git.oblomov.eu Git - wine/blob - dlls/ole32/tests/marshal.c

   1 /*
   2  * Marshaling Tests
   3  *
   4  * Copyright 2004 Robert Shearman
   5  *
   6  * This library is free software; you can redistribute it and/or
   7  * modify it under the terms of the GNU Lesser General Public
   8  * License as published by the Free Software Foundation; either
   9  * version 2.1 of the License, or (at your option) any later version.
  10  *
  11  * This library is distributed in the hope that it will be useful,
  12  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  13  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  14  * Lesser General Public License for more details.
  15  *
  16  * You should have received a copy of the GNU Lesser General Public
  17  * License along with this library; if not, write to the Free Software
  18  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
  19  */
  20
  21 #define _WIN32_DCOM
  22 #define COBJMACROS
  23 #define CONST_VTABLE
  24
  25 #include <stdarg.h>
  26 #include <stdio.h>
  27
  28 #include "windef.h"
  29 #include "winbase.h"
  30 #include "objbase.h"
  31 #include "olectl.h"
  32 #include "shlguid.h"
  33 #include "shobjidl.h"
  34 #include "initguid.h"
  35
  36 #include "wine/test.h"
  37
  38 DEFINE_GUID(CLSID_StdGlobalInterfaceTable,0x00000323,0x0000,0x0000,0xc0,0x00,0x00,0x00,0x00,0x00,0x00,0x46);
  39 DEFINE_GUID(CLSID_ManualResetEvent,       0x0000032c,0x0000,0x0000,0xc0,0x00,0x00,0x00,0x00,0x00,0x00,0x46);
  40
  41 /* functions that are not present on all versions of Windows */
  42 static HRESULT (WINAPI * pCoInitializeEx)(LPVOID lpReserved, DWORD dwCoInit);
  43
  44 /* helper macros to make tests a bit leaner */
  45 #define ok_more_than_one_lock() ok(cLocks > 0, "Number of locks should be > 0, but actually is %d\n", cLocks)
  46 #define ok_no_locks() ok(cLocks == 0, "Number of locks should be 0, but actually is %d\n", cLocks)
  47 #define ok_ole_success(hr, func) ok(hr == S_OK, #func " failed with error 0x%08x\n", hr)
  48
  49 static const IID IID_IWineTest =
  50 {
  51     0x5201163f,
  52     0x8164,
  53     0x4fd0,
  54     {0xa1, 0xa2, 0x5d, 0x5a, 0x36, 0x54, 0xd3, 0xbd}
  55 }; /* 5201163f-8164-4fd0-a1a2-5d5a3654d3bd */
  56
  57 static const IID IID_IRemUnknown =
  58 {
  59     0x00000131,
  60     0x0000,
  61     0x0000,
  62     {0xc0,0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x46}
  63 };
  64
  65 #define EXTENTID_WineTest IID_IWineTest
  66 #define CLSID_WineTest IID_IWineTest
  67
  68 static const CLSID CLSID_WineOOPTest =
  69 {
  70     0x5201163f,
  71     0x8164,
  72     0x4fd0,
  73     {0xa1, 0xa2, 0x5d, 0x5a, 0x36, 0x54, 0xd3, 0xbd}
  74 }; /* 5201163f-8164-4fd0-a1a2-5d5a3654d3bd */
  75
  76 static void test_cocreateinstance_proxy(void)
  77 {
  78     IUnknown *pProxy;
  79     IMultiQI *pMQI;
  80     HRESULT hr;
  81
  82     pCoInitializeEx(NULL, COINIT_MULTITHREADED);
  83
  84     hr = CoCreateInstance(&CLSID_ShellDesktop, NULL, CLSCTX_INPROC, &IID_IUnknown, (void **)&pProxy);
  85     ok_ole_success(hr, CoCreateInstance);
  86     hr = IUnknown_QueryInterface(pProxy, &IID_IMultiQI, (void **)&pMQI);
  87     ok(hr == S_OK, "created object is not a proxy, so was created in the wrong apartment\n");
  88     if (hr == S_OK)
  89         IMultiQI_Release(pMQI);
  90     IUnknown_Release(pProxy);
  91
  92     CoUninitialize();
  93 }
  94
  95 static const LARGE_INTEGER ullZero;
  96 static LONG cLocks;
  97
  98 static void LockModule(void)
  99 {
 100     InterlockedIncrement(&cLocks);
 101 }
 102
 103 static void UnlockModule(void)
 104 {
 105     InterlockedDecrement(&cLocks);
 106 }
 107
 108
 109 static HRESULT WINAPI Test_IUnknown_QueryInterface(
 110     LPUNKNOWN iface,
 111     REFIID riid,
 112     LPVOID *ppvObj)
 113 {
 114     if (ppvObj == NULL) return E_POINTER;
 115
 116     if (IsEqualGUID(riid, &IID_IUnknown))
 117     {
 118         *ppvObj = iface;
 119         IUnknown_AddRef(iface);
 120         return S_OK;
 121     }
 122
 123     *ppvObj = NULL;
 124     return E_NOINTERFACE;
 125 }
 126
 127 static ULONG WINAPI Test_IUnknown_AddRef(LPUNKNOWN iface)
 128 {
 129     LockModule();
 130     return 2; /* non-heap-based object */
 131 }
 132
 133 static ULONG WINAPI Test_IUnknown_Release(LPUNKNOWN iface)
 134 {
 135     UnlockModule();
 136     return 1; /* non-heap-based object */
 137 }
 138
 139 static const IUnknownVtbl TestUnknown_Vtbl =
 140 {
 141     Test_IUnknown_QueryInterface,
 142     Test_IUnknown_AddRef,
 143     Test_IUnknown_Release,
 144 };
 145
 146 static IUnknown Test_Unknown = { &TestUnknown_Vtbl };
 147
 148
 149 static HRESULT WINAPI Test_IClassFactory_QueryInterface(
 150     LPCLASSFACTORY iface,
 151     REFIID riid,
 152     LPVOID *ppvObj)
 153 {
 154     if (ppvObj == NULL) return E_POINTER;
 155
 156     if (IsEqualGUID(riid, &IID_IUnknown) ||
 157         IsEqualGUID(riid, &IID_IClassFactory) ||
 158         /* the only other interface Wine is currently able to marshal (for testing two proxies) */
 159         IsEqualGUID(riid, &IID_IRemUnknown))
 160     {
 161         *ppvObj = iface;
 162         IClassFactory_AddRef(iface);
 163         return S_OK;
 164     }
 165
 166     *ppvObj = NULL;
 167     return E_NOINTERFACE;
 168 }
 169
 170 static ULONG WINAPI Test_IClassFactory_AddRef(LPCLASSFACTORY iface)
 171 {
 172     LockModule();
 173     return 2; /* non-heap-based object */
 174 }
 175
 176 static ULONG WINAPI Test_IClassFactory_Release(LPCLASSFACTORY iface)
 177 {
 178     UnlockModule();
 179     return 1; /* non-heap-based object */
 180 }
 181
 182 static HRESULT WINAPI Test_IClassFactory_CreateInstance(
 183     LPCLASSFACTORY iface,
 184     LPUNKNOWN pUnkOuter,
 185     REFIID riid,
 186     LPVOID *ppvObj)
 187 {
 188     if (pUnkOuter) return CLASS_E_NOAGGREGATION;
 189     return IUnknown_QueryInterface((IUnknown*)&Test_Unknown, riid, ppvObj);
 190 }
 191
 192 static HRESULT WINAPI Test_IClassFactory_LockServer(
 193     LPCLASSFACTORY iface,
 194     BOOL fLock)
 195 {
 196     return S_OK;
 197 }
 198
 199 static const IClassFactoryVtbl TestClassFactory_Vtbl =
 200 {
 201     Test_IClassFactory_QueryInterface,
 202     Test_IClassFactory_AddRef,
 203     Test_IClassFactory_Release,
 204     Test_IClassFactory_CreateInstance,
 205     Test_IClassFactory_LockServer
 206 };
 207
 208 static IClassFactory Test_ClassFactory = { &TestClassFactory_Vtbl };
 209
 210 #define RELEASEMARSHALDATA WM_USER
 211
 212 struct host_object_data
 213 {
 214     IStream *stream;
 215     IID iid;
 216     IUnknown *object;
 217     MSHLFLAGS marshal_flags;
 218     HANDLE marshal_event;
 219     IMessageFilter *filter;
 220 };
 221
 222 static DWORD CALLBACK host_object_proc(LPVOID p)
 223 {
 224     struct host_object_data *data = p;
 225     HRESULT hr;
 226     MSG msg;
 227
 228     pCoInitializeEx(NULL, COINIT_APARTMENTTHREADED);
 229
 230     if (data->filter)
 231     {
 232         IMessageFilter * prev_filter = NULL;
 233         hr = CoRegisterMessageFilter(data->filter, &prev_filter);
 234         if (prev_filter) IMessageFilter_Release(prev_filter);
 235         ok_ole_success(hr, CoRegisterMessageFilter);
 236     }
 237
 238     hr = CoMarshalInterface(data->stream, &data->iid, data->object, MSHCTX_INPROC, NULL, data->marshal_flags);
 239     ok_ole_success(hr, CoMarshalInterface);
 240
 241     /* force the message queue to be created before signaling parent thread */
 242     PeekMessage(&msg, NULL, WM_USER, WM_USER, PM_NOREMOVE);
 243
 244     SetEvent(data->marshal_event);
 245
 246     while (GetMessage(&msg, NULL, 0, 0))
 247     {
 248         if (msg.hwnd == NULL && msg.message == RELEASEMARSHALDATA)
 249         {
 250             CoReleaseMarshalData(data->stream);
 251             SetEvent((HANDLE)msg.lParam);
 252         }
 253         else
 254             DispatchMessage(&msg);
 255     }
 256
 257     HeapFree(GetProcessHeap(), 0, data);
 258
 259     CoUninitialize();
 260
 261     return hr;
 262 }
 263
 264 static DWORD start_host_object2(IStream *stream, REFIID riid, IUnknown *object, MSHLFLAGS marshal_flags, IMessageFilter *filter, HANDLE *thread)
 265 {
 266     DWORD tid = 0;
 267     HANDLE marshal_event = CreateEvent(NULL, FALSE, FALSE, NULL);
 268     struct host_object_data *data = HeapAlloc(GetProcessHeap(), 0, sizeof(*data));
 269
 270     data->stream = stream;
 271     data->iid = *riid;
 272     data->object = object;
 273     data->marshal_flags = marshal_flags;
 274     data->marshal_event = marshal_event;
 275     data->filter = filter;
 276
 277     *thread = CreateThread(NULL, 0, host_object_proc, data, 0, &tid);
 278
 279     /* wait for marshaling to complete before returning */
 280     ok( !WaitForSingleObject(marshal_event, 10000), "wait timed out\n" );
 281     CloseHandle(marshal_event);
 282
 283     return tid;
 284 }
 285
 286 static DWORD start_host_object(IStream *stream, REFIID riid, IUnknown *object, MSHLFLAGS marshal_flags, HANDLE *thread)
 287 {
 288     return start_host_object2(stream, riid, object, marshal_flags, NULL, thread);
 289 }
 290
 291 /* asks thread to release the marshal data because it has to be done by the
 292  * same thread that marshaled the interface in the first place. */
 293 static void release_host_object(DWORD tid)
 294 {
 295     HANDLE event = CreateEvent(NULL, FALSE, FALSE, NULL);
 296     PostThreadMessage(tid, RELEASEMARSHALDATA, 0, (LPARAM)event);
 297     ok( !WaitForSingleObject(event, 10000), "wait timed out\n" );
 298     CloseHandle(event);
 299 }
 300
 301 static void end_host_object(DWORD tid, HANDLE thread)
 302 {
 303     BOOL ret = PostThreadMessage(tid, WM_QUIT, 0, 0);
 304     ok(ret, "PostThreadMessage failed with error %d\n", GetLastError());
 305     /* be careful of races - don't return until hosting thread has terminated */
 306     ok( !WaitForSingleObject(thread, 10000), "wait timed out\n" );
 307     CloseHandle(thread);
 308 }
 309
 310 /* tests failure case of interface not having a marshaler specified in the
 311  * registry */
 312 static void test_no_marshaler(void)
 313 {
 314     IStream *pStream;
 315     HRESULT hr;
 316
 317     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
 318     ok_ole_success(hr, CreateStreamOnHGlobal);
 319     hr = CoMarshalInterface(pStream, &IID_IWineTest, (IUnknown*)&Test_ClassFactory, MSHCTX_INPROC, NULL, MSHLFLAGS_NORMAL);
 320     ok(hr == E_NOINTERFACE, "CoMarshalInterface should have returned E_NOINTERFACE instead of 0x%08x\n", hr);
 321
 322     IStream_Release(pStream);
 323 }
 324
 325 /* tests normal marshal and then release without unmarshaling */
 326 static void test_normal_marshal_and_release(void)
 327 {
 328     HRESULT hr;
 329     IStream *pStream = NULL;
 330
 331     cLocks = 0;
 332
 333     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
 334     ok_ole_success(hr, CreateStreamOnHGlobal);
 335     hr = CoMarshalInterface(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHCTX_INPROC, NULL, MSHLFLAGS_NORMAL);
 336     ok_ole_success(hr, CoMarshalInterface);
 337
 338     ok_more_than_one_lock();
 339
 340     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 341     hr = CoReleaseMarshalData(pStream);
 342     ok_ole_success(hr, CoReleaseMarshalData);
 343     IStream_Release(pStream);
 344
 345     ok_no_locks();
 346 }
 347
 348 /* tests success case of a same-thread marshal and unmarshal */
 349 static void test_normal_marshal_and_unmarshal(void)
 350 {
 351     HRESULT hr;
 352     IStream *pStream = NULL;
 353     IUnknown *pProxy = NULL;
 354
 355     cLocks = 0;
 356
 357     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
 358     ok_ole_success(hr, CreateStreamOnHGlobal);
 359     hr = CoMarshalInterface(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHCTX_INPROC, NULL, MSHLFLAGS_NORMAL);
 360     ok_ole_success(hr, CoMarshalInterface);
 361
 362     ok_more_than_one_lock();
 363
 364     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 365     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy);
 366     ok_ole_success(hr, CoUnmarshalInterface);
 367     IStream_Release(pStream);
 368
 369     ok_more_than_one_lock();
 370
 371     IUnknown_Release(pProxy);
 372
 373     ok_no_locks();
 374 }
 375
 376 /* tests failure case of unmarshaling a freed object */
 377 static void test_marshal_and_unmarshal_invalid(void)
 378 {
 379     HRESULT hr;
 380     IStream *pStream = NULL;
 381     IClassFactory *pProxy = NULL;
 382     DWORD tid;
 383     void * dummy;
 384     HANDLE thread;
 385
 386     cLocks = 0;
 387
 388     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
 389     ok_ole_success(hr, CreateStreamOnHGlobal);
 390     tid = start_host_object(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHLFLAGS_NORMAL, &thread);
 391
 392     ok_more_than_one_lock();
 393
 394     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 395     hr = CoReleaseMarshalData(pStream);
 396     ok_ole_success(hr, CoReleaseMarshalData);
 397
 398     ok_no_locks();
 399
 400     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 401     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy);
 402     todo_wine { ok_ole_success(hr, CoUnmarshalInterface); }
 403
 404     ok_no_locks();
 405
 406     if (pProxy)
 407     {
 408         hr = IClassFactory_CreateInstance(pProxy, NULL, &IID_IUnknown, &dummy);
 409         ok(hr == RPC_E_DISCONNECTED, "Remote call should have returned RPC_E_DISCONNECTED, instead of 0x%08x\n", hr);
 410
 411         IClassFactory_Release(pProxy);
 412     }
 413
 414     IStream_Release(pStream);
 415
 416     end_host_object(tid, thread);
 417 }
 418
 419 static void test_same_apartment_unmarshal_failure(void)
 420 {
 421     HRESULT hr;
 422     IStream *pStream;
 423     IUnknown *pProxy;
 424     static const LARGE_INTEGER llZero;
 425
 426     cLocks = 0;
 427
 428     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
 429     ok_ole_success(hr, CreateStreamOnHGlobal);
 430
 431     hr = CoMarshalInterface(pStream, &IID_IUnknown, (IUnknown *)&Test_ClassFactory, MSHCTX_INPROC, NULL, MSHLFLAGS_NORMAL);
 432     ok_ole_success(hr, CoMarshalInterface);
 433
 434     ok_more_than_one_lock();
 435
 436     hr = IStream_Seek(pStream, llZero, STREAM_SEEK_SET, NULL);
