Hello,

This particular issue was identified recently by another vendor also, and we have already resolved this issue. The fix however, is not in the current release and will be in the next release scheduled for Q1 2012.

The fix, consists of a new setting within the Server Test -> NodeIds -> Static -> All Profiles -> Scalar -> String MaxLength; scripts that write to strings will/should check this value and adjust their length accordingly. A value of zero indicates no limit.

If you wish, I could provide with an offline version of scripts that are "current" within our SVN repository, which would include some "work-in-progress" scripts which you could overlook. If interested, send me an email (nathan.pocock@opcfoundation.org) and I will send you the files.

Hello,

Thank you for your answer.

If you wish, I could provide with an offline version of scripts that
are "current" within our SVN repository, which would include some "work-in-
progress" scripts which you could overlook. If interested, send me an email
(nathan.pocock@opcfoundation.org) and I will send you the files.
I want to get the scripts that fixed this issue.
So I will send you an email soon.

Scripts modified so that the static value defined in each script is replaced by a call to a global function that will generate a random string withing the bounds specified by the max-length setting.

Scripts checked-into current branch that is being worked on, Rev. 2982:
\branches\security

Never reviewed, but issue was in very old version of CTT and works correctly now.