mshtml: Call on_start_nsrequest synchronously in async_stop_request is no data was...
[wine] / dlls / mshtml / navigate.c
1 /*
2  * Copyright 2006-2010 Jacek Caban for CodeWeavers
3  *
4  * This library is free software; you can redistribute it and/or
5  * modify it under the terms of the GNU Lesser General Public
6  * License as published by the Free Software Foundation; either
7  * version 2.1 of the License, or (at your option) any later version.
8  *
9  * This library is distributed in the hope that it will be useful,
10  * but WITHOUT ANY WARRANTY; without even the implied warranty of
11  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
12  * Lesser General Public License for more details.
13  *
14  * You should have received a copy of the GNU Lesser General Public
15  * License along with this library; if not, write to the Free Software
16  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
17  */
18
19 #include "config.h"
20
21 #include <stdarg.h>
22
23 #define COBJMACROS
24 #define NONAMELESSUNION
25 #define NONAMELESSSTRUCT
26
27 #include "windef.h"
28 #include "winbase.h"
29 #include "winuser.h"
30 #include "winreg.h"
31 #include "ole2.h"
32 #include "hlguids.h"
33 #include "shlguid.h"
34 #include "wininet.h"
35 #include "shlwapi.h"
36
37 #include "wine/debug.h"
38 #include "wine/unicode.h"
39
40 #include "mshtml_private.h"
41
42 WINE_DEFAULT_DEBUG_CHANNEL(mshtml);
43
44 #define CONTENT_LENGTH "Content-Length"
45 #define UTF16_STR "utf-16"
46
47 typedef struct {
48     nsIInputStream nsIInputStream_iface;
49
50     LONG ref;
51
52     char buf[1024];
53     DWORD buf_size;
54 } nsProtocolStream;
55
56 typedef struct {
57     void (*destroy)(BSCallback*);
58     HRESULT (*init_bindinfo)(BSCallback*);
59     HRESULT (*start_binding)(BSCallback*);
60     HRESULT (*stop_binding)(BSCallback*,HRESULT);
61     HRESULT (*read_data)(BSCallback*,IStream*);
62     HRESULT (*on_progress)(BSCallback*,ULONG,LPCWSTR);
63     HRESULT (*on_response)(BSCallback*,DWORD,LPCWSTR);
64     HRESULT (*beginning_transaction)(BSCallback*,WCHAR**);
65 } BSCallbackVtbl;
66
67 struct BSCallback {
68     IBindStatusCallback IBindStatusCallback_iface;
69     IServiceProvider    IServiceProvider_iface;
70     IHttpNegotiate2     IHttpNegotiate2_iface;
71     IInternetBindInfo   IInternetBindInfo_iface;
72
73     const BSCallbackVtbl          *vtbl;
74
75     LONG ref;
76
77     LPWSTR headers;
78     HGLOBAL post_data;
79     ULONG post_data_len;
80     ULONG readed;
81     DWORD bindf;
82     BOOL bindinfo_ready;
83
84     IMoniker *mon;
85     IBinding *binding;
86
87     HTMLDocumentNode *doc;
88
89     struct list entry;
90 };
91
92 static inline nsProtocolStream *impl_from_nsIInputStream(nsIInputStream *iface)
93 {
94     return CONTAINING_RECORD(iface, nsProtocolStream, nsIInputStream_iface);
95 }
96
97 static nsresult NSAPI nsInputStream_QueryInterface(nsIInputStream *iface, nsIIDRef riid,
98         void **result)
99 {
100     nsProtocolStream *This = impl_from_nsIInputStream(iface);
101
102     *result = NULL;
103
104     if(IsEqualGUID(&IID_nsISupports, riid)) {
105         TRACE("(%p)->(IID_nsISupports %p)\n", This, result);
106         *result  = &This->nsIInputStream_iface;
107     }else if(IsEqualGUID(&IID_nsIInputStream, riid)) {
108         TRACE("(%p)->(IID_nsIInputStream %p)\n", This, result);
109         *result  = &This->nsIInputStream_iface;
110     }
111
112     if(*result) {
113         nsIInputStream_AddRef(&This->nsIInputStream_iface);
114         return NS_OK;
115     }
116
117     WARN("unsupported interface %s\n", debugstr_guid(riid));
118     return NS_NOINTERFACE;
119 }
120
121 static nsrefcnt NSAPI nsInputStream_AddRef(nsIInputStream *iface)
122 {
123     nsProtocolStream *This = impl_from_nsIInputStream(iface);
124     LONG ref = InterlockedIncrement(&This->ref);
125
126     TRACE("(%p) ref=%d\n", This, ref);
127
128     return ref;
129 }
130
131
132 static nsrefcnt NSAPI nsInputStream_Release(nsIInputStream *iface)
133 {
134     nsProtocolStream *This = impl_from_nsIInputStream(iface);
135     LONG ref = InterlockedDecrement(&This->ref);
136
137     TRACE("(%p) ref=%d\n", This, ref);
138
139     if(!ref)
140         heap_free(This);
141
142     return ref;
143 }
144
145 static nsresult NSAPI nsInputStream_Close(nsIInputStream *iface)
146 {
147     nsProtocolStream *This = impl_from_nsIInputStream(iface);
148     FIXME("(%p)\n", This);
149     return NS_ERROR_NOT_IMPLEMENTED;
150 }
151
152 static nsresult NSAPI nsInputStream_Available(nsIInputStream *iface, PRUint32 *_retval)
153 {
154     nsProtocolStream *This = impl_from_nsIInputStream(iface);
155     FIXME("(%p)->(%p)\n", This, _retval);
156     return NS_ERROR_NOT_IMPLEMENTED;
157 }
158
159 static nsresult NSAPI nsInputStream_Read(nsIInputStream *iface, char *aBuf, PRUint32 aCount,
160                                          PRUint32 *_retval)
161 {
162     nsProtocolStream *This = impl_from_nsIInputStream(iface);
163     DWORD read = aCount;
164
165     TRACE("(%p)->(%p %d %p)\n", This, aBuf, aCount, _retval);
166
167     if(read > This->buf_size)
168         read = This->buf_size;
169
170     if(read) {
171         memcpy(aBuf, This->buf, read);
172         if(read < This->buf_size)
173             memmove(This->buf, This->buf+read, This->buf_size-read);
174         This->buf_size -= read;
175     }
176
177     *_retval = read;
178     return NS_OK;
179 }
180
181 static nsresult NSAPI nsInputStream_ReadSegments(nsIInputStream *iface,
182         nsresult (WINAPI *aWriter)(nsIInputStream*,void*,const char*,PRUint32,PRUint32,PRUint32*),
183         void *aClousure, PRUint32 aCount, PRUint32 *_retval)
184 {
185     nsProtocolStream *This = impl_from_nsIInputStream(iface);
186     PRUint32 written = 0;
187     nsresult nsres;
188
189     TRACE("(%p)->(%p %p %d %p)\n", This, aWriter, aClousure, aCount, _retval);
190
191     if(!This->buf_size)
192         return S_OK;
193
194     if(aCount > This->buf_size)
195         aCount = This->buf_size;
196
197     nsres = aWriter(&This->nsIInputStream_iface, aClousure, This->buf, 0, aCount, &written);
198     if(NS_FAILED(nsres))
199         TRACE("aWritter failed: %08x\n", nsres);
200     else if(written != This->buf_size)
201         FIXME("written %d != buf_size %d\n", written, This->buf_size);
202
203     This->buf_size -= written; 
204
205     *_retval = written;
206     return nsres;
207 }
208
209 static nsresult NSAPI nsInputStream_IsNonBlocking(nsIInputStream *iface, PRBool *_retval)
210 {
211     nsProtocolStream *This = impl_from_nsIInputStream(iface);
212     FIXME("(%p)->(%p)\n", This, _retval);
213     return NS_ERROR_NOT_IMPLEMENTED;
214 }
215
216 static const nsIInputStreamVtbl nsInputStreamVtbl = {
217     nsInputStream_QueryInterface,
218     nsInputStream_AddRef,
219     nsInputStream_Release,
220     nsInputStream_Close,
221     nsInputStream_Available,
222     nsInputStream_Read,
223     nsInputStream_ReadSegments,
224     nsInputStream_IsNonBlocking
225 };
226
227 static nsProtocolStream *create_nsprotocol_stream(void)
228 {
229     nsProtocolStream *ret = heap_alloc(sizeof(nsProtocolStream));
230
231     ret->nsIInputStream_iface.lpVtbl = &nsInputStreamVtbl;
232     ret->ref = 1;
233     ret->buf_size = 0;
234
235     return ret;
236 }
237
238 static inline BSCallback *impl_from_IBindStatusCallback(IBindStatusCallback *iface)
239 {
240     return CONTAINING_RECORD(iface, BSCallback, IBindStatusCallback_iface);
241 }
242
243 static HRESULT WINAPI BindStatusCallback_QueryInterface(IBindStatusCallback *iface,