 437     ok_ole_success(hr, IStream_Seek);
 438
 439     hr = CoUnmarshalInterface(pStream, &IID_IParseDisplayName, (void **)&pProxy);
 440     ok(hr == E_NOINTERFACE, "CoUnmarshalInterface should have returned E_NOINTERFACE instead of 0x%08x\n", hr);
 441
 442     ok_no_locks();
 443
 444     IStream_Release(pStream);
 445 }
 446
 447 /* tests success case of an interthread marshal */
 448 static void test_interthread_marshal_and_unmarshal(void)
 449 {
 450     HRESULT hr;
 451     IStream *pStream = NULL;
 452     IUnknown *pProxy = NULL;
 453     DWORD tid;
 454     HANDLE thread;
 455
 456     cLocks = 0;
 457
 458     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
 459     ok_ole_success(hr, CreateStreamOnHGlobal);
 460     tid = start_host_object(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHLFLAGS_NORMAL, &thread);
 461
 462     ok_more_than_one_lock();
 463
 464     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 465     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy);
 466     ok_ole_success(hr, CoUnmarshalInterface);
 467     IStream_Release(pStream);
 468
 469     ok_more_than_one_lock();
 470
 471     IUnknown_Release(pProxy);
 472
 473     ok_no_locks();
 474
 475     end_host_object(tid, thread);
 476 }
 477
 478 /* the number of external references that Wine's proxy manager normally gives
 479  * out, so we can test the border case of running out of references */
 480 #define NORMALEXTREFS 5
 481
 482 /* tests success case of an interthread marshal and then marshaling the proxy */
 483 static void test_proxy_marshal_and_unmarshal(void)
 484 {
 485     HRESULT hr;
 486     IStream *pStream = NULL;
 487     IUnknown *pProxy = NULL;
 488     IUnknown *pProxy2 = NULL;
 489     DWORD tid;
 490     HANDLE thread;
 491     int i;
 492
 493     cLocks = 0;
 494
 495     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
 496     ok_ole_success(hr, CreateStreamOnHGlobal);
 497     tid = start_host_object(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHLFLAGS_NORMAL, &thread);
 498
 499     ok_more_than_one_lock();
 500
 501     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 502     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy);
 503     ok_ole_success(hr, CoUnmarshalInterface);
 504
 505     ok_more_than_one_lock();
 506
 507     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 508     /* marshal the proxy */
 509     hr = CoMarshalInterface(pStream, &IID_IClassFactory, pProxy, MSHCTX_INPROC, NULL, MSHLFLAGS_NORMAL);
 510     ok_ole_success(hr, CoMarshalInterface);
 511
 512     ok_more_than_one_lock();
 513
 514     /* marshal 5 more times to exhaust the normal external references of 5 */
 515     for (i = 0; i < NORMALEXTREFS; i++)
 516     {
 517         hr = CoMarshalInterface(pStream, &IID_IClassFactory, pProxy, MSHCTX_INPROC, NULL, MSHLFLAGS_NORMAL);
 518         ok_ole_success(hr, CoMarshalInterface);
 519     }
 520
 521     ok_more_than_one_lock();
 522
 523     /* release the original proxy to test that we successfully keep the
 524      * original object alive */
 525     IUnknown_Release(pProxy);
 526
 527     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 528     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy2);
 529     ok_ole_success(hr, CoUnmarshalInterface);
 530
 531     ok_more_than_one_lock();
 532
 533     IUnknown_Release(pProxy2);
 534
 535     /* unmarshal all of the proxies to check that the object stub still exists */
 536     for (i = 0; i < NORMALEXTREFS; i++)
 537     {
 538         hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy2);
 539         ok_ole_success(hr, CoUnmarshalInterface);
 540
 541         IUnknown_Release(pProxy2);
 542     }
 543
 544     ok_no_locks();
 545
 546     IStream_Release(pStream);
 547
 548     end_host_object(tid, thread);
 549 }
 550
 551 /* tests success case of an interthread marshal and then marshaling the proxy
 552  * using an iid that hasn't previously been unmarshaled */
 553 static void test_proxy_marshal_and_unmarshal2(void)
 554 {
 555     HRESULT hr;
 556     IStream *pStream = NULL;
 557     IUnknown *pProxy = NULL;
 558     IUnknown *pProxy2 = NULL;
 559     DWORD tid;
 560     HANDLE thread;
 561
 562     cLocks = 0;
 563
 564     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
 565     ok_ole_success(hr, CreateStreamOnHGlobal);
 566     tid = start_host_object(pStream, &IID_IUnknown, (IUnknown*)&Test_ClassFactory, MSHLFLAGS_NORMAL, &thread);
 567
 568     ok_more_than_one_lock();
 569
 570     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 571     hr = CoUnmarshalInterface(pStream, &IID_IUnknown, (void **)&pProxy);
 572     ok_ole_success(hr, CoUnmarshalInterface);
 573
 574     ok_more_than_one_lock();
 575
 576     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 577     /* marshal the proxy */
 578     hr = CoMarshalInterface(pStream, &IID_IClassFactory, pProxy, MSHCTX_INPROC, NULL, MSHLFLAGS_NORMAL);
 579     ok_ole_success(hr, CoMarshalInterface);
 580
 581     ok_more_than_one_lock();
 582
 583     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 584     /* unmarshal the second proxy to the object */
 585     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy2);
 586     ok_ole_success(hr, CoUnmarshalInterface);
 587     IStream_Release(pStream);
 588
 589     /* now the proxies should be as follows:
 590      *  pProxy -> &Test_ClassFactory
 591      *  pProxy2 -> &Test_ClassFactory
 592      * they should NOT be as follows:
 593      *  pProxy -> &Test_ClassFactory
 594      *  pProxy2 -> pProxy
 595      * the above can only really be tested by looking in +ole traces
 596      */
 597
 598     ok_more_than_one_lock();
 599
 600     IUnknown_Release(pProxy);
 601
 602     ok_more_than_one_lock();
 603
 604     IUnknown_Release(pProxy2);
 605
 606     ok_no_locks();
 607
 608     end_host_object(tid, thread);
 609 }
 610
 611 /* tests success case of an interthread marshal and then table-weak-marshaling the proxy */
 612 static void test_proxy_marshal_and_unmarshal_weak(void)
 613 {
 614     HRESULT hr;
 615     IStream *pStream = NULL;
 616     IUnknown *pProxy = NULL;
 617     IUnknown *pProxy2 = NULL;
 618     DWORD tid;
 619     HANDLE thread;
 620
 621     cLocks = 0;
 622
 623     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
 624     ok_ole_success(hr, CreateStreamOnHGlobal);
 625     tid = start_host_object(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHLFLAGS_NORMAL, &thread);
 626
 627     ok_more_than_one_lock();
 628
 629     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 630     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy);
 631     ok_ole_success(hr, CoUnmarshalInterface);
 632
 633     ok_more_than_one_lock();
 634
 635     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 636     /* marshal the proxy */
 637     hr = CoMarshalInterface(pStream, &IID_IClassFactory, pProxy, MSHCTX_INPROC, NULL, MSHLFLAGS_TABLEWEAK);
 638     ok_ole_success(hr, CoMarshalInterface);
 639
 640     ok_more_than_one_lock();
 641
 642     /* release the original proxy to test that we successfully keep the
 643      * original object alive */
 644     IUnknown_Release(pProxy);
 645
 646     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 647     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy2);
 648     todo_wine
 649     ok(hr == CO_E_OBJNOTREG, "CoUnmarshalInterface should return CO_E_OBJNOTREG instead of 0x%08x\n", hr);
 650
 651     ok_no_locks();
 652
 653     IStream_Release(pStream);
 654
 655     end_host_object(tid, thread);
 656 }
 657
 658 /* tests success case of an interthread marshal and then table-strong-marshaling the proxy */
 659 static void test_proxy_marshal_and_unmarshal_strong(void)
 660 {
 661     HRESULT hr;
 662     IStream *pStream = NULL;
 663     IUnknown *pProxy = NULL;
 664     IUnknown *pProxy2 = NULL;
 665     DWORD tid;
 666     HANDLE thread;
 667
 668     cLocks = 0;
 669
 670     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
 671     ok_ole_success(hr, CreateStreamOnHGlobal);
 672     tid = start_host_object(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHLFLAGS_NORMAL, &thread);
 673
 674     ok_more_than_one_lock();
 675
 676     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 677     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy);
 678     ok_ole_success(hr, CoUnmarshalInterface);
 679
 680     ok_more_than_one_lock();
 681
 682     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 683     /* marshal the proxy */
 684     hr = CoMarshalInterface(pStream, &IID_IClassFactory, pProxy, MSHCTX_INPROC, NULL, MSHLFLAGS_TABLESTRONG);
 685     ok(hr == S_OK /* WinNT */ || hr == E_INVALIDARG /* Win9x */,
 686         "CoMarshalInterface should have return S_OK or E_INVALIDARG instead of 0x%08x\n", hr);
 687     if (FAILED(hr))
 688     {
 689         IUnknown_Release(pProxy);
 690         goto end;
 691     }
 692
 693     ok_more_than_one_lock();
 694
 695     /* release the original proxy to test that we successfully keep the
 696      * original object alive */
 697     IUnknown_Release(pProxy);
 698
 699     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 700     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy2);
 701     ok_ole_success(hr, CoUnmarshalInterface);
 702
 703     ok_more_than_one_lock();
 704
 705     IUnknown_Release(pProxy2);
 706
 707     ok_more_than_one_lock();
 708
 709 end:
 710     IStream_Release(pStream);
 711
 712     end_host_object(tid, thread);
 713
 714     ok_no_locks();
 715 }
 716
 717 /* tests that stubs are released when the containing apartment is destroyed */
 718 static void test_marshal_stub_apartment_shutdown(void)
 719 {
 720     HRESULT hr;
 721     IStream *pStream = NULL;
 722     IUnknown *pProxy = NULL;
 723     DWORD tid;
 724     HANDLE thread;
 725
 726     cLocks = 0;
 727
 728     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
 729     ok_ole_success(hr, CreateStreamOnHGlobal);
 730     tid = start_host_object(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHLFLAGS_NORMAL, &thread);
 731
 732     ok_more_than_one_lock();
 733
 734     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 735     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy);
 736     ok_ole_success(hr, CoUnmarshalInterface);
 737     IStream_Release(pStream);
 738
 739     ok_more_than_one_lock();
 740
 741     end_host_object(tid, thread);
 742
 743     ok_no_locks();
 744
 745     IUnknown_Release(pProxy);
 746
 747     ok_no_locks();
 748 }
 749
 750 /* tests that proxies are released when the containing apartment is destroyed */
 751 static void test_marshal_proxy_apartment_shutdown(void)
 752 {
 753     HRESULT hr;
 754     IStream *pStream = NULL;
 755     IUnknown *pProxy = NULL;
 756     DWORD tid;
 757     HANDLE thread;
 758
 759     cLocks = 0;
 760
 761     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
 762     ok_ole_success(hr, CreateStreamOnHGlobal);
 763     tid = start_host_object(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHLFLAGS_NORMAL, &thread);
 764
 765     ok_more_than_one_lock();
 766
 767     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 768     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy);
 769     ok_ole_success(hr, CoUnmarshalInterface);
 770     IStream_Release(pStream);
 771
 772     ok_more_than_one_lock();
 773
 774     CoUninitialize();
 775
 776     ok_no_locks();
 777
 778     IUnknown_Release(pProxy);
 779
 780     ok_no_locks();
 781
 782     end_host_object(tid, thread);
 783
 784     pCoInitializeEx(NULL, COINIT_APARTMENTTHREADED);
 785 }
 786
 787 /* tests that proxies are released when the containing mta apartment is destroyed */
 788 static void test_marshal_proxy_mta_apartment_shutdown(void)
 789 {
 790     HRESULT hr;
 791     IStream *pStream = NULL;
 792     IUnknown *pProxy = NULL;
 793     DWORD tid;
 794     HANDLE thread;
 795
 796     CoUninitialize();
 797     pCoInitializeEx(NULL, COINIT_MULTITHREADED);
 798
 799     cLocks = 0;
 800
 801     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
 802     ok_ole_success(hr, CreateStreamOnHGlobal);
 803     tid = start_host_object(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHLFLAGS_NORMAL, &thread);
 804
 805     ok_more_than_one_lock();
 806
 807     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 808     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy);
 809     ok_ole_success(hr, CoUnmarshalInterface);
 810     IStream_Release(pStream);
 811
 812     ok_more_than_one_lock();
 813
 814     CoUninitialize();
 815
 816     ok_no_locks();
 817
 818     IUnknown_Release(pProxy);
 819
 820     ok_no_locks();
 821
 822     end_host_object(tid, thread);
 823
 824     pCoInitializeEx(NULL, COINIT_APARTMENTTHREADED);
 825 }
 826
 827 struct ncu_params
 828 {
 829     LPSTREAM stream;
 830     HANDLE marshal_event;
 831     HANDLE unmarshal_event;
 832 };
 833
 834 /* helper for test_no_couninitialize_server */
 835 static DWORD CALLBACK no_couninitialize_server_proc(LPVOID p)
 836 {
 837     struct ncu_params *ncu_params = p;
 838     HRESULT hr;
 839
 840     pCoInitializeEx(NULL, COINIT_MULTITHREADED);
 841
 842     hr = CoMarshalInterface(ncu_params->stream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHCTX_INPROC, NULL, MSHLFLAGS_NORMAL);
 843     ok_ole_success(hr, CoMarshalInterface);
 844
 845     SetEvent(ncu_params->marshal_event);
 846
 847     ok( !WaitForSingleObject(ncu_params->unmarshal_event, 10000), "wait timed out\n" );
 848
 849     /* die without calling CoUninitialize */
 850
 851     return 0;
 852 }
 853
 854 /* tests apartment that an apartment with a stub is released without deadlock
 855  * if the owning thread exits */
 856 static void test_no_couninitialize_server(void)
 857 {
 858     HRESULT hr;
 859     IStream *pStream = NULL;
 860     IUnknown *pProxy = NULL;
 861     DWORD tid;
 862     HANDLE thread;
 863     struct ncu_params ncu_params;
 864
 865     cLocks = 0;
 866
 867     ncu_params.marshal_event = CreateEvent(NULL, TRUE, FALSE, NULL);
 868     ncu_params.unmarshal_event = CreateEvent(NULL, TRUE, FALSE, NULL);
 869
 870     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
