git.oblomov.eu Git - wine/blob - dlls/rpcrt4/rpc_transport.c

   1 /*
   2  * RPC transport layer
   3  *
   4  * Copyright 2001 Ove Kåven, TransGaming Technologies
   5  * Copyright 2003 Mike Hearn
   6  * Copyright 2004 Filip Navara
   7  * Copyright 2006 Mike McCormack
   8  * Copyright 2006 Damjan Jovanovic
   9  *
  10  * This library is free software; you can redistribute it and/or
  11  * modify it under the terms of the GNU Lesser General Public
  12  * License as published by the Free Software Foundation; either
  13  * version 2.1 of the License, or (at your option) any later version.
  14  *
  15  * This library is distributed in the hope that it will be useful,
  16  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  17  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  18  * Lesser General Public License for more details.
  19  *
  20  * You should have received a copy of the GNU Lesser General Public
  21  * License along with this library; if not, write to the Free Software
  22  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
  23  *
  24  */
  25
  26 #include "config.h"
  27
  28 #include <stdarg.h>
  29 #include <stdio.h>
  30 #include <string.h>
  31 #include <assert.h>
  32 #include <stdlib.h>
  33 #include <sys/types.h>
  34
  35 #if defined(__MINGW32__) || defined (_MSC_VER)
  36 # include <ws2tcpip.h>
  37 # ifndef EADDRINUSE
  38 #  define EADDRINUSE WSAEADDRINUSE
  39 # endif
  40 # ifndef EAGAIN
  41 #  define EAGAIN WSAEWOULDBLOCK
  42 # endif
  43 # undef errno
  44 # define errno WSAGetLastError()
  45 #else
  46 # include <errno.h>
  47 # ifdef HAVE_UNISTD_H
  48 #  include <unistd.h>
  49 # endif
  50 # include <fcntl.h>
  51 # ifdef HAVE_SYS_SOCKET_H
  52 #  include <sys/socket.h>
  53 # endif
  54 # ifdef HAVE_NETINET_IN_H
  55 #  include <netinet/in.h>
  56 # endif
  57 # ifdef HAVE_NETINET_TCP_H
  58 #  include <netinet/tcp.h>
  59 # endif
  60 # ifdef HAVE_ARPA_INET_H
  61 #  include <arpa/inet.h>
  62 # endif
  63 # ifdef HAVE_NETDB_H
  64 #  include <netdb.h>
  65 # endif
  66 # ifdef HAVE_SYS_POLL_H
  67 #  include <sys/poll.h>
  68 # endif
  69 # ifdef HAVE_SYS_FILIO_H
  70 #  include <sys/filio.h>
  71 # endif
  72 # ifdef HAVE_SYS_IOCTL_H
  73 #  include <sys/ioctl.h>
  74 # endif
  75 # define closesocket close
  76 # define ioctlsocket ioctl
  77 #endif /* defined(__MINGW32__) || defined (_MSC_VER) */
  78
  79 #include "windef.h"
  80 #include "winbase.h"
  81 #include "winnls.h"
  82 #include "winerror.h"
  83 #include "wininet.h"
  84 #include "winternl.h"
  85 #include "wine/unicode.h"
  86
  87 #include "rpc.h"
  88 #include "rpcndr.h"
  89
  90 #include "wine/debug.h"
  91
  92 #include "rpc_binding.h"
  93 #include "rpc_assoc.h"
  94 #include "rpc_message.h"
  95 #include "rpc_server.h"
  96 #include "epm_towers.h"
  97
  98 #ifndef SOL_TCP
  99 # define SOL_TCP IPPROTO_TCP
 100 #endif
 101
 102 #define DEFAULT_NCACN_HTTP_TIMEOUT (60 * 1000)
 103
 104 WINE_DEFAULT_DEBUG_CHANNEL(rpc);
 105
 106 static RPC_STATUS RPCRT4_SpawnConnection(RpcConnection** Connection, RpcConnection* OldConnection);
 107
 108 /**** ncacn_np support ****/
 109
 110 typedef struct _RpcConnection_np
 111 {
 112   RpcConnection common;
 113   HANDLE pipe;
 114   HANDLE listen_thread;
 115   BOOL listening;
 116 } RpcConnection_np;
 117
 118 static RpcConnection *rpcrt4_conn_np_alloc(void)
 119 {
 120   RpcConnection_np *npc = HeapAlloc(GetProcessHeap(), HEAP_ZERO_MEMORY, sizeof(RpcConnection_np));
 121   return &npc->common;
 122 }
 123
 124 static DWORD CALLBACK listen_thread(void *arg)
 125 {
 126   RpcConnection_np *npc = arg;
 127   for (;;)
 128   {
 129       if (ConnectNamedPipe(npc->pipe, NULL))
 130           return RPC_S_OK;
 131
 132       switch(GetLastError())
 133       {
 134       case ERROR_PIPE_CONNECTED:
 135           return RPC_S_OK;
 136       case ERROR_HANDLES_CLOSED:
 137           /* connection closed during listen */
 138           return RPC_S_NO_CONTEXT_AVAILABLE;
 139       case ERROR_NO_DATA_DETECTED:
 140           /* client has disconnected, retry */
 141           DisconnectNamedPipe( npc->pipe );
 142           break;
 143       default:
 144           npc->listening = FALSE;
 145           WARN("Couldn't ConnectNamedPipe (error was %d)\n", GetLastError());
 146           return RPC_S_OUT_OF_RESOURCES;
 147       }
 148   }
 149 }
 150
 151 static RPC_STATUS rpcrt4_conn_listen_pipe(RpcConnection_np *npc)
 152 {
 153   if (npc->listening)
 154     return RPC_S_OK;
 155
 156   npc->listening = TRUE;
 157   npc->listen_thread = CreateThread(NULL, 0, listen_thread, npc, 0, NULL);
 158   if (!npc->listen_thread)
 159   {
 160       npc->listening = FALSE;
 161       ERR("Couldn't create listen thread (error was %d)\n", GetLastError());
 162       return RPC_S_OUT_OF_RESOURCES;
 163   }
 164   return RPC_S_OK;
 165 }
 166
 167 static RPC_STATUS rpcrt4_conn_create_pipe(RpcConnection *Connection, LPCSTR pname)
 168 {
 169   RpcConnection_np *npc = (RpcConnection_np *) Connection;
 170   TRACE("listening on %s\n", pname);
 171
 172   npc->pipe = CreateNamedPipeA(pname, PIPE_ACCESS_DUPLEX,
 173                                PIPE_TYPE_MESSAGE | PIPE_READMODE_MESSAGE,
 174                                PIPE_UNLIMITED_INSTANCES,
 175                                RPC_MAX_PACKET_SIZE, RPC_MAX_PACKET_SIZE, 5000, NULL);
 176   if (npc->pipe == INVALID_HANDLE_VALUE) {
 177     WARN("CreateNamedPipe failed with error %d\n", GetLastError());
 178     if (GetLastError() == ERROR_FILE_EXISTS)
 179       return RPC_S_DUPLICATE_ENDPOINT;
 180     else
 181       return RPC_S_CANT_CREATE_ENDPOINT;
 182   }
 183
 184   /* Note: we don't call ConnectNamedPipe here because it must be done in the
 185    * server thread as the thread must be alertable */
 186   return RPC_S_OK;
 187 }
 188
 189 static RPC_STATUS rpcrt4_conn_open_pipe(RpcConnection *Connection, LPCSTR pname, BOOL wait)
 190 {
 191   RpcConnection_np *npc = (RpcConnection_np *) Connection;
 192   HANDLE pipe;
 193   DWORD err, dwMode;
 194
 195   TRACE("connecting to %s\n", pname);
 196
 197   while (TRUE) {
 198     DWORD dwFlags = 0;
 199     if (Connection->QOS)
 200     {
 201         dwFlags = SECURITY_SQOS_PRESENT;
 202         switch (Connection->QOS->qos->ImpersonationType)
 203         {
 204             case RPC_C_IMP_LEVEL_DEFAULT:
 205                 /* FIXME: what to do here? */
 206                 break;
 207             case RPC_C_IMP_LEVEL_ANONYMOUS:
 208                 dwFlags |= SECURITY_ANONYMOUS;
 209                 break;
 210             case RPC_C_IMP_LEVEL_IDENTIFY:
 211                 dwFlags |= SECURITY_IDENTIFICATION;
 212                 break;
 213             case RPC_C_IMP_LEVEL_IMPERSONATE:
 214                 dwFlags |= SECURITY_IMPERSONATION;
 215                 break;
 216             case RPC_C_IMP_LEVEL_DELEGATE:
 217                 dwFlags |= SECURITY_DELEGATION;
 218                 break;
 219         }
 220         if (Connection->QOS->qos->IdentityTracking == RPC_C_QOS_IDENTITY_DYNAMIC)
 221             dwFlags |= SECURITY_CONTEXT_TRACKING;
 222     }
 223     pipe = CreateFileA(pname, GENERIC_READ|GENERIC_WRITE, 0, NULL,
 224                        OPEN_EXISTING, dwFlags, 0);
 225     if (pipe != INVALID_HANDLE_VALUE) break;
 226     err = GetLastError();
 227     if (err == ERROR_PIPE_BUSY) {
 228       TRACE("connection failed, error=%x\n", err);
 229       return RPC_S_SERVER_TOO_BUSY;
 230     }
 231     if (!wait || !WaitNamedPipeA(pname, NMPWAIT_WAIT_FOREVER)) {
 232       err = GetLastError();
 233       WARN("connection failed, error=%x\n", err);
 234       return RPC_S_SERVER_UNAVAILABLE;
 235     }
 236   }
 237
 238   /* success */
 239   /* pipe is connected; change to message-read mode. */
 240   dwMode = PIPE_READMODE_MESSAGE;
 241   SetNamedPipeHandleState(pipe, &dwMode, NULL, NULL);
 242   npc->pipe = pipe;
 243
 244   return RPC_S_OK;
 245 }
 246
 247 static RPC_STATUS rpcrt4_ncalrpc_open(RpcConnection* Connection)
 248 {
 249   RpcConnection_np *npc = (RpcConnection_np *) Connection;
 250   static const char prefix[] = "\\\\.\\pipe\\lrpc\\";
 251   RPC_STATUS r;
 252   LPSTR pname;
 253
 254   /* already connected? */
 255   if (npc->pipe)
 256     return RPC_S_OK;
 257
 258   /* protseq=ncalrpc: supposed to use NT LPC ports,
 259    * but we'll implement it with named pipes for now */
 260   pname = I_RpcAllocate(strlen(prefix) + strlen(Connection->Endpoint) + 1);
 261   strcat(strcpy(pname, prefix), Connection->Endpoint);
 262   r = rpcrt4_conn_open_pipe(Connection, pname, TRUE);
 263   I_RpcFree(pname);
 264
 265   return r;
 266 }
 267
 268 static RPC_STATUS rpcrt4_protseq_ncalrpc_open_endpoint(RpcServerProtseq* protseq, const char *endpoint)
 269 {
 270   static const char prefix[] = "\\\\.\\pipe\\lrpc\\";
 271   RPC_STATUS r;
 272   LPSTR pname;
 273   RpcConnection *Connection;
 274   char generated_endpoint[22];
 275
 276   if (!endpoint)
 277   {
 278     static LONG lrpc_nameless_id;
 279     DWORD process_id = GetCurrentProcessId();
 280     ULONG id = InterlockedIncrement(&lrpc_nameless_id);
 281     snprintf(generated_endpoint, sizeof(generated_endpoint),
 282              "LRPC%08x.%08x", process_id, id);
 283     endpoint = generated_endpoint;
 284   }
 285
 286   r = RPCRT4_CreateConnection(&Connection, TRUE, protseq->Protseq, NULL,
 287                               endpoint, NULL, NULL, NULL);
 288   if (r != RPC_S_OK)
 289       return r;
 290
 291   /* protseq=ncalrpc: supposed to use NT LPC ports,
 292    * but we'll implement it with named pipes for now */
 293   pname = I_RpcAllocate(strlen(prefix) + strlen(Connection->Endpoint) + 1);
 294   strcat(strcpy(pname, prefix), Connection->Endpoint);
 295   r = rpcrt4_conn_create_pipe(Connection, pname);
 296   I_RpcFree(pname);
 297
 298   EnterCriticalSection(&protseq->cs);
 299   Connection->Next = protseq->conn;
 300   protseq->conn = Connection;
 301   LeaveCriticalSection(&protseq->cs);
 302
 303   return r;
 304 }
 305
 306 static RPC_STATUS rpcrt4_ncacn_np_open(RpcConnection* Connection)
 307 {
 308   RpcConnection_np *npc = (RpcConnection_np *) Connection;
 309   static const char prefix[] = "\\\\.";
 310   RPC_STATUS r;
 311   LPSTR pname;
 312
 313   /* already connected? */
 314   if (npc->pipe)
 315     return RPC_S_OK;
 316
 317   /* protseq=ncacn_np: named pipes */
 318   pname = I_RpcAllocate(strlen(prefix) + strlen(Connection->Endpoint) + 1);
 319   strcat(strcpy(pname, prefix), Connection->Endpoint);
 320   r = rpcrt4_conn_open_pipe(Connection, pname, FALSE);
 321   I_RpcFree(pname);
 322
 323   return r;
 324 }
 325
 326 static RPC_STATUS rpcrt4_protseq_ncacn_np_open_endpoint(RpcServerProtseq *protseq, const char *endpoint)
 327 {
 328   static const char prefix[] = "\\\\.";
 329   RPC_STATUS r;
 330   LPSTR pname;
 331   RpcConnection *Connection;
 332   char generated_endpoint[21];
 333
 334   if (!endpoint)
 335   {
 336     static LONG np_nameless_id;
 337     DWORD process_id = GetCurrentProcessId();
 338     ULONG id = InterlockedExchangeAdd(&np_nameless_id, 1 );
 339     snprintf(generated_endpoint, sizeof(generated_endpoint),
 340              "\\\\pipe\\\\%08x.%03x", process_id, id);
 341     endpoint = generated_endpoint;
 342   }
 343
 344   r = RPCRT4_CreateConnection(&Connection, TRUE, protseq->Protseq, NULL,
 345                               endpoint, NULL, NULL, NULL);
 346   if (r != RPC_S_OK)
 347     return r;
 348
 349   /* protseq=ncacn_np: named pipes */
 350   pname = I_RpcAllocate(strlen(prefix) + strlen(Connection->Endpoint) + 1);
 351   strcat(strcpy(pname, prefix), Connection->Endpoint);