244         REFIID riid, void **ppv)
245 {
246     BSCallback *This = impl_from_IBindStatusCallback(iface);
247
248     *ppv = NULL;
249     if(IsEqualGUID(&IID_IUnknown, riid)) {
250         TRACE("(%p)->(IID_IUnknown, %p)\n", This, ppv);
251         *ppv = &This->IBindStatusCallback_iface;
252     }else if(IsEqualGUID(&IID_IBindStatusCallback, riid)) {
253         TRACE("(%p)->(IID_IBindStatusCallback, %p)\n", This, ppv);
254         *ppv = &This->IBindStatusCallback_iface;
255     }else if(IsEqualGUID(&IID_IServiceProvider, riid)) {
256         TRACE("(%p)->(IID_IServiceProvider %p)\n", This, ppv);
257         *ppv = &This->IServiceProvider_iface;
258     }else if(IsEqualGUID(&IID_IHttpNegotiate, riid)) {
259         TRACE("(%p)->(IID_IHttpNegotiate %p)\n", This, ppv);
260         *ppv = &This->IHttpNegotiate2_iface;
261     }else if(IsEqualGUID(&IID_IHttpNegotiate2, riid)) {
262         TRACE("(%p)->(IID_IHttpNegotiate2 %p)\n", This, ppv);
263         *ppv = &This->IHttpNegotiate2_iface;
264     }else if(IsEqualGUID(&IID_IInternetBindInfo, riid)) {
265         TRACE("(%p)->(IID_IInternetBindInfo %p)\n", This, ppv);
266         *ppv = &This->IInternetBindInfo_iface;
267     }
268
269     if(*ppv) {
270         IBindStatusCallback_AddRef(&This->IBindStatusCallback_iface);
271         return S_OK;
272     }
273
274     TRACE("Unsupported riid = %s\n", debugstr_guid(riid));
275     return E_NOINTERFACE;
276 }
277
278 static ULONG WINAPI BindStatusCallback_AddRef(IBindStatusCallback *iface)
279 {
280     BSCallback *This = impl_from_IBindStatusCallback(iface);
281     LONG ref = InterlockedIncrement(&This->ref);
282
283     TRACE("(%p) ref = %d\n", This, ref);
284
285     return ref;
286 }
287
288 static ULONG WINAPI BindStatusCallback_Release(IBindStatusCallback *iface)
289 {
290     BSCallback *This = impl_from_IBindStatusCallback(iface);
291     LONG ref = InterlockedDecrement(&This->ref);
292
293     TRACE("(%p) ref = %d\n", This, ref);
294
295     if(!ref) {
296         if(This->post_data)
297             GlobalFree(This->post_data);
298         if(This->mon)
299             IMoniker_Release(This->mon);
300         if(This->binding)
301             IBinding_Release(This->binding);
302         list_remove(&This->entry);
303         list_init(&This->entry);
304         heap_free(This->headers);
305
306         This->vtbl->destroy(This);
307     }
308
309     return ref;
310 }
311
312 static HRESULT WINAPI BindStatusCallback_OnStartBinding(IBindStatusCallback *iface,
313         DWORD dwReserved, IBinding *pbind)
314 {
315     BSCallback *This = impl_from_IBindStatusCallback(iface);
316
317     TRACE("(%p)->(%d %p)\n", This, dwReserved, pbind);
318
319     IBinding_AddRef(pbind);
320     This->binding = pbind;
321
322     if(This->doc)
323         list_add_head(&This->doc->bindings, &This->entry);
324
325     return This->vtbl->start_binding(This);
326 }
327
328 static HRESULT WINAPI BindStatusCallback_GetPriority(IBindStatusCallback *iface, LONG *pnPriority)
329 {
330     BSCallback *This = impl_from_IBindStatusCallback(iface);
331     FIXME("(%p)->(%p)\n", This, pnPriority);
332     return E_NOTIMPL;
333 }
334
335 static HRESULT WINAPI BindStatusCallback_OnLowResource(IBindStatusCallback *iface, DWORD reserved)
336 {
337     BSCallback *This = impl_from_IBindStatusCallback(iface);
338     FIXME("(%p)->(%d)\n", This, reserved);
339     return E_NOTIMPL;
340 }
341
342 static HRESULT WINAPI BindStatusCallback_OnProgress(IBindStatusCallback *iface, ULONG ulProgress,
343         ULONG ulProgressMax, ULONG ulStatusCode, LPCWSTR szStatusText)
344 {
345     BSCallback *This = impl_from_IBindStatusCallback(iface);
346
347     TRACE("%p)->(%u %u %u %s)\n", This, ulProgress, ulProgressMax, ulStatusCode,
348             debugstr_w(szStatusText));
349
350     return This->vtbl->on_progress(This, ulStatusCode, szStatusText);
351 }
352
353 static HRESULT WINAPI BindStatusCallback_OnStopBinding(IBindStatusCallback *iface,
354         HRESULT hresult, LPCWSTR szError)
355 {
356     BSCallback *This = impl_from_IBindStatusCallback(iface);
357     HRESULT hres;
358
359     TRACE("(%p)->(%08x %s)\n", This, hresult, debugstr_w(szError));
360
361     /* NOTE: IE7 calls GetBindResult here */
362
363     hres = This->vtbl->stop_binding(This, hresult);
364
365     if(This->binding) {
366         IBinding_Release(This->binding);
367         This->binding = NULL;
368     }
369
370     list_remove(&This->entry);
371     list_init(&This->entry);
372     This->doc = NULL;
373
374     return hres;
375 }
376
377 static HRESULT WINAPI BindStatusCallback_GetBindInfo(IBindStatusCallback *iface,
378         DWORD *grfBINDF, BINDINFO *pbindinfo)
379 {
380     BSCallback *This = impl_from_IBindStatusCallback(iface);
381     DWORD size;
382
383     TRACE("(%p)->(%p %p)\n", This, grfBINDF, pbindinfo);
384
385     if(!This->bindinfo_ready) {
386         HRESULT hres;
387
388         hres = This->vtbl->init_bindinfo(This);
389         if(FAILED(hres))
390             return hres;
391
392         This->bindinfo_ready = TRUE;
393     }
394
395     *grfBINDF = This->bindf;
396
397     size = pbindinfo->cbSize;
398     memset(pbindinfo, 0, size);
399     pbindinfo->cbSize = size;
400
401     pbindinfo->cbstgmedData = This->post_data_len;
402     pbindinfo->dwCodePage = CP_UTF8;
403     pbindinfo->dwOptions = 0x80000;
404
405     if(This->post_data) {
406         pbindinfo->dwBindVerb = BINDVERB_POST;
407
408         pbindinfo->stgmedData.tymed = TYMED_HGLOBAL;
409         pbindinfo->stgmedData.u.hGlobal = This->post_data;
410         pbindinfo->stgmedData.pUnkForRelease = (IUnknown*)&This->IBindStatusCallback_iface;
411         IBindStatusCallback_AddRef(&This->IBindStatusCallback_iface);
412     }
413
414     return S_OK;
415 }
416
417 static HRESULT WINAPI BindStatusCallback_OnDataAvailable(IBindStatusCallback *iface,
418         DWORD grfBSCF, DWORD dwSize, FORMATETC *pformatetc, STGMEDIUM *pstgmed)
419 {
420     BSCallback *This = impl_from_IBindStatusCallback(iface);
421
422     TRACE("(%p)->(%08x %d %p %p)\n", This, grfBSCF, dwSize, pformatetc, pstgmed);
423
424     return This->vtbl->read_data(This, pstgmed->u.pstm);
425 }
426
427 static HRESULT WINAPI BindStatusCallback_OnObjectAvailable(IBindStatusCallback *iface,
428         REFIID riid, IUnknown *punk)
429 {
430     BSCallback *This = impl_from_IBindStatusCallback(iface);
431     FIXME("(%p)->(%s %p)\n", This, debugstr_guid(riid), punk);
432     return E_NOTIMPL;
433 }
434
435 static const IBindStatusCallbackVtbl BindStatusCallbackVtbl = {
436     BindStatusCallback_QueryInterface,
437     BindStatusCallback_AddRef,
438     BindStatusCallback_Release,
439     BindStatusCallback_OnStartBinding,
440     BindStatusCallback_GetPriority,
441     BindStatusCallback_OnLowResource,
442     BindStatusCallback_OnProgress,
443     BindStatusCallback_OnStopBinding,
444     BindStatusCallback_GetBindInfo,
445     BindStatusCallback_OnDataAvailable,
446     BindStatusCallback_OnObjectAvailable
447 };
448
449 static inline BSCallback *impl_from_IHttpNegotiate2(IHttpNegotiate2 *iface)
450 {
451     return CONTAINING_RECORD(iface, BSCallback, IHttpNegotiate2_iface);
452 }
453
454 static HRESULT WINAPI HttpNegotiate_QueryInterface(IHttpNegotiate2 *iface,
455                                                    REFIID riid, void **ppv)
456 {
457     BSCallback *This = impl_from_IHttpNegotiate2(iface);
458     return IBindStatusCallback_QueryInterface(&This->IBindStatusCallback_iface, riid, ppv);
459 }
460
461 static ULONG WINAPI HttpNegotiate_AddRef(IHttpNegotiate2 *iface)