 871     ok_ole_success(hr, CreateStreamOnHGlobal);
 872     ncu_params.stream = pStream;
 873
 874     thread = CreateThread(NULL, 0, no_couninitialize_server_proc, &ncu_params, 0, &tid);
 875
 876     ok( !WaitForSingleObject(ncu_params.marshal_event, 10000), "wait timed out\n" );
 877     ok_more_than_one_lock();
 878
 879     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 880     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy);
 881     ok_ole_success(hr, CoUnmarshalInterface);
 882     IStream_Release(pStream);
 883
 884     ok_more_than_one_lock();
 885
 886     SetEvent(ncu_params.unmarshal_event);
 887     ok( !WaitForSingleObject(thread, 10000), "wait timed out\n" );
 888
 889     ok_no_locks();
 890
 891     CloseHandle(thread);
 892     CloseHandle(ncu_params.marshal_event);
 893     CloseHandle(ncu_params.unmarshal_event);
 894
 895     IUnknown_Release(pProxy);
 896
 897     ok_no_locks();
 898 }
 899
 900 /* STA -> STA call during DLL_THREAD_DETACH */
 901 static DWORD CALLBACK no_couninitialize_client_proc(LPVOID p)
 902 {
 903     struct ncu_params *ncu_params = p;
 904     HRESULT hr;
 905     IUnknown *pProxy = NULL;
 906
 907     pCoInitializeEx(NULL, COINIT_APARTMENTTHREADED);
 908
 909     hr = CoUnmarshalInterface(ncu_params->stream, &IID_IClassFactory, (void **)&pProxy);
 910     ok_ole_success(hr, CoUnmarshalInterface);
 911     IStream_Release(ncu_params->stream);
 912
 913     ok_more_than_one_lock();
 914
 915     /* die without calling CoUninitialize */
 916
 917     return 0;
 918 }
 919
 920 /* tests STA -> STA call during DLL_THREAD_DETACH doesn't deadlock */
 921 static void test_no_couninitialize_client(void)
 922 {
 923     HRESULT hr;
 924     IStream *pStream = NULL;
 925     DWORD tid;
 926     DWORD host_tid;
 927     HANDLE thread;
 928     HANDLE host_thread;
 929     struct ncu_params ncu_params;
 930
 931     cLocks = 0;
 932
 933     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
 934     ok_ole_success(hr, CreateStreamOnHGlobal);
 935     ncu_params.stream = pStream;
 936
 937     /* NOTE: assumes start_host_object uses an STA to host the object, as MTAs
 938      * always deadlock when called from within DllMain */
 939     host_tid = start_host_object(pStream, &IID_IClassFactory, (IUnknown *)&Test_ClassFactory, MSHLFLAGS_NORMAL, &host_thread);
 940     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 941
 942     ok_more_than_one_lock();
 943
 944     thread = CreateThread(NULL, 0, no_couninitialize_client_proc, &ncu_params, 0, &tid);
 945
 946     ok( !WaitForSingleObject(thread, 10000), "wait timed out\n" );
 947     CloseHandle(thread);
 948
 949     ok_no_locks();
 950
 951     end_host_object(host_tid, host_thread);
 952 }
 953
 954 /* tests success case of a same-thread table-weak marshal, unmarshal, unmarshal */
 955 static void test_tableweak_marshal_and_unmarshal_twice(void)
 956 {
 957     HRESULT hr;
 958     IStream *pStream = NULL;
 959     IUnknown *pProxy1 = NULL;
 960     IUnknown *pProxy2 = NULL;
 961     DWORD tid;
 962     HANDLE thread;
 963
 964     cLocks = 0;
 965
 966     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
 967     ok_ole_success(hr, CreateStreamOnHGlobal);
 968     tid = start_host_object(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHLFLAGS_TABLEWEAK, &thread);
 969
 970     ok_more_than_one_lock();
 971
 972     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 973     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy1);
 974     ok_ole_success(hr, CoUnmarshalInterface);
 975
 976     ok_more_than_one_lock();
 977
 978     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 979     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy2);
 980     IStream_Release(pStream);
 981     ok_ole_success(hr, CoUnmarshalInterface);
 982
 983     ok_more_than_one_lock();
 984
 985     IUnknown_Release(pProxy1);
 986     IUnknown_Release(pProxy2);
 987
 988     /* this line is shows the difference between weak and strong table marshaling:
 989      *  weak has cLocks == 0
 990      *  strong has cLocks > 0 */
 991     ok_no_locks();
 992
 993     end_host_object(tid, thread);
 994 }
 995
 996 /* tests releasing after unmarshaling one object */
 997 static void test_tableweak_marshal_releasedata1(void)
 998 {
 999     HRESULT hr;
1000     IStream *pStream = NULL;
1001     IUnknown *pProxy1 = NULL;
1002     IUnknown *pProxy2 = NULL;
1003     DWORD tid;
1004     HANDLE thread;
1005
1006     cLocks = 0;
1007
1008     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
1009     ok_ole_success(hr, CreateStreamOnHGlobal);
1010     tid = start_host_object(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHLFLAGS_TABLEWEAK, &thread);
1011
1012     ok_more_than_one_lock();
1013
1014     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
1015     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy1);
1016     ok_ole_success(hr, CoUnmarshalInterface);
1017
1018     ok_more_than_one_lock();
1019
1020     /* release the remaining reference on the object by calling
1021      * CoReleaseMarshalData in the hosting thread */
1022     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
1023     release_host_object(tid);
1024
1025     ok_more_than_one_lock();
1026
1027     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
1028     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy2);
1029     ok_ole_success(hr, CoUnmarshalInterface);
1030     IStream_Release(pStream);
1031
1032     ok_more_than_one_lock();
1033
1034     IUnknown_Release(pProxy1);
1035     if (pProxy2)
1036         IUnknown_Release(pProxy2);
1037
1038     /* this line is shows the difference between weak and strong table marshaling:
1039      *  weak has cLocks == 0
1040      *  strong has cLocks > 0 */
1041     ok_no_locks();
1042
1043     end_host_object(tid, thread);
1044 }
1045
1046 /* tests releasing after unmarshaling one object */
1047 static void test_tableweak_marshal_releasedata2(void)
1048 {
1049     HRESULT hr;
1050     IStream *pStream = NULL;
1051     IUnknown *pProxy = NULL;
1052     DWORD tid;
1053     HANDLE thread;
1054
1055     cLocks = 0;
1056
1057     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
1058     ok_ole_success(hr, CreateStreamOnHGlobal);
1059     tid = start_host_object(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHLFLAGS_TABLEWEAK, &thread);
1060
1061     ok_more_than_one_lock();
1062
1063     /* release the remaining reference on the object by calling
1064      * CoReleaseMarshalData in the hosting thread */
1065     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
1066     release_host_object(tid);
1067
1068     ok_no_locks();
1069
1070     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
1071     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy);
1072     todo_wine
1073     {
1074     ok(hr == CO_E_OBJNOTREG,
1075        "CoUnmarshalInterface should have failed with CO_E_OBJNOTREG, but returned 0x%08x instead\n",
1076        hr);
1077     }
1078     IStream_Release(pStream);
1079
1080     ok_no_locks();
1081
1082     end_host_object(tid, thread);
1083 }
1084
1085 struct weak_and_normal_marshal_data
1086 {
1087     IStream *pStreamWeak;
1088     IStream *pStreamNormal;
1089     HANDLE hReadyEvent;
1090     HANDLE hQuitEvent;
1091 };
1092
1093 static DWORD CALLBACK weak_and_normal_marshal_thread_proc(void *p)
1094 {
1095     HRESULT hr;
1096     struct weak_and_normal_marshal_data *data = p;
1097     HANDLE hQuitEvent = data->hQuitEvent;
1098     MSG msg;
1099
1100     pCoInitializeEx(NULL, COINIT_APARTMENTTHREADED);
1101
1102     hr = CoMarshalInterface(data->pStreamWeak, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHCTX_INPROC, NULL, MSHLFLAGS_TABLEWEAK);
1103     ok_ole_success(hr, "CoMarshalInterface");
1104
1105     hr = CoMarshalInterface(data->pStreamNormal, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHCTX_INPROC, NULL, MSHLFLAGS_NORMAL);
1106     ok_ole_success(hr, "CoMarshalInterface");
1107
1108     /* force the message queue to be created before signaling parent thread */
1109     PeekMessage(&msg, NULL, WM_USER, WM_USER, PM_NOREMOVE);
1110
1111     SetEvent(data->hReadyEvent);
1112
1113     while (WAIT_OBJECT_0 + 1 == MsgWaitForMultipleObjects(1, &hQuitEvent, FALSE, 10000, QS_ALLINPUT))
1114     {
1115         while (PeekMessage(&msg, NULL, 0, 0, PM_REMOVE))
1116             DispatchMessage(&msg);
1117     }
1118     CloseHandle(hQuitEvent);
1119
1120     CoUninitialize();
1121
1122     return 0;
1123 }
1124
1125 /* tests interaction between table-weak and normal marshalling of an object */
1126 static void test_tableweak_and_normal_marshal_and_unmarshal(void)
1127 {
1128     HRESULT hr;
1129     IUnknown *pProxyWeak = NULL;
1130     IUnknown *pProxyNormal = NULL;
1131     DWORD tid;
1132     HANDLE thread;
1133     struct weak_and_normal_marshal_data data;
1134
1135     cLocks = 0;
1136
1137     data.hReadyEvent = CreateEvent(NULL, FALSE, FALSE, NULL);
1138     data.hQuitEvent = CreateEvent(NULL, FALSE, FALSE, NULL);
1139     hr = CreateStreamOnHGlobal(NULL, TRUE, &data.pStreamWeak);
1140     ok_ole_success(hr, CreateStreamOnHGlobal);
1141     hr = CreateStreamOnHGlobal(NULL, TRUE, &data.pStreamNormal);
1142     ok_ole_success(hr, CreateStreamOnHGlobal);
1143
1144     thread = CreateThread(NULL, 0, weak_and_normal_marshal_thread_proc, &data, 0, &tid);
1145     ok( !WaitForSingleObject(data.hReadyEvent, 10000), "wait timed out\n" );
1146     CloseHandle(data.hReadyEvent);
1147
1148     ok_more_than_one_lock();
1149
1150     IStream_Seek(data.pStreamWeak, ullZero, STREAM_SEEK_SET, NULL);
1151     hr = CoUnmarshalInterface(data.pStreamWeak, &IID_IClassFactory, (void **)&pProxyWeak);
1152     ok_ole_success(hr, CoUnmarshalInterface);
1153
1154     ok_more_than_one_lock();
1155
1156     IStream_Seek(data.pStreamNormal, ullZero, STREAM_SEEK_SET, NULL);
1157     hr = CoUnmarshalInterface(data.pStreamNormal, &IID_IClassFactory, (void **)&pProxyNormal);
1158     ok_ole_success(hr, CoUnmarshalInterface);
1159
1160     ok_more_than_one_lock();
1161
1162     IUnknown_Release(pProxyNormal);
1163
1164     ok_more_than_one_lock();
1165
1166     IUnknown_Release(pProxyWeak);
1167
1168     ok_no_locks();
1169
1170     IStream_Release(data.pStreamWeak);
1171     IStream_Release(data.pStreamNormal);
1172
1173     SetEvent(data.hQuitEvent);
1174     ok( !WaitForSingleObject(thread, 10000), "wait timed out\n" );
1175     CloseHandle(thread);
1176 }
1177
1178 /* tests success case of a same-thread table-strong marshal, unmarshal, unmarshal */
1179 static void test_tablestrong_marshal_and_unmarshal_twice(void)
1180 {
1181     HRESULT hr;
1182     IStream *pStream = NULL;
1183     IUnknown *pProxy1 = NULL;
1184     IUnknown *pProxy2 = NULL;
1185     DWORD tid;
1186     HANDLE thread;
1187
1188     cLocks = 0;
1189
1190     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
1191     ok_ole_success(hr, CreateStreamOnHGlobal);
1192     tid = start_host_object(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHLFLAGS_TABLESTRONG, &thread);
1193
1194     ok_more_than_one_lock();
1195
1196     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
1197     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy1);
1198     ok_ole_success(hr, CoUnmarshalInterface);
1199
1200     ok_more_than_one_lock();
1201
1202     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
1203     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy2);
1204     ok_ole_success(hr, CoUnmarshalInterface);
1205
1206     ok_more_than_one_lock();
1207
1208     if (pProxy1) IUnknown_Release(pProxy1);
1209     if (pProxy2) IUnknown_Release(pProxy2);
1210
1211     /* this line is shows the difference between weak and strong table marshaling:
1212      *  weak has cLocks == 0
1213      *  strong has cLocks > 0 */
1214     ok_more_than_one_lock();
1215
1216     /* release the remaining reference on the object by calling
1217      * CoReleaseMarshalData in the hosting thread */
1218     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
1219     release_host_object(tid);
1220     IStream_Release(pStream);
1221
1222     ok_no_locks();
1223
1224     end_host_object(tid, thread);
1225 }
1226
1227 /* tests CoLockObjectExternal */
1228 static void test_lock_object_external(void)
1229 {
1230     HRESULT hr;
1231     IStream *pStream = NULL;
1232
1233     cLocks = 0;
1234
1235     /* test the stub manager creation aspect of CoLockObjectExternal when the
1236      * object hasn't been marshaled yet */
1237     CoLockObjectExternal((IUnknown*)&Test_ClassFactory, TRUE, TRUE);
1238
1239     ok_more_than_one_lock();
1240
1241     CoDisconnectObject((IUnknown*)&Test_ClassFactory, 0);
1242
1243     ok_no_locks();
1244
1245     /* test our empty stub manager being handled correctly in
1246      * CoMarshalInterface */
1247     CoLockObjectExternal((IUnknown*)&Test_ClassFactory, TRUE, TRUE);
1248
1249     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
1250     ok_ole_success(hr, CreateStreamOnHGlobal);
1251     hr = CoMarshalInterface(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHCTX_INPROC, NULL, MSHLFLAGS_NORMAL);
1252     ok_ole_success(hr, CoMarshalInterface);
1253
1254     CoLockObjectExternal((IUnknown*)&Test_ClassFactory, TRUE, TRUE);
1255
1256     ok_more_than_one_lock();
1257
1258     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
1259     hr = CoReleaseMarshalData(pStream);
1260     ok_ole_success(hr, CoReleaseMarshalData);
1261     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
1262
1263     ok_more_than_one_lock();
1264
1265     CoLockObjectExternal((IUnknown*)&Test_ClassFactory, FALSE, TRUE);
1266
1267     ok_more_than_one_lock();
1268
1269     CoLockObjectExternal((IUnknown*)&Test_ClassFactory, FALSE, TRUE);
1270
1271     ok_no_locks();
1272
1273     /* test CoLockObjectExternal releases reference to object with
1274      * fLastUnlockReleases as TRUE and there are only strong references on
1275      * the object */
1276     CoLockObjectExternal((IUnknown*)&Test_ClassFactory, TRUE, FALSE);
1277
1278     ok_more_than_one_lock();
1279
1280     CoLockObjectExternal((IUnknown*)&Test_ClassFactory, FALSE, FALSE);
1281
1282     ok_no_locks();
1283
1284     /* test CoLockObjectExternal doesn't release the last reference to an