 352   r = rpcrt4_conn_create_pipe(Connection, pname);
 353   I_RpcFree(pname);
 354
 355   EnterCriticalSection(&protseq->cs);
 356   Connection->Next = protseq->conn;
 357   protseq->conn = Connection;
 358   LeaveCriticalSection(&protseq->cs);
 359
 360   return r;
 361 }
 362
 363 static void rpcrt4_conn_np_handoff(RpcConnection_np *old_npc, RpcConnection_np *new_npc)
 364 {
 365   /* because of the way named pipes work, we'll transfer the connected pipe
 366    * to the child, then reopen the server binding to continue listening */
 367
 368   new_npc->pipe = old_npc->pipe;
 369   new_npc->listen_thread = old_npc->listen_thread;
 370   old_npc->pipe = 0;
 371   old_npc->listen_thread = 0;
 372   old_npc->listening = FALSE;
 373 }
 374
 375 static RPC_STATUS rpcrt4_ncacn_np_handoff(RpcConnection *old_conn, RpcConnection *new_conn)
 376 {
 377   RPC_STATUS status;
 378   LPSTR pname;
 379   static const char prefix[] = "\\\\.";
 380
 381   rpcrt4_conn_np_handoff((RpcConnection_np *)old_conn, (RpcConnection_np *)new_conn);
 382
 383   pname = I_RpcAllocate(strlen(prefix) + strlen(old_conn->Endpoint) + 1);
 384   strcat(strcpy(pname, prefix), old_conn->Endpoint);
 385   status = rpcrt4_conn_create_pipe(old_conn, pname);
 386   I_RpcFree(pname);
 387
 388   return status;
 389 }
 390
 391 static RPC_STATUS rpcrt4_ncalrpc_handoff(RpcConnection *old_conn, RpcConnection *new_conn)
 392 {
 393   RPC_STATUS status;
 394   LPSTR pname;
 395   static const char prefix[] = "\\\\.\\pipe\\lrpc\\";
 396
 397   TRACE("%s\n", old_conn->Endpoint);
 398
 399   rpcrt4_conn_np_handoff((RpcConnection_np *)old_conn, (RpcConnection_np *)new_conn);
 400
 401   pname = I_RpcAllocate(strlen(prefix) + strlen(old_conn->Endpoint) + 1);
 402   strcat(strcpy(pname, prefix), old_conn->Endpoint);
 403   status = rpcrt4_conn_create_pipe(old_conn, pname);
 404   I_RpcFree(pname);
 405
 406   return status;
 407 }
 408
 409 static int rpcrt4_conn_np_read(RpcConnection *Connection,
 410                         void *buffer, unsigned int count)
 411 {
 412   RpcConnection_np *npc = (RpcConnection_np *) Connection;
 413   char *buf = buffer;
 414   BOOL ret = TRUE;
 415   unsigned int bytes_left = count;
 416
 417   while (bytes_left)
 418   {
 419     DWORD bytes_read;
 420     ret = ReadFile(npc->pipe, buf, bytes_left, &bytes_read, NULL);
 421     if (!ret && GetLastError() == ERROR_MORE_DATA)
 422         ret = TRUE;
 423     if (!ret || !bytes_read)
 424         break;
 425     bytes_left -= bytes_read;
 426     buf += bytes_read;
 427   }
 428   return ret ? count : -1;
 429 }
 430
 431 static int rpcrt4_conn_np_write(RpcConnection *Connection,
 432                              const void *buffer, unsigned int count)
 433 {
 434   RpcConnection_np *npc = (RpcConnection_np *) Connection;
 435   const char *buf = buffer;
 436   BOOL ret = TRUE;
 437   unsigned int bytes_left = count;
 438
 439   while (bytes_left)
 440   {
 441     DWORD bytes_written;
 442     ret = WriteFile(npc->pipe, buf, bytes_left, &bytes_written, NULL);
 443     if (!ret || !bytes_written)
 444         break;
 445     bytes_left -= bytes_written;
 446     buf += bytes_written;
 447   }
 448   return ret ? count : -1;
 449 }
 450
 451 static int rpcrt4_conn_np_close(RpcConnection *Connection)
 452 {
 453   RpcConnection_np *npc = (RpcConnection_np *) Connection;
 454   if (npc->pipe) {
 455     FlushFileBuffers(npc->pipe);
 456     CloseHandle(npc->pipe);
 457     npc->pipe = 0;
 458   }
 459   if (npc->listen_thread) {
 460     CloseHandle(npc->listen_thread);
 461     npc->listen_thread = 0;
 462   }
 463   return 0;
 464 }
 465
 466 static void rpcrt4_conn_np_cancel_call(RpcConnection *Connection)
 467 {
 468     /* FIXME: implement when named pipe writes use overlapped I/O */
 469 }
 470
 471 static int rpcrt4_conn_np_wait_for_incoming_data(RpcConnection *Connection)
 472 {
 473     /* FIXME: implement when named pipe writes use overlapped I/O */
 474     return -1;
 475 }
 476
 477 static size_t rpcrt4_ncacn_np_get_top_of_tower(unsigned char *tower_data,
 478                                                const char *networkaddr,
 479                                                const char *endpoint)
 480 {
 481     twr_empty_floor_t *smb_floor;
 482     twr_empty_floor_t *nb_floor;
 483     size_t size;
 484     size_t networkaddr_size;
 485     size_t endpoint_size;
 486
 487     TRACE("(%p, %s, %s)\n", tower_data, networkaddr, endpoint);
 488
 489     networkaddr_size = networkaddr ? strlen(networkaddr) + 1 : 1;
 490     endpoint_size = endpoint ? strlen(endpoint) + 1 : 1;
 491     size = sizeof(*smb_floor) + endpoint_size + sizeof(*nb_floor) + networkaddr_size;
 492
 493     if (!tower_data)
 494         return size;
 495
 496     smb_floor = (twr_empty_floor_t *)tower_data;
 497
 498     tower_data += sizeof(*smb_floor);
 499
 500     smb_floor->count_lhs = sizeof(smb_floor->protid);
 501     smb_floor->protid = EPM_PROTOCOL_SMB;
 502     smb_floor->count_rhs = endpoint_size;
 503
 504     if (endpoint)
 505         memcpy(tower_data, endpoint, endpoint_size);
 506     else
 507         tower_data[0] = 0;
 508     tower_data += endpoint_size;
 509
 510     nb_floor = (twr_empty_floor_t *)tower_data;
 511
 512     tower_data += sizeof(*nb_floor);
 513
 514     nb_floor->count_lhs = sizeof(nb_floor->protid);
 515     nb_floor->protid = EPM_PROTOCOL_NETBIOS;
 516     nb_floor->count_rhs = networkaddr_size;
 517
 518     if (networkaddr)
 519         memcpy(tower_data, networkaddr, networkaddr_size);
 520     else
 521         tower_data[0] = 0;
 522
 523     return size;
 524 }
 525
 526 static RPC_STATUS rpcrt4_ncacn_np_parse_top_of_tower(const unsigned char *tower_data,
 527                                                      size_t tower_size,
 528                                                      char **networkaddr,
 529                                                      char **endpoint)
 530 {
 531     const twr_empty_floor_t *smb_floor = (const twr_empty_floor_t *)tower_data;
 532     const twr_empty_floor_t *nb_floor;
 533
 534     TRACE("(%p, %d, %p, %p)\n", tower_data, (int)tower_size, networkaddr, endpoint);
 535
 536     if (tower_size < sizeof(*smb_floor))
 537         return EPT_S_NOT_REGISTERED;
 538
 539     tower_data += sizeof(*smb_floor);
 540     tower_size -= sizeof(*smb_floor);
 541
 542     if ((smb_floor->count_lhs != sizeof(smb_floor->protid)) ||
 543         (smb_floor->protid != EPM_PROTOCOL_SMB) ||
 544         (smb_floor->count_rhs > tower_size) ||
 545         (tower_data[smb_floor->count_rhs - 1] != '\0'))
 546         return EPT_S_NOT_REGISTERED;
 547
 548     if (endpoint)
 549     {
 550         *endpoint = I_RpcAllocate(smb_floor->count_rhs);
 551         if (!*endpoint)
 552             return RPC_S_OUT_OF_RESOURCES;
 553         memcpy(*endpoint, tower_data, smb_floor->count_rhs);
 554     }
 555     tower_data += smb_floor->count_rhs;
 556     tower_size -= smb_floor->count_rhs;
 557
 558     if (tower_size < sizeof(*nb_floor))
 559         return EPT_S_NOT_REGISTERED;
 560
 561     nb_floor = (const twr_empty_floor_t *)tower_data;
 562
 563     tower_data += sizeof(*nb_floor);
 564     tower_size -= sizeof(*nb_floor);
 565
 566     if ((nb_floor->count_lhs != sizeof(nb_floor->protid)) ||
 567         (nb_floor->protid != EPM_PROTOCOL_NETBIOS) ||
 568         (nb_floor->count_rhs > tower_size) ||
 569         (tower_data[nb_floor->count_rhs - 1] != '\0'))
 570         return EPT_S_NOT_REGISTERED;
 571
 572     if (networkaddr)
 573     {
 574         *networkaddr = I_RpcAllocate(nb_floor->count_rhs);
 575         if (!*networkaddr)
 576         {
 577             if (endpoint)
 578             {
 579                 I_RpcFree(*endpoint);
 580                 *endpoint = NULL;
 581             }
 582             return RPC_S_OUT_OF_RESOURCES;
 583         }
 584         memcpy(*networkaddr, tower_data, nb_floor->count_rhs);
 585     }
 586
 587     return RPC_S_OK;
 588 }
 589
 590 static RPC_STATUS rpcrt4_conn_np_impersonate_client(RpcConnection *conn)
 591 {
 592     RpcConnection_np *npc = (RpcConnection_np *)conn;
 593     BOOL ret;
 594
 595     TRACE("(%p)\n", conn);
 596
 597     if (conn->AuthInfo && SecIsValidHandle(&conn->ctx))
 598         return RPCRT4_default_impersonate_client(conn);
 599
 600     ret = ImpersonateNamedPipeClient(npc->pipe);
 601     if (!ret)
 602     {
 603         DWORD error = GetLastError();
 604         WARN("ImpersonateNamedPipeClient failed with error %u\n", error);
 605         switch (error)
 606         {
 607         case ERROR_CANNOT_IMPERSONATE:
 608             return RPC_S_NO_CONTEXT_AVAILABLE;
 609         }
 610     }
 611     return RPC_S_OK;
 612 }
 613
 614 static RPC_STATUS rpcrt4_conn_np_revert_to_self(RpcConnection *conn)
 615 {
 616     BOOL ret;
 617
 618     TRACE("(%p)\n", conn);
 619
 620     if (conn->AuthInfo && SecIsValidHandle(&conn->ctx))
 621         return RPCRT4_default_revert_to_self(conn);
 622
 623     ret = RevertToSelf();
 624     if (!ret)
 625     {
 626         WARN("RevertToSelf failed with error %u\n", GetLastError());
 627         return RPC_S_NO_CONTEXT_AVAILABLE;
 628     }
 629     return RPC_S_OK;
 630 }
 631
 632 typedef struct _RpcServerProtseq_np
 633 {
 634     RpcServerProtseq common;
 635     HANDLE mgr_event;
 636 } RpcServerProtseq_np;
 637
 638 static RpcServerProtseq *rpcrt4_protseq_np_alloc(void)
 639 {
 640     RpcServerProtseq_np *ps = HeapAlloc(GetProcessHeap(), 0, sizeof(*ps));
 641     if (ps)
 642         ps->mgr_event = CreateEventW(NULL, FALSE, FALSE, NULL);
 643     return &ps->common;
 644 }
 645
 646 static void rpcrt4_protseq_np_signal_state_changed(RpcServerProtseq *protseq)
 647 {
 648     RpcServerProtseq_np *npps = CONTAINING_RECORD(protseq, RpcServerProtseq_np, common);
 649     SetEvent(npps->mgr_event);
 650 }
 651
 652 static void *rpcrt4_protseq_np_get_wait_array(RpcServerProtseq *protseq, void *prev_array, unsigned int *count)
 653 {
 654     HANDLE *objs = prev_array;
 655     RpcConnection_np *conn;
 656     RpcServerProtseq_np *npps = CONTAINING_RECORD(protseq, RpcServerProtseq_np, common);
 657
 658     EnterCriticalSection(&protseq->cs);
 659
 660     /* open and count connections */
 661     *count = 1;
 662     conn = CONTAINING_RECORD(protseq->conn, RpcConnection_np, common);
 663     while (conn) {
 664         rpcrt4_conn_listen_pipe(conn);
 665         if (conn->listen_thread)
 666             (*count)++;
 667         conn = CONTAINING_RECORD(conn->common.Next, RpcConnection_np, common);
 668     }
 669
 670     /* make array of connections */
 671     if (objs)
 672         objs = HeapReAlloc(GetProcessHeap(), 0, objs, *count*sizeof(HANDLE));
 673     else
 674         objs = HeapAlloc(GetProcessHeap(), 0, *count*sizeof(HANDLE));
 675     if (!objs)
 676     {
 677         ERR("couldn't allocate objs\n");
 678         LeaveCriticalSection(&protseq->cs);
 679         return NULL;
 680     }
 681
 682     objs[0] = npps->mgr_event;
 683     *count = 1;
 684     conn = CONTAINING_RECORD(protseq->conn, RpcConnection_np, common);
 685     while (conn) {
 686         if ((objs[*count] = conn->listen_thread))
 687             (*count)++;
 688         conn = CONTAINING_RECORD(conn->common.Next, RpcConnection_np, common);
 689     }
 690     LeaveCriticalSection(&protseq->cs);
 691     return objs;
 692 }
 693
 694 static void rpcrt4_protseq_np_free_wait_array(RpcServerProtseq *protseq, void *array)
 695 {
 696     HeapFree(GetProcessHeap(), 0, array);
 697 }
 698
 699 static int rpcrt4_protseq_np_wait_for_new_connection(RpcServerProtseq *protseq, unsigned int count, void *wait_array)