462 {
463     BSCallback *This = impl_from_IHttpNegotiate2(iface);
464     return IBindStatusCallback_AddRef(&This->IBindStatusCallback_iface);
465 }
466
467 static ULONG WINAPI HttpNegotiate_Release(IHttpNegotiate2 *iface)
468 {
469     BSCallback *This = impl_from_IHttpNegotiate2(iface);
470     return IBindStatusCallback_Release(&This->IBindStatusCallback_iface);
471 }
472
473 static HRESULT WINAPI HttpNegotiate_BeginningTransaction(IHttpNegotiate2 *iface,
474         LPCWSTR szURL, LPCWSTR szHeaders, DWORD dwReserved, LPWSTR *pszAdditionalHeaders)
475 {
476     BSCallback *This = impl_from_IHttpNegotiate2(iface);
477     HRESULT hres;
478
479     TRACE("(%p)->(%s %s %d %p)\n", This, debugstr_w(szURL), debugstr_w(szHeaders),
480           dwReserved, pszAdditionalHeaders);
481
482     *pszAdditionalHeaders = NULL;
483
484     hres = This->vtbl->beginning_transaction(This, pszAdditionalHeaders);
485     if(hres != S_FALSE)
486         return hres;
487
488     if(This->headers) {
489         DWORD size;
490
491         size = (strlenW(This->headers)+1)*sizeof(WCHAR);
492         *pszAdditionalHeaders = CoTaskMemAlloc(size);
493         if(!*pszAdditionalHeaders)
494             return E_OUTOFMEMORY;
495         memcpy(*pszAdditionalHeaders, This->headers, size);
496     }
497
498     return S_OK;
499 }
500
501 static HRESULT WINAPI HttpNegotiate_OnResponse(IHttpNegotiate2 *iface, DWORD dwResponseCode,
502         LPCWSTR szResponseHeaders, LPCWSTR szRequestHeaders, LPWSTR *pszAdditionalRequestHeaders)
503 {
504     BSCallback *This = impl_from_IHttpNegotiate2(iface);
505
506     TRACE("(%p)->(%d %s %s %p)\n", This, dwResponseCode, debugstr_w(szResponseHeaders),
507           debugstr_w(szRequestHeaders), pszAdditionalRequestHeaders);
508
509     return This->vtbl->on_response(This, dwResponseCode, szResponseHeaders);
510 }
511
512 static HRESULT WINAPI HttpNegotiate_GetRootSecurityId(IHttpNegotiate2 *iface,
513         BYTE *pbSecurityId, DWORD *pcbSecurityId, DWORD_PTR dwReserved)
514 {
515     BSCallback *This = impl_from_IHttpNegotiate2(iface);
516     FIXME("(%p)->(%p %p %ld)\n", This, pbSecurityId, pcbSecurityId, dwReserved);
517     return E_NOTIMPL;
518 }
519
520 static const IHttpNegotiate2Vtbl HttpNegotiate2Vtbl = {
521     HttpNegotiate_QueryInterface,
522     HttpNegotiate_AddRef,
523     HttpNegotiate_Release,
524     HttpNegotiate_BeginningTransaction,
525     HttpNegotiate_OnResponse,
526     HttpNegotiate_GetRootSecurityId
527 };
528
529 static inline BSCallback *impl_from_IInternetBindInfo(IInternetBindInfo *iface)
530 {
531     return CONTAINING_RECORD(iface, BSCallback, IInternetBindInfo_iface);
532 }
533
534 static HRESULT WINAPI InternetBindInfo_QueryInterface(IInternetBindInfo *iface,
535                                                       REFIID riid, void **ppv)
536 {
537     BSCallback *This = impl_from_IInternetBindInfo(iface);
538     return IBindStatusCallback_QueryInterface(&This->IBindStatusCallback_iface, riid, ppv);
539 }
540
541 static ULONG WINAPI InternetBindInfo_AddRef(IInternetBindInfo *iface)
542 {
543     BSCallback *This = impl_from_IInternetBindInfo(iface);
544     return IBindStatusCallback_AddRef(&This->IBindStatusCallback_iface);
545 }
546
547 static ULONG WINAPI InternetBindInfo_Release(IInternetBindInfo *iface)
548 {
549     BSCallback *This = impl_from_IInternetBindInfo(iface);
550     return IBindStatusCallback_Release(&This->IBindStatusCallback_iface);
551 }
552
553 static HRESULT WINAPI InternetBindInfo_GetBindInfo(IInternetBindInfo *iface,
554                                                    DWORD *grfBINDF, BINDINFO *pbindinfo)
555 {
556     BSCallback *This = impl_from_IInternetBindInfo(iface);
557     FIXME("(%p)->(%p %p)\n", This, grfBINDF, pbindinfo);
558     return E_NOTIMPL;
559 }
560
561 static HRESULT WINAPI InternetBindInfo_GetBindString(IInternetBindInfo *iface,
562         ULONG ulStringType, LPOLESTR *ppwzStr, ULONG cEl, ULONG *pcElFetched)
563 {
564     BSCallback *This = impl_from_IInternetBindInfo(iface);
565     FIXME("(%p)->(%u %p %u %p)\n", This, ulStringType, ppwzStr, cEl, pcElFetched);
566     return E_NOTIMPL;
567 }
568
569 static const IInternetBindInfoVtbl InternetBindInfoVtbl = {
570     InternetBindInfo_QueryInterface,
571     InternetBindInfo_AddRef,
572     InternetBindInfo_Release,
573     InternetBindInfo_GetBindInfo,
574     InternetBindInfo_GetBindString
575 };
576
577 static inline BSCallback *impl_from_IServiceProvider(IServiceProvider *iface)
578 {
579     return CONTAINING_RECORD(iface, BSCallback, IServiceProvider_iface);
580 }
581
582 static HRESULT WINAPI BSCServiceProvider_QueryInterface(IServiceProvider *iface,
583                                                         REFIID riid, void **ppv)
584 {
585     BSCallback *This = impl_from_IServiceProvider(iface);
586     return IBindStatusCallback_QueryInterface(&This->IBindStatusCallback_iface, riid, ppv);
587 }
588
589 static ULONG WINAPI BSCServiceProvider_AddRef(IServiceProvider *iface)
590 {
591     BSCallback *This = impl_from_IServiceProvider(iface);
592     return IBindStatusCallback_AddRef(&This->IBindStatusCallback_iface);
593 }
594
595 static ULONG WINAPI BSCServiceProvider_Release(IServiceProvider *iface)
596 {
597     BSCallback *This = impl_from_IServiceProvider(iface);
598     return IBindStatusCallback_Release(&This->IBindStatusCallback_iface);
599 }
600
601 static HRESULT WINAPI BSCServiceProvider_QueryService(IServiceProvider *iface,
602         REFGUID guidService, REFIID riid, void **ppv)
603 {
604     BSCallback *This = impl_from_IServiceProvider(iface);
605     TRACE("(%p)->(%s %s %p)\n", This, debugstr_guid(guidService), debugstr_guid(riid), ppv);
606     return E_NOINTERFACE;
607 }
608
609 static const IServiceProviderVtbl ServiceProviderVtbl = {
610     BSCServiceProvider_QueryInterface,
611     BSCServiceProvider_AddRef,
612     BSCServiceProvider_Release,
613     BSCServiceProvider_QueryService
614 };
615
616 static void init_bscallback(BSCallback *This, const BSCallbackVtbl *vtbl, IMoniker *mon, DWORD bindf)
617 {
618     This->IBindStatusCallback_iface.lpVtbl = &BindStatusCallbackVtbl;
619     This->IServiceProvider_iface.lpVtbl = &ServiceProviderVtbl;
620     This->IHttpNegotiate2_iface.lpVtbl = &HttpNegotiate2Vtbl;
621     This->IInternetBindInfo_iface.lpVtbl = &InternetBindInfoVtbl;
622     This->vtbl = vtbl;
623     This->ref = 1;
624     This->bindf = bindf;
625
626     list_init(&This->entry);
627
628     if(mon)
629         IMoniker_AddRef(mon);
630     This->mon = mon;
631 }
632
633 /* Calls undocumented 84 cmd of CGID_ShellDocView */
634 static void call_docview_84(HTMLDocumentObj *doc)
635 {
636     IOleCommandTarget *olecmd;
637     VARIANT var;
638     HRESULT hres;
639
640     if(!doc->client)
641         return;
642
643     hres = IOleClientSite_QueryInterface(doc->client, &IID_IOleCommandTarget, (void**)&olecmd);
644     if(FAILED(hres))
645         return;
646
647     VariantInit(&var);
648     hres = IOleCommandTarget_Exec(olecmd, &CGID_ShellDocView, 84, 0, NULL, &var);
649     IOleCommandTarget_Release(olecmd);
650     if(SUCCEEDED(hres) && V_VT(&var) != VT_NULL)
651         FIXME("handle result\n");
652 }
653
654 static HRESULT parse_headers(const WCHAR *headers, struct list *headers_list)
655 {
656     const WCHAR *header, *header_end, *colon, *value;
657     HRESULT hres;
658
659     header = headers;
660     while(*header) {
661         if(header[0] == '\r' && header[1] == '\n' && !header[2])
662             break;