1285      * object with fLastUnlockReleases as TRUE and there is a weak reference
1286      * on the object */
1287     hr = CoMarshalInterface(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHCTX_INPROC, NULL, MSHLFLAGS_TABLEWEAK);
1288     ok_ole_success(hr, CoMarshalInterface);
1289
1290     ok_more_than_one_lock();
1291
1292     CoLockObjectExternal((IUnknown*)&Test_ClassFactory, TRUE, FALSE);
1293
1294     ok_more_than_one_lock();
1295
1296     CoLockObjectExternal((IUnknown*)&Test_ClassFactory, FALSE, FALSE);
1297
1298     ok_more_than_one_lock();
1299
1300     CoDisconnectObject((IUnknown*)&Test_ClassFactory, 0);
1301
1302     ok_no_locks();
1303
1304     IStream_Release(pStream);
1305 }
1306
1307 /* tests disconnecting stubs */
1308 static void test_disconnect_stub(void)
1309 {
1310     HRESULT hr;
1311     IStream *pStream = NULL;
1312
1313     cLocks = 0;
1314
1315     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
1316     ok_ole_success(hr, CreateStreamOnHGlobal);
1317     hr = CoMarshalInterface(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHCTX_INPROC, NULL, MSHLFLAGS_NORMAL);
1318     ok_ole_success(hr, CoMarshalInterface);
1319
1320     CoLockObjectExternal((IUnknown*)&Test_ClassFactory, TRUE, TRUE);
1321
1322     ok_more_than_one_lock();
1323
1324     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
1325     hr = CoReleaseMarshalData(pStream);
1326     ok_ole_success(hr, CoReleaseMarshalData);
1327     IStream_Release(pStream);
1328
1329     ok_more_than_one_lock();
1330
1331     CoDisconnectObject((IUnknown*)&Test_ClassFactory, 0);
1332
1333     ok_no_locks();
1334
1335     hr = CoDisconnectObject(NULL, 0);
1336     ok( hr == E_INVALIDARG, "wrong status %x\n", hr );
1337 }
1338
1339 /* tests failure case of a same-thread marshal and unmarshal twice */
1340 static void test_normal_marshal_and_unmarshal_twice(void)
1341 {
1342     HRESULT hr;
1343     IStream *pStream = NULL;
1344     IUnknown *pProxy1 = NULL;
1345     IUnknown *pProxy2 = NULL;
1346
1347     cLocks = 0;
1348
1349     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
1350     ok_ole_success(hr, CreateStreamOnHGlobal);
1351     hr = CoMarshalInterface(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHCTX_INPROC, NULL, MSHLFLAGS_NORMAL);
1352     ok_ole_success(hr, CoMarshalInterface);
1353
1354     ok_more_than_one_lock();
1355
1356     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
1357     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy1);
1358     ok_ole_success(hr, CoUnmarshalInterface);
1359
1360     ok_more_than_one_lock();
1361
1362     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
1363     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy2);
1364     ok(hr == CO_E_OBJNOTCONNECTED,
1365         "CoUnmarshalInterface should have failed with error CO_E_OBJNOTCONNECTED for double unmarshal, instead of 0x%08x\n", hr);
1366
1367     IStream_Release(pStream);
1368
1369     ok_more_than_one_lock();
1370
1371     IUnknown_Release(pProxy1);
1372
1373     ok_no_locks();
1374 }
1375
1376 /* tests success case of marshaling and unmarshaling an HRESULT */
1377 static void test_hresult_marshaling(void)
1378 {
1379     HRESULT hr;
1380     HRESULT hr_marshaled = 0;
1381     IStream *pStream = NULL;
1382     static const HRESULT E_DEADBEEF = 0xdeadbeef;
1383
1384     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
1385     ok_ole_success(hr, CreateStreamOnHGlobal);
1386
1387     hr = CoMarshalHresult(pStream, E_DEADBEEF);
1388     ok_ole_success(hr, CoMarshalHresult);
1389
1390     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
1391     hr = IStream_Read(pStream, &hr_marshaled, sizeof(HRESULT), NULL);
1392     ok_ole_success(hr, IStream_Read);
1393
1394     ok(hr_marshaled == E_DEADBEEF, "Didn't marshal HRESULT as expected: got value 0x%08x instead\n", hr_marshaled);
1395
1396     hr_marshaled = 0;
1397     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
1398     hr = CoUnmarshalHresult(pStream, &hr_marshaled);
1399     ok_ole_success(hr, CoUnmarshalHresult);
1400
1401     ok(hr_marshaled == E_DEADBEEF, "Didn't marshal HRESULT as expected: got value 0x%08x instead\n", hr_marshaled);
1402
1403     IStream_Release(pStream);
1404 }
1405
1406
1407 /* helper for test_proxy_used_in_wrong_thread */
1408 static DWORD CALLBACK bad_thread_proc(LPVOID p)
1409 {
1410     IClassFactory * cf = p;
1411     HRESULT hr;
1412     IUnknown * proxy = NULL;
1413
1414     hr = IClassFactory_CreateInstance(cf, NULL, &IID_IUnknown, (LPVOID*)&proxy);
1415     todo_wine
1416     ok(hr == CO_E_NOTINITIALIZED,
1417        "COM should have failed with CO_E_NOTINITIALIZED on using proxy without apartment, but instead returned 0x%08x\n",
1418        hr);
1419
1420     hr = IClassFactory_QueryInterface(cf, &IID_IMultiQI, (LPVOID *)&proxy);
1421     /* Win9x returns S_OK, whilst NT returns RPC_E_WRONG_THREAD */
1422     trace("call to proxy's QueryInterface for local interface without apartment returned 0x%08x\n", hr);
1423     if (SUCCEEDED(hr))
1424         IUnknown_Release(proxy);
1425
1426     hr = IClassFactory_QueryInterface(cf, &IID_IStream, (LPVOID *)&proxy);
1427     /* Win9x returns E_NOINTERFACE, whilst NT returns RPC_E_WRONG_THREAD */
1428     trace("call to proxy's QueryInterface without apartment returned 0x%08x\n", hr);
1429     if (SUCCEEDED(hr))
1430         IUnknown_Release(proxy);
1431
1432     pCoInitializeEx(NULL, COINIT_MULTITHREADED);
1433
1434     hr = IClassFactory_CreateInstance(cf, NULL, &IID_IUnknown, (LPVOID*)&proxy);
1435     if (proxy) IUnknown_Release(proxy);
1436     ok(hr == RPC_E_WRONG_THREAD,
1437         "COM should have failed with RPC_E_WRONG_THREAD on using proxy from wrong apartment, but instead returned 0x%08x\n",
1438         hr);
1439
1440     hr = IClassFactory_QueryInterface(cf, &IID_IStream, (LPVOID *)&proxy);
1441     /* Win9x returns E_NOINTERFACE, whilst NT returns RPC_E_WRONG_THREAD */
1442     trace("call to proxy's QueryInterface from wrong apartment returned 0x%08x\n", hr);
1443
1444     /* now be really bad and release the proxy from the wrong apartment */
1445     IClassFactory_Release(cf);
1446
1447     CoUninitialize();
1448
1449     return 0;
1450 }
1451
1452 /* tests failure case of a using a proxy in the wrong apartment */
1453 static void test_proxy_used_in_wrong_thread(void)
1454 {
1455     HRESULT hr;
1456     IStream *pStream = NULL;
1457     IUnknown *pProxy = NULL;
1458     DWORD tid, tid2;
1459     HANDLE thread;
1460     HANDLE host_thread;
1461
1462     cLocks = 0;
1463
1464     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
1465     ok_ole_success(hr, CreateStreamOnHGlobal);
1466     tid = start_host_object(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHLFLAGS_NORMAL, &host_thread);
1467
1468     ok_more_than_one_lock();
1469
1470     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
1471     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy);
1472     ok_ole_success(hr, CoUnmarshalInterface);
1473     IStream_Release(pStream);
1474
1475     ok_more_than_one_lock();
1476
1477     /* do a call that will fail, but result in IRemUnknown being used by the proxy */
1478     IUnknown_QueryInterface(pProxy, &IID_IStream, (LPVOID *)&pStream);
1479
1480     /* create a thread that we can misbehave in */
1481     thread = CreateThread(NULL, 0, bad_thread_proc, pProxy, 0, &tid2);
1482
1483     ok( !WaitForSingleObject(thread, 10000), "wait timed out\n" );
1484     CloseHandle(thread);
1485
1486     /* do release statement on Win9x that we should have done above */
1487     if (!GetProcAddress(GetModuleHandle("ole32"), "CoRegisterSurrogateEx"))
1488         IUnknown_Release(pProxy);
1489
1490     ok_no_locks();
1491
1492     end_host_object(tid, host_thread);
1493 }
1494
1495 static HRESULT WINAPI MessageFilter_QueryInterface(IMessageFilter *iface, REFIID riid, void ** ppvObj)
1496 {
1497     if (ppvObj == NULL) return E_POINTER;
1498
1499     if (IsEqualGUID(riid, &IID_IUnknown) ||
1500         IsEqualGUID(riid, &IID_IClassFactory))
1501     {
1502         *ppvObj = iface;
1503         IMessageFilter_AddRef(iface);
1504         return S_OK;
1505     }
1506
1507     return E_NOINTERFACE;
1508 }
1509
1510 static ULONG WINAPI MessageFilter_AddRef(IMessageFilter *iface)
1511 {
1512     return 2; /* non-heap object */
1513 }
1514
1515 static ULONG WINAPI MessageFilter_Release(IMessageFilter *iface)
1516 {
1517     return 1; /* non-heap object */
1518 }
1519
1520 static DWORD WINAPI MessageFilter_HandleInComingCall(
1521   IMessageFilter *iface,
1522   DWORD dwCallType,
1523   HTASK threadIDCaller,
1524   DWORD dwTickCount,
1525   LPINTERFACEINFO lpInterfaceInfo)
1526 {
1527     static int callcount = 0;
1528     DWORD ret;
1529     trace("HandleInComingCall\n");
1530     switch (callcount)
1531     {
1532     case 0:
1533         ret = SERVERCALL_REJECTED;
1534         break;
1535     case 1:
1536         ret = SERVERCALL_RETRYLATER;
1537         break;
1538     default:
1539         ret = SERVERCALL_ISHANDLED;
1540         break;
1541     }
1542     callcount++;
1543     return ret;
1544 }
1545
1546 static DWORD WINAPI MessageFilter_RetryRejectedCall(
1547   IMessageFilter *iface,
1548   HTASK threadIDCallee,
1549   DWORD dwTickCount,
1550   DWORD dwRejectType)
1551 {
1552     trace("RetryRejectedCall\n");
1553     return 0;
1554 }
1555
1556 static DWORD WINAPI MessageFilter_MessagePending(
1557   IMessageFilter *iface,
1558   HTASK threadIDCallee,
1559   DWORD dwTickCount,
1560   DWORD dwPendingType)
1561 {
1562     trace("MessagePending\n");
1563     return PENDINGMSG_WAITNOPROCESS;
1564 }
1565
1566 static const IMessageFilterVtbl MessageFilter_Vtbl =
1567 {
1568     MessageFilter_QueryInterface,
1569     MessageFilter_AddRef,
1570     MessageFilter_Release,
1571     MessageFilter_HandleInComingCall,
1572     MessageFilter_RetryRejectedCall,
1573     MessageFilter_MessagePending
1574 };
1575
1576 static IMessageFilter MessageFilter = { &MessageFilter_Vtbl };
1577
1578 static void test_message_filter(void)
1579 {
1580     HRESULT hr;
1581     IStream *pStream = NULL;
1582     IClassFactory *cf = NULL;
1583     DWORD tid;
1584     IUnknown *proxy = NULL;
1585     IMessageFilter *prev_filter = NULL;
1586     HANDLE thread;
1587
1588     cLocks = 0;
1589
1590     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
1591     ok_ole_success(hr, CreateStreamOnHGlobal);
1592     tid = start_host_object2(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHLFLAGS_NORMAL, &MessageFilter, &thread);
1593
1594     ok_more_than_one_lock();
1595
1596     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
1597     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&cf);
1598     ok_ole_success(hr, CoUnmarshalInterface);
1599     IStream_Release(pStream);
1600
1601     ok_more_than_one_lock();
1602
1603     hr = IClassFactory_CreateInstance(cf, NULL, &IID_IUnknown, (LPVOID*)&proxy);
1604     ok(hr == RPC_E_CALL_REJECTED, "Call should have returned RPC_E_CALL_REJECTED, but return 0x%08x instead\n", hr);
1605     if (proxy) IUnknown_Release(proxy);
1606     proxy = NULL;
1607
1608     hr = CoRegisterMessageFilter(&MessageFilter, &prev_filter);
1609     ok_ole_success(hr, CoRegisterMessageFilter);
1610
1611     hr = IClassFactory_CreateInstance(cf, NULL, &IID_IUnknown, (LPVOID*)&proxy);
1612     ok_ole_success(hr, IClassFactory_CreateInstance);
1613
1614     IUnknown_Release(proxy);
1615
1616     IClassFactory_Release(cf);
1617
1618     ok_no_locks();
1619
1620     end_host_object(tid, thread);
1621
1622     hr = CoRegisterMessageFilter(prev_filter, NULL);
1623     ok_ole_success(hr, CoRegisterMessageFilter);
1624 }
1625
1626 /* test failure case of trying to unmarshal from bad stream */
1627 static void test_bad_marshal_stream(void)
1628 {
1629     HRESULT hr;
1630     IStream *pStream = NULL;
1631
1632     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
1633     ok_ole_success(hr, CreateStreamOnHGlobal);
1634     hr = CoMarshalInterface(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHCTX_INPROC, NULL, MSHLFLAGS_NORMAL);
1635     ok_ole_success(hr, CoMarshalInterface);
1636
1637     ok_more_than_one_lock();
1638
1639     /* try to read beyond end of stream */
1640     hr = CoReleaseMarshalData(pStream);
1641     ok(hr == STG_E_READFAULT, "Should have failed with STG_E_READFAULT, but returned 0x%08x instead\n", hr);
1642
1643     /* now release for real */
1644     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
1645     hr = CoReleaseMarshalData(pStream);
1646     ok_ole_success(hr, CoReleaseMarshalData);
1647
1648     IStream_Release(pStream);
1649 }
1650
1651 /* tests that proxies implement certain interfaces */
1652 static void test_proxy_interfaces(void)
1653 {
1654     HRESULT hr;
1655     IStream *pStream = NULL;
1656     IUnknown *pProxy = NULL;
1657     IUnknown *pOtherUnknown = NULL;
1658     DWORD tid;
1659     HANDLE thread;
1660
1661     cLocks = 0;
1662
1663     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
1664     ok_ole_success(hr, CreateStreamOnHGlobal);
1665     tid = start_host_object(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHLFLAGS_NORMAL, &thread);
1666
1667     ok_more_than_one_lock();
1668
1669     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
1670     hr = CoUnmarshalInterface(pStream, &IID_IUnknown, (void **)&pProxy);
1671     ok_ole_success(hr, CoUnmarshalInterface);
1672     IStream_Release(pStream);
1673
1674     ok_more_than_one_lock();
1675
1676     hr = IUnknown_QueryInterface(pProxy, &IID_IUnknown, (LPVOID*)&pOtherUnknown);
1677     ok_ole_success(hr, IUnknown_QueryInterface IID_IUnknown);
1678     if (hr == S_OK) IUnknown_Release(pOtherUnknown);
1679
1680     hr = IUnknown_QueryInterface(pProxy, &IID_IClientSecurity, (LPVOID*)&pOtherUnknown);
1681     ok_ole_success(hr, IUnknown_QueryInterface IID_IClientSecurity);
1682     if (hr == S_OK) IUnknown_Release(pOtherUnknown);
1683
1684     hr = IUnknown_QueryInterface(pProxy, &IID_IMultiQI, (LPVOID*)&pOtherUnknown);
1685     ok_ole_success(hr, IUnknown_QueryInterface IID_IMultiQI);
1686     if (hr == S_OK) IUnknown_Release(pOtherUnknown);
1687
1688     hr = IUnknown_QueryInterface(pProxy, &IID_IMarshal, (LPVOID*)&pOtherUnknown);