 700 {
 701     HANDLE b_handle;
 702     HANDLE *objs = wait_array;
 703     DWORD res;
 704     RpcConnection *cconn;
 705     RpcConnection_np *conn;
 706
 707     if (!objs)
 708         return -1;
 709
 710     do
 711     {
 712         /* an alertable wait isn't strictly necessary, but due to our
 713          * overlapped I/O implementation in Wine we need to free some memory
 714          * by the file user APC being called, even if no completion routine was
 715          * specified at the time of starting the async operation */
 716         res = WaitForMultipleObjectsEx(count, objs, FALSE, INFINITE, TRUE);
 717     } while (res == WAIT_IO_COMPLETION);
 718
 719     if (res == WAIT_OBJECT_0)
 720         return 0;
 721     else if (res == WAIT_FAILED)
 722     {
 723         ERR("wait failed with error %d\n", GetLastError());
 724         return -1;
 725     }
 726     else
 727     {
 728         b_handle = objs[res - WAIT_OBJECT_0];
 729         /* find which connection got a RPC */
 730         EnterCriticalSection(&protseq->cs);
 731         conn = CONTAINING_RECORD(protseq->conn, RpcConnection_np, common);
 732         while (conn) {
 733             if (b_handle == conn->listen_thread) break;
 734             conn = CONTAINING_RECORD(conn->common.Next, RpcConnection_np, common);
 735         }
 736         cconn = NULL;
 737         if (conn)
 738         {
 739             DWORD exit_code;
 740             if (GetExitCodeThread(conn->listen_thread, &exit_code) && exit_code == RPC_S_OK)
 741                 RPCRT4_SpawnConnection(&cconn, &conn->common);
 742             CloseHandle(conn->listen_thread);
 743             conn->listen_thread = 0;
 744         }
 745         else
 746             ERR("failed to locate connection for handle %p\n", b_handle);
 747         LeaveCriticalSection(&protseq->cs);
 748         if (cconn)
 749         {
 750             RPCRT4_new_client(cconn);
 751             return 1;
 752         }
 753         else return -1;
 754     }
 755 }
 756
 757 static size_t rpcrt4_ncalrpc_get_top_of_tower(unsigned char *tower_data,
 758                                               const char *networkaddr,
 759                                               const char *endpoint)
 760 {
 761     twr_empty_floor_t *pipe_floor;
 762     size_t size;
 763     size_t endpoint_size;
 764
 765     TRACE("(%p, %s, %s)\n", tower_data, networkaddr, endpoint);
 766
 767     endpoint_size = strlen(endpoint) + 1;
 768     size = sizeof(*pipe_floor) + endpoint_size;
 769
 770     if (!tower_data)
 771         return size;
 772
 773     pipe_floor = (twr_empty_floor_t *)tower_data;
 774
 775     tower_data += sizeof(*pipe_floor);
 776
 777     pipe_floor->count_lhs = sizeof(pipe_floor->protid);
 778     pipe_floor->protid = EPM_PROTOCOL_PIPE;
 779     pipe_floor->count_rhs = endpoint_size;
 780
 781     memcpy(tower_data, endpoint, endpoint_size);
 782
 783     return size;
 784 }
 785
 786 static RPC_STATUS rpcrt4_ncalrpc_parse_top_of_tower(const unsigned char *tower_data,
 787                                                     size_t tower_size,
 788                                                     char **networkaddr,
 789                                                     char **endpoint)
 790 {
 791     const twr_empty_floor_t *pipe_floor = (const twr_empty_floor_t *)tower_data;
 792
 793     TRACE("(%p, %d, %p, %p)\n", tower_data, (int)tower_size, networkaddr, endpoint);
 794
 795     if (tower_size < sizeof(*pipe_floor))
 796         return EPT_S_NOT_REGISTERED;
 797
 798     tower_data += sizeof(*pipe_floor);
 799     tower_size -= sizeof(*pipe_floor);
 800
 801     if ((pipe_floor->count_lhs != sizeof(pipe_floor->protid)) ||
 802         (pipe_floor->protid != EPM_PROTOCOL_PIPE) ||
 803         (pipe_floor->count_rhs > tower_size) ||
 804         (tower_data[pipe_floor->count_rhs - 1] != '\0'))
 805         return EPT_S_NOT_REGISTERED;
 806
 807     if (networkaddr)
 808         *networkaddr = NULL;
 809
 810     if (endpoint)
 811     {
 812         *endpoint = I_RpcAllocate(pipe_floor->count_rhs);
 813         if (!*endpoint)
 814             return RPC_S_OUT_OF_RESOURCES;
 815         memcpy(*endpoint, tower_data, pipe_floor->count_rhs);
 816     }
 817
 818     return RPC_S_OK;
 819 }
 820
 821 static BOOL rpcrt4_ncalrpc_is_authorized(RpcConnection *conn)
 822 {
 823     return FALSE;
 824 }
 825
 826 static RPC_STATUS rpcrt4_ncalrpc_authorize(RpcConnection *conn, BOOL first_time,
 827                                            unsigned char *in_buffer,
 828                                            unsigned int in_size,
 829                                            unsigned char *out_buffer,
 830                                            unsigned int *out_size)
 831 {
 832     /* since this protocol is local to the machine there is no need to
 833      * authenticate the caller */
 834     *out_size = 0;
 835     return RPC_S_OK;
 836 }
 837
 838 static RPC_STATUS rpcrt4_ncalrpc_secure_packet(RpcConnection *conn,
 839     enum secure_packet_direction dir,
 840     RpcPktHdr *hdr, unsigned int hdr_size,
 841     unsigned char *stub_data, unsigned int stub_data_size,
 842     RpcAuthVerifier *auth_hdr,
 843     unsigned char *auth_value, unsigned int auth_value_size)
 844 {
 845     /* since this protocol is local to the machine there is no need to secure
 846      * the packet */
 847     return RPC_S_OK;
 848 }
 849
 850 static RPC_STATUS rpcrt4_ncalrpc_inquire_auth_client(
 851     RpcConnection *conn, RPC_AUTHZ_HANDLE *privs, RPC_WSTR *server_princ_name,
 852     ULONG *authn_level, ULONG *authn_svc, ULONG *authz_svc, ULONG flags)
 853 {
 854     TRACE("(%p, %p, %p, %p, %p, %p, 0x%x)\n", conn, privs,
 855           server_princ_name, authn_level, authn_svc, authz_svc, flags);
 856
 857     if (privs)
 858     {
 859         FIXME("privs not implemented\n");
 860         *privs = NULL;
 861     }
 862     if (server_princ_name)
 863     {
 864         FIXME("server_princ_name not implemented\n");
 865         *server_princ_name = NULL;
 866     }
 867     if (authn_level) *authn_level = RPC_C_AUTHN_LEVEL_PKT_PRIVACY;
 868     if (authn_svc) *authn_svc = RPC_C_AUTHN_WINNT;
 869     if (authz_svc)
 870     {
 871         FIXME("authorization service not implemented\n");
 872         *authz_svc = RPC_C_AUTHZ_NONE;
 873     }
 874     if (flags)
 875         FIXME("flags 0x%x not implemented\n", flags);
 876
 877     return RPC_S_OK;
 878 }
 879
 880 /**** ncacn_ip_tcp support ****/
 881
 882 static size_t rpcrt4_ip_tcp_get_top_of_tower(unsigned char *tower_data,
 883                                              const char *networkaddr,
 884                                              unsigned char tcp_protid,
 885                                              const char *endpoint)
 886 {
 887     twr_tcp_floor_t *tcp_floor;
 888     twr_ipv4_floor_t *ipv4_floor;
 889     struct addrinfo *ai;
 890     struct addrinfo hints;
 891     int ret;
 892     size_t size = sizeof(*tcp_floor) + sizeof(*ipv4_floor);
 893
 894     TRACE("(%p, %s, %s)\n", tower_data, networkaddr, endpoint);
 895
 896     if (!tower_data)
 897         return size;
 898
 899     tcp_floor = (twr_tcp_floor_t *)tower_data;
 900     tower_data += sizeof(*tcp_floor);
 901
 902     ipv4_floor = (twr_ipv4_floor_t *)tower_data;
 903
 904     tcp_floor->count_lhs = sizeof(tcp_floor->protid);
 905     tcp_floor->protid = tcp_protid;
 906     tcp_floor->count_rhs = sizeof(tcp_floor->port);
 907
 908     ipv4_floor->count_lhs = sizeof(ipv4_floor->protid);
 909     ipv4_floor->protid = EPM_PROTOCOL_IP;
 910     ipv4_floor->count_rhs = sizeof(ipv4_floor->ipv4addr);
 911
 912     hints.ai_flags          = AI_NUMERICHOST;
 913     /* FIXME: only support IPv4 at the moment. how is IPv6 represented by the EPM? */
 914     hints.ai_family         = PF_INET;
 915     hints.ai_socktype       = SOCK_STREAM;
 916     hints.ai_protocol       = IPPROTO_TCP;
 917     hints.ai_addrlen        = 0;
 918     hints.ai_addr           = NULL;
 919     hints.ai_canonname      = NULL;
 920     hints.ai_next           = NULL;
 921
 922     ret = getaddrinfo(networkaddr, endpoint, &hints, &ai);
 923     if (ret)
 924     {
 925         ret = getaddrinfo("0.0.0.0", endpoint, &hints, &ai);
 926         if (ret)
 927         {
 928             ERR("getaddrinfo failed: %s\n", gai_strerror(ret));
 929             return 0;
 930         }
 931     }
 932
 933     if (ai->ai_family == PF_INET)
 934     {
 935         const struct sockaddr_in *sin = (const struct sockaddr_in *)ai->ai_addr;
 936         tcp_floor->port = sin->sin_port;
 937         ipv4_floor->ipv4addr = sin->sin_addr.s_addr;
 938     }
 939     else
 940     {
 941         ERR("unexpected protocol family %d\n", ai->ai_family);
 942         return 0;
 943     }
 944
 945     freeaddrinfo(ai);
 946
 947     return size;
 948 }
 949
 950 static RPC_STATUS rpcrt4_ip_tcp_parse_top_of_tower(const unsigned char *tower_data,
 951                                                    size_t tower_size,
 952                                                    char **networkaddr,
 953                                                    unsigned char tcp_protid,
 954                                                    char **endpoint)
 955 {
 956     const twr_tcp_floor_t *tcp_floor = (const twr_tcp_floor_t *)tower_data;
 957     const twr_ipv4_floor_t *ipv4_floor;
 958     struct in_addr in_addr;
 959
 960     TRACE("(%p, %d, %p, %p)\n", tower_data, (int)tower_size, networkaddr, endpoint);
 961
 962     if (tower_size < sizeof(*tcp_floor))
 963         return EPT_S_NOT_REGISTERED;
 964
 965     tower_data += sizeof(*tcp_floor);
 966     tower_size -= sizeof(*tcp_floor);
 967
 968     if (tower_size < sizeof(*ipv4_floor))
 969         return EPT_S_NOT_REGISTERED;
 970
 971     ipv4_floor = (const twr_ipv4_floor_t *)tower_data;
 972
 973     if ((tcp_floor->count_lhs != sizeof(tcp_floor->protid)) ||
 974         (tcp_floor->protid != tcp_protid) ||
 975         (tcp_floor->count_rhs != sizeof(tcp_floor->port)) ||
 976         (ipv4_floor->count_lhs != sizeof(ipv4_floor->protid)) ||
 977         (ipv4_floor->protid != EPM_PROTOCOL_IP) ||
 978         (ipv4_floor->count_rhs != sizeof(ipv4_floor->ipv4addr)))
 979         return EPT_S_NOT_REGISTERED;
 980
 981     if (endpoint)
 982     {
 983         *endpoint = I_RpcAllocate(6 /* sizeof("65535") + 1 */);
 984         if (!*endpoint)
 985             return RPC_S_OUT_OF_RESOURCES;
 986         sprintf(*endpoint, "%u", ntohs(tcp_floor->port));
 987     }
 988
 989     if (networkaddr)
 990     {
 991         *networkaddr = I_RpcAllocate(INET_ADDRSTRLEN);
 992         if (!*networkaddr)
 993         {
 994             if (endpoint)
 995             {
 996                 I_RpcFree(*endpoint);
 997                 *endpoint = NULL;
 998             }
 999             return RPC_S_OUT_OF_RESOURCES;
1000         }
1001         in_addr.s_addr = ipv4_floor->ipv4addr;
1002         if (!inet_ntop(AF_INET, &in_addr, *networkaddr, INET_ADDRSTRLEN))
1003         {
1004             ERR("inet_ntop: %s\n", strerror(errno));
1005             I_RpcFree(*networkaddr);
1006             *networkaddr = NULL;
1007             if (endpoint)
1008             {
1009                 I_RpcFree(*endpoint);
1010                 *endpoint = NULL;
1011             }
1012             return EPT_S_NOT_REGISTERED;
1013         }
1014     }
1015
1016     return RPC_S_OK;
1017 }
1018
1019 typedef struct _RpcConnection_tcp
1020 {
1021   RpcConnection common;
1022   int sock;
1023 #ifdef HAVE_SOCKETPAIR
1024   int cancel_fds[2];
1025 #else