663         for(colon = header; *colon && *colon != ':' && *colon != '\r'; colon++);
664         if(*colon != ':')
665             return E_FAIL;
666
667         value = colon+1;
668         while(*value == ' ')
669             value++;
670         if(!*value)
671             return E_FAIL;
672
673         for(header_end = value+1; *header_end && *header_end != '\r'; header_end++);
674
675         hres = set_http_header(headers_list, header, colon-header, value, header_end-value);
676         if(FAILED(hres))
677             return hres;
678
679         header = header_end;
680         if(header[0] == '\r' && header[1] == '\n')
681             header += 2;
682     }
683
684     return S_OK;
685 }
686
687 HRESULT start_binding(HTMLWindow *window, HTMLDocumentNode *doc, BSCallback *bscallback, IBindCtx *bctx)
688 {
689     IStream *str = NULL;
690     HRESULT hres;
691
692     TRACE("(%p %p %p %p)\n", window, doc, bscallback, bctx);
693
694     bscallback->doc = doc;
695
696     /* NOTE: IE7 calls IsSystemMoniker here*/
697
698     if(window) {
699         if(bscallback->mon != window->mon)
700             set_current_mon(window, bscallback->mon);
701         call_docview_84(window->doc_obj);
702     }
703
704     if(bctx) {
705         RegisterBindStatusCallback(bctx, &bscallback->IBindStatusCallback_iface, NULL, 0);
706         IBindCtx_AddRef(bctx);
707     }else {
708         hres = CreateAsyncBindCtx(0, &bscallback->IBindStatusCallback_iface, NULL, &bctx);
709         if(FAILED(hres)) {
710             WARN("CreateAsyncBindCtx failed: %08x\n", hres);
711             bscallback->vtbl->stop_binding(bscallback, hres);
712             return hres;
713         }
714     }
715
716     hres = IMoniker_BindToStorage(bscallback->mon, bctx, NULL, &IID_IStream, (void**)&str);
717     IBindCtx_Release(bctx);
718     if(FAILED(hres)) {
719         WARN("BindToStorage failed: %08x\n", hres);
720         bscallback->vtbl->stop_binding(bscallback, hres);
721         return hres;
722     }
723
724     if(str)
725         IStream_Release(str);
726
727     IMoniker_Release(bscallback->mon);
728     bscallback->mon = NULL;
729
730     return S_OK;
731 }
732
733 typedef struct {
734     BSCallback bsc;
735
736     DWORD size;
737     BYTE *buf;
738     HRESULT hres;
739 } BufferBSC;
740
741 static inline BufferBSC *BufferBSC_from_BSCallback(BSCallback *iface)
742 {
743     return CONTAINING_RECORD(iface, BufferBSC, bsc);
744 }
745
746 static void BufferBSC_destroy(BSCallback *bsc)
747 {
748     BufferBSC *This = BufferBSC_from_BSCallback(bsc);
749
750     heap_free(This->buf);
751     heap_free(This);
752 }
753
754 static HRESULT BufferBSC_init_bindinfo(BSCallback *bsc)
755 {
756     return S_OK;
757 }
758
759 static HRESULT BufferBSC_start_binding(BSCallback *bsc)
760 {
761     return S_OK;
762 }
763
764 static HRESULT BufferBSC_stop_binding(BSCallback *bsc, HRESULT result)
765 {
766     BufferBSC *This = BufferBSC_from_BSCallback(bsc);
767
768     This->hres = result;
769
770     if(FAILED(result)) {
771         heap_free(This->buf);
772         This->buf = NULL;
773         This->size = 0;
774     }
775
776     return S_OK;
777 }
778
779 static HRESULT BufferBSC_read_data(BSCallback *bsc, IStream *stream)
780 {
781     BufferBSC *This = BufferBSC_from_BSCallback(bsc);
782     DWORD readed;
783     HRESULT hres;
784
785     if(!This->buf) {
786         This->size = 128;
787         This->buf = heap_alloc(This->size);
788     }
789
790     do {
791         if(This->bsc.readed == This->size) {
792             This->size <<= 1;
793             This->buf = heap_realloc(This->buf, This->size);
794         }
795
796         readed = 0;
797         hres = IStream_Read(stream, This->buf+This->bsc.readed, This->size-This->bsc.readed, &readed);
798         This->bsc.readed += readed;
799     }while(hres == S_OK);
800
801     return S_OK;
802 }
803
804 static HRESULT BufferBSC_on_progress(BSCallback *bsc, ULONG status_code, LPCWSTR status_text)
805 {
806     return S_OK;
807 }
808
809 static HRESULT BufferBSC_on_response(BSCallback *bsc, DWORD response_code,
810         LPCWSTR response_headers)
811 {
812     return S_OK;
813 }
814
815 static HRESULT BufferBSC_beginning_transaction(BSCallback *bsc, WCHAR **additional_headers)
816 {
817     return S_FALSE;
818 }
819
820 static const BSCallbackVtbl BufferBSCVtbl = {
821     BufferBSC_destroy,
822     BufferBSC_init_bindinfo,
823     BufferBSC_start_binding,
824     BufferBSC_stop_binding,
825     BufferBSC_read_data,
826     BufferBSC_on_progress,
827     BufferBSC_on_response,
828     BufferBSC_beginning_transaction
829 };
830
831
832 static BufferBSC *create_bufferbsc(IMoniker *mon)
833 {
834     BufferBSC *ret = heap_alloc_zero(sizeof(*ret));
835
836     init_bscallback(&ret->bsc, &BufferBSCVtbl, mon, 0);
837     ret->hres = E_FAIL;
838
839     return ret;
840 }
841
842 HRESULT bind_mon_to_buffer(HTMLDocumentNode *doc, IMoniker *mon, void **buf, DWORD *size)
843 {
844     BufferBSC *bsc = create_bufferbsc(mon);
845     HRESULT hres;
846
847     *buf = NULL;
848
849     hres = start_binding(NULL, doc, &bsc->bsc, NULL);
850     if(SUCCEEDED(hres)) {
851         hres = bsc->hres;
852         if(SUCCEEDED(hres)) {
853             *buf = bsc->buf;
854             bsc->buf = NULL;
855             *size = bsc->bsc.readed;
856             bsc->size = 0;
857         }
858     }
859
860     IBindStatusCallback_Release(&bsc->bsc.IBindStatusCallback_iface);
861
862     return hres;
863 }
864
865 struct nsChannelBSC {
866     BSCallback bsc;
867
868     HTMLWindow *window;
869
870     nsChannel *nschannel;
871     nsIStreamListener *nslistener;
872     nsISupports *nscontext;
873
874     nsProtocolStream *nsstream;
875 };
876
877 static HRESULT read_post_data_stream(nsChannelBSC *This, nsChannel *nschannel)
878 {
879     PRUint32 data_len = 0, available = 0;
880     char *data, *post_data;
881     nsresult nsres;
882     HRESULT hres = S_OK;
883
884     if(!nschannel->post_data_stream)
885         return S_OK;
886
887     nsres =  nsIInputStream_Available(nschannel->post_data_stream, &available);
888     if(NS_FAILED(nsres))
889         return E_FAIL;
890
891     post_data = data = GlobalAlloc(0, available);
892     if(!data)
893         return E_OUTOFMEMORY;
894
895     nsres = nsIInputStream_Read(nschannel->post_data_stream, data, available, &data_len);
896     if(NS_FAILED(nsres)) {
897         GlobalFree(data);
898         return E_FAIL;
899     }
900
901     if(nschannel->post_data_contains_headers) {
902         if(data_len >= 2 && data[0] == '\r' && data[1] == '\n') {
903             post_data = data+2;
904             data_len -= 2;
905         }else {
906             WCHAR *headers;
907             DWORD size;
908             char *ptr;
909
910             post_data += data_len;
911             for(ptr = data; ptr+4 < data+data_len; ptr++) {
912                 if(!memcmp(ptr, "\r\n\r\n", 4)) {
913                     post_data = ptr+4;
914                     break;
915                 }
916             }
917
918             data_len -= post_data-data;
919
920             size = MultiByteToWideChar(CP_ACP, 0, data, post_data-data, NULL, 0);
921             headers = heap_alloc((size+1)*sizeof(WCHAR));
922             if(headers) {
923                 MultiByteToWideChar(CP_ACP, 0, data, post_data-data, headers, size);
924                 headers[size] = 0;
925                 hres = parse_headers(headers , &nschannel->request_headers);
926                 if(SUCCEEDED(hres))
927                     This->bsc.headers = headers;
928                 else