1689     ok_ole_success(hr, IUnknown_QueryInterface IID_IMarshal);
1690     if (hr == S_OK) IUnknown_Release(pOtherUnknown);
1691
1692     /* IMarshal2 is also supported on NT-based systems, but is pretty much
1693      * useless as it has no more methods over IMarshal that it inherits from. */
1694
1695     IUnknown_Release(pProxy);
1696
1697     ok_no_locks();
1698
1699     end_host_object(tid, thread);
1700 }
1701
1702 typedef struct
1703 {
1704     IUnknown IUnknown_iface;
1705     ULONG refs;
1706 } HeapUnknown;
1707
1708 static inline HeapUnknown *impl_from_IUnknown(IUnknown *iface)
1709 {
1710     return CONTAINING_RECORD(iface, HeapUnknown, IUnknown_iface);
1711 }
1712
1713 static HRESULT WINAPI HeapUnknown_QueryInterface(IUnknown *iface, REFIID riid, void **ppv)
1714 {
1715     if (IsEqualIID(riid, &IID_IUnknown))
1716     {
1717         IUnknown_AddRef(iface);
1718         *ppv = iface;
1719         return S_OK;
1720     }
1721     *ppv = NULL;
1722     return E_NOINTERFACE;
1723 }
1724
1725 static ULONG WINAPI HeapUnknown_AddRef(IUnknown *iface)
1726 {
1727     HeapUnknown *This = impl_from_IUnknown(iface);
1728     return InterlockedIncrement((LONG*)&This->refs);
1729 }
1730
1731 static ULONG WINAPI HeapUnknown_Release(IUnknown *iface)
1732 {
1733     HeapUnknown *This = impl_from_IUnknown(iface);
1734     ULONG refs = InterlockedDecrement((LONG*)&This->refs);
1735     if (!refs) HeapFree(GetProcessHeap(), 0, This);
1736     return refs;
1737 }
1738
1739 static const IUnknownVtbl HeapUnknown_Vtbl =
1740 {
1741     HeapUnknown_QueryInterface,
1742     HeapUnknown_AddRef,
1743     HeapUnknown_Release
1744 };
1745
1746 static void test_proxybuffer(REFIID riid)
1747 {
1748     HRESULT hr;
1749     IPSFactoryBuffer *psfb;
1750     IRpcProxyBuffer *proxy;
1751     LPVOID lpvtbl;
1752     ULONG refs;
1753     CLSID clsid;
1754     HeapUnknown *pUnkOuter = HeapAlloc(GetProcessHeap(), 0, sizeof(*pUnkOuter));
1755
1756     pUnkOuter->IUnknown_iface.lpVtbl = &HeapUnknown_Vtbl;
1757     pUnkOuter->refs = 1;
1758
1759     hr = CoGetPSClsid(riid, &clsid);
1760     ok_ole_success(hr, CoGetPSClsid);
1761
1762     hr = CoGetClassObject(&clsid, CLSCTX_INPROC_SERVER, NULL, &IID_IPSFactoryBuffer, (LPVOID*)&psfb);
1763     ok_ole_success(hr, CoGetClassObject);
1764
1765     hr = IPSFactoryBuffer_CreateProxy(psfb, &pUnkOuter->IUnknown_iface, riid, &proxy, &lpvtbl);
1766     ok_ole_success(hr, IPSFactoryBuffer_CreateProxy);
1767     ok(lpvtbl != NULL, "IPSFactoryBuffer_CreateProxy succeeded, but returned a NULL vtable!\n");
1768
1769     /* release our reference to the outer unknown object - the PS factory
1770      * buffer will have AddRef's it in the CreateProxy call */
1771     refs = IUnknown_Release(&pUnkOuter->IUnknown_iface);
1772     ok(refs == 1, "Ref count of outer unknown should have been 1 instead of %d\n", refs);
1773
1774     /* Not checking return, unreliable on native. Maybe it leaks references? */
1775     IPSFactoryBuffer_Release(psfb);
1776
1777     refs = IUnknown_Release((IUnknown *)lpvtbl);
1778     ok(refs == 0, "Ref-count leak of %d on IRpcProxyBuffer\n", refs);
1779
1780     refs = IRpcProxyBuffer_Release(proxy);
1781     ok(refs == 0, "Ref-count leak of %d on IRpcProxyBuffer\n", refs);
1782 }
1783
1784 static void test_stubbuffer(REFIID riid)
1785 {
1786     HRESULT hr;
1787     IPSFactoryBuffer *psfb;
1788     IRpcStubBuffer *stub;
1789     ULONG refs;
1790     CLSID clsid;
1791
1792     cLocks = 0;
1793
1794     hr = CoGetPSClsid(riid, &clsid);
1795     ok_ole_success(hr, CoGetPSClsid);
1796
1797     hr = CoGetClassObject(&clsid, CLSCTX_INPROC_SERVER, NULL, &IID_IPSFactoryBuffer, (LPVOID*)&psfb);
1798     ok_ole_success(hr, CoGetClassObject);
1799
1800     hr = IPSFactoryBuffer_CreateStub(psfb, riid, (IUnknown*)&Test_ClassFactory, &stub);
1801     ok_ole_success(hr, IPSFactoryBuffer_CreateStub);
1802
1803     /* Not checking return, unreliable on native. Maybe it leaks references? */
1804     IPSFactoryBuffer_Release(psfb);
1805
1806     ok_more_than_one_lock();
1807
1808     IRpcStubBuffer_Disconnect(stub);
1809
1810     ok_no_locks();
1811
1812     refs = IRpcStubBuffer_Release(stub);
1813     ok(refs == 0, "Ref-count leak of %d on IRpcProxyBuffer\n", refs);
1814 }
1815
1816 static HWND hwnd_app;
1817
1818 static HRESULT WINAPI TestRE_IClassFactory_CreateInstance(
1819     LPCLASSFACTORY iface,
1820     LPUNKNOWN pUnkOuter,
1821     REFIID riid,
1822     LPVOID *ppvObj)
1823 {
1824     DWORD_PTR res;
1825     if (IsEqualIID(riid, &IID_IWineTest))
1826     {
1827         BOOL ret = SendMessageTimeout(hwnd_app, WM_NULL, 0, 0, SMTO_BLOCK, 5000, &res);
1828         ok(ret, "Timed out sending a message to originating window during RPC call\n");
1829     }
1830     *ppvObj = NULL;
1831     return S_FALSE;
1832 }
1833
1834 static const IClassFactoryVtbl TestREClassFactory_Vtbl =
1835 {
1836     Test_IClassFactory_QueryInterface,
1837     Test_IClassFactory_AddRef,
1838     Test_IClassFactory_Release,
1839     TestRE_IClassFactory_CreateInstance,
1840     Test_IClassFactory_LockServer
1841 };
1842
1843 static IClassFactory TestRE_ClassFactory = { &TestREClassFactory_Vtbl };
1844
1845 static LRESULT CALLBACK window_proc(HWND hwnd, UINT msg, WPARAM wparam, LPARAM lparam)
1846 {
1847     switch (msg)
1848     {
1849     case WM_USER:
1850     {
1851         HRESULT hr;
1852         IStream *pStream = NULL;
1853         IClassFactory *proxy = NULL;
1854         IUnknown *object;
1855         DWORD tid;
1856         HANDLE thread;
1857
1858         cLocks = 0;
1859
1860         hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
1861         ok_ole_success(hr, CreateStreamOnHGlobal);
1862         tid = start_host_object(pStream, &IID_IClassFactory, (IUnknown*)&TestRE_ClassFactory, MSHLFLAGS_NORMAL, &thread);
1863
1864         ok_more_than_one_lock();
1865
1866         IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
1867         hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&proxy);
1868         ok_ole_success(hr, CoReleaseMarshalData);
1869         IStream_Release(pStream);
1870
1871         ok_more_than_one_lock();
1872
1873         /* note the use of the magic IID_IWineTest value to tell remote thread
1874          * to try to send a message back to us */
1875         hr = IClassFactory_CreateInstance(proxy, NULL, &IID_IWineTest, (void **)&object);
1876         ok(hr == S_FALSE, "expected S_FALSE, got %d\n", hr);
1877
1878         IClassFactory_Release(proxy);
1879
1880         ok_no_locks();
1881
1882         end_host_object(tid, thread);
1883
1884         PostMessage(hwnd, WM_QUIT, 0, 0);
1885
1886         return 0;
1887     }
1888     case WM_USER+1:
1889     {
1890         HRESULT hr;
1891         IStream *pStream = NULL;
1892         IClassFactory *proxy = NULL;
1893         IUnknown *object;
1894         DWORD tid;
1895         HANDLE thread;
1896
1897         cLocks = 0;
1898
1899         hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
1900         ok_ole_success(hr, CreateStreamOnHGlobal);
1901         tid = start_host_object(pStream, &IID_IClassFactory, (IUnknown*)&TestRE_ClassFactory, MSHLFLAGS_NORMAL, &thread);
1902
1903         ok_more_than_one_lock();
1904
1905         IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
1906         hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&proxy);
1907         ok_ole_success(hr, CoReleaseMarshalData);
1908         IStream_Release(pStream);
1909
1910         ok_more_than_one_lock();
1911
1912         /* post quit message before a doing a COM call to show that a pending
1913         * WM_QUIT message doesn't stop the call from succeeding */
1914         PostMessage(hwnd, WM_QUIT, 0, 0);
1915         hr = IClassFactory_CreateInstance(proxy, NULL, &IID_IUnknown, (void **)&object);
1916         ok(hr == S_FALSE, "IClassFactory_CreateInstance returned 0x%08x, expected S_FALSE\n", hr);
1917
1918         IClassFactory_Release(proxy);
1919
1920         ok_no_locks();
1921
1922         end_host_object(tid, thread);
1923
1924         return 0;
1925     }
1926     case WM_USER+2:
1927     {
1928         HRESULT hr;
1929         IStream *pStream = NULL;
1930         IClassFactory *proxy = NULL;
1931         IUnknown *object;
1932         DWORD tid;
1933         HANDLE thread;
1934
1935         hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
1936         ok_ole_success(hr, CreateStreamOnHGlobal);
1937         tid = start_host_object(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHLFLAGS_NORMAL, &thread);
1938
1939         IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
1940         hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&proxy);
1941         ok_ole_success(hr, CoReleaseMarshalData);
1942         IStream_Release(pStream);
1943
1944         /* shows that COM calls executed during the processing of sent
1945          * messages should fail */
1946         hr = IClassFactory_CreateInstance(proxy, NULL, &IID_IUnknown, (void **)&object);
1947         ok(hr == RPC_E_CANTCALLOUT_ININPUTSYNCCALL,
1948            "COM call during processing of sent message should return RPC_E_CANTCALLOUT_ININPUTSYNCCALL instead of 0x%08x\n", hr);
1949
1950         IClassFactory_Release(proxy);
1951
1952         end_host_object(tid, thread);
1953
1954         PostQuitMessage(0);
1955
1956         return 0;
1957     }
1958     default:
1959         return DefWindowProc(hwnd, msg, wparam, lparam);
1960     }
1961 }
1962
1963 static void register_test_window(void)
1964 {
1965     WNDCLASS wndclass;
1966
1967     memset(&wndclass, 0, sizeof(wndclass));
1968     wndclass.lpfnWndProc = window_proc;
1969     wndclass.lpszClassName = "WineCOMTest";
1970     RegisterClass(&wndclass);
1971 }
1972
1973 static void test_message_reentrancy(void)
1974 {
1975     MSG msg;
1976
1977     hwnd_app = CreateWindow("WineCOMTest", NULL, 0, CW_USEDEFAULT, CW_USEDEFAULT, CW_USEDEFAULT, CW_USEDEFAULT, NULL, NULL, NULL, 0);
1978     ok(hwnd_app != NULL, "Window creation failed\n");
1979
1980     /* start message re-entrancy test */
1981     PostMessage(hwnd_app, WM_USER, 0, 0);
1982
1983     while (GetMessage(&msg, NULL, 0, 0))
1984     {
1985         TranslateMessage(&msg);
1986         DispatchMessage(&msg);
1987     }
1988     DestroyWindow(hwnd_app);
1989 }
1990
1991 static HRESULT WINAPI TestMsg_IClassFactory_CreateInstance(
1992     LPCLASSFACTORY iface,
1993     LPUNKNOWN pUnkOuter,
1994     REFIID riid,
1995     LPVOID *ppvObj)
1996 {
1997     *ppvObj = NULL;
1998     SendMessage(hwnd_app, WM_USER+2, 0, 0);
1999     return S_OK;
2000 }
2001
2002 static IClassFactoryVtbl TestMsgClassFactory_Vtbl =
2003 {
2004     Test_IClassFactory_QueryInterface,
2005     Test_IClassFactory_AddRef,
2006     Test_IClassFactory_Release,
2007     TestMsg_IClassFactory_CreateInstance,
2008     Test_IClassFactory_LockServer
2009 };
2010
2011 static IClassFactory TestMsg_ClassFactory = { &TestMsgClassFactory_Vtbl };
2012
2013 static void test_call_from_message(void)
2014 {
2015     MSG msg;
2016     IStream *pStream;
2017     HRESULT hr;
2018     IClassFactory *proxy;
2019     DWORD tid;
2020     HANDLE thread;
2021     IUnknown *object;
2022
2023     hwnd_app = CreateWindow("WineCOMTest", NULL, 0, CW_USEDEFAULT, CW_USEDEFAULT, CW_USEDEFAULT, CW_USEDEFAULT, NULL, NULL, NULL, 0);
2024     ok(hwnd_app != NULL, "Window creation failed\n");
2025
2026     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
2027     ok_ole_success(hr, CreateStreamOnHGlobal);
2028     tid = start_host_object(pStream, &IID_IClassFactory, (IUnknown*)&TestMsg_ClassFactory, MSHLFLAGS_NORMAL, &thread);
2029
2030     ok_more_than_one_lock();
2031
2032     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
2033     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&proxy);
2034     ok_ole_success(hr, CoReleaseMarshalData);
2035     IStream_Release(pStream);
2036
2037     ok_more_than_one_lock();
2038
2039     /* start message re-entrancy test */
2040     hr = IClassFactory_CreateInstance(proxy, NULL, &IID_IUnknown, (void **)&object);
2041     ok_ole_success(hr, IClassFactory_CreateInstance);
2042
2043     IClassFactory_Release(proxy);
2044
2045     ok_no_locks();
2046
2047     end_host_object(tid, thread);
2048
2049     while (GetMessage(&msg, NULL, 0, 0))
2050     {
2051         TranslateMessage(&msg);
2052         DispatchMessage(&msg);
2053     }
2054     DestroyWindow(hwnd_app);
2055 }
2056
2057 static void test_WM_QUIT_handling(void)
2058 {
2059     MSG msg;
2060
2061     hwnd_app = CreateWindow("WineCOMTest", NULL, 0, CW_USEDEFAULT, CW_USEDEFAULT, CW_USEDEFAULT, CW_USEDEFAULT, NULL, NULL, NULL, 0);
2062     ok(hwnd_app != NULL, "Window creation failed\n");
2063
2064     /* start WM_QUIT handling test */
2065     PostMessage(hwnd_app, WM_USER+1, 0, 0);
2066
2067     while (GetMessage(&msg, NULL, 0, 0))
2068     {
2069         TranslateMessage(&msg);
2070         DispatchMessage(&msg);
2071     }
2072 }
2073
2074 static SIZE_T round_global_size(SIZE_T size)
2075 {
2076     static SIZE_T global_size_alignment = -1;
2077     if (global_size_alignment == -1)
2078     {
2079         void *p = GlobalAlloc(GMEM_FIXED, 1);
2080         global_size_alignment = GlobalSize(p);
2081         GlobalFree(p);
2082     }
2083
2084     return ((size + global_size_alignment - 1) & ~(global_size_alignment - 1));
2085 }
2086
2087 static void test_freethreadedmarshaldata(IStream *pStream, MSHCTX mshctx, void *ptr, DWORD mshlflags)
2088 {
2089     HGLOBAL hglobal;
2090     DWORD size;
2091     char *marshal_data;
2092     HRESULT hr;
2093
2094     hr = GetHGlobalFromStream(pStream, &hglobal);
2095     ok_ole_success(hr, GetHGlobalFromStream);
2096
2097     size = GlobalSize(hglobal);
2098
2099     marshal_data = GlobalLock(hglobal);
2100
2101     if (mshctx == MSHCTX_INPROC)
2102     {
2103         DWORD expected_size = round_global_size(3*sizeof(DWORD) + sizeof(GUID));
2104         ok(size == expected_size ||
2105            broken(size == (2*sizeof(DWORD))) /* Win9x & NT4 */,
2106            "size should have been %d instead of %d\n", expected_size, size);
2107
2108         ok(*(DWORD *)marshal_data == mshlflags, "expected 0x%x, but got 0x%x for mshctx\n", mshlflags, *(DWORD *)marshal_data);
2109         marshal_data += sizeof(DWORD);