1026   HANDLE sock_event;
1027   HANDLE cancel_event;
1028 #endif
1029 } RpcConnection_tcp;
1030
1031 #ifdef HAVE_SOCKETPAIR
1032
1033 static BOOL rpcrt4_sock_wait_init(RpcConnection_tcp *tcpc)
1034 {
1035   if (socketpair(PF_UNIX, SOCK_STREAM, 0, tcpc->cancel_fds) < 0)
1036   {
1037     ERR("socketpair() failed: %s\n", strerror(errno));
1038     return FALSE;
1039   }
1040   return TRUE;
1041 }
1042
1043 static BOOL rpcrt4_sock_wait_for_recv(RpcConnection_tcp *tcpc)
1044 {
1045   struct pollfd pfds[2];
1046   pfds[0].fd = tcpc->sock;
1047   pfds[0].events = POLLIN;
1048   pfds[1].fd = tcpc->cancel_fds[0];
1049   pfds[1].events = POLLIN;
1050   if (poll(pfds, 2, -1 /* infinite */) == -1 && errno != EINTR)
1051   {
1052     ERR("poll() failed: %s\n", strerror(errno));
1053     return FALSE;
1054   }
1055   if (pfds[1].revents & POLLIN) /* canceled */
1056   {
1057     char dummy;
1058     read(pfds[1].fd, &dummy, sizeof(dummy));
1059     return FALSE;
1060   }
1061   return TRUE;
1062 }
1063
1064 static BOOL rpcrt4_sock_wait_for_send(RpcConnection_tcp *tcpc)
1065 {
1066   struct pollfd pfd;
1067   pfd.fd = tcpc->sock;
1068   pfd.events = POLLOUT;
1069   if (poll(&pfd, 1, -1 /* infinite */) == -1 && errno != EINTR)
1070   {
1071     ERR("poll() failed: %s\n", strerror(errno));
1072     return FALSE;
1073   }
1074   return TRUE;
1075 }
1076
1077 static void rpcrt4_sock_wait_cancel(RpcConnection_tcp *tcpc)
1078 {
1079   char dummy = 1;
1080
1081   write(tcpc->cancel_fds[1], &dummy, 1);
1082 }
1083
1084 static void rpcrt4_sock_wait_destroy(RpcConnection_tcp *tcpc)
1085 {
1086   close(tcpc->cancel_fds[0]);
1087   close(tcpc->cancel_fds[1]);
1088 }
1089
1090 #else /* HAVE_SOCKETPAIR */
1091
1092 static BOOL rpcrt4_sock_wait_init(RpcConnection_tcp *tcpc)
1093 {
1094   static BOOL wsa_inited;
1095   if (!wsa_inited)
1096   {
1097     WSADATA wsadata;
1098     WSAStartup(MAKEWORD(2, 2), &wsadata);
1099     /* Note: WSAStartup can be called more than once so we don't bother with
1100      * making accesses to wsa_inited thread-safe */
1101     wsa_inited = TRUE;
1102   }
1103   tcpc->sock_event = CreateEventW(NULL, FALSE, FALSE, NULL);
1104   tcpc->cancel_event = CreateEventW(NULL, FALSE, FALSE, NULL);
1105   if (!tcpc->sock_event || !tcpc->cancel_event)
1106   {
1107     ERR("event creation failed\n");
1108     if (tcpc->sock_event) CloseHandle(tcpc->sock_event);
1109     return FALSE;
1110   }
1111   return TRUE;
1112 }
1113
1114 static BOOL rpcrt4_sock_wait_for_recv(RpcConnection_tcp *tcpc)
1115 {
1116   HANDLE wait_handles[2];
1117   DWORD res;
1118   if (WSAEventSelect(tcpc->sock, tcpc->sock_event, FD_READ | FD_CLOSE) == SOCKET_ERROR)
1119   {
1120     ERR("WSAEventSelect() failed with error %d\n", WSAGetLastError());
1121     return FALSE;
1122   }
1123   wait_handles[0] = tcpc->sock_event;
1124   wait_handles[1] = tcpc->cancel_event;
1125   res = WaitForMultipleObjects(2, wait_handles, FALSE, INFINITE);
1126   switch (res)
1127   {
1128   case WAIT_OBJECT_0:
1129     return TRUE;
1130   case WAIT_OBJECT_0 + 1:
1131     return FALSE;
1132   default:
1133     ERR("WaitForMultipleObjects() failed with error %d\n", GetLastError());
1134     return FALSE;
1135   }
1136 }
1137
1138 static BOOL rpcrt4_sock_wait_for_send(RpcConnection_tcp *tcpc)
1139 {
1140   DWORD res;
1141   if (WSAEventSelect(tcpc->sock, tcpc->sock_event, FD_WRITE | FD_CLOSE) == SOCKET_ERROR)
1142   {
1143     ERR("WSAEventSelect() failed with error %d\n", WSAGetLastError());
1144     return FALSE;
1145   }
1146   res = WaitForSingleObject(tcpc->sock_event, INFINITE);
1147   switch (res)
1148   {
1149   case WAIT_OBJECT_0:
1150     return TRUE;
1151   default:
1152     ERR("WaitForMultipleObjects() failed with error %d\n", GetLastError());
1153     return FALSE;
1154   }
1155 }
1156
1157 static void rpcrt4_sock_wait_cancel(RpcConnection_tcp *tcpc)
1158 {
1159   SetEvent(tcpc->cancel_event);
1160 }
1161
1162 static void rpcrt4_sock_wait_destroy(RpcConnection_tcp *tcpc)
1163 {
1164   CloseHandle(tcpc->sock_event);
1165   CloseHandle(tcpc->cancel_event);
1166 }
1167
1168 #endif
1169
1170 static RpcConnection *rpcrt4_conn_tcp_alloc(void)
1171 {
1172   RpcConnection_tcp *tcpc;
1173   tcpc = HeapAlloc(GetProcessHeap(), 0, sizeof(RpcConnection_tcp));
1174   if (tcpc == NULL)
1175     return NULL;
1176   tcpc->sock = -1;
1177   if (!rpcrt4_sock_wait_init(tcpc))
1178   {
1179     HeapFree(GetProcessHeap(), 0, tcpc);
1180     return NULL;
1181   }
1182   return &tcpc->common;
1183 }
1184
1185 static RPC_STATUS rpcrt4_ncacn_ip_tcp_open(RpcConnection* Connection)
1186 {
1187   RpcConnection_tcp *tcpc = (RpcConnection_tcp *) Connection;
1188   int sock;
1189   int ret;
1190   struct addrinfo *ai;
1191   struct addrinfo *ai_cur;
1192   struct addrinfo hints;
1193
1194   TRACE("(%s, %s)\n", Connection->NetworkAddr, Connection->Endpoint);
1195
1196   if (tcpc->sock != -1)
1197     return RPC_S_OK;
1198
1199   hints.ai_flags          = 0;
1200   hints.ai_family         = PF_UNSPEC;
1201   hints.ai_socktype       = SOCK_STREAM;
1202   hints.ai_protocol       = IPPROTO_TCP;
1203   hints.ai_addrlen        = 0;
1204   hints.ai_addr           = NULL;
1205   hints.ai_canonname      = NULL;
1206   hints.ai_next           = NULL;
1207
1208   ret = getaddrinfo(Connection->NetworkAddr, Connection->Endpoint, &hints, &ai);
1209   if (ret)
1210   {
1211     ERR("getaddrinfo for %s:%s failed: %s\n", Connection->NetworkAddr,
1212       Connection->Endpoint, gai_strerror(ret));
1213     return RPC_S_SERVER_UNAVAILABLE;
1214   }
1215
1216   for (ai_cur = ai; ai_cur; ai_cur = ai_cur->ai_next)
1217   {
1218     int val;
1219     u_long nonblocking;
1220
1221     if (ai_cur->ai_family != AF_INET && ai_cur->ai_family != AF_INET6)
1222     {
1223       TRACE("skipping non-IP/IPv6 address family\n");
1224       continue;
1225     }
1226
1227     if (TRACE_ON(rpc))
1228     {
1229       char host[256];
1230       char service[256];
1231       getnameinfo(ai_cur->ai_addr, ai_cur->ai_addrlen,
1232         host, sizeof(host), service, sizeof(service),
1233         NI_NUMERICHOST | NI_NUMERICSERV);
1234       TRACE("trying %s:%s\n", host, service);
1235     }
1236
1237     sock = socket(ai_cur->ai_family, ai_cur->ai_socktype, ai_cur->ai_protocol);
1238     if (sock == -1)
1239     {
1240       WARN("socket() failed: %s\n", strerror(errno));
1241       continue;
1242     }
1243
1244     if (0>connect(sock, ai_cur->ai_addr, ai_cur->ai_addrlen))
1245     {
1246       WARN("connect() failed: %s\n", strerror(errno));
1247       closesocket(sock);
1248       continue;
1249     }
1250
1251     /* RPC depends on having minimal latency so disable the Nagle algorithm */
1252     val = 1;
1253     setsockopt(sock, SOL_TCP, TCP_NODELAY, (char *)&val, sizeof(val));
1254     nonblocking = 1;
1255     ioctlsocket(sock, FIONBIO, &nonblocking);
1256
1257     tcpc->sock = sock;
1258
1259     freeaddrinfo(ai);
1260     TRACE("connected\n");
1261     return RPC_S_OK;
1262   }
1263
1264   freeaddrinfo(ai);
1265   ERR("couldn't connect to %s:%s\n", Connection->NetworkAddr, Connection->Endpoint);
1266   return RPC_S_SERVER_UNAVAILABLE;
1267 }
1268
1269 static RPC_STATUS rpcrt4_protseq_ncacn_ip_tcp_open_endpoint(RpcServerProtseq *protseq, const char *endpoint)
1270 {
1271     RPC_STATUS status = RPC_S_CANT_CREATE_ENDPOINT;
1272     int sock;
1273     int ret;
1274     struct addrinfo *ai;
1275     struct addrinfo *ai_cur;
1276     struct addrinfo hints;
1277     RpcConnection *first_connection = NULL;
1278
1279     TRACE("(%p, %s)\n", protseq, endpoint);
1280
1281     hints.ai_flags          = AI_PASSIVE /* for non-localhost addresses */;
1282     hints.ai_family         = PF_UNSPEC;
1283     hints.ai_socktype       = SOCK_STREAM;
1284     hints.ai_protocol       = IPPROTO_TCP;
1285     hints.ai_addrlen        = 0;
1286     hints.ai_addr           = NULL;
1287     hints.ai_canonname      = NULL;
1288     hints.ai_next           = NULL;
1289
1290     ret = getaddrinfo(NULL, endpoint ? endpoint : "0", &hints, &ai);
1291     if (ret)
1292     {
1293         ERR("getaddrinfo for port %s failed: %s\n", endpoint,
1294             gai_strerror(ret));
1295         if ((ret == EAI_SERVICE) || (ret == EAI_NONAME))
1296             return RPC_S_INVALID_ENDPOINT_FORMAT;
1297         return RPC_S_CANT_CREATE_ENDPOINT;
1298     }
1299
1300     for (ai_cur = ai; ai_cur; ai_cur = ai_cur->ai_next)
1301     {
1302         RpcConnection_tcp *tcpc;
1303         RPC_STATUS create_status;
1304         struct sockaddr_storage sa;
1305         socklen_t sa_len;
1306         char service[NI_MAXSERV];
1307         u_long nonblocking;
1308
1309         if (ai_cur->ai_family != AF_INET && ai_cur->ai_family != AF_INET6)
1310         {
1311             TRACE("skipping non-IP/IPv6 address family\n");
1312             continue;
1313         }
1314
1315         if (TRACE_ON(rpc))
1316         {
1317             char host[256];
1318             getnameinfo(ai_cur->ai_addr, ai_cur->ai_addrlen,
1319                         host, sizeof(host), service, sizeof(service),
1320                         NI_NUMERICHOST | NI_NUMERICSERV);
1321             TRACE("trying %s:%s\n", host, service);
1322         }
1323
1324         sock = socket(ai_cur->ai_family, ai_cur->ai_socktype, ai_cur->ai_protocol);
1325         if (sock == -1)
1326         {
1327             WARN("socket() failed: %s\n", strerror(errno));
1328             status = RPC_S_CANT_CREATE_ENDPOINT;
1329             continue;
1330         }
1331
1332         ret = bind(sock, ai_cur->ai_addr, ai_cur->ai_addrlen);
1333         if (ret < 0)
1334         {
1335             WARN("bind failed: %s\n", strerror(errno));
1336             closesocket(sock);
1337             if (errno == EADDRINUSE)
1338               status = RPC_S_DUPLICATE_ENDPOINT;
1339             else
1340               status = RPC_S_CANT_CREATE_ENDPOINT;
1341             continue;
1342         }
1343
1344         sa_len = sizeof(sa);
1345         if (getsockname(sock, (struct sockaddr *)&sa, &sa_len))
1346         {
1347             WARN("getsockname() failed: %s\n", strerror(errno));
1348             closesocket(sock);
1349             status = RPC_S_CANT_CREATE_ENDPOINT;
1350             continue;
1351         }
1352
1353         ret = getnameinfo((struct sockaddr *)&sa, sa_len,
1354                           NULL, 0, service, sizeof(service),
1355                           NI_NUMERICSERV);
1356         if (ret)
1357         {
1358             WARN("getnameinfo failed: %s\n", gai_strerror(ret));
1359             closesocket(sock);
1360             status = RPC_S_CANT_CREATE_ENDPOINT;
1361             continue;
1362         }
1363
1364         create_status = RPCRT4_CreateConnection((RpcConnection **)&tcpc, TRUE,
1365                                                 protseq->Protseq, NULL,
1366                                                 service, NULL, NULL, NULL);
1367         if (create_status != RPC_S_OK)
1368         {
1369             closesocket(sock);
1370             status = create_status;
1371             continue;
1372         }
1373
1374         tcpc->sock = sock;
1375         ret = listen(sock, protseq->MaxCalls);
1376         if (ret < 0)
1377         {
1378             WARN("listen failed: %s\n", strerror(errno));
1379             RPCRT4_ReleaseConnection(&tcpc->common);
1380             status = RPC_S_OUT_OF_RESOURCES;
1381             continue;
1382         }
1383         /* need a non-blocking socket, otherwise accept() has a potential
1384          * race-condition (poll() says it is readable, connection drops,
1385          * and accept() blocks until the next connection comes...)