929                     heap_free(headers);
930             }else {
931                 hres = E_OUTOFMEMORY;
932             }
933         }
934     }
935
936     if(FAILED(hres)) {
937         GlobalFree(data);
938         return hres;
939     }
940
941     if(!data_len) {
942         GlobalFree(data);
943         post_data = NULL;
944     }else if(post_data != data) {
945         char *new_data;
946
947         new_data = GlobalAlloc(0, data_len);
948         if(new_data)
949             memcpy(new_data, post_data, data_len);
950         GlobalFree(data);
951         if(!new_data)
952             return E_OUTOFMEMORY;
953         post_data = new_data;
954     }
955
956     This->bsc.post_data = post_data;
957     This->bsc.post_data_len = data_len;
958     TRACE("post_data = %s\n", debugstr_a(This->bsc.post_data));
959     return S_OK;
960 }
961
962 static HRESULT on_start_nsrequest(nsChannelBSC *This)
963 {
964     nsresult nsres;
965
966     /* FIXME: it's needed for http connections from BindToObject. */
967     if(!This->nschannel->response_status)
968         This->nschannel->response_status = 200;
969
970     nsres = nsIStreamListener_OnStartRequest(This->nslistener,
971             (nsIRequest*)&This->nschannel->nsIHttpChannel_iface, This->nscontext);
972     if(NS_FAILED(nsres)) {
973         FIXME("OnStartRequest failed: %08x\n", nsres);
974         return E_FAIL;
975     }
976
977     if(This->window) {
978         list_remove(&This->bsc.entry);
979         list_init(&This->bsc.entry);
980         update_window_doc(This->window);
981         if(This->window->doc != This->bsc.doc)
982             This->bsc.doc = This->window->doc;
983         list_add_head(&This->bsc.doc->bindings, &This->bsc.entry);
984         if(This->window->readystate != READYSTATE_LOADING)
985             set_ready_state(This->window, READYSTATE_LOADING);
986     }
987
988     return S_OK;
989 }
990
991 static void on_stop_nsrequest(nsChannelBSC *This, HRESULT result)
992 {
993     nsresult nsres, request_result;
994
995     switch(result) {
996     case S_OK:
997         request_result = NS_OK;
998         break;
999     case E_ABORT:
1000         request_result = NS_BINDING_ABORTED;
1001         break;
1002     default:
1003         request_result = NS_ERROR_FAILURE;
1004     }
1005
1006     if(This->nslistener) {
1007         nsres = nsIStreamListener_OnStopRequest(This->nslistener,
1008                  (nsIRequest*)&This->nschannel->nsIHttpChannel_iface, This->nscontext,
1009                  request_result);
1010         if(NS_FAILED(nsres))
1011             WARN("OnStopRequet failed: %08x\n", nsres);
1012     }
1013
1014     if(This->nschannel->load_group) {
1015         nsres = nsILoadGroup_RemoveRequest(This->nschannel->load_group,
1016                 (nsIRequest*)&This->nschannel->nsIHttpChannel_iface, NULL, request_result);
1017         if(NS_FAILED(nsres))
1018             ERR("RemoveRequest failed: %08x\n", nsres);
1019     }
1020 }
1021
1022 static HRESULT read_stream_data(nsChannelBSC *This, IStream *stream)
1023 {
1024     DWORD read;
1025     nsresult nsres;
1026     HRESULT hres;
1027
1028     if(!This->nslistener) {
1029         BYTE buf[1024];
1030
1031         do {
1032             read = 0;
1033             hres = IStream_Read(stream, buf, sizeof(buf), &read);
1034         }while(hres == S_OK && read);
1035
1036         return S_OK;
1037     }
1038
1039     if(!This->nsstream)
1040         This->nsstream = create_nsprotocol_stream();
1041
1042     do {
1043         read = 0;
1044         hres = IStream_Read(stream, This->nsstream->buf+This->nsstream->buf_size,
1045                 sizeof(This->nsstream->buf)-This->nsstream->buf_size, &read);
1046         if(!read)
1047             break;
1048
1049         This->nsstream->buf_size += read;
1050
1051         if(!This->bsc.readed) {
1052             if(This->nsstream->buf_size >= 2
1053                && (BYTE)This->nsstream->buf[0] == 0xff
1054                && (BYTE)This->nsstream->buf[1] == 0xfe)
1055                 This->nschannel->charset = heap_strdupA(UTF16_STR);
1056
1057             if(!This->nschannel->content_type) {
1058                 WCHAR *mime;
1059
1060                 hres = FindMimeFromData(NULL, NULL, This->nsstream->buf, This->nsstream->buf_size, NULL, 0, &mime, 0);
1061                 if(FAILED(hres))
1062                     return hres;
1063
1064                 TRACE("Found MIME %s\n", debugstr_w(mime));
1065
1066                 This->nschannel->content_type = heap_strdupWtoA(mime);
1067                 CoTaskMemFree(mime);
1068                 if(!This->nschannel->content_type)
1069                     return E_OUTOFMEMORY;
1070             }
1071
1072             on_start_nsrequest(This);
1073         }
1074
1075         This->bsc.readed += This->nsstream->buf_size;
1076
1077         nsres = nsIStreamListener_OnDataAvailable(This->nslistener,
1078                 (nsIRequest*)&This->nschannel->nsIHttpChannel_iface, This->nscontext,
1079                 &This->nsstream->nsIInputStream_iface, This->bsc.readed-This->nsstream->buf_size,
1080                 This->nsstream->buf_size);
1081         if(NS_FAILED(nsres))
1082             ERR("OnDataAvailable failed: %08x\n", nsres);
1083
1084         if(This->nsstream->buf_size == sizeof(This->nsstream->buf)) {
1085             ERR("buffer is full\n");
1086             break;
1087         }
1088     }while(hres == S_OK);
1089
1090     return S_OK;
1091 }
1092
1093 typedef struct {
1094     nsIAsyncVerifyRedirectCallback nsIAsyncVerifyRedirectCallback_iface;
1095
1096     LONG ref;
1097
1098     nsChannel *nschannel;
1099     nsChannelBSC *bsc;
1100 } nsRedirectCallback;
1101
1102 static nsRedirectCallback *impl_from_nsIAsyncVerifyRedirectCallback(nsIAsyncVerifyRedirectCallback *iface)
1103 {
1104     return CONTAINING_RECORD(iface, nsRedirectCallback, nsIAsyncVerifyRedirectCallback_iface);
1105 }
1106
1107 static nsresult NSAPI nsAsyncVerifyRedirectCallback_QueryInterface(nsIAsyncVerifyRedirectCallback *iface,
1108         nsIIDRef riid, void **result)
1109 {
1110     nsRedirectCallback *This = impl_from_nsIAsyncVerifyRedirectCallback(iface);
1111
1112     if(IsEqualGUID(&IID_nsISupports, riid)) {
1113         TRACE("(%p)->(IID_nsISuports %p)\n", This, result);
1114         *result = &This->nsIAsyncVerifyRedirectCallback_iface;
1115     }else if(IsEqualGUID(&IID_nsIAsyncVerifyRedirectCallback, riid)) {
1116         TRACE("(%p)->(IID_nsIAsyncVerifyRedirectCallback %p)\n", This, result);
1117         *result = &This->nsIAsyncVerifyRedirectCallback_iface;
1118     }else {
1119         *result = NULL;
1120         WARN("unimplemented iface %s\n", debugstr_guid(riid));
1121         return NS_NOINTERFACE;
1122     }
1123
1124     nsISupports_AddRef((nsISupports*)*result);
1125     return NS_OK;
1126 }
1127
1128 static nsrefcnt NSAPI nsAsyncVerifyRedirectCallback_AddRef(nsIAsyncVerifyRedirectCallback *iface)
1129 {
1130     nsRedirectCallback *This = impl_from_nsIAsyncVerifyRedirectCallback(iface);
1131     LONG ref = InterlockedIncrement(&This->ref);
1132
1133     TRACE("(%p) ref=%d\n", This, ref);
1134
1135     return ref;
1136 }
1137
1138 static nsrefcnt NSAPI nsAsyncVerifyRedirectCallback_Release(nsIAsyncVerifyRedirectCallback *iface)
1139 {
1140     nsRedirectCallback *This = impl_from_nsIAsyncVerifyRedirectCallback(iface);
1141     LONG ref = InterlockedDecrement(&This->ref);
1142
1143     TRACE("(%p) ref=%d\n", This, ref);
1144
1145     if(!ref) {
1146         IBindStatusCallback_Release(&This->bsc->bsc.IBindStatusCallback_iface);