2110         ok(*(void **)marshal_data == ptr, "expected %p, but got %p for mshctx\n", ptr, *(void **)marshal_data);
2111         marshal_data += sizeof(void *);
2112         if (sizeof(void*) == 4 && size >= 3*sizeof(DWORD))
2113         {
2114             ok(*(DWORD *)marshal_data == 0, "expected 0x0, but got 0x%x\n", *(DWORD *)marshal_data);
2115             marshal_data += sizeof(DWORD);
2116         }
2117         if (size >= 3*sizeof(DWORD) + sizeof(GUID))
2118         {
2119             trace("got guid data: {%08x-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x}\n",
2120                 ((GUID *)marshal_data)->Data1, ((GUID *)marshal_data)->Data2, ((GUID *)marshal_data)->Data3,
2121                 ((GUID *)marshal_data)->Data4[0], ((GUID *)marshal_data)->Data4[1], ((GUID *)marshal_data)->Data4[2], ((GUID *)marshal_data)->Data4[3],
2122                 ((GUID *)marshal_data)->Data4[4], ((GUID *)marshal_data)->Data4[5], ((GUID *)marshal_data)->Data4[6], ((GUID *)marshal_data)->Data4[7]);
2123         }
2124     }
2125     else
2126     {
2127         ok(size > sizeof(DWORD), "size should have been > sizeof(DWORD), not %d\n", size);
2128         ok(*(DWORD *)marshal_data == 0x574f454d /* MEOW */,
2129             "marshal data should be filled by standard marshal and start with MEOW signature\n");
2130     }
2131
2132     GlobalUnlock(hglobal);
2133 }
2134
2135 static void test_freethreadedmarshaler(void)
2136 {
2137     HRESULT hr;
2138     IUnknown *pFTUnknown;
2139     IMarshal *pFTMarshal;
2140     IStream *pStream;
2141     IUnknown *pProxy;
2142     static const LARGE_INTEGER llZero;
2143
2144     cLocks = 0;
2145     hr = CoCreateFreeThreadedMarshaler(NULL, &pFTUnknown);
2146     ok_ole_success(hr, CoCreateFreeThreadedMarshaler);
2147     hr = IUnknown_QueryInterface(pFTUnknown, &IID_IMarshal, (void **)&pFTMarshal);
2148     ok_ole_success(hr, IUnknown_QueryInterface);
2149     IUnknown_Release(pFTUnknown);
2150
2151     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
2152     ok_ole_success(hr, CreateStreamOnHGlobal);
2153
2154     /* inproc normal marshaling */
2155
2156     hr = IMarshal_MarshalInterface(pFTMarshal, pStream, &IID_IClassFactory,
2157         &Test_ClassFactory, MSHCTX_INPROC, NULL, MSHLFLAGS_NORMAL);
2158     ok_ole_success(hr, IMarshal_MarshalInterface);
2159
2160     ok_more_than_one_lock();
2161
2162     test_freethreadedmarshaldata(pStream, MSHCTX_INPROC, &Test_ClassFactory, MSHLFLAGS_NORMAL);
2163
2164     IStream_Seek(pStream, llZero, STREAM_SEEK_SET, NULL);
2165     hr = IMarshal_UnmarshalInterface(pFTMarshal, pStream, &IID_IUnknown, (void **)&pProxy);
2166     ok_ole_success(hr, IMarshal_UnmarshalInterface);
2167
2168     IUnknown_Release(pProxy);
2169
2170     ok_no_locks();
2171
2172 /* native doesn't allow us to unmarshal or release the stream data,
2173  * presumably because it wants us to call CoMarshalInterface instead */
2174     if (0)
2175     {
2176     /* local normal marshaling */
2177
2178     IStream_Seek(pStream, llZero, STREAM_SEEK_SET, NULL);
2179     hr = IMarshal_MarshalInterface(pFTMarshal, pStream, &IID_IClassFactory, &Test_ClassFactory, MSHCTX_LOCAL, NULL, MSHLFLAGS_NORMAL);
2180     ok_ole_success(hr, IMarshal_MarshalInterface);
2181
2182     ok_more_than_one_lock();
2183
2184     test_freethreadedmarshaldata(pStream, MSHCTX_LOCAL, &Test_ClassFactory, MSHLFLAGS_NORMAL);
2185
2186     IStream_Seek(pStream, llZero, STREAM_SEEK_SET, NULL);
2187     hr = IMarshal_ReleaseMarshalData(pFTMarshal, pStream);
2188     ok_ole_success(hr, IMarshal_ReleaseMarshalData);
2189
2190     ok_no_locks();
2191     }
2192
2193     /* inproc table-strong marshaling */
2194
2195     IStream_Seek(pStream, llZero, STREAM_SEEK_SET, NULL);
2196     hr = IMarshal_MarshalInterface(pFTMarshal, pStream, &IID_IClassFactory,
2197         (IUnknown*)&Test_ClassFactory, MSHCTX_INPROC, (void *)0xdeadbeef,
2198         MSHLFLAGS_TABLESTRONG);
2199     ok_ole_success(hr, IMarshal_MarshalInterface);
2200
2201     ok_more_than_one_lock();
2202
2203     test_freethreadedmarshaldata(pStream, MSHCTX_INPROC, &Test_ClassFactory, MSHLFLAGS_TABLESTRONG);
2204
2205     IStream_Seek(pStream, llZero, STREAM_SEEK_SET, NULL);
2206     hr = IMarshal_UnmarshalInterface(pFTMarshal, pStream, &IID_IUnknown, (void **)&pProxy);
2207     ok_ole_success(hr, IMarshal_UnmarshalInterface);
2208
2209     IUnknown_Release(pProxy);
2210
2211     ok_more_than_one_lock();
2212
2213     IStream_Seek(pStream, llZero, STREAM_SEEK_SET, NULL);
2214     hr = IMarshal_ReleaseMarshalData(pFTMarshal, pStream);
2215     ok_ole_success(hr, IMarshal_ReleaseMarshalData);
2216
2217     ok_no_locks();
2218
2219     /* inproc table-weak marshaling */
2220
2221     IStream_Seek(pStream, llZero, STREAM_SEEK_SET, NULL);
2222     hr = IMarshal_MarshalInterface(pFTMarshal, pStream, &IID_IClassFactory,
2223         (IUnknown*)&Test_ClassFactory, MSHCTX_INPROC, (void *)0xdeadbeef,
2224         MSHLFLAGS_TABLEWEAK);
2225     ok_ole_success(hr, IMarshal_MarshalInterface);
2226
2227     ok_no_locks();
2228
2229     test_freethreadedmarshaldata(pStream, MSHCTX_INPROC, &Test_ClassFactory, MSHLFLAGS_TABLEWEAK);
2230
2231     IStream_Seek(pStream, llZero, STREAM_SEEK_SET, NULL);
2232     hr = IMarshal_UnmarshalInterface(pFTMarshal, pStream, &IID_IUnknown, (void **)&pProxy);
2233     ok_ole_success(hr, IMarshal_UnmarshalInterface);
2234
2235     ok_more_than_one_lock();
2236
2237     IUnknown_Release(pProxy);
2238
2239     ok_no_locks();
2240
2241     /* inproc normal marshaling (for extraordinary cases) */
2242
2243     IStream_Seek(pStream, llZero, STREAM_SEEK_SET, NULL);
2244     hr = IMarshal_MarshalInterface(pFTMarshal, pStream, &IID_IClassFactory,
2245         &Test_ClassFactory, MSHCTX_INPROC, NULL, MSHLFLAGS_NORMAL);
2246     ok_ole_success(hr, IMarshal_MarshalInterface);
2247
2248     ok_more_than_one_lock();
2249
2250     /* this call shows that DisconnectObject does nothing */
2251     hr = IMarshal_DisconnectObject(pFTMarshal, 0);
2252     ok_ole_success(hr, IMarshal_DisconnectObject);
2253
2254     ok_more_than_one_lock();
2255
2256     IStream_Seek(pStream, llZero, STREAM_SEEK_SET, NULL);
2257     hr = IMarshal_ReleaseMarshalData(pFTMarshal, pStream);
2258     ok_ole_success(hr, IMarshal_ReleaseMarshalData);
2259
2260     ok_no_locks();
2261
2262     /* doesn't enforce marshaling rules here and allows us to unmarshal the
2263      * interface, even though it was freed above */
2264     IStream_Seek(pStream, llZero, STREAM_SEEK_SET, NULL);
2265     hr = IMarshal_UnmarshalInterface(pFTMarshal, pStream, &IID_IUnknown, (void **)&pProxy);
2266     ok_ole_success(hr, IMarshal_UnmarshalInterface);
2267
2268     ok_no_locks();
2269
2270     IStream_Release(pStream);
2271     IMarshal_Release(pFTMarshal);
2272 }
2273
2274 static HRESULT reg_unreg_wine_test_class(BOOL Register)
2275 {
2276     HRESULT hr;
2277     char buffer[256];
2278     LPOLESTR pszClsid;
2279     HKEY hkey;
2280     DWORD dwDisposition;
2281     DWORD error;
2282
2283     hr = StringFromCLSID(&CLSID_WineTest, &pszClsid);
2284     ok_ole_success(hr, "StringFromCLSID");
2285     strcpy(buffer, "CLSID\\");
2286     WideCharToMultiByte(CP_ACP, 0, pszClsid, -1, buffer + strlen(buffer), sizeof(buffer) - strlen(buffer), NULL, NULL);
2287     CoTaskMemFree(pszClsid);
2288     strcat(buffer, "\\InprocHandler32");
2289     if (Register)
2290     {
2291         error = RegCreateKeyEx(HKEY_CLASSES_ROOT, buffer, 0, NULL, 0, KEY_SET_VALUE, NULL, &hkey, &dwDisposition);
2292         if (error == ERROR_ACCESS_DENIED)
2293         {
2294             skip("Not authorized to modify the Classes key\n");
2295             return E_FAIL;
2296         }
2297         ok(error == ERROR_SUCCESS, "RegCreateKeyEx failed with error %d\n", error);
2298         if (error != ERROR_SUCCESS) hr = E_FAIL;
2299         error = RegSetValueEx(hkey, NULL, 0, REG_SZ, (const unsigned char *)"\"ole32.dll\"", strlen("\"ole32.dll\"") + 1);
2300         ok(error == ERROR_SUCCESS, "RegSetValueEx failed with error %d\n", error);
2301         if (error != ERROR_SUCCESS) hr = E_FAIL;
2302         RegCloseKey(hkey);
2303     }
2304     else
2305     {
2306         RegDeleteKey(HKEY_CLASSES_ROOT, buffer);
2307         *strrchr(buffer, '\\') = '\0';
2308         RegDeleteKey(HKEY_CLASSES_ROOT, buffer);
2309     }
2310     return hr;
2311 }
2312
2313 static void test_inproc_handler(void)
2314 {
2315     HRESULT hr;
2316     IUnknown *pObject;
2317     IUnknown *pObject2;
2318
2319     if (FAILED(reg_unreg_wine_test_class(TRUE)))
2320         return;
2321
2322     hr = CoCreateInstance(&CLSID_WineTest, NULL, CLSCTX_INPROC_HANDLER, &IID_IUnknown, (void **)&pObject);
2323     ok_ole_success(hr, "CoCreateInstance");
2324
2325     if (SUCCEEDED(hr))
2326     {
2327         hr = IUnknown_QueryInterface(pObject, &IID_IWineTest, (void **)&pObject2);
2328         ok(hr == E_NOINTERFACE, "IUnknown_QueryInterface on handler for invalid interface returned 0x%08x instead of E_NOINTERFACE\n", hr);
2329
2330         /* it's a handler as it supports IOleObject */
2331         hr = IUnknown_QueryInterface(pObject, &IID_IOleObject, (void **)&pObject2);
2332         ok_ole_success(hr, "IUnknown_QueryInterface(&IID_IOleObject)");
2333         IUnknown_Release(pObject2);
2334
2335         IUnknown_Release(pObject);
2336     }
2337
2338     reg_unreg_wine_test_class(FALSE);
2339 }
2340
2341 static HRESULT WINAPI Test_SMI_QueryInterface(
2342     IStdMarshalInfo *iface,
2343     REFIID riid,
2344     LPVOID *ppvObj)
2345 {
2346     if (ppvObj == NULL) return E_POINTER;
2347
2348     if (IsEqualGUID(riid, &IID_IUnknown) ||
2349         IsEqualGUID(riid, &IID_IStdMarshalInfo))
2350     {
2351         *ppvObj = iface;
2352         IStdMarshalInfo_AddRef(iface);
2353         return S_OK;
2354     }
2355
2356     return E_NOINTERFACE;
2357 }
2358
2359 static ULONG WINAPI Test_SMI_AddRef(IStdMarshalInfo *iface)
2360 {
2361     LockModule();
2362     return 2; /* non-heap-based object */
2363 }
2364
2365 static ULONG WINAPI Test_SMI_Release(IStdMarshalInfo *iface)
2366 {
2367     UnlockModule();
2368     return 1; /* non-heap-based object */
2369 }
2370
2371 static HRESULT WINAPI Test_SMI_GetClassForHandler(
2372     IStdMarshalInfo *iface,
2373     DWORD dwDestContext,
2374     void *pvDestContext,
2375     CLSID *pClsid)
2376 {
2377     *pClsid = CLSID_WineTest;
2378     return S_OK;
2379 }
2380
2381 static const IStdMarshalInfoVtbl Test_SMI_Vtbl =
2382 {
2383     Test_SMI_QueryInterface,
2384     Test_SMI_AddRef,
2385     Test_SMI_Release,
2386     Test_SMI_GetClassForHandler
2387 };
2388
2389 static IStdMarshalInfo Test_SMI = {&Test_SMI_Vtbl};
2390
2391 static void test_handler_marshaling(void)
2392 {
2393     HRESULT hr;
2394     IStream *pStream = NULL;
2395     IUnknown *pProxy = NULL;
2396     IUnknown *pObject;
2397     DWORD tid;
2398     HANDLE thread;
2399     static const LARGE_INTEGER ullZero;
2400
2401     if (FAILED(reg_unreg_wine_test_class(TRUE)))
2402         return;
2403     cLocks = 0;
2404
2405     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
2406     ok_ole_success(hr, "CreateStreamOnHGlobal");
2407     tid = start_host_object(pStream, &IID_IUnknown, (IUnknown*)&Test_SMI, MSHLFLAGS_NORMAL, &thread);
2408
2409     ok_more_than_one_lock();
2410
2411     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
2412     hr = CoUnmarshalInterface(pStream, &IID_IUnknown, (void **)&pProxy);
2413     ok_ole_success(hr, "CoUnmarshalInterface");
2414     IStream_Release(pStream);
2415
2416     if(hr == S_OK)
2417     {
2418         ok_more_than_one_lock();
2419
2420         hr = IUnknown_QueryInterface(pProxy, &IID_IWineTest, (void **)&pObject);
2421         ok(hr == E_NOINTERFACE, "IUnknown_QueryInterface with unknown IID should have returned E_NOINTERFACE instead of 0x%08x\n", hr);
2422
2423         /* it's a handler as it supports IOleObject */
2424         hr = IUnknown_QueryInterface(pProxy, &IID_IOleObject, (void **)&pObject);
2425         todo_wine
2426         ok_ole_success(hr, "IUnknown_QueryInterface(&IID_IOleObject)");
2427         if (SUCCEEDED(hr)) IUnknown_Release(pObject);
2428
2429         IUnknown_Release(pProxy);
2430
2431         ok_no_locks();
2432     }
2433
2434     end_host_object(tid, thread);
2435     reg_unreg_wine_test_class(FALSE);
2436
2437     /* FIXME: test IPersist interface has the same effect as IStdMarshalInfo */
2438 }
2439
2440
2441 static void test_client_security(void)
2442 {
2443     HRESULT hr;
2444     IStream *pStream = NULL;
2445     IClassFactory *pProxy = NULL;
2446     IUnknown *pProxy2 = NULL;
2447     IUnknown *pUnknown1 = NULL;
2448     IUnknown *pUnknown2 = NULL;
2449     IClientSecurity *pCliSec = NULL;
2450     IMarshal *pMarshal;
2451     DWORD tid;
2452     HANDLE thread;
2453     static const LARGE_INTEGER ullZero;
2454     DWORD dwAuthnSvc;
2455     DWORD dwAuthzSvc;
2456     OLECHAR *pServerPrincName;
2457     DWORD dwAuthnLevel;
2458     DWORD dwImpLevel;
2459     void *pAuthInfo;
2460     DWORD dwCapabilities;
2461     void *pv;
2462
2463     cLocks = 0;
2464
2465     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
2466     ok_ole_success(hr, "CreateStreamOnHGlobal");
2467     tid = start_host_object(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHLFLAGS_NORMAL, &thread);
2468
2469     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
2470     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy);
2471     ok_ole_success(hr, "CoUnmarshalInterface");
2472     IStream_Release(pStream);
2473
2474     hr = IClassFactory_QueryInterface(pProxy, &IID_IUnknown, (LPVOID*)&pUnknown1);
2475     ok_ole_success(hr, "IUnknown_QueryInterface IID_IUnknown");
2476
2477     hr = IClassFactory_QueryInterface(pProxy, &IID_IRemUnknown, (LPVOID*)&pProxy2);
2478     ok_ole_success(hr, "IUnknown_QueryInterface IID_IStream");
2479
2480     hr = IUnknown_QueryInterface(pProxy2, &IID_IUnknown, (LPVOID*)&pUnknown2);
2481     ok_ole_success(hr, "IUnknown_QueryInterface IID_IUnknown");
2482
2483     ok(pUnknown1 == pUnknown2, "both proxy's IUnknowns should be the same - %p, %p\n", pUnknown1, pUnknown2);
2484
2485     hr = IClassFactory_QueryInterface(pProxy, &IID_IMarshal, (LPVOID*)&pMarshal);
2486     ok_ole_success(hr, "IUnknown_QueryInterface IID_IMarshal");