1386          */
1387         nonblocking = 1;
1388         ret = ioctlsocket(sock, FIONBIO, &nonblocking);
1389         if (ret < 0)
1390         {
1391             WARN("couldn't make socket non-blocking, error %d\n", ret);
1392             RPCRT4_ReleaseConnection(&tcpc->common);
1393             status = RPC_S_OUT_OF_RESOURCES;
1394             continue;
1395         }
1396
1397         tcpc->common.Next = first_connection;
1398         first_connection = &tcpc->common;
1399
1400         /* since IPv4 and IPv6 share the same port space, we only need one
1401          * successful bind to listen for both */
1402         break;
1403     }
1404
1405     freeaddrinfo(ai);
1406
1407     /* if at least one connection was created for an endpoint then
1408      * return success */
1409     if (first_connection)
1410     {
1411         RpcConnection *conn;
1412
1413         /* find last element in list */
1414         for (conn = first_connection; conn->Next; conn = conn->Next)
1415             ;
1416
1417         EnterCriticalSection(&protseq->cs);
1418         conn->Next = protseq->conn;
1419         protseq->conn = first_connection;
1420         LeaveCriticalSection(&protseq->cs);
1421
1422         TRACE("listening on %s\n", endpoint);
1423         return RPC_S_OK;
1424     }
1425
1426     ERR("couldn't listen on port %s\n", endpoint);
1427     return status;
1428 }
1429
1430 static RPC_STATUS rpcrt4_conn_tcp_handoff(RpcConnection *old_conn, RpcConnection *new_conn)
1431 {
1432   int ret;
1433   struct sockaddr_in address;
1434   socklen_t addrsize;
1435   RpcConnection_tcp *server = (RpcConnection_tcp*) old_conn;
1436   RpcConnection_tcp *client = (RpcConnection_tcp*) new_conn;
1437   u_long nonblocking;
1438
1439   addrsize = sizeof(address);
1440   ret = accept(server->sock, (struct sockaddr*) &address, &addrsize);
1441   if (ret < 0)
1442   {
1443     ERR("Failed to accept a TCP connection: error %d\n", ret);
1444     return RPC_S_OUT_OF_RESOURCES;
1445   }
1446   nonblocking = 1;
1447   ioctlsocket(ret, FIONBIO, &nonblocking);
1448   client->sock = ret;
1449   TRACE("Accepted a new TCP connection\n");
1450   return RPC_S_OK;
1451 }
1452
1453 static int rpcrt4_conn_tcp_read(RpcConnection *Connection,
1454                                 void *buffer, unsigned int count)
1455 {
1456   RpcConnection_tcp *tcpc = (RpcConnection_tcp *) Connection;
1457   int bytes_read = 0;
1458   while (bytes_read != count)
1459   {
1460     int r = recv(tcpc->sock, (char *)buffer + bytes_read, count - bytes_read, 0);
1461     if (!r)
1462       return -1;
1463     else if (r > 0)
1464       bytes_read += r;
1465     else if (errno != EAGAIN)
1466     {
1467       WARN("recv() failed: %s\n", strerror(errno));
1468       return -1;
1469     }
1470     else
1471     {
1472       if (!rpcrt4_sock_wait_for_recv(tcpc))
1473         return -1;
1474     }
1475   }
1476   TRACE("%d %p %u -> %d\n", tcpc->sock, buffer, count, bytes_read);
1477   return bytes_read;
1478 }
1479
1480 static int rpcrt4_conn_tcp_write(RpcConnection *Connection,
1481                                  const void *buffer, unsigned int count)
1482 {
1483   RpcConnection_tcp *tcpc = (RpcConnection_tcp *) Connection;
1484   int bytes_written = 0;
1485   while (bytes_written != count)
1486   {
1487     int r = send(tcpc->sock, (const char *)buffer + bytes_written, count - bytes_written, 0);
1488     if (r >= 0)
1489       bytes_written += r;
1490     else if (errno != EAGAIN)
1491       return -1;
1492     else
1493     {
1494       if (!rpcrt4_sock_wait_for_send(tcpc))
1495         return -1;
1496     }
1497   }
1498   TRACE("%d %p %u -> %d\n", tcpc->sock, buffer, count, bytes_written);
1499   return bytes_written;
1500 }
1501
1502 static int rpcrt4_conn_tcp_close(RpcConnection *Connection)
1503 {
1504   RpcConnection_tcp *tcpc = (RpcConnection_tcp *) Connection;
1505
1506   TRACE("%d\n", tcpc->sock);
1507
1508   if (tcpc->sock != -1)
1509     closesocket(tcpc->sock);
1510   tcpc->sock = -1;
1511   rpcrt4_sock_wait_destroy(tcpc);
1512   return 0;
1513 }
1514
1515 static void rpcrt4_conn_tcp_cancel_call(RpcConnection *Connection)
1516 {
1517     RpcConnection_tcp *tcpc = (RpcConnection_tcp *) Connection;
1518     TRACE("%p\n", Connection);
1519     rpcrt4_sock_wait_cancel(tcpc);
1520 }
1521
1522 static int rpcrt4_conn_tcp_wait_for_incoming_data(RpcConnection *Connection)
1523 {
1524     RpcConnection_tcp *tcpc = (RpcConnection_tcp *) Connection;
1525
1526     TRACE("%p\n", Connection);
1527
1528     if (!rpcrt4_sock_wait_for_recv(tcpc))
1529         return -1;
1530     return 0;
1531 }
1532
1533 static size_t rpcrt4_ncacn_ip_tcp_get_top_of_tower(unsigned char *tower_data,
1534                                                    const char *networkaddr,
1535                                                    const char *endpoint)
1536 {
1537     return rpcrt4_ip_tcp_get_top_of_tower(tower_data, networkaddr,
1538                                           EPM_PROTOCOL_TCP, endpoint);
1539 }
1540
1541 #ifdef HAVE_SOCKETPAIR
1542
1543 typedef struct _RpcServerProtseq_sock
1544 {
1545     RpcServerProtseq common;
1546     int mgr_event_rcv;
1547     int mgr_event_snd;
1548 } RpcServerProtseq_sock;
1549
1550 static RpcServerProtseq *rpcrt4_protseq_sock_alloc(void)
1551 {
1552     RpcServerProtseq_sock *ps = HeapAlloc(GetProcessHeap(), 0, sizeof(*ps));
1553     if (ps)
1554     {
1555         int fds[2];
1556         if (!socketpair(PF_UNIX, SOCK_DGRAM, 0, fds))
1557         {
1558             fcntl(fds[0], F_SETFL, O_NONBLOCK);
1559             fcntl(fds[1], F_SETFL, O_NONBLOCK);
1560             ps->mgr_event_rcv = fds[0];
1561             ps->mgr_event_snd = fds[1];
1562         }
1563         else
1564         {
1565             ERR("socketpair failed with error %s\n", strerror(errno));
1566             HeapFree(GetProcessHeap(), 0, ps);
1567             return NULL;
1568         }
1569     }
1570     return &ps->common;
1571 }
1572
1573 static void rpcrt4_protseq_sock_signal_state_changed(RpcServerProtseq *protseq)
1574 {
1575     RpcServerProtseq_sock *sockps = CONTAINING_RECORD(protseq, RpcServerProtseq_sock, common);
1576     char dummy = 1;
1577     write(sockps->mgr_event_snd, &dummy, sizeof(dummy));
1578 }
1579
1580 static void *rpcrt4_protseq_sock_get_wait_array(RpcServerProtseq *protseq, void *prev_array, unsigned int *count)
1581 {
1582     struct pollfd *poll_info = prev_array;
1583     RpcConnection_tcp *conn;
1584     RpcServerProtseq_sock *sockps = CONTAINING_RECORD(protseq, RpcServerProtseq_sock, common);
1585
1586     EnterCriticalSection(&protseq->cs);
1587
1588     /* open and count connections */
1589     *count = 1;
1590     conn = (RpcConnection_tcp *)protseq->conn;
1591     while (conn) {
1592         if (conn->sock != -1)
1593             (*count)++;
1594         conn = (RpcConnection_tcp *)conn->common.Next;
1595     }
1596
1597     /* make array of connections */
1598     if (poll_info)
1599         poll_info = HeapReAlloc(GetProcessHeap(), 0, poll_info, *count*sizeof(*poll_info));
1600     else
1601         poll_info = HeapAlloc(GetProcessHeap(), 0, *count*sizeof(*poll_info));
1602     if (!poll_info)
1603     {
1604         ERR("couldn't allocate poll_info\n");
1605         LeaveCriticalSection(&protseq->cs);
1606         return NULL;
1607     }
1608
1609     poll_info[0].fd = sockps->mgr_event_rcv;
1610     poll_info[0].events = POLLIN;
1611     *count = 1;
1612     conn =  CONTAINING_RECORD(protseq->conn, RpcConnection_tcp, common);
1613     while (conn) {
1614         if (conn->sock != -1)
1615         {
1616             poll_info[*count].fd = conn->sock;
1617             poll_info[*count].events = POLLIN;
1618             (*count)++;
1619         }
1620         conn = CONTAINING_RECORD(conn->common.Next, RpcConnection_tcp, common);
1621     }
1622     LeaveCriticalSection(&protseq->cs);
1623     return poll_info;
1624 }
1625
1626 static void rpcrt4_protseq_sock_free_wait_array(RpcServerProtseq *protseq, void *array)
1627 {
1628     HeapFree(GetProcessHeap(), 0, array);
1629 }
1630
1631 static int rpcrt4_protseq_sock_wait_for_new_connection(RpcServerProtseq *protseq, unsigned int count, void *wait_array)
1632 {
1633     struct pollfd *poll_info = wait_array;
1634     int ret;
1635     unsigned int i;
1636     RpcConnection *cconn;
1637     RpcConnection_tcp *conn;
1638
1639     if (!poll_info)
1640         return -1;
1641
1642     ret = poll(poll_info, count, -1);
1643     if (ret < 0)
1644     {
1645         ERR("poll failed with error %d\n", ret);
1646         return -1;
1647     }
1648
1649     for (i = 0; i < count; i++)
1650         if (poll_info[i].revents & POLLIN)
1651         {
1652             /* RPC server event */
1653             if (i == 0)
1654             {
1655                 char dummy;
1656                 read(poll_info[0].fd, &dummy, sizeof(dummy));
1657                 return 0;
1658             }
1659
1660             /* find which connection got a RPC */
1661             EnterCriticalSection(&protseq->cs);
1662             conn = CONTAINING_RECORD(protseq->conn, RpcConnection_tcp, common);
1663             while (conn) {
1664                 if (poll_info[i].fd == conn->sock) break;
1665                 conn = CONTAINING_RECORD(conn->common.Next, RpcConnection_tcp, common);
1666             }
1667             cconn = NULL;
1668             if (conn)
1669                 RPCRT4_SpawnConnection(&cconn, &conn->common);
1670             else
1671                 ERR("failed to locate connection for fd %d\n", poll_info[i].fd);
1672             LeaveCriticalSection(&protseq->cs);
1673             if (cconn)
1674                 RPCRT4_new_client(cconn);
1675             else
1676                 return -1;
1677         }
1678
1679     return 1;
1680 }
1681
1682 #else /* HAVE_SOCKETPAIR */
1683
1684 typedef struct _RpcServerProtseq_sock
1685 {
1686     RpcServerProtseq common;
1687     HANDLE mgr_event;
1688 } RpcServerProtseq_sock;
1689
1690 static RpcServerProtseq *rpcrt4_protseq_sock_alloc(void)
1691 {
1692     RpcServerProtseq_sock *ps = HeapAlloc(GetProcessHeap(), 0, sizeof(*ps));
1693     if (ps)
1694     {
1695         static BOOL wsa_inited;
1696         if (!wsa_inited)
1697         {
1698             WSADATA wsadata;
1699             WSAStartup(MAKEWORD(2, 2), &wsadata);
1700             /* Note: WSAStartup can be called more than once so we don't bother with
1701              * making accesses to wsa_inited thread-safe */
1702             wsa_inited = TRUE;
1703         }
1704         ps->mgr_event = CreateEventW(NULL, FALSE, FALSE, NULL);
1705     }
1706     return &ps->common;
1707 }
1708
1709 static void rpcrt4_protseq_sock_signal_state_changed(RpcServerProtseq *protseq)
1710 {
1711     RpcServerProtseq_sock *sockps = CONTAINING_RECORD(protseq, RpcServerProtseq_sock, common);
1712     SetEvent(sockps->mgr_event);
1713 }
1714
1715 static void *rpcrt4_protseq_sock_get_wait_array(RpcServerProtseq *protseq, void *prev_array, unsigned int *count)
1716 {
1717     HANDLE *objs = prev_array;
1718     RpcConnection_tcp *conn;