1147         nsIChannel_Release(&This->nschannel->nsIHttpChannel_iface);
1148         heap_free(This);
1149     }
1150
1151     return ref;
1152 }
1153
1154 static nsresult NSAPI nsAsyncVerifyRedirectCallback_AsyncOnChannelRedirect(nsIAsyncVerifyRedirectCallback *iface, nsresult result)
1155 {
1156     nsRedirectCallback *This = impl_from_nsIAsyncVerifyRedirectCallback(iface);
1157
1158     TRACE("(%p)->(%08x)\n", This, result);
1159
1160     if(This->bsc->nschannel)
1161         nsIHttpChannel_Release(&This->bsc->nschannel->nsIHttpChannel_iface);
1162     nsIChannel_AddRef(&This->nschannel->nsIHttpChannel_iface);
1163     This->bsc->nschannel = This->nschannel;
1164
1165     if(This->nschannel->load_group) {
1166         nsresult nsres;
1167
1168         nsres = nsILoadGroup_AddRequest(This->nschannel->load_group, (nsIRequest*)&This->nschannel->nsIHttpChannel_iface,
1169                 NULL);
1170         if(NS_FAILED(nsres))
1171             ERR("AddRequest failed: %08x\n", nsres);
1172     }
1173
1174     return NS_OK;
1175 }
1176
1177 static const nsIAsyncVerifyRedirectCallbackVtbl nsAsyncVerifyRedirectCallbackVtbl = {
1178     nsAsyncVerifyRedirectCallback_QueryInterface,
1179     nsAsyncVerifyRedirectCallback_AddRef,
1180     nsAsyncVerifyRedirectCallback_Release,
1181     nsAsyncVerifyRedirectCallback_AsyncOnChannelRedirect
1182 };
1183
1184 static HRESULT create_redirect_callback(nsChannel *nschannel, nsChannelBSC *bsc, nsRedirectCallback **ret)
1185 {
1186     nsRedirectCallback *callback;
1187
1188     callback = heap_alloc(sizeof(*callback));
1189     if(!callback)
1190         return E_OUTOFMEMORY;
1191
1192     callback->nsIAsyncVerifyRedirectCallback_iface.lpVtbl = &nsAsyncVerifyRedirectCallbackVtbl;
1193     callback->ref = 1;
1194
1195     nsIChannel_AddRef(&nschannel->nsIHttpChannel_iface);
1196     callback->nschannel = nschannel;
1197
1198     IBindStatusCallback_AddRef(&bsc->bsc.IBindStatusCallback_iface);
1199     callback->bsc = bsc;
1200
1201     *ret = callback;
1202     return S_OK;
1203 }
1204
1205 static inline nsChannelBSC *nsChannelBSC_from_BSCallback(BSCallback *iface)
1206 {
1207     return CONTAINING_RECORD(iface, nsChannelBSC, bsc);
1208 }
1209
1210 static void nsChannelBSC_destroy(BSCallback *bsc)
1211 {
1212     nsChannelBSC *This = nsChannelBSC_from_BSCallback(bsc);
1213
1214     if(This->nschannel)
1215         nsIChannel_Release(&This->nschannel->nsIHttpChannel_iface);
1216     if(This->nslistener)
1217         nsIStreamListener_Release(This->nslistener);
1218     if(This->nscontext)
1219         nsISupports_Release(This->nscontext);
1220     if(This->nsstream)
1221         nsIInputStream_Release(&This->nsstream->nsIInputStream_iface);
1222     heap_free(This);
1223 }
1224
1225 static HRESULT nsChannelBSC_start_binding(BSCallback *bsc)
1226 {
1227     nsChannelBSC *This = nsChannelBSC_from_BSCallback(bsc);
1228
1229     if(This->window)
1230         This->window->doc->skip_mutation_notif = FALSE;
1231
1232     return S_OK;
1233 }
1234
1235 static HRESULT nsChannelBSC_init_bindinfo(BSCallback *bsc)
1236 {
1237     nsChannelBSC *This = nsChannelBSC_from_BSCallback(bsc);
1238     HRESULT hres;
1239
1240     if(This->nschannel && This->nschannel->post_data_stream) {
1241         hres = read_post_data_stream(This, This->nschannel);
1242         if(FAILED(hres))
1243             return hres;
1244     }
1245
1246     return S_OK;
1247 }
1248
1249 typedef struct {
1250     task_t header;
1251     nsChannelBSC *bsc;
1252 } stop_request_task_t;
1253
1254 static void stop_request_proc(task_t *_task)
1255 {
1256     stop_request_task_t *task = (stop_request_task_t*)_task;
1257
1258     TRACE("(%p)\n", task->bsc);
1259
1260     list_remove(&task->bsc->bsc.entry);
1261     list_init(&task->bsc->bsc.entry);
1262     on_stop_nsrequest(task->bsc, S_OK);
1263     IBindStatusCallback_Release(&task->bsc->bsc.IBindStatusCallback_iface);
1264 }
1265
1266 static HRESULT async_stop_request(nsChannelBSC *This)
1267 {
1268     stop_request_task_t *task;
1269
1270     if(!This->bsc.readed) {
1271         TRACE("No data read, calling OnStartRequest\n");
1272         on_start_nsrequest(This);
1273     }
1274
1275     task = heap_alloc(sizeof(*task));
1276     if(!task)
1277         return E_OUTOFMEMORY;
1278
1279     IBindStatusCallback_AddRef(&This->bsc.IBindStatusCallback_iface);
1280     task->bsc = This;
1281     push_task(&task->header, stop_request_proc, This->bsc.doc->basedoc.doc_obj->basedoc.task_magic);
1282     return S_OK;
1283 }
1284
1285 static void handle_navigation_error(nsChannelBSC *This, DWORD result)
1286 {
1287     HTMLDocumentObj *doc;
1288     IOleCommandTarget *olecmd;
1289     BOOL is_error_url;
1290     SAFEARRAY *sa;
1291     SAFEARRAYBOUND bound;
1292     VARIANT var, varOut;
1293     LONG ind;
1294     BSTR url, unk;
1295     HRESULT hres;
1296
1297     if(!This->window)
1298         return;
1299
1300     doc = This->window->doc_obj;
1301     if(!doc || !doc->doc_object_service || !doc->client)
1302         return;
1303
1304     hres = IDocObjectService_IsErrorUrl(doc->doc_object_service,
1305             This->window->url, &is_error_url);
1306     if(FAILED(hres) || is_error_url)
1307         return;
1308
1309     hres = IOleClientSite_QueryInterface(doc->client,
1310             &IID_IOleCommandTarget, (void**)&olecmd);
1311     if(FAILED(hres))
1312         return;
1313
1314     bound.lLbound = 0;
1315     bound.cElements = 8;
1316     sa = SafeArrayCreate(VT_VARIANT, 1, &bound);
1317     if(!sa) {
1318         IOleCommandTarget_Release(olecmd);
1319         return;
1320     }
1321
1322     ind = 0;
1323     V_VT(&var) = VT_I4;
1324     V_I4(&var) = result;
1325     SafeArrayPutElement(sa, &ind, &var);
1326
1327     ind = 1;
1328     V_VT(&var) = VT_BSTR;
1329     url = SysAllocString(This->window->url);
1330     V_BSTR(&var) = url;
1331     SafeArrayPutElement(sa, &ind, &var);
1332
1333     ind = 3;
1334     V_VT(&var) = VT_UNKNOWN;
1335     V_UNKNOWN(&var) = (IUnknown*)&This->window->IHTMLWindow2_iface;
1336     SafeArrayPutElement(sa, &ind, &var);
1337
1338     /* FIXME: what are the following fields for? */
1339     ind = 2;
1340     V_VT(&var) = VT_UNKNOWN;
1341     V_UNKNOWN(&var) = NULL;
1342     SafeArrayPutElement(sa, &ind, &var);
1343
1344     ind = 4;
1345     V_VT(&var) = VT_BOOL;
1346     V_BOOL(&var) = FALSE;
1347     SafeArrayPutElement(sa, &ind, &var);
1348
1349     ind = 5;
1350     V_VT(&var) = VT_BOOL;
1351     V_BOOL(&var) = FALSE;
1352     SafeArrayPutElement(sa, &ind, &var);
1353
1354     ind = 6;
1355     V_VT(&var) = VT_BSTR;
1356     unk = SysAllocString(NULL);
1357     V_BSTR(&var) = unk;
1358     SafeArrayPutElement(sa, &ind, &var);
1359
1360     ind = 7;
1361     V_VT(&var) = VT_UNKNOWN;
1362     V_UNKNOWN(&var) = NULL;
1363     SafeArrayPutElement(sa, &ind, &var);
1364
1365     V_VT(&var) = VT_ARRAY;
1366     V_ARRAY(&var) = sa;
1367     V_VT(&varOut) = VT_BOOL;
1368     V_BOOL(&varOut) = VARIANT_TRUE;
1369     IOleCommandTarget_Exec(olecmd, &CGID_DocHostCmdPriv, 1, 0, &var, FAILED(hres)?NULL:&varOut);
1370
1371     SysFreeString(url);
1372     SysFreeString(unk);
1373     SafeArrayDestroy(sa);
1374     IOleCommandTarget_Release(olecmd);
1375 }
1376
1377 static HRESULT nsChannelBSC_stop_binding(BSCallback *bsc, HRESULT result)
1378 {
1379     nsChannelBSC *This = nsChannelBSC_from_BSCallback(bsc);
1380
1381     if(result != E_ABORT) {
1382         if(FAILED(result))
1383             handle_navigation_error(This, result);
1384         else if(This->window) {