2487
2488     hr = IClassFactory_QueryInterface(pProxy, &IID_IClientSecurity, (LPVOID*)&pCliSec);
2489     ok_ole_success(hr, "IUnknown_QueryInterface IID_IClientSecurity");
2490
2491     hr = IClientSecurity_QueryBlanket(pCliSec, (IUnknown *)pProxy, NULL, NULL, NULL, NULL, NULL, NULL, NULL);
2492     todo_wine ok_ole_success(hr, "IClientSecurity_QueryBlanket (all NULLs)");
2493
2494     hr = IClientSecurity_QueryBlanket(pCliSec, (IUnknown *)pMarshal, NULL, NULL, NULL, NULL, NULL, NULL, NULL);
2495     todo_wine ok(hr == E_NOINTERFACE, "IClientSecurity_QueryBlanket with local interface should have returned E_NOINTERFACE instead of 0x%08x\n", hr);
2496
2497     hr = IClientSecurity_QueryBlanket(pCliSec, (IUnknown *)pProxy, &dwAuthnSvc, &dwAuthzSvc, &pServerPrincName, &dwAuthnLevel, &dwImpLevel, &pAuthInfo, &dwCapabilities);
2498     todo_wine ok_ole_success(hr, "IClientSecurity_QueryBlanket");
2499
2500     hr = IClientSecurity_SetBlanket(pCliSec, (IUnknown *)pProxy, dwAuthnSvc, dwAuthzSvc, pServerPrincName, dwAuthnLevel, RPC_C_IMP_LEVEL_IMPERSONATE, pAuthInfo, dwCapabilities);
2501     todo_wine ok_ole_success(hr, "IClientSecurity_SetBlanket");
2502
2503     hr = IClassFactory_CreateInstance(pProxy, NULL, &IID_IWineTest, &pv);
2504     ok(hr == E_NOINTERFACE, "COM call should have succeeded instead of returning 0x%08x\n", hr);
2505
2506     hr = IClientSecurity_SetBlanket(pCliSec, (IUnknown *)pMarshal, dwAuthnSvc, dwAuthzSvc, pServerPrincName, dwAuthnLevel, dwImpLevel, pAuthInfo, dwCapabilities);
2507     todo_wine ok(hr == E_NOINTERFACE, "IClientSecurity_SetBlanket with local interface should have returned E_NOINTERFACE instead of 0x%08x\n", hr);
2508
2509     hr = IClientSecurity_SetBlanket(pCliSec, (IUnknown *)pProxy, 0xdeadbeef, dwAuthzSvc, pServerPrincName, dwAuthnLevel, dwImpLevel, pAuthInfo, dwCapabilities);
2510     todo_wine ok(hr == E_INVALIDARG, "IClientSecurity_SetBlanke with invalid dwAuthnSvc should have returned E_INVALIDARG instead of 0x%08x\n", hr);
2511
2512     CoTaskMemFree(pServerPrincName);
2513
2514     hr = IClientSecurity_QueryBlanket(pCliSec, pUnknown1, &dwAuthnSvc, &dwAuthzSvc, &pServerPrincName, &dwAuthnLevel, &dwImpLevel, &pAuthInfo, &dwCapabilities);
2515     todo_wine ok_ole_success(hr, "IClientSecurity_QueryBlanket(IUnknown)");
2516
2517     CoTaskMemFree(pServerPrincName);
2518
2519     IClassFactory_Release(pProxy);
2520     IUnknown_Release(pProxy2);
2521     IUnknown_Release(pUnknown1);
2522     IUnknown_Release(pUnknown2);
2523     IMarshal_Release(pMarshal);
2524     IClientSecurity_Release(pCliSec);
2525
2526     end_host_object(tid, thread);
2527 }
2528
2529 static HANDLE heventShutdown;
2530
2531 static void LockModuleOOP(void)
2532 {
2533     InterlockedIncrement(&cLocks); /* for test purposes only */
2534     CoAddRefServerProcess();
2535 }
2536
2537 static void UnlockModuleOOP(void)
2538 {
2539     InterlockedDecrement(&cLocks); /* for test purposes only */
2540     if (!CoReleaseServerProcess())
2541         SetEvent(heventShutdown);
2542 }
2543
2544 static HWND hwnd_app;
2545
2546 static HRESULT WINAPI TestOOP_IClassFactory_QueryInterface(
2547     LPCLASSFACTORY iface,
2548     REFIID riid,
2549     LPVOID *ppvObj)
2550 {
2551     if (ppvObj == NULL) return E_POINTER;
2552
2553     if (IsEqualGUID(riid, &IID_IUnknown) ||
2554         IsEqualGUID(riid, &IID_IClassFactory))
2555     {
2556         *ppvObj = iface;
2557         IClassFactory_AddRef(iface);
2558         return S_OK;
2559     }
2560
2561     return E_NOINTERFACE;
2562 }
2563
2564 static ULONG WINAPI TestOOP_IClassFactory_AddRef(LPCLASSFACTORY iface)
2565 {
2566     return 2; /* non-heap-based object */
2567 }
2568
2569 static ULONG WINAPI TestOOP_IClassFactory_Release(LPCLASSFACTORY iface)
2570 {
2571     return 1; /* non-heap-based object */
2572 }
2573
2574 static HRESULT WINAPI TestOOP_IClassFactory_CreateInstance(
2575     LPCLASSFACTORY iface,
2576     LPUNKNOWN pUnkOuter,
2577     REFIID riid,
2578     LPVOID *ppvObj)
2579 {
2580     if (IsEqualIID(riid, &IID_IClassFactory) || IsEqualIID(riid, &IID_IUnknown))
2581     {
2582         *ppvObj = iface;
2583         return S_OK;
2584     }
2585     return CLASS_E_CLASSNOTAVAILABLE;
2586 }
2587
2588 static HRESULT WINAPI TestOOP_IClassFactory_LockServer(
2589     LPCLASSFACTORY iface,
2590     BOOL fLock)
2591 {
2592     if (fLock)
2593         LockModuleOOP();
2594     else
2595         UnlockModuleOOP();
2596     return S_OK;
2597 }
2598
2599 static const IClassFactoryVtbl TestClassFactoryOOP_Vtbl =
2600 {
2601     TestOOP_IClassFactory_QueryInterface,
2602     TestOOP_IClassFactory_AddRef,
2603     TestOOP_IClassFactory_Release,
2604     TestOOP_IClassFactory_CreateInstance,
2605     TestOOP_IClassFactory_LockServer
2606 };
2607
2608 static IClassFactory TestOOP_ClassFactory = { &TestClassFactoryOOP_Vtbl };
2609
2610 static void test_register_local_server(void)
2611 {
2612     DWORD cookie;
2613     HRESULT hr;
2614     HANDLE ready_event;
2615     HANDLE quit_event;
2616     DWORD wait;
2617
2618     heventShutdown = CreateEvent(NULL, TRUE, FALSE, NULL);
2619
2620     hr = CoRegisterClassObject(&CLSID_WineOOPTest, (IUnknown *)&TestOOP_ClassFactory,
2621                                CLSCTX_LOCAL_SERVER, REGCLS_SINGLEUSE, &cookie);
2622     ok_ole_success(hr, CoRegisterClassObject);
2623
2624     ready_event = CreateEvent(NULL, FALSE, FALSE, "Wine COM Test Ready Event");
2625     SetEvent(ready_event);
2626
2627     quit_event = CreateEvent(NULL, FALSE, FALSE, "Wine COM Test Quit Event");
2628
2629     do
2630     {
2631         wait = MsgWaitForMultipleObjects(1, &quit_event, FALSE, 30000, QS_ALLINPUT);
2632         if (wait == WAIT_OBJECT_0+1)
2633         {
2634             MSG msg;
2635             BOOL ret = PeekMessage(&msg, NULL, 0, 0, PM_REMOVE);
2636             if (ret)
2637             {
2638                 trace("Message 0x%x\n", msg.message);
2639                 TranslateMessage(&msg);
2640                 DispatchMessage(&msg);
2641             }
2642         }
2643     }
2644     while (wait == WAIT_OBJECT_0+1);
2645
2646     ok( wait == WAIT_OBJECT_0, "quit event wait timed out\n" );
2647     hr = CoRevokeClassObject(cookie);
2648     ok_ole_success(hr, CoRevokeClassObject);
2649 }
2650
2651 static HANDLE create_target_process(const char *arg)
2652 {
2653     char **argv;
2654     char cmdline[MAX_PATH];
2655     BOOL ret;
2656     PROCESS_INFORMATION pi;
2657     STARTUPINFO si = { 0 };
2658     si.cb = sizeof(si);
2659
2660     pi.hThread = NULL;
2661     pi.hProcess = NULL;
2662     winetest_get_mainargs( &argv );
2663     sprintf(cmdline, "%s %s %s", argv[0], argv[1], arg);
2664     ret = CreateProcess(argv[0], cmdline, NULL, NULL, FALSE, 0, NULL, NULL, &si, &pi);
2665     ok(ret, "CreateProcess failed with error: %u\n", GetLastError());
2666     if (pi.hThread) CloseHandle(pi.hThread);
2667     return pi.hProcess;
2668 }
2669
2670 /* tests functions commonly used by out of process COM servers */
2671 static void test_local_server(void)
2672 {
2673     DWORD cookie;
2674     HRESULT hr;
2675     IClassFactory * cf;
2676     DWORD ret;
2677     HANDLE process;
2678     HANDLE quit_event;
2679     HANDLE ready_event;
2680
2681     heventShutdown = CreateEvent(NULL, TRUE, FALSE, NULL);
2682
2683     cLocks = 0;
2684
2685     /* Start the object suspended */
2686     hr = CoRegisterClassObject(&CLSID_WineOOPTest, (IUnknown *)&TestOOP_ClassFactory,
2687         CLSCTX_LOCAL_SERVER, REGCLS_MULTIPLEUSE | REGCLS_SUSPENDED, &cookie);
2688     ok_ole_success(hr, CoRegisterClassObject);
2689
2690     /* ... and CoGetClassObject does not find it and fails when it looks for the
2691      * class in the registry */
2692     hr = CoGetClassObject(&CLSID_WineOOPTest, CLSCTX_INPROC_SERVER,
2693         NULL, &IID_IClassFactory, (LPVOID*)&cf);
2694     ok(hr == REGDB_E_CLASSNOTREG || /* NT */
2695        hr == S_OK /* Win9x */,
2696         "CoGetClassObject should have returned REGDB_E_CLASSNOTREG instead of 0x%08x\n", hr);
2697
2698     /* Resume the object suspended above ... */
2699     hr = CoResumeClassObjects();
2700     ok_ole_success(hr, CoResumeClassObjects);
2701
2702     /* ... and now it should succeed */
2703     hr = CoGetClassObject(&CLSID_WineOOPTest, CLSCTX_INPROC_SERVER,
2704         NULL, &IID_IClassFactory, (LPVOID*)&cf);
2705     ok_ole_success(hr, CoGetClassObject);
2706
2707     /* Now check the locking is working */
2708     /* NOTE: we are accessing the class directly, not through a proxy */
2709
2710     ok_no_locks();
2711
2712     hr = IClassFactory_LockServer(cf, TRUE);
2713     ok_ole_success(hr, IClassFactory_LockServer);
2714
2715     ok_more_than_one_lock();
2716
2717     IClassFactory_LockServer(cf, FALSE);
2718     ok_ole_success(hr, IClassFactory_LockServer);
2719
2720     ok_no_locks();
2721
2722     IClassFactory_Release(cf);
2723
2724     /* wait for shutdown signal */
2725     ret = WaitForSingleObject(heventShutdown, 0);
2726     ok(ret != WAIT_TIMEOUT, "Server didn't shut down\n");
2727
2728     /* try to connect again after SCM has suspended registered class objects */
2729     hr = CoGetClassObject(&CLSID_WineOOPTest, CLSCTX_INPROC_SERVER | CLSCTX_LOCAL_SERVER, NULL,
2730         &IID_IClassFactory, (LPVOID*)&cf);
2731     ok(hr == CO_E_SERVER_STOPPING || /* NT */
2732        hr == REGDB_E_CLASSNOTREG || /* win2k */
2733        hr == S_OK /* Win9x */,
2734         "CoGetClassObject should have returned CO_E_SERVER_STOPPING or REGDB_E_CLASSNOTREG instead of 0x%08x\n", hr);
2735
2736     hr = CoRevokeClassObject(cookie);
2737     ok_ole_success(hr, CoRevokeClassObject);
2738
2739     CloseHandle(heventShutdown);
2740
2741     process = create_target_process("-Embedding");
2742     ok(process != NULL, "couldn't start local server process, error was %d\n", GetLastError());
2743
2744     ready_event = CreateEvent(NULL, FALSE, FALSE, "Wine COM Test Ready Event");
2745     ok( !WaitForSingleObject(ready_event, 10000), "wait timed out\n" );
2746     CloseHandle(ready_event);
2747
2748     hr = CoCreateInstance(&CLSID_WineOOPTest, NULL, CLSCTX_LOCAL_SERVER, &IID_IClassFactory, (void **)&cf);
2749     ok_ole_success(hr, CoCreateInstance);
2750
2751     IClassFactory_Release(cf);
2752
2753     hr = CoCreateInstance(&CLSID_WineOOPTest, NULL, CLSCTX_LOCAL_SERVER, &IID_IClassFactory, (void **)&cf);
2754     ok(hr == REGDB_E_CLASSNOTREG, "Second CoCreateInstance on REGCLS_SINGLEUSE object should have failed\n");
2755
2756     quit_event = CreateEvent(NULL, FALSE, FALSE, "Wine COM Test Quit Event");
2757     SetEvent(quit_event);
2758
2759     winetest_wait_child_process( process );
2760     CloseHandle(quit_event);
2761     CloseHandle(process);
2762 }
2763
2764 struct git_params
2765 {
2766         DWORD cookie;
2767         IGlobalInterfaceTable *git;
2768 };
2769
2770 static DWORD CALLBACK get_global_interface_proc(LPVOID pv)
2771 {
2772         HRESULT hr;
2773         struct git_params *params = pv;
2774         IClassFactory *cf;
2775
2776         hr = IGlobalInterfaceTable_GetInterfaceFromGlobal(params->git, params->cookie, &IID_IClassFactory, (void **)&cf);
2777         ok(hr == CO_E_NOTINITIALIZED ||
2778                 broken(hr == E_UNEXPECTED) /* win2k */ ||
2779                 broken(hr == S_OK) /* NT 4 */,
2780                 "IGlobalInterfaceTable_GetInterfaceFromGlobal should have failed with error CO_E_NOTINITIALIZED or E_UNEXPECTED instead of 0x%08x\n",
2781                 hr);
2782         if (hr == S_OK)
2783                 IClassFactory_Release(cf);
2784
2785         CoInitialize(NULL);
2786
2787         hr = IGlobalInterfaceTable_GetInterfaceFromGlobal(params->git, params->cookie, &IID_IClassFactory, (void **)&cf);
2788         ok_ole_success(hr, IGlobalInterfaceTable_GetInterfaceFromGlobal);
2789
2790         IClassFactory_Release(cf);
2791
2792         CoUninitialize();
2793
2794         return hr;
2795 }
2796
2797 static void test_globalinterfacetable(void)
2798 {
2799         HRESULT hr;
2800         IGlobalInterfaceTable *git;
2801         DWORD cookie;
2802         HANDLE thread;
2803         DWORD tid;
2804         struct git_params params;
2805         DWORD ret;
2806         IUnknown *object;
2807
2808         trace("test_globalinterfacetable\n");
2809         cLocks = 0;
2810
2811         hr = CoCreateInstance(&CLSID_StdGlobalInterfaceTable, NULL, CLSCTX_INPROC_SERVER, &IID_IGlobalInterfaceTable, (void **)&git);
2812         ok_ole_success(hr, CoCreateInstance);
2813
2814         hr = IGlobalInterfaceTable_RegisterInterfaceInGlobal(git, (IUnknown *)&Test_ClassFactory, &IID_IClassFactory, &cookie);
2815         ok_ole_success(hr, IGlobalInterfaceTable_RegisterInterfaceInGlobal);
2816
2817         ok_more_than_one_lock();
2818
2819         params.cookie = cookie;
2820         params.git = git;
2821         /* note: params is on stack so we MUST wait for get_global_interface_proc
2822          * to exit before we can return */
2823         thread = CreateThread(NULL, 0, get_global_interface_proc, &params, 0, &tid);
2824
2825         ret = MsgWaitForMultipleObjects(1, &thread, FALSE, 10000, QS_ALLINPUT);
2826         while (ret == WAIT_OBJECT_0 + 1)
2827         {
2828                 MSG msg;
2829                 while (PeekMessage(&msg, NULL, 0, 0, PM_REMOVE))
2830                         DispatchMessage(&msg);
2831                 ret = MsgWaitForMultipleObjects(1, &thread, FALSE, 10000, QS_ALLINPUT);
2832         }
2833
2834         CloseHandle(thread);
2835
2836         /* test getting interface from global with different iid */
2837         hr = IGlobalInterfaceTable_GetInterfaceFromGlobal(git, cookie, &IID_IUnknown, (void **)&object);
2838         ok_ole_success(hr, IGlobalInterfaceTable_GetInterfaceFromGlobal);
2839         IUnknown_Release(object);
2840
2841         /* test getting interface from global with same iid */
2842         hr = IGlobalInterfaceTable_GetInterfaceFromGlobal(git, cookie, &IID_IClassFactory, (void **)&object);
2843         ok_ole_success(hr, IGlobalInterfaceTable_GetInterfaceFromGlobal);
2844         IUnknown_Release(object);
2845
2846         hr = IGlobalInterfaceTable_RevokeInterfaceFromGlobal(git, cookie);
2847         ok_ole_success(hr, IGlobalInterfaceTable_RevokeInterfaceFromGlobal);
2848
