need '%s', got '%s'", stream_name.c_str(),
+				reporter->Error("Input stream %s: Table event's value attributes do not match. Need '%s', got '%s'",
-					desc1.Description(), desc2.Description());
+				                stream_name.c_str(), desc1.Description(), desc2.Description());
 				return false;
 				}
-		else if (  want_record->InternalInt() == 0
+			else if ( want_record->InternalInt() == 0 &&
-		           && val && !same_type(args[3], val->GetFieldType(0) ) )
+			          val && !same_type(args[3], val->GetFieldType(0) ) )
 				{
 				ODesc desc1;
 				ODesc desc2;
 				val->GetFieldType(0)->Describe(&desc1);
 				args[3]->Describe(&desc2);
-			reporter->Error("Input stream %s: Table event's value attribute does not match. Need '%s', got '%s'", stream_name.c_str(),
+				reporter->Error("Input stream %s: Table event's value attribute does not match. Need '%s', got '%s'",
-					desc1.Description(), desc2.Description());
+				                stream_name.c_str(), desc1.Description(), desc2.Description());
 				return false;
 				}
 			else if ( ! val )
 				{
 				reporter->Error("Encountered a null value when creating a table stream");
 				}
+			}
 
 		assert(want_record->InternalInt() == 1 || want_record->InternalInt() == 0);
 		}
@@ -1278,10 +1295,7 @@ int Manager::SendEntryTable(Stream* i, const Value* const *vals)
 			{
 			auto ev = zeek::BifType::Enum::Input::Event->GetEnumVal(BifEnum::Input::EVENT_NEW);
 			if ( stream->num_val_fields == 0 )
-				{
-				Ref(stream->description);
 				SendEvent(stream->event, 3, stream->description->Ref(), ev.release(), predidx);
-				}
 			else
 				SendEvent(stream->event, 4, stream->description->Ref(), ev.release(), predidx, valval->Ref());
 			}
@@ -1359,8 +1373,14 @@ void Manager::EndCurrentSend(ReaderFrontend* reader)
 			}
 
 		if ( stream->event )
+			{
+			if ( stream->num_val_fields == 0 )
+				SendEvent(stream->event, 3, stream->description->Ref(), ev->Ref(),
+				          predidx->Ref());
+			else
 				SendEvent(stream->event, 4, stream->description->Ref(), ev->Ref(),
 				          predidx->Ref(), val->Ref());
+			}
 
 		stream->tab->Remove(*ih->idxkey);
 		stream->lastDict->Remove(lastDictIdxKey); // delete in next line
@@ -1618,7 +1638,7 @@ int Manager::PutTable(Stream* i, const Value* const *vals)
 					{
 					auto ev = zeek::BifType::Enum::Input::Event->GetEnumVal(BifEnum::Input::EVENT_NEW);
 					if ( stream->num_val_fields == 0 )
-						SendEvent(stream->event, 4, stream->description->Ref(),
+						SendEvent(stream->event, 3, stream->description->Ref(),
 								ev.release(), predidx);
 					else
 						SendEvent(stream->event, 4, stream->description->Ref(),
@@ -1721,6 +1741,9 @@ bool Manager::Delete(ReaderFrontend* reader, Value* *vals)
 				Ref(idxval);
 				assert(val != nullptr);
 				auto ev = zeek::BifType::Enum::Input::Event->GetEnumVal(BifEnum::Input::EVENT_REMOVED);
+				if ( stream->num_val_fields == 0 )
+					SendEvent(stream->event, 3, stream->description->Ref(), ev.release(), idxval);
+				else
 					SendEvent(stream->event, 4, stream->description->Ref(), ev.release(), idxval, zeek::IntrusivePtr{val}.release());
 				}
 			}

testing/btest/Baseline/scripts.base.frameworks.input.set-event-reread/out

@@ -0,0 +1,7 @@
+entry notification Input::EVENT_NEW: [s=one]
+entry notification Input::EVENT_NEW: [s=two]
+entry notification Input::EVENT_NEW: [s=three]
+entry notification Input::EVENT_REMOVED: [s=three]
+entry notification Input::EVENT_REMOVED: [s=two]
+entry notification Input::EVENT_NEW: [s=four]
+done