1385             result = async_stop_request(This);
1386             if(SUCCEEDED(result))
1387                 return S_OK;
1388         }
1389     }
1390
1391     on_stop_nsrequest(This, result);
1392     return S_OK;
1393 }
1394
1395 static HRESULT nsChannelBSC_read_data(BSCallback *bsc, IStream *stream)
1396 {
1397     nsChannelBSC *This = nsChannelBSC_from_BSCallback(bsc);
1398
1399     return read_stream_data(This, stream);
1400 }
1401
1402 static HRESULT handle_redirect(nsChannelBSC *This, const WCHAR *new_url)
1403 {
1404     nsRedirectCallback *callback;
1405     nsIChannelEventSink *sink;
1406     nsChannel *new_channel;
1407     nsresult nsres;
1408     HRESULT hres;
1409
1410     TRACE("(%p)->(%s)\n", This, debugstr_w(new_url));
1411
1412     if(!This->nschannel || !This->nschannel->notif_callback)
1413         return S_OK;
1414
1415     nsres = nsIInterfaceRequestor_GetInterface(This->nschannel->notif_callback, &IID_nsIChannelEventSink, (void**)&sink);
1416     if(NS_FAILED(nsres))
1417         return S_OK;
1418
1419     hres = create_redirect_nschannel(new_url, This->nschannel, &new_channel);
1420     if(SUCCEEDED(hres)) {
1421         hres = create_redirect_callback(new_channel, This, &callback);
1422         nsIChannel_Release(&new_channel->nsIHttpChannel_iface);
1423     }
1424
1425     if(SUCCEEDED(hres)) {
1426         nsres = nsIChannelEventSink_AsyncOnChannelRedirect(sink, (nsIChannel*)&This->nschannel->nsIHttpChannel_iface,
1427                 (nsIChannel*)&callback->nschannel->nsIHttpChannel_iface, REDIRECT_TEMPORARY, /* FIXME */
1428                 &callback->nsIAsyncVerifyRedirectCallback_iface);
1429
1430         if(NS_FAILED(nsres))
1431             FIXME("AsyncOnChannelRedirect failed: %08x\n", hres);
1432         else if(This->nschannel != callback->nschannel)
1433             FIXME("nschannel not updated\n");
1434
1435         nsIAsyncVerifyRedirectCallback_Release(&callback->nsIAsyncVerifyRedirectCallback_iface);
1436     }
1437
1438     nsIChannelEventSink_Release(sink);
1439     return hres;
1440 }
1441
1442 static HRESULT nsChannelBSC_on_progress(BSCallback *bsc, ULONG status_code, LPCWSTR status_text)
1443 {
1444     nsChannelBSC *This = nsChannelBSC_from_BSCallback(bsc);
1445
1446     switch(status_code) {
1447     case BINDSTATUS_MIMETYPEAVAILABLE:
1448         if(!This->nschannel)
1449             return S_OK;
1450
1451         heap_free(This->nschannel->content_type);
1452         This->nschannel->content_type = heap_strdupWtoA(status_text);
1453         break;
1454     case BINDSTATUS_REDIRECTING:
1455         return handle_redirect(This, status_text);
1456     case BINDSTATUS_BEGINDOWNLOADDATA: {
1457         IWinInetHttpInfo *http_info;
1458         DWORD status, size = sizeof(DWORD);
1459         HRESULT hres;
1460
1461         if(!This->bsc.binding)
1462             break;
1463
1464         hres = IBinding_QueryInterface(This->bsc.binding, &IID_IWinInetHttpInfo, (void**)&http_info);
1465         if(FAILED(hres))
1466             break;
1467
1468         hres = IWinInetHttpInfo_QueryInfo(http_info,
1469                 HTTP_QUERY_STATUS_CODE|HTTP_QUERY_FLAG_NUMBER, &status, &size, NULL, NULL);
1470         IWinInetHttpInfo_Release(http_info);
1471         if(FAILED(hres) || status == HTTP_STATUS_OK)
1472             break;
1473
1474         handle_navigation_error(This, status);
1475     }
1476     }
1477
1478     return S_OK;
1479 }
1480
1481 static HRESULT nsChannelBSC_on_response(BSCallback *bsc, DWORD response_code,
1482         LPCWSTR response_headers)
1483 {
1484     nsChannelBSC *This = nsChannelBSC_from_BSCallback(bsc);
1485     HRESULT hres;
1486
1487     This->nschannel->response_status = response_code;
1488
1489     if(response_headers) {
1490         const WCHAR *headers;
1491
1492         headers = strchrW(response_headers, '\r');
1493         if(headers && headers[1] == '\n') {
1494             headers += 2;
1495             hres = parse_headers(headers, &This->nschannel->response_headers);
1496             if(FAILED(hres)) {
1497                 WARN("parsing headers failed: %08x\n", hres);
1498                 return hres;
1499             }
1500         }
1501     }
1502
1503     return S_OK;
1504 }
1505
1506 static HRESULT nsChannelBSC_beginning_transaction(BSCallback *bsc, WCHAR **additional_headers)
1507 {
1508     nsChannelBSC *This = nsChannelBSC_from_BSCallback(bsc);
1509     http_header_t *iter;
1510     DWORD len = 0;
1511     WCHAR *ptr;
1512
1513     static const WCHAR content_lengthW[] =
1514         {'C','o','n','t','e','n','t','-','L','e','n','g','t','h',0};
1515
1516     if(!This->nschannel)
1517         return S_FALSE;
1518
1519     LIST_FOR_EACH_ENTRY(iter, &This->nschannel->request_headers, http_header_t, entry) {
1520         if(strcmpW(iter->header, content_lengthW))
1521             len += strlenW(iter->header) + 2 /* ": " */ + strlenW(iter->data) + 2 /* "\r\n" */;
1522     }
1523
1524     if(!len)
1525         return S_OK;
1526
1527     *additional_headers = ptr = CoTaskMemAlloc((len+1)*sizeof(WCHAR));
1528     if(!ptr)
1529         return E_OUTOFMEMORY;
1530
1531     LIST_FOR_EACH_ENTRY(iter, &This->nschannel->request_headers, http_header_t, entry) {
1532         if(!strcmpW(iter->header, content_lengthW))
1533             continue;
1534
1535         len = strlenW(iter->header);
1536         memcpy(ptr, iter->header, len*sizeof(WCHAR));
1537         ptr += len;
1538
1539         *ptr++ = ':';
1540         *ptr++ = ' ';
1541
1542         len = strlenW(iter->data);
1543         memcpy(ptr, iter->data, len*sizeof(WCHAR));
1544         ptr += len;
1545
1546         *ptr++ = '\r';
1547         *ptr++ = '\n';
1548     }
1549
1550     *ptr = 0;
1551
1552     return S_OK;
1553 }
1554
1555 static const BSCallbackVtbl nsChannelBSCVtbl = {
1556     nsChannelBSC_destroy,
1557     nsChannelBSC_init_bindinfo,
1558     nsChannelBSC_start_binding,
1559     nsChannelBSC_stop_binding,
1560     nsChannelBSC_read_data,
1561     nsChannelBSC_on_progress,
1562     nsChannelBSC_on_response,
1563     nsChannelBSC_beginning_transaction
1564 };
1565
1566 HRESULT create_channelbsc(IMoniker *mon, WCHAR *headers, BYTE *post_data, DWORD post_data_size, nsChannelBSC **retval)
1567 {
1568     nsChannelBSC *ret;
1569
1570     ret = heap_alloc_zero(sizeof(*ret));
1571     if(!ret)
1572         return E_OUTOFMEMORY;
1573
1574     init_bscallback(&ret->bsc, &nsChannelBSCVtbl, mon, BINDF_ASYNCHRONOUS | BINDF_ASYNCSTORAGE | BINDF_PULLDATA);
1575
1576     if(headers) {
1577         ret->bsc.headers = heap_strdupW(headers);
1578         if(!ret->bsc.headers) {
1579             IBindStatusCallback_Release(&ret->bsc.IBindStatusCallback_iface);
1580             return E_OUTOFMEMORY;
1581         }
1582     }
1583
1584     if(post_data) {
1585         ret->bsc.post_data = GlobalAlloc(0, post_data_size);
1586         if(!ret->bsc.post_data) {
1587             heap_free(ret->bsc.headers);
1588             IBindStatusCallback_Release(&ret->bsc.IBindStatusCallback_iface);
1589             return E_OUTOFMEMORY;
1590         }
1591
1592         memcpy(ret->bsc.post_data, post_data, post_data_size);
1593         ret->bsc.post_data_len = post_data_size;
1594     }
1595
1596     *retval = ret;
1597     return S_OK;
1598 }
1599
1600 void set_window_bscallback(HTMLWindow *window, nsChannelBSC *callback)
1601 {
1602     if(window->bscallback) {
1603         if(window->bscallback->bsc.binding)
1604             IBinding_Abort(window->bscallback->bsc.binding);
1605         window->bscallback->bsc.doc = NULL;