2849         ok_no_locks();
2850
2851         IGlobalInterfaceTable_Release(git);
2852 }
2853
2854 static void test_manualresetevent(void)
2855 {
2856     ISynchronizeHandle *sync_handle;
2857     ISynchronize *psync1, *psync2;
2858     IUnknown *punk;
2859     HANDLE handle;
2860     LONG ref;
2861     HRESULT hr;
2862
2863     hr = CoCreateInstance(&CLSID_ManualResetEvent, NULL, CLSCTX_INPROC_SERVER, &IID_IUnknown, (void**)&punk);
2864     ok(hr == S_OK, "Got 0x%08x\n", hr);
2865     ok(!!punk, "Got NULL.\n");
2866     IUnknown_Release(punk);
2867
2868     hr = CoCreateInstance(&CLSID_ManualResetEvent, NULL, CLSCTX_INPROC_SERVER, &IID_ISynchronize, (void**)&psync1);
2869     ok(hr == S_OK, "Got 0x%08x\n", hr);
2870     ok(!!psync1, "Got NULL.\n");
2871
2872     hr = ISynchronize_Wait(psync1, 0, 5);
2873     ok(hr == RPC_S_CALLPENDING, "Got 0x%08x\n", hr);
2874
2875     hr = ISynchronize_Reset(psync1);
2876     ok(hr == S_OK, "Got 0x%08x\n", hr);
2877     hr = ISynchronize_Signal(psync1);
2878     ok(hr == S_OK, "Got 0x%08x\n", hr);
2879     hr = ISynchronize_Wait(psync1, 0, 5);
2880     ok(hr == S_OK, "Got 0x%08x\n", hr);
2881     hr = ISynchronize_Wait(psync1, 0, 5);
2882     ok(hr == S_OK, "Got 0x%08x\n", hr);
2883     hr = ISynchronize_Reset(psync1);
2884     ok(hr == S_OK, "Got 0x%08x\n", hr);
2885     hr = ISynchronize_Wait(psync1, 0, 5);
2886     ok(hr == RPC_S_CALLPENDING, "Got 0x%08x\n", hr);
2887
2888     hr = CoCreateInstance(&CLSID_ManualResetEvent, NULL, CLSCTX_INPROC_SERVER, &IID_ISynchronize, (void**)&psync2);
2889     ok(hr == S_OK, "Got 0x%08x\n", hr);
2890     ok(!!psync2, "Got NULL.\n");
2891     ok(psync1 != psync2, "psync1 == psync2.\n");
2892
2893     hr = ISynchronize_QueryInterface(psync2, &IID_ISynchronizeHandle, (void**)&sync_handle);
2894     ok(hr == S_OK, "QueryInterface(IID_ISynchronizeHandle) failed: %08x\n", hr);
2895
2896     handle = NULL;
2897     hr = ISynchronizeHandle_GetHandle(sync_handle, &handle);
2898     ok(hr == S_OK, "GetHandle failed: %08x\n", hr);
2899     ok(handle != NULL && handle != INVALID_HANDLE_VALUE, "handle = %p\n", handle);
2900
2901     ISynchronizeHandle_Release(sync_handle);
2902
2903     hr = ISynchronize_Wait(psync2, 0, 5);
2904     ok(hr == RPC_S_CALLPENDING, "Got 0x%08x\n", hr);
2905
2906     hr = ISynchronize_Reset(psync1);
2907     ok(hr == S_OK, "Got 0x%08x\n", hr);
2908     hr = ISynchronize_Reset(psync2);
2909     ok(hr == S_OK, "Got 0x%08x\n", hr);
2910     hr = ISynchronize_Signal(psync1);
2911     ok(hr == S_OK, "Got 0x%08x\n", hr);
2912     hr = ISynchronize_Wait(psync2, 0, 5);
2913     ok(hr == RPC_S_CALLPENDING, "Got 0x%08x\n", hr);
2914
2915     ref = ISynchronize_AddRef(psync1);
2916     ok(ref == 2, "Got ref: %d\n", ref);
2917     ref = ISynchronize_AddRef(psync1);
2918     ok(ref == 3, "Got ref: %d\n", ref);
2919     ref = ISynchronize_Release(psync1);
2920     ok(ref == 2, "Got nonzero ref: %d\n", ref);
2921     ref = ISynchronize_Release(psync2);
2922     ok(!ref, "Got nonzero ref: %d\n", ref);
2923     ref = ISynchronize_Release(psync1);
2924     ok(ref == 1, "Got nonzero ref: %d\n", ref);
2925     ref = ISynchronize_Release(psync1);
2926     ok(!ref, "Got nonzero ref: %d\n", ref);
2927 }
2928
2929 static const char *debugstr_iid(REFIID riid)
2930 {
2931     static char name[256];
2932     HKEY hkeyInterface;
2933     WCHAR bufferW[39];
2934     char buffer[39];
2935     LONG name_size = sizeof(name);
2936     StringFromGUID2(riid, bufferW, sizeof(bufferW)/sizeof(bufferW[0]));
2937     WideCharToMultiByte(CP_ACP, 0, bufferW, sizeof(bufferW)/sizeof(bufferW[0]), buffer, sizeof(buffer), NULL, NULL);
2938     if (RegOpenKeyEx(HKEY_CLASSES_ROOT, "Interface", 0, KEY_QUERY_VALUE, &hkeyInterface) != ERROR_SUCCESS)
2939     {
2940         memcpy(name, buffer, sizeof(buffer));
2941         goto done;
2942     }
2943     if (RegQueryValue(hkeyInterface, buffer, name, &name_size) != ERROR_SUCCESS)
2944     {
2945         memcpy(name, buffer, sizeof(buffer));
2946         goto done;
2947     }
2948     RegCloseKey(hkeyInterface);
2949 done:
2950     return name;
2951 }
2952
2953 static HRESULT WINAPI TestChannelHook_QueryInterface(IChannelHook *iface, REFIID riid, void **ppv)
2954 {
2955     if (IsEqualIID(riid, &IID_IUnknown) || IsEqualIID(riid, &IID_IChannelHook))
2956     {
2957         *ppv = iface;
2958         IChannelHook_AddRef(iface);
2959         return S_OK;
2960     }
2961
2962     *ppv = NULL;
2963     return E_NOINTERFACE;
2964 }
2965
2966 static ULONG WINAPI TestChannelHook_AddRef(IChannelHook *iface)
2967 {
2968     return 2;
2969 }
2970
2971 static ULONG WINAPI TestChannelHook_Release(IChannelHook *iface)
2972 {
2973     return 1;
2974 }
2975
2976 static void WINAPI TestChannelHook_ClientGetSize(
2977     IChannelHook *iface,
2978     REFGUID uExtent,
2979     REFIID  riid,
2980     ULONG  *pDataSize )
2981 {
2982     SChannelHookCallInfo *info = (SChannelHookCallInfo *)riid;
2983     trace("TestChannelHook_ClientGetBuffer\n");
2984     trace("\t%s method %d\n", debugstr_iid(riid), info->iMethod);
2985     trace("\tcid: %s\n", debugstr_iid(&info->uCausality));
2986     ok(info->cbSize == sizeof(*info), "info->cbSize was %d instead of %d\n", info->cbSize, (int)sizeof(*info));
2987     ok(info->dwServerPid == GetCurrentProcessId(), "info->dwServerPid was 0x%x instead of 0x%x\n", info->dwServerPid, GetCurrentProcessId());
2988     ok(!info->pObject, "info->pObject should be NULL\n");
2989     ok(IsEqualGUID(uExtent, &EXTENTID_WineTest), "uExtent wasn't correct\n");
2990
2991     *pDataSize = 1;
2992 }
2993
2994 static void WINAPI TestChannelHook_ClientFillBuffer(
2995     IChannelHook *iface,
2996     REFGUID uExtent,
2997     REFIID  riid,
2998     ULONG  *pDataSize,
2999     void   *pDataBuffer )
3000 {
3001     SChannelHookCallInfo *info = (SChannelHookCallInfo *)riid;
3002     trace("TestChannelHook_ClientFillBuffer\n");
3003     ok(info->cbSize == sizeof(*info), "info->cbSize was %d instead of %d\n", info->cbSize, (int)sizeof(*info));
3004     ok(info->dwServerPid == GetCurrentProcessId(), "info->dwServerPid was 0x%x instead of 0x%x\n", info->dwServerPid, GetCurrentProcessId());
3005     ok(!info->pObject, "info->pObject should be NULL\n");
3006     ok(IsEqualGUID(uExtent, &EXTENTID_WineTest), "uExtent wasn't correct\n");
3007
3008     *(unsigned char *)pDataBuffer = 0xcc;
3009     *pDataSize = 1;
3010 }
3011
3012 static void WINAPI TestChannelHook_ClientNotify(
3013     IChannelHook *iface,
3014     REFGUID uExtent,
3015     REFIID  riid,
3016     ULONG   cbDataSize,
3017     void   *pDataBuffer,
3018     DWORD   lDataRep,
3019     HRESULT hrFault )
3020 {
3021     SChannelHookCallInfo *info = (SChannelHookCallInfo *)riid;
3022     trace("TestChannelHook_ClientNotify hrFault = 0x%08x\n", hrFault);
3023     ok(info->cbSize == sizeof(*info), "info->cbSize was %d instead of %d\n", info->cbSize, (int)sizeof(*info));
3024     ok(info->dwServerPid == GetCurrentProcessId(), "info->dwServerPid was 0x%x instead of 0x%x\n", info->dwServerPid, GetCurrentProcessId());
3025     todo_wine {
3026     ok(info->pObject != NULL, "info->pObject shouldn't be NULL\n");
3027     }
3028     ok(IsEqualGUID(uExtent, &EXTENTID_WineTest), "uExtent wasn't correct\n");
3029 }
3030
3031 static void WINAPI TestChannelHook_ServerNotify(
3032     IChannelHook *iface,
3033     REFGUID uExtent,
3034     REFIID  riid,
3035     ULONG   cbDataSize,
3036     void   *pDataBuffer,
3037     DWORD   lDataRep )
3038 {
3039     SChannelHookCallInfo *info = (SChannelHookCallInfo *)riid;
3040     trace("TestChannelHook_ServerNotify\n");
3041     ok(info->cbSize == sizeof(*info), "info->cbSize was %d instead of %d\n", info->cbSize, (int)sizeof(*info));
3042     ok(info->dwServerPid == GetCurrentProcessId(), "info->dwServerPid was 0x%x instead of 0x%x\n", info->dwServerPid, GetCurrentProcessId());
3043     ok(info->pObject != NULL, "info->pObject shouldn't be NULL\n");
3044     ok(cbDataSize == 1, "cbDataSize should have been 1 instead of %d\n", cbDataSize);
3045     ok(*(unsigned char *)pDataBuffer == 0xcc, "pDataBuffer should have contained 0xcc instead of 0x%x\n", *(unsigned char *)pDataBuffer);
3046     ok(IsEqualGUID(uExtent, &EXTENTID_WineTest), "uExtent wasn't correct\n");
3047 }
3048
3049 static void WINAPI TestChannelHook_ServerGetSize(
3050     IChannelHook *iface,
3051     REFGUID uExtent,
3052     REFIID  riid,
3053     HRESULT hrFault,
3054     ULONG  *pDataSize )
3055 {
3056     SChannelHookCallInfo *info = (SChannelHookCallInfo *)riid;
3057     trace("TestChannelHook_ServerGetSize\n");
3058     trace("\t%s method %d\n", debugstr_iid(riid), info->iMethod);
3059     ok(info->cbSize == sizeof(*info), "info->cbSize was %d instead of %d\n", info->cbSize, (int)sizeof(*info));
3060     ok(info->dwServerPid == GetCurrentProcessId(), "info->dwServerPid was 0x%x instead of 0x%x\n", info->dwServerPid, GetCurrentProcessId());
3061     ok(info->pObject != NULL, "info->pObject shouldn't be NULL\n");
3062     ok(IsEqualGUID(uExtent, &EXTENTID_WineTest), "uExtent wasn't correct\n");
3063     if (hrFault != S_OK)
3064         trace("\thrFault = 0x%08x\n", hrFault);
3065
3066     *pDataSize = 0;
3067 }
3068
3069 static void WINAPI TestChannelHook_ServerFillBuffer(
3070     IChannelHook *iface,
3071     REFGUID uExtent,
3072     REFIID  riid,
3073     ULONG  *pDataSize,
3074     void   *pDataBuffer,
3075     HRESULT hrFault )
3076 {
3077     trace("TestChannelHook_ServerFillBuffer\n");
3078     ok(0, "TestChannelHook_ServerFillBuffer shouldn't be called\n");
3079 }
3080
3081 static const IChannelHookVtbl TestChannelHookVtbl =
3082 {
3083     TestChannelHook_QueryInterface,
3084     TestChannelHook_AddRef,
3085     TestChannelHook_Release,
3086     TestChannelHook_ClientGetSize,
3087     TestChannelHook_ClientFillBuffer,
3088     TestChannelHook_ClientNotify,
3089     TestChannelHook_ServerNotify,
3090     TestChannelHook_ServerGetSize,
3091     TestChannelHook_ServerFillBuffer,
3092 };
3093
3094 static IChannelHook TestChannelHook = { &TestChannelHookVtbl };
3095
3096 static void test_channel_hook(void)
3097 {
3098     IStream *pStream = NULL;
3099     IClassFactory *cf = NULL;
3100     DWORD tid;
3101     IUnknown *proxy = NULL;
3102     HANDLE thread;
3103     HRESULT hr;
3104
3105     hr = CoRegisterChannelHook(&EXTENTID_WineTest, &TestChannelHook);
3106     ok_ole_success(hr, CoRegisterChannelHook);
3107
3108     hr = CoRegisterMessageFilter(&MessageFilter, NULL);
3109     ok_ole_success(hr, CoRegisterMessageFilter);
3110
3111     cLocks = 0;
3112
3113     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
3114     ok_ole_success(hr, CreateStreamOnHGlobal);
3115     tid = start_host_object2(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHLFLAGS_NORMAL, &MessageFilter, &thread);
3116
3117     ok_more_than_one_lock();
3118
3119     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
3120     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&cf);
3121     ok_ole_success(hr, CoUnmarshalInterface);
3122     IStream_Release(pStream);
3123
3124     ok_more_than_one_lock();
3125
3126     hr = IClassFactory_CreateInstance(cf, NULL, &IID_IUnknown, (LPVOID*)&proxy);
3127     ok_ole_success(hr, IClassFactory_CreateInstance);
3128     IUnknown_Release(proxy);
3129
3130     IClassFactory_Release(cf);
3131
3132     ok_no_locks();
3133
3134     end_host_object(tid, thread);
3135
3136     hr = CoRegisterMessageFilter(NULL, NULL);
3137     ok_ole_success(hr, CoRegisterMessageFilter);
3138 }
3139
3140 START_TEST(marshal)
3141 {
3142     HMODULE hOle32 = GetModuleHandle("ole32");
3143     int argc;
3144     char **argv;
3145
3146     if (!GetProcAddress(hOle32, "CoRegisterSurrogateEx")) {
3147         win_skip("skipping test on win9x\n");
3148         return;
3149     }
3150
3151     pCoInitializeEx = (void*)GetProcAddress(hOle32, "CoInitializeEx");
3152
3153     argc = winetest_get_mainargs( &argv );
3154     if (argc > 2 && (!strcmp(argv[2], "-Embedding")))
3155     {
3156         pCoInitializeEx(NULL, COINIT_APARTMENTTHREADED);
3157         test_register_local_server();
3158         CoUninitialize();
3159
3160         return;
3161     }
3162
3163     register_test_window();
3164
3165     test_cocreateinstance_proxy();
3166
3167     pCoInitializeEx(NULL, COINIT_APARTMENTTHREADED);
3168
3169     /* FIXME: test CoCreateInstanceEx */
3170
3171     /* lifecycle management and marshaling tests */
3172     test_no_marshaler();
3173     test_normal_marshal_and_release();
3174     test_normal_marshal_and_unmarshal();
3175     test_marshal_and_unmarshal_invalid();
3176     test_same_apartment_unmarshal_failure();
3177     test_interthread_marshal_and_unmarshal();
3178     test_proxy_marshal_and_unmarshal();
3179     test_proxy_marshal_and_unmarshal2();
3180     test_proxy_marshal_and_unmarshal_weak();
3181     test_proxy_marshal_and_unmarshal_strong();
3182     test_marshal_stub_apartment_shutdown();
3183     test_marshal_proxy_apartment_shutdown();
3184     test_marshal_proxy_mta_apartment_shutdown();
3185     test_no_couninitialize_server();
3186     test_no_couninitialize_client();
3187     test_tableweak_marshal_and_unmarshal_twice();
3188     test_tableweak_marshal_releasedata1();
3189     test_tableweak_marshal_releasedata2();
3190     test_tableweak_and_normal_marshal_and_unmarshal();
3191     test_tablestrong_marshal_and_unmarshal_twice();
3192     test_lock_object_external();
3193     test_disconnect_stub();
3194     test_normal_marshal_and_unmarshal_twice();
3195     test_hresult_marshaling();
3196     test_proxy_used_in_wrong_thread();
3197     test_message_filter();
3198     test_bad_marshal_stream();
3199     test_proxy_interfaces();
3200     test_stubbuffer(&IID_IClassFactory);
3201     test_proxybuffer(&IID_IClassFactory);
3202     test_message_reentrancy();
3203     test_call_from_message();
3204     test_WM_QUIT_handling();
3205     test_freethreadedmarshaler();
3206     test_inproc_handler();
3207     test_handler_marshaling();
3208     test_client_security();
3209
3210     test_local_server();
3211
3212     test_globalinterfacetable();
3213     test_manualresetevent();
3214
3215     /* must be last test as channel hooks can't be unregistered */
3216     test_channel_hook();
3217
3218     CoUninitialize();
3219 }