1719     RpcServerProtseq_sock *sockps = CONTAINING_RECORD(protseq, RpcServerProtseq_sock, common);
1720
1721     EnterCriticalSection(&protseq->cs);
1722
1723     /* open and count connections */
1724     *count = 1;
1725     conn = CONTAINING_RECORD(protseq->conn, RpcConnection_tcp, common);
1726     while (conn)
1727     {
1728         if (conn->sock != -1)
1729             (*count)++;
1730         conn = CONTAINING_RECORD(conn->common.Next, RpcConnection_tcp, common);
1731     }
1732
1733     /* make array of connections */
1734     if (objs)
1735         objs = HeapReAlloc(GetProcessHeap(), 0, objs, *count*sizeof(HANDLE));
1736     else
1737         objs = HeapAlloc(GetProcessHeap(), 0, *count*sizeof(HANDLE));
1738     if (!objs)
1739     {
1740         ERR("couldn't allocate objs\n");
1741         LeaveCriticalSection(&protseq->cs);
1742         return NULL;
1743     }
1744
1745     objs[0] = sockps->mgr_event;
1746     *count = 1;
1747     conn = CONTAINING_RECORD(protseq->conn, RpcConnection_tcp, common);
1748     while (conn)
1749     {
1750         if (conn->sock != -1)
1751         {
1752             int res = WSAEventSelect(conn->sock, conn->sock_event, FD_ACCEPT);
1753             if (res == SOCKET_ERROR)
1754                 ERR("WSAEventSelect() failed with error %d\n", WSAGetLastError());
1755             else
1756             {
1757                 objs[*count] = conn->sock_event;
1758                 (*count)++;
1759             }
1760         }
1761         conn = CONTAINING_RECORD(conn->common.Next, RpcConnection_tcp, common);
1762     }
1763     LeaveCriticalSection(&protseq->cs);
1764     return objs;
1765 }
1766
1767 static void rpcrt4_protseq_sock_free_wait_array(RpcServerProtseq *protseq, void *array)
1768 {
1769     HeapFree(GetProcessHeap(), 0, array);
1770 }
1771
1772 static int rpcrt4_protseq_sock_wait_for_new_connection(RpcServerProtseq *protseq, unsigned int count, void *wait_array)
1773 {
1774     HANDLE b_handle;
1775     HANDLE *objs = wait_array;
1776     DWORD res;
1777     RpcConnection *cconn;
1778     RpcConnection_tcp *conn;
1779
1780     if (!objs)
1781         return -1;
1782
1783     do
1784     {
1785         /* an alertable wait isn't strictly necessary, but due to our
1786          * overlapped I/O implementation in Wine we need to free some memory
1787          * by the file user APC being called, even if no completion routine was
1788          * specified at the time of starting the async operation */
1789         res = WaitForMultipleObjectsEx(count, objs, FALSE, INFINITE, TRUE);
1790     } while (res == WAIT_IO_COMPLETION);
1791
1792     if (res == WAIT_OBJECT_0)
1793         return 0;
1794     else if (res == WAIT_FAILED)
1795     {
1796         ERR("wait failed with error %d\n", GetLastError());
1797         return -1;
1798     }
1799     else
1800     {
1801         b_handle = objs[res - WAIT_OBJECT_0];
1802         /* find which connection got a RPC */
1803         EnterCriticalSection(&protseq->cs);
1804         conn = CONTAINING_RECORD(protseq->conn, RpcConnection_tcp, common);
1805         while (conn)
1806         {
1807             if (b_handle == conn->sock_event) break;
1808             conn = CONTAINING_RECORD(conn->common.Next, RpcConnection_tcp, common);
1809         }
1810         cconn = NULL;
1811         if (conn)
1812             RPCRT4_SpawnConnection(&cconn, &conn->common);
1813         else
1814             ERR("failed to locate connection for handle %p\n", b_handle);
1815         LeaveCriticalSection(&protseq->cs);
1816         if (cconn)
1817         {
1818             RPCRT4_new_client(cconn);
1819             return 1;
1820         }
1821         else return -1;
1822     }
1823 }
1824
1825 #endif  /* HAVE_SOCKETPAIR */
1826
1827 static RPC_STATUS rpcrt4_ncacn_ip_tcp_parse_top_of_tower(const unsigned char *tower_data,
1828                                                          size_t tower_size,
1829                                                          char **networkaddr,
1830                                                          char **endpoint)
1831 {
1832     return rpcrt4_ip_tcp_parse_top_of_tower(tower_data, tower_size,
1833                                             networkaddr, EPM_PROTOCOL_TCP,
1834                                             endpoint);
1835 }
1836
1837 /**** ncacn_http support ****/
1838
1839 /* 60 seconds is the period native uses */
1840 #define HTTP_IDLE_TIME 60000
1841
1842 /* reference counted to avoid a race between a cancelled call's connection
1843  * being destroyed and the asynchronous InternetReadFileEx call being
1844  * completed */
1845 typedef struct _RpcHttpAsyncData
1846 {
1847     LONG refs;
1848     HANDLE completion_event;
1849     WORD async_result;
1850     INTERNET_BUFFERSA inet_buffers;
1851     CRITICAL_SECTION cs;
1852 } RpcHttpAsyncData;
1853
1854 static ULONG RpcHttpAsyncData_AddRef(RpcHttpAsyncData *data)
1855 {
1856     return InterlockedIncrement(&data->refs);
1857 }
1858
1859 static ULONG RpcHttpAsyncData_Release(RpcHttpAsyncData *data)
1860 {
1861     ULONG refs = InterlockedDecrement(&data->refs);
1862     if (!refs)
1863     {
1864         TRACE("destroying async data %p\n", data);
1865         CloseHandle(data->completion_event);
1866         HeapFree(GetProcessHeap(), 0, data->inet_buffers.lpvBuffer);
1867         data->cs.DebugInfo->Spare[0] = 0;
1868         DeleteCriticalSection(&data->cs);
1869         HeapFree(GetProcessHeap(), 0, data);
1870     }
1871     return refs;
1872 }
1873
1874 static void prepare_async_request(RpcHttpAsyncData *async_data)
1875 {
1876     ResetEvent(async_data->completion_event);
1877     RpcHttpAsyncData_AddRef(async_data);
1878 }
1879
1880 static RPC_STATUS wait_async_request(RpcHttpAsyncData *async_data, BOOL call_ret, HANDLE cancel_event)
1881 {
1882     HANDLE handles[2] = { async_data->completion_event, cancel_event };
1883     DWORD res;
1884
1885     if(call_ret) {
1886         RpcHttpAsyncData_Release(async_data);
1887         return RPC_S_OK;
1888     }
1889
1890     if(GetLastError() != ERROR_IO_PENDING) {
1891         RpcHttpAsyncData_Release(async_data);
1892         ERR("Request failed with error %d\n", GetLastError());
1893         return RPC_S_SERVER_UNAVAILABLE;
1894     }
1895
1896     res = WaitForMultipleObjects(2, handles, FALSE, DEFAULT_NCACN_HTTP_TIMEOUT);
1897     if(res != WAIT_OBJECT_0) {
1898         TRACE("Cancelled\n");
1899         return RPC_S_CALL_CANCELLED;
1900     }
1901
1902     if(async_data->async_result) {
1903         ERR("Async request failed with error %d\n", async_data->async_result);
1904         return RPC_S_SERVER_UNAVAILABLE;
1905     }
1906
1907     return RPC_S_OK;
1908 }
1909
1910 typedef struct _RpcConnection_http
1911 {
1912     RpcConnection common;
1913     HINTERNET app_info;
1914     HINTERNET session;
1915     HINTERNET in_request;
1916     HINTERNET out_request;
1917     HANDLE timer_cancelled;
1918     HANDLE cancel_event;
1919     DWORD last_sent_time;
1920     ULONG bytes_received;
1921     ULONG flow_control_mark; /* send a control packet to the server when this many bytes received */
1922     ULONG flow_control_increment; /* number of bytes to increment flow_control_mark by */
1923     UUID connection_uuid;
1924     UUID in_pipe_uuid;
1925     UUID out_pipe_uuid;
1926     RpcHttpAsyncData *async_data;
1927 } RpcConnection_http;
1928
1929 static RpcConnection *rpcrt4_ncacn_http_alloc(void)
1930 {
1931     RpcConnection_http *httpc;
1932     httpc = HeapAlloc(GetProcessHeap(), HEAP_ZERO_MEMORY, sizeof(*httpc));
1933     if (!httpc) return NULL;
1934     httpc->async_data = HeapAlloc(GetProcessHeap(), HEAP_ZERO_MEMORY, sizeof(RpcHttpAsyncData));
1935     if (!httpc->async_data)
1936     {
1937         HeapFree(GetProcessHeap(), 0, httpc);
1938         return NULL;
1939     }
1940     TRACE("async data = %p\n", httpc->async_data);
1941     httpc->cancel_event = CreateEventW(NULL, FALSE, FALSE, NULL);
1942     httpc->async_data->refs = 1;
1943     httpc->async_data->inet_buffers.dwStructSize = sizeof(INTERNET_BUFFERSA);
1944     httpc->async_data->inet_buffers.lpvBuffer = NULL;
1945     InitializeCriticalSection(&httpc->async_data->cs);
1946     httpc->async_data->cs.DebugInfo->Spare[0] = (DWORD_PTR)(__FILE__ ": RpcHttpAsyncData.cs");
1947     return &httpc->common;
1948 }
1949
1950 typedef struct _HttpTimerThreadData
1951 {
1952     PVOID timer_param;
1953     DWORD *last_sent_time;
1954     HANDLE timer_cancelled;
1955 } HttpTimerThreadData;
1956
1957 static VOID rpcrt4_http_keep_connection_active_timer_proc(PVOID param, BOOLEAN dummy)
1958 {
1959     HINTERNET in_request = param;
1960     RpcPktHdr *idle_pkt;
1961
1962     idle_pkt = RPCRT4_BuildHttpHeader(NDR_LOCAL_DATA_REPRESENTATION, 0x0001,
1963                                       0, 0);
1964     if (idle_pkt)
1965     {
1966         DWORD bytes_written;
1967         InternetWriteFile(in_request, idle_pkt, idle_pkt->common.frag_len, &bytes_written);
1968         RPCRT4_FreeHeader(idle_pkt);
1969     }
1970 }
1971
1972 static inline DWORD rpcrt4_http_timer_calc_timeout(DWORD *last_sent_time)
1973 {
1974     DWORD cur_time = GetTickCount();
1975     DWORD cached_last_sent_time = *last_sent_time;
1976     return HTTP_IDLE_TIME - (cur_time - cached_last_sent_time > HTTP_IDLE_TIME ? 0 : cur_time - cached_last_sent_time);
1977 }
1978
1979 static DWORD CALLBACK rpcrt4_http_timer_thread(PVOID param)
1980 {
1981     HttpTimerThreadData *data_in = param;
1982     HttpTimerThreadData data;
1983     DWORD timeout;
1984
1985     data = *data_in;
1986     HeapFree(GetProcessHeap(), 0, data_in);
1987
1988     for (timeout = HTTP_IDLE_TIME;
1989          WaitForSingleObject(data.timer_cancelled, timeout) == WAIT_TIMEOUT;
1990          timeout = rpcrt4_http_timer_calc_timeout(data.last_sent_time))
1991     {
1992         /* are we too soon after last send? */
1993         if (GetTickCount() - HTTP_IDLE_TIME < *data.last_sent_time)
1994             continue;
1995         rpcrt4_http_keep_connection_active_timer_proc(data.timer_param, TRUE);
1996     }
1997
1998     CloseHandle(data.timer_cancelled);
1999     return 0;
2000 }
2001
2002 static VOID WINAPI rpcrt4_http_internet_callback(
2003      HINTERNET hInternet,
2004      DWORD_PTR dwContext,
2005      DWORD dwInternetStatus,
2006      LPVOID lpvStatusInformation,
2007      DWORD dwStatusInformationLength)
2008 {
2009     RpcHttpAsyncData *async_data = (RpcHttpAsyncData *)dwContext;
2010
2011     switch (dwInternetStatus)
2012     {
2013     case INTERNET_STATUS_REQUEST_COMPLETE:
2014         TRACE("INTERNET_STATUS_REQUEST_COMPLETED\n");
2015         if (async_data)
2016         {
2017             INTERNET_ASYNC_RESULT *async_result = lpvStatusInformation;
2018
2019             async_data->async_result = async_result->dwResult ? ERROR_SUCCESS : async_result->dwError;
2020             SetEvent(async_data->completion_event);
2021             RpcHttpAsyncData_Release(async_data);
2022         }
2023         break;
2024     }
2025 }
2026
2027 static RPC_STATUS rpcrt4_http_check_response(HINTERNET hor)
2028 {
2029     BOOL ret;
2030     DWORD status_code;