1606         window->bscallback->window = NULL;
1607         IBindStatusCallback_Release(&window->bscallback->bsc.IBindStatusCallback_iface);
1608     }
1609
1610     window->bscallback = callback;
1611
1612     if(callback) {
1613         callback->window = window;
1614         IBindStatusCallback_AddRef(&callback->bsc.IBindStatusCallback_iface);
1615         callback->bsc.doc = window->doc;
1616     }
1617 }
1618
1619 typedef struct {
1620     task_t header;
1621     HTMLWindow *window;
1622     nsChannelBSC *bscallback;
1623 } start_doc_binding_task_t;
1624
1625 static void start_doc_binding_proc(task_t *_task)
1626 {
1627     start_doc_binding_task_t *task = (start_doc_binding_task_t*)_task;
1628
1629     start_binding(task->window, NULL, (BSCallback*)task->bscallback, NULL);
1630     IBindStatusCallback_Release(&task->bscallback->bsc.IBindStatusCallback_iface);
1631 }
1632
1633 HRESULT async_start_doc_binding(HTMLWindow *window, nsChannelBSC *bscallback)
1634 {
1635     start_doc_binding_task_t *task;
1636
1637     task = heap_alloc(sizeof(start_doc_binding_task_t));
1638     if(!task)
1639         return E_OUTOFMEMORY;
1640
1641     task->window = window;
1642     task->bscallback = bscallback;
1643     IBindStatusCallback_AddRef(&bscallback->bsc.IBindStatusCallback_iface);
1644
1645     push_task(&task->header, start_doc_binding_proc, window->task_magic);
1646     return S_OK;
1647 }
1648
1649 void abort_document_bindings(HTMLDocumentNode *doc)
1650 {
1651     BSCallback *iter, *next;
1652
1653     LIST_FOR_EACH_ENTRY_SAFE(iter, next, &doc->bindings, BSCallback, entry) {
1654         TRACE("Aborting %p\n", iter);
1655
1656         if(iter->doc)
1657             remove_target_tasks(iter->doc->basedoc.task_magic);
1658
1659         if(iter->binding)
1660             IBinding_Abort(iter->binding);
1661         else {
1662             list_remove(&iter->entry);
1663             list_init(&iter->entry);
1664             iter->vtbl->stop_binding(iter, E_ABORT);
1665         }
1666
1667         iter->doc = NULL;
1668     }
1669 }
1670
1671 HRESULT channelbsc_load_stream(nsChannelBSC *bscallback, IStream *stream)
1672 {
1673     HRESULT hres = S_OK;
1674
1675     if(!bscallback->nschannel) {
1676         ERR("NULL nschannel\n");
1677         return E_FAIL;
1678     }
1679
1680     bscallback->nschannel->content_type = heap_strdupA("text/html");
1681     if(!bscallback->nschannel->content_type)
1682         return E_OUTOFMEMORY;
1683
1684     list_add_head(&bscallback->bsc.doc->bindings, &bscallback->bsc.entry);
1685     if(stream)
1686         hres = read_stream_data(bscallback, stream);
1687     if(SUCCEEDED(hres))
1688         hres = async_stop_request(bscallback);
1689     if(FAILED(hres))
1690         IBindStatusCallback_OnStopBinding(&bscallback->bsc.IBindStatusCallback_iface, hres,
1691                 ERROR_SUCCESS);
1692
1693     return hres;
1694 }
1695
1696 void channelbsc_set_channel(nsChannelBSC *This, nsChannel *channel, nsIStreamListener *listener, nsISupports *context)
1697 {
1698     nsIChannel_AddRef(&channel->nsIHttpChannel_iface);
1699     This->nschannel = channel;
1700
1701     nsIStreamListener_AddRef(listener);
1702     This->nslistener = listener;
1703
1704     if(context) {
1705         nsISupports_AddRef(context);
1706         This->nscontext = context;
1707     }
1708
1709     if(This->bsc.headers) {
1710         HRESULT hres;
1711
1712         hres = parse_headers(This->bsc.headers, &channel->request_headers);
1713         heap_free(This->bsc.headers);
1714         This->bsc.headers = NULL;
1715         if(FAILED(hres))
1716             WARN("parse_headers failed: %08x\n", hres);
1717     }
1718 }
1719
1720 HRESULT hlink_frame_navigate(HTMLDocument *doc, LPCWSTR url, nsChannel *nschannel, DWORD hlnf, BOOL *cancel)
1721 {
1722     IHlinkFrame *hlink_frame;
1723     nsChannelBSC *callback;
1724     IServiceProvider *sp;
1725     IBindCtx *bindctx;
1726     IMoniker *mon;
1727     IHlink *hlink;
1728     HRESULT hres;
1729
1730     *cancel = FALSE;
1731
1732     hres = IOleClientSite_QueryInterface(doc->doc_obj->client, &IID_IServiceProvider,
1733             (void**)&sp);
1734     if(FAILED(hres))
1735         return S_OK;
1736
1737     hres = IServiceProvider_QueryService(sp, &IID_IHlinkFrame, &IID_IHlinkFrame,
1738             (void**)&hlink_frame);
1739     IServiceProvider_Release(sp);
1740     if(FAILED(hres))
1741         return S_OK;
1742
1743     hres = create_channelbsc(NULL, NULL, NULL, 0, &callback);
1744     if(FAILED(hres)) {
1745         IHlinkFrame_Release(hlink_frame);
1746         return hres;
1747     }
1748
1749     if(nschannel)
1750         read_post_data_stream(callback, nschannel);
1751
1752     hres = CreateAsyncBindCtx(0, &callback->bsc.IBindStatusCallback_iface, NULL, &bindctx);
1753     if(SUCCEEDED(hres))
1754         hres = CoCreateInstance(&CLSID_StdHlink, NULL, CLSCTX_INPROC_SERVER,
1755                 &IID_IHlink, (LPVOID*)&hlink);
1756
1757     if(SUCCEEDED(hres))
1758         hres = CreateURLMoniker(NULL, url, &mon);
1759
1760     if(SUCCEEDED(hres)) {
1761         IHlink_SetMonikerReference(hlink, HLINKSETF_TARGET, mon, NULL);
1762
1763         if(hlnf & HLNF_OPENINNEWWINDOW) {
1764             static const WCHAR wszBlank[] = {'_','b','l','a','n','k',0};
1765             IHlink_SetTargetFrameName(hlink, wszBlank); /* FIXME */
1766         }
1767
1768         hres = IHlinkFrame_Navigate(hlink_frame, hlnf, bindctx,
1769                 &callback->bsc.IBindStatusCallback_iface, hlink);
1770         IMoniker_Release(mon);
1771         *cancel = hres == S_OK;
1772         hres = S_OK;
1773     }
1774
1775     IHlinkFrame_Release(hlink_frame);
1776     IBindCtx_Release(bindctx);
1777     IBindStatusCallback_Release(&callback->bsc.IBindStatusCallback_iface);
1778     return hres;
1779 }
1780
1781 HRESULT navigate_url(HTMLWindow *window, const WCHAR *new_url, const WCHAR *base_url)
1782 {
1783     WCHAR url[INTERNET_MAX_URL_LENGTH];
1784     nsWineURI *uri;
1785     HRESULT hres;
1786
1787     if(!new_url) {
1788         *url = 0;
1789     }else if(base_url) {
1790         DWORD len = 0;
1791
1792         hres = CoInternetCombineUrl(base_url, new_url, URL_ESCAPE_SPACES_ONLY|URL_DONT_ESCAPE_EXTRA_INFO,
1793                 url, sizeof(url)/sizeof(WCHAR), &len, 0);
1794         if(FAILED(hres))
1795             return hres;
1796     }else {
1797         strcpyW(url, new_url);
1798     }
1799
1800     if(window->doc_obj && window->doc_obj->hostui) {
1801         OLECHAR *translated_url = NULL;
1802
1803         hres = IDocHostUIHandler_TranslateUrl(window->doc_obj->hostui, 0, url,
1804                 &translated_url);
1805         if(hres == S_OK) {
1806             TRACE("%08x %s -> %s\n", hres, debugstr_w(url), debugstr_w(translated_url));
1807             strcpyW(url, translated_url);
1808             CoTaskMemFree(translated_url);
1809         }
1810     }
1811
1812     if(window->doc_obj && window == window->doc_obj->basedoc.window) {
1813         BOOL cancel;
1814
1815         hres = hlink_frame_navigate(&window->doc->basedoc, url, NULL, 0, &cancel);
1816         if(FAILED(hres))
1817             return hres;
1818
1819         if(cancel) {
1820             TRACE("Navigation handled by hlink frame\n");
1821             return S_OK;
1822         }
1823     }
1824
1825     hres = create_doc_uri(window, url, &uri);
1826     if(FAILED(hres))
1827         return hres;
1828
1829     hres = load_nsuri(window, uri, NULL, LOAD_FLAGS_NONE);
1830     nsISupports_Release((nsISupports*)uri);
1831     return hres;
1832 }