testing/btest/Baseline/scripts.base.frameworks.input.set-event-stream/out

@@ -0,0 +1,7 @@
+entry notification Input::EVENT_NEW: [s=one]
+entry notification Input::EVENT_NEW: [s=two]
+entry notification Input::EVENT_NEW: [s=three]
+entry notification Input::EVENT_NEW: [s=four]
+entry notification Input::EVENT_NEW: [s=five]
+entry notification Input::EVENT_NEW: [s=six]
+done

testing/btest/scripts/base/frameworks/input/set-event-reread.zeek

@@ -0,0 +1,66 @@
+# @TEST-EXEC: mv entries.set1 entries.set
+# @TEST-EXEC: btest-bg-run zeek zeek -b %INPUT
+# @TEST-EXEC: $SCRIPTS/wait-for-file zeek/got1 15 || (btest-bg-wait -k 1 && false)
+# @TEST-EXEC: mv entries.set2 entries.set
+# @TEST-EXEC: $SCRIPTS/wait-for-file zeek/got2 15 || (btest-bg-wait -k 1 && false)
+# @TEST-EXEC: mv entries.set3 entries.set
+# @TEST-EXEC: btest-bg-wait 30
+# @TEST-EXEC: btest-diff out
+
+@TEST-START-FILE entries.set1
+#fields	s
+one
+two
+three
+@TEST-END-FILE
+
+@TEST-START-FILE entries.set2
+#fields	s
+one
+@TEST-END-FILE
+
+@TEST-START-FILE entries.set3
+#fields	s
+one
+four
+@TEST-END-FILE
+
+redef exit_only_after_terminate=T;
+
+type Idx: record {
+	s: string;
+};
+
+global entries: set[string] = set();
+global event_count = 0;
+global out = open("../out");
+
+event entry_notify(description: Input::TableDescription, tpe: Input::Event,
+                   left: Idx)
+	{
+	++event_count;
+	print out, fmt("entry notification %s: %s", tpe, left);
+
+	if ( event_count == 3 )
+		system("touch got1");
+	else if ( event_count == 5 )
+		system("touch got2");
+	else if ( event_count == 6 )
+		{
+		print out, "done";
+		close(out);
+		Input::remove("entries");
+		terminate();
+		}
+	}
+
+event zeek_init()
+	{
+	Input::add_table([$source="../entries.set",
+	                  $name="entries",
+	                  $idx=Idx,
+	                  $destination=entries,
+	                  $ev=entry_notify,
+	                  $mode=Input::REREAD
+	                  ]);
+	}

testing/btest/scripts/base/frameworks/input/set-event-stream.zeek

@@ -0,0 +1,57 @@
+# @TEST-EXEC: mv entries.set1 entries.set
+# @TEST-EXEC: btest-bg-run zeek zeek -b %INPUT
+# @TEST-EXEC: $SCRIPTS/wait-for-file zeek/got1 15 || (btest-bg-wait -k 1 && false)
+# @TEST-EXEC: cat entries.set2 >> entries.set
+# @TEST-EXEC: btest-bg-wait 30
+# @TEST-EXEC: btest-diff out
+
+@TEST-START-FILE entries.set1
+#fields	s
+one
+two
+three
+@TEST-END-FILE
+
+@TEST-START-FILE entries.set2
+four
+five
+six
+@TEST-END-FILE
+
+redef exit_only_after_terminate=T;
+
+type Idx: record {
+	s: string;
+};
+
+global entries: set[string] = set();
+global event_count = 0;
+global out = open("../out");
+
+event entry_notify(description: Input::TableDescription, tpe: Input::Event,
+                   left: Idx)
+	{
+	++event_count;
+	print out, fmt("entry notification %s: %s", tpe, left);
+
+	if ( event_count == 3 )
+		system("touch got1");
+	else if ( event_count == 6 )
+		{
+		print out, "done";
+		close(out);
+		Input::remove("entries");
+		terminate();
+		}
+	}
+
+event zeek_init()
+	{
+	Input::add_table([$source="../entries.set",
+	                  $name="entries",
+	                  $idx=Idx,
+	                  $destination=entries,
+	                  $ev=entry_notify,
+	                  $mode=Input::STREAM
+	                  ]);
+	}