2031     DWORD size;
2032     DWORD index;
2033     WCHAR buf[32];
2034     WCHAR *status_text = buf;
2035     TRACE("\n");
2036
2037     index = 0;
2038     size = sizeof(status_code);
2039     ret = HttpQueryInfoW(hor, HTTP_QUERY_STATUS_CODE|HTTP_QUERY_FLAG_NUMBER, &status_code, &size, &index);
2040     if (!ret)
2041         return GetLastError();
2042     if (status_code < 400)
2043         return RPC_S_OK;
2044     index = 0;
2045     size = sizeof(buf);
2046     ret = HttpQueryInfoW(hor, HTTP_QUERY_STATUS_TEXT, status_text, &size, &index);
2047     if (!ret && GetLastError() == ERROR_INSUFFICIENT_BUFFER)
2048     {
2049         status_text = HeapAlloc(GetProcessHeap(), 0, size);
2050         ret = HttpQueryInfoW(hor, HTTP_QUERY_STATUS_TEXT, status_text, &size, &index);
2051     }
2052
2053     ERR("server returned: %d %s\n", status_code, ret ? debugstr_w(status_text) : "<status text unavailable>");
2054     if(status_text != buf) HeapFree(GetProcessHeap(), 0, status_text);
2055
2056     if (status_code == HTTP_STATUS_DENIED)
2057         return ERROR_ACCESS_DENIED;
2058     return RPC_S_SERVER_UNAVAILABLE;
2059 }
2060
2061 static RPC_STATUS rpcrt4_http_internet_connect(RpcConnection_http *httpc)
2062 {
2063     static const WCHAR wszUserAgent[] = {'M','S','R','P','C',0};
2064     LPWSTR proxy = NULL;
2065     LPWSTR user = NULL;
2066     LPWSTR password = NULL;
2067     LPWSTR servername = NULL;
2068     const WCHAR *option;
2069     INTERNET_PORT port = INTERNET_INVALID_PORT_NUMBER; /* use default port */
2070
2071     if (httpc->common.QOS &&
2072         (httpc->common.QOS->qos->AdditionalSecurityInfoType == RPC_C_AUTHN_INFO_TYPE_HTTP))
2073     {
2074         const RPC_HTTP_TRANSPORT_CREDENTIALS_W *http_cred = httpc->common.QOS->qos->u.HttpCredentials;
2075         if (http_cred->TransportCredentials)
2076         {
2077             WCHAR *p;
2078             const SEC_WINNT_AUTH_IDENTITY_W *cred = http_cred->TransportCredentials;
2079             ULONG len = cred->DomainLength + 1 + cred->UserLength;
2080             user = HeapAlloc(GetProcessHeap(), 0, (len + 1) * sizeof(WCHAR));
2081             if (!user)
2082                 return RPC_S_OUT_OF_RESOURCES;
2083             p = user;
2084             if (cred->DomainLength)
2085             {
2086                 memcpy(p, cred->Domain, cred->DomainLength * sizeof(WCHAR));
2087                 p += cred->DomainLength;
2088                 *p = '\\';
2089                 p++;
2090             }
2091             memcpy(p, cred->User, cred->UserLength * sizeof(WCHAR));
2092             p[cred->UserLength] = 0;
2093
2094             password = RPCRT4_strndupW(cred->Password, cred->PasswordLength);
2095         }
2096     }
2097
2098     for (option = httpc->common.NetworkOptions; option;
2099          option = (strchrW(option, ',') ? strchrW(option, ',')+1 : NULL))
2100     {
2101         static const WCHAR wszRpcProxy[] = {'R','p','c','P','r','o','x','y','=',0};
2102         static const WCHAR wszHttpProxy[] = {'H','t','t','p','P','r','o','x','y','=',0};
2103
2104         if (!strncmpiW(option, wszRpcProxy, sizeof(wszRpcProxy)/sizeof(wszRpcProxy[0])-1))
2105         {
2106             const WCHAR *value_start = option + sizeof(wszRpcProxy)/sizeof(wszRpcProxy[0])-1;
2107             const WCHAR *value_end;
2108             const WCHAR *p;
2109
2110             value_end = strchrW(option, ',');
2111             if (!value_end)
2112                 value_end = value_start + strlenW(value_start);
2113             for (p = value_start; p < value_end; p++)
2114                 if (*p == ':')
2115                 {
2116                     port = atoiW(p+1);
2117                     value_end = p;
2118                     break;
2119                 }
2120             TRACE("RpcProxy value is %s\n", debugstr_wn(value_start, value_end-value_start));
2121             servername = RPCRT4_strndupW(value_start, value_end-value_start);
2122         }
2123         else if (!strncmpiW(option, wszHttpProxy, sizeof(wszHttpProxy)/sizeof(wszHttpProxy[0])-1))
2124         {
2125             const WCHAR *value_start = option + sizeof(wszHttpProxy)/sizeof(wszHttpProxy[0])-1;
2126             const WCHAR *value_end;
2127
2128             value_end = strchrW(option, ',');
2129             if (!value_end)
2130                 value_end = value_start + strlenW(value_start);
2131             TRACE("HttpProxy value is %s\n", debugstr_wn(value_start, value_end-value_start));
2132             proxy = RPCRT4_strndupW(value_start, value_end-value_start);
2133         }
2134         else
2135             FIXME("unhandled option %s\n", debugstr_w(option));
2136     }
2137
2138     httpc->app_info = InternetOpenW(wszUserAgent, proxy ? INTERNET_OPEN_TYPE_PROXY : INTERNET_OPEN_TYPE_PRECONFIG,
2139                                     NULL, NULL, INTERNET_FLAG_ASYNC);
2140     if (!httpc->app_info)
2141     {
2142         HeapFree(GetProcessHeap(), 0, password);
2143         HeapFree(GetProcessHeap(), 0, user);
2144         HeapFree(GetProcessHeap(), 0, proxy);
2145         HeapFree(GetProcessHeap(), 0, servername);
2146         ERR("InternetOpenW failed with error %d\n", GetLastError());
2147         return RPC_S_SERVER_UNAVAILABLE;
2148     }
2149     InternetSetStatusCallbackW(httpc->app_info, rpcrt4_http_internet_callback);
2150
2151     /* if no RpcProxy option specified, set the HTTP server address to the
2152      * RPC server address */
2153     if (!servername)
2154     {
2155         servername = HeapAlloc(GetProcessHeap(), 0, (strlen(httpc->common.NetworkAddr) + 1)*sizeof(WCHAR));
2156         if (!servername)
2157         {
2158             HeapFree(GetProcessHeap(), 0, password);
2159             HeapFree(GetProcessHeap(), 0, user);
2160             HeapFree(GetProcessHeap(), 0, proxy);
2161             return RPC_S_OUT_OF_RESOURCES;
2162         }
2163         MultiByteToWideChar(CP_ACP, 0, httpc->common.NetworkAddr, -1, servername, strlen(httpc->common.NetworkAddr) + 1);
2164     }
2165
2166     httpc->session = InternetConnectW(httpc->app_info, servername, port, user, password,
2167                                       INTERNET_SERVICE_HTTP, 0, 0);
2168
2169     HeapFree(GetProcessHeap(), 0, password);
2170     HeapFree(GetProcessHeap(), 0, user);
2171     HeapFree(GetProcessHeap(), 0, proxy);
2172     HeapFree(GetProcessHeap(), 0, servername);
2173
2174     if (!httpc->session)
2175     {
2176         ERR("InternetConnectW failed with error %d\n", GetLastError());
2177         return RPC_S_SERVER_UNAVAILABLE;
2178     }
2179
2180     return RPC_S_OK;
2181 }
2182
2183 static RPC_STATUS send_echo_request(HINTERNET req, RpcHttpAsyncData *async_data, HANDLE cancel_event)
2184 {
2185     DWORD bytes_read;
2186     BYTE buf[20];
2187     BOOL ret;
2188     RPC_STATUS status;
2189
2190     prepare_async_request(async_data);
2191     ret = HttpSendRequestW(req, NULL, 0, NULL, 0);
2192     status = wait_async_request(async_data, ret, cancel_event);
2193     if (status != RPC_S_OK) return status;
2194
2195     status = rpcrt4_http_check_response(req);
2196     if (status != RPC_S_OK) return status;
2197
2198     InternetReadFile(req, buf, sizeof(buf), &bytes_read);
2199     /* FIXME: do something with retrieved data */
2200
2201     return RPC_S_OK;
2202 }
2203
2204 /* prepare the in pipe for use by RPC packets */
2205 static RPC_STATUS rpcrt4_http_prepare_in_pipe(HINTERNET in_request, RpcHttpAsyncData *async_data, HANDLE cancel_event,
2206                                               const UUID *connection_uuid,
2207                                               const UUID *in_pipe_uuid,
2208                                               const UUID *association_uuid)
2209 {
2210     BOOL ret;
2211     RPC_STATUS status;
2212     RpcPktHdr *hdr;
2213     INTERNET_BUFFERSW buffers_in;
2214     DWORD bytes_written;
2215
2216     /* prepare in pipe */
2217     status = send_echo_request(in_request, async_data, cancel_event);
2218     if (status != RPC_S_OK) return status;
2219
2220     memset(&buffers_in, 0, sizeof(buffers_in));
2221     buffers_in.dwStructSize = sizeof(buffers_in);
2222     /* FIXME: get this from the registry */
2223     buffers_in.dwBufferTotal = 1024 * 1024 * 1024; /* 1Gb */
2224     prepare_async_request(async_data);
2225     ret = HttpSendRequestExW(in_request, &buffers_in, NULL, 0, 0);
2226     status = wait_async_request(async_data, ret, cancel_event);
2227     if (status != RPC_S_OK) return status;
2228
2229     TRACE("sending HTTP connect header to server\n");
2230     hdr = RPCRT4_BuildHttpConnectHeader(0, FALSE, connection_uuid, in_pipe_uuid, association_uuid);
2231     if (!hdr) return RPC_S_OUT_OF_RESOURCES;
2232     ret = InternetWriteFile(in_request, hdr, hdr->common.frag_len, &bytes_written);
2233     RPCRT4_FreeHeader(hdr);
2234     if (!ret)
2235     {
2236         ERR("InternetWriteFile failed with error %d\n", GetLastError());
2237         return RPC_S_SERVER_UNAVAILABLE;
2238     }
2239
2240     return RPC_S_OK;
2241 }
2242
2243 static RPC_STATUS rpcrt4_http_read_http_packet(HINTERNET request, RpcPktHdr *hdr, BYTE **data)
2244 {
2245     BOOL ret;
2246     DWORD bytes_read;
2247     unsigned short data_len;
2248
2249     ret = InternetReadFile(request, hdr, sizeof(hdr->common), &bytes_read);
2250     if (!ret)
2251         return RPC_S_SERVER_UNAVAILABLE;
2252     if (hdr->common.ptype != PKT_HTTP || hdr->common.frag_len < sizeof(hdr->http))
2253     {
2254         ERR("wrong packet type received %d or wrong frag_len %d\n",
2255             hdr->common.ptype, hdr->common.frag_len);
2256         return RPC_S_PROTOCOL_ERROR;
2257     }
2258
2259     ret = InternetReadFile(request, &hdr->common + 1, sizeof(hdr->http) - sizeof(hdr->common), &bytes_read);
2260     if (!ret)
2261         return RPC_S_SERVER_UNAVAILABLE;
2262
2263     data_len = hdr->common.frag_len - sizeof(hdr->http);
2264     if (data_len)
2265     {
2266         *data = HeapAlloc(GetProcessHeap(), 0, data_len);
2267         if (!*data)
2268             return RPC_S_OUT_OF_RESOURCES;
2269         ret = InternetReadFile(request, *data, data_len, &bytes_read);
2270         if (!ret)
2271         {
2272             HeapFree(GetProcessHeap(), 0, *data);
2273             return RPC_S_SERVER_UNAVAILABLE;
2274         }
2275     }
2276     else
2277         *data = NULL;
2278
2279     if (!RPCRT4_IsValidHttpPacket(hdr, *data, data_len))
2280     {
2281         ERR("invalid http packet\n");
2282         return RPC_S_PROTOCOL_ERROR;
2283     }
2284
2285     return RPC_S_OK;
2286 }
2287
2288 /* prepare the out pipe for use by RPC packets */
2289 static RPC_STATUS rpcrt4_http_prepare_out_pipe(HINTERNET out_request,
2290                                                RpcHttpAsyncData *async_data,
2291                                                HANDLE cancel_event,
2292                                                const UUID *connection_uuid,
2293                                                const UUID *out_pipe_uuid,
2294                                                ULONG *flow_control_increment)
2295 {
2296     BOOL ret;
2297     RPC_STATUS status;
2298     RpcPktHdr *hdr;
2299     BYTE *data_from_server;
2300     RpcPktHdr pkt_from_server;
2301     ULONG field1, field3;
2302
2303     status = send_echo_request(out_request, async_data, cancel_event);
2304     if (status != RPC_S_OK) return status;
2305
2306     hdr = RPCRT4_BuildHttpConnectHeader(0, TRUE, connection_uuid, out_pipe_uuid, NULL);
2307     if (!hdr) return RPC_S_OUT_OF_RESOURCES;
2308
2309     prepare_async_request(async_data);
2310     ret = HttpSendRequestW(out_request, NULL, 0, hdr, hdr->common.frag_len);
2311     status = wait_async_request(async_data, ret, cancel_event);
2312     RPCRT4_FreeHeader(hdr);
2313     if (status != RPC_S_OK) return status;
2314
2315     status = rpcrt4_http_check_response(out_request);
2316     if (status != RPC_S_OK) return status;
2317
2318     status = rpcrt4_http_read_http_packet(out_request, &pkt_from_server,
2319                                           &data_from_server);
2320     if (status != RPC_S_OK) return status;
2321     status = RPCRT4_ParseHttpPrepareHeader1(&pkt_from_server, data_from_server,
2322                                             &field1);
2323     HeapFree(GetProcessHeap(), 0, data_from_server);
2324     if (status != RPC_S_OK) return status;
2325     TRACE("received (%d) from first prepare header\n", field1);
2326
2327     status = rpcrt4_http_read_http_packet(out_request, &pkt_from_server,
2328                                           &data_from_server);
2329     if (status != RPC_S_OK) return status;
2330     status = RPCRT4_ParseHttpPrepareHeader2(&pkt_from_server, data_from_server,
2331                                             &field1, flow_control_increment,
2332                                             &field3);
2333     HeapFree(GetProcessHeap(), 0, data_from_server);
2334     if (status != RPC_S_OK) return status;
2335     TRACE("received (0x%08x 0x%08x %d) from second prepare header\n", field1, *flow_control_increment, field3);
2336
2337     return RPC_S_OK;
2338 }
2339
2340 static RPC_STATUS rpcrt4_ncacn_http_open(RpcConnection* Connection)
2341 {
2342     RpcConnection_http *httpc = (RpcConnection_http *)Connection;
2343     static const WCHAR wszVerbIn[] = {'R','P','C','_','I','N','_','D','A','T','A',0};
2344     static const WCHAR wszVerbOut[] = {'R','P','C','_','O','U','T','_','D','A','T','A',0};
2345     static const WCHAR wszRpcProxyPrefix[] = {'/','r','p','c','/','r','p','c','p','r','o','x','y','.','d','l','l','?',0};
2346     static const WCHAR wszColon[] = {':',0};
2347     static const WCHAR wszAcceptType[] = {'a','p','p','l','i','c','a','t','i','o','n','/','r','p','c',0};
2348     LPCWSTR wszAcceptTypes[] = { wszAcceptType, NULL };
2349     WCHAR *url;
2350     RPC_STATUS status;
2351     BOOL secure;
2352     HttpTimerThreadData *timer_data;
2353     HANDLE thread;
2354
2355     TRACE("(%s, %s)\n", Connection->NetworkAddr, Connection->Endpoint);
2356
2357     if (Connection->server)
2358     {
2359         ERR("ncacn_http servers not supported yet\n");
2360         return RPC_S_SERVER_UNAVAILABLE;
2361     }
2362
2363     if (httpc->in_request)
2364         return RPC_S_OK;
2365
2366     httpc->async_data->completion_event = CreateEventW(NULL, FALSE, FALSE, NULL);
2367
2368     status = UuidCreate(&httpc->connection_uuid);
2369     status = UuidCreate(&httpc->in_pipe_uuid);
2370     status = UuidCreate(&httpc->out_pipe_uuid);
2371
2372     status = rpcrt4_http_internet_connect(httpc);
2373     if (status != RPC_S_OK)
2374         return status;
2375
2376     url = HeapAlloc(GetProcessHeap(), 0, sizeof(wszRpcProxyPrefix) + (strlen(Connection->NetworkAddr) + 1 + strlen(Connection->Endpoint))*sizeof(WCHAR));
2377     if (!url)
2378         return RPC_S_OUT_OF_MEMORY;
2379     memcpy(url, wszRpcProxyPrefix, sizeof(wszRpcProxyPrefix));
2380     MultiByteToWideChar(CP_ACP, 0, Connection->NetworkAddr, -1, url+sizeof(wszRpcProxyPrefix)/sizeof(wszRpcProxyPrefix[0])-1, strlen(Connection->NetworkAddr)+1);
2381     strcatW(url, wszColon);
2382     MultiByteToWideChar(CP_ACP, 0, Connection->Endpoint, -1, url+strlenW(url), strlen(Connection->Endpoint)+1);
2383
2384     secure = httpc->common.QOS &&
2385              (httpc->common.QOS->qos->AdditionalSecurityInfoType == RPC_C_AUTHN_INFO_TYPE_HTTP) &&
2386              (httpc->common.QOS->qos->u.HttpCredentials->Flags & RPC_C_HTTP_FLAG_USE_SSL);
2387
2388     httpc->in_request = HttpOpenRequestW(httpc->session, wszVerbIn, url, NULL, NULL,
2389                                          wszAcceptTypes,
2390                                          (secure ? INTERNET_FLAG_SECURE : 0)|INTERNET_FLAG_KEEP_CONNECTION|INTERNET_FLAG_PRAGMA_NOCACHE,
2391                                          (DWORD_PTR)httpc->async_data);
2392     if (!httpc->in_request)
2393     {
2394         ERR("HttpOpenRequestW failed with error %d\n", GetLastError());
2395         HeapFree(GetProcessHeap(), 0, url);
2396         return RPC_S_SERVER_UNAVAILABLE;
2397     }
2398     httpc->out_request = HttpOpenRequestW(httpc->session, wszVerbOut, url, NULL, NULL,
2399                                           wszAcceptTypes,
2400                                           (secure ? INTERNET_FLAG_SECURE : 0)|INTERNET_FLAG_KEEP_CONNECTION|INTERNET_FLAG_PRAGMA_NOCACHE,
2401                                           (DWORD_PTR)httpc->async_data);
2402     HeapFree(GetProcessHeap(), 0, url);
2403     if (!httpc->out_request)
2404     {
2405         ERR("HttpOpenRequestW failed with error %d\n", GetLastError());
2406         return RPC_S_SERVER_UNAVAILABLE;
2407     }
2408
2409     status = rpcrt4_http_prepare_in_pipe(httpc->in_request,
2410                                          httpc->async_data,
2411                                          httpc->cancel_event,
2412                                          &httpc->connection_uuid,
2413                                          &httpc->in_pipe_uuid,
2414                                          &Connection->assoc->http_uuid);
2415     if (status != RPC_S_OK)
2416         return status;
2417
2418     status = rpcrt4_http_prepare_out_pipe(httpc->out_request,
2419                                           httpc->async_data,
2420                                           httpc->cancel_event,
2421                                           &httpc->connection_uuid,
2422                                           &httpc->out_pipe_uuid,
2423                                           &httpc->flow_control_increment);
2424     if (status != RPC_S_OK)
2425         return status;
2426
2427     httpc->flow_control_mark = httpc->flow_control_increment / 2;
2428     httpc->last_sent_time = GetTickCount();
2429     httpc->timer_cancelled = CreateEventW(NULL, FALSE, FALSE, NULL);
2430
2431     timer_data = HeapAlloc(GetProcessHeap(), 0, sizeof(*timer_data));
2432     if (!timer_data)
2433         return ERROR_OUTOFMEMORY;
2434     timer_data->timer_param = httpc->in_request;
2435     timer_data->last_sent_time = &httpc->last_sent_time;
2436     timer_data->timer_cancelled = httpc->timer_cancelled;
2437     /* FIXME: should use CreateTimerQueueTimer when implemented */
2438     thread = CreateThread(NULL, 0, rpcrt4_http_timer_thread, timer_data, 0, NULL);
2439     if (!thread)
2440     {
2441         HeapFree(GetProcessHeap(), 0, timer_data);
2442         return GetLastError();
2443     }
2444     CloseHandle(thread);
2445
2446     return RPC_S_OK;
2447 }
2448
2449 static RPC_STATUS rpcrt4_ncacn_http_handoff(RpcConnection *old_conn, RpcConnection *new_conn)
2450 {
2451     assert(0);
2452     return RPC_S_SERVER_UNAVAILABLE;
2453 }
2454
2455 static int rpcrt4_ncacn_http_read(RpcConnection *Connection,
2456                                 void *buffer, unsigned int count)
2457 {
2458   RpcConnection_http *httpc = (RpcConnection_http *) Connection;
2459   char *buf = buffer;
2460   BOOL ret;
2461   unsigned int bytes_left = count;
2462   RPC_STATUS status = RPC_S_OK;
2463
2464   httpc->async_data->inet_buffers.lpvBuffer = HeapAlloc(GetProcessHeap(), 0, count);
2465
2466   while (bytes_left)
2467   {
2468     httpc->async_data->inet_buffers.dwBufferLength = bytes_left;
2469     prepare_async_request(httpc->async_data);
2470     ret = InternetReadFileExA(httpc->out_request, &httpc->async_data->inet_buffers, IRF_ASYNC, 0);
2471     status = wait_async_request(httpc->async_data, ret, httpc->cancel_event);
2472     if(status != RPC_S_OK) {
2473         if(status == RPC_S_CALL_CANCELLED)
2474             TRACE("call cancelled\n");
2475         break;
2476     }
2477
2478     if(!httpc->async_data->inet_buffers.dwBufferLength)
2479         break;
2480     memcpy(buf, httpc->async_data->inet_buffers.lpvBuffer,
2481            httpc->async_data->inet_buffers.dwBufferLength);
2482
2483     bytes_left -= httpc->async_data->inet_buffers.dwBufferLength;
2484     buf += httpc->async_data->inet_buffers.dwBufferLength;
2485   }
2486
2487   HeapFree(GetProcessHeap(), 0, httpc->async_data->inet_buffers.lpvBuffer);
2488   httpc->async_data->inet_buffers.lpvBuffer = NULL;
2489
2490   TRACE("%p %p %u -> %u\n", httpc->out_request, buffer, count, status);
2491   return status == RPC_S_OK ? count : -1;
2492 }
2493
2494 static RPC_STATUS rpcrt4_ncacn_http_receive_fragment(RpcConnection *Connection, RpcPktHdr **Header, void **Payload)
2495 {
2496   RpcConnection_http *httpc = (RpcConnection_http *) Connection;
2497   RPC_STATUS status;
2498   DWORD hdr_length;
2499   LONG dwRead;
2500   RpcPktCommonHdr common_hdr;
2501
2502   *Header = NULL;
2503
2504   TRACE("(%p, %p, %p)\n", Connection, Header, Payload);
2505
2506 again:
2507   /* read packet common header */
2508   dwRead = rpcrt4_ncacn_http_read(Connection, &common_hdr, sizeof(common_hdr));
2509   if (dwRead != sizeof(common_hdr)) {
2510     WARN("Short read of header, %d bytes\n", dwRead);
2511     status = RPC_S_PROTOCOL_ERROR;
2512     goto fail;
2513   }
2514   if (!memcmp(&common_hdr, "HTTP/1.1", sizeof("HTTP/1.1")) ||
2515       !memcmp(&common_hdr, "HTTP/1.0", sizeof("HTTP/1.0")))
2516   {
2517     FIXME("server returned %s\n", debugstr_a((const char *)&common_hdr));
2518     status = RPC_S_PROTOCOL_ERROR;
2519     goto fail;
2520   }
2521
2522   status = RPCRT4_ValidateCommonHeader(&common_hdr);
2523   if (status != RPC_S_OK) goto fail;
2524
2525   hdr_length = RPCRT4_GetHeaderSize((RpcPktHdr*)&common_hdr);
2526   if (hdr_length == 0) {
2527     WARN("header length == 0\n");
2528     status = RPC_S_PROTOCOL_ERROR;
2529     goto fail;
2530   }
2531
2532   *Header = HeapAlloc(GetProcessHeap(), 0, hdr_length);
2533   if (!*Header)
2534   {
2535     status = RPC_S_OUT_OF_RESOURCES;
2536     goto fail;
2537   }
2538   memcpy(*Header, &common_hdr, sizeof(common_hdr));
2539
2540   /* read the rest of packet header */
2541   dwRead = rpcrt4_ncacn_http_read(Connection, &(*Header)->common + 1, hdr_length - sizeof(common_hdr));
2542   if (dwRead != hdr_length - sizeof(common_hdr)) {
2543     WARN("bad header length, %d bytes, hdr_length %d\n", dwRead, hdr_length);
2544     status = RPC_S_PROTOCOL_ERROR;
2545     goto fail;
2546   }
2547
2548   if (common_hdr.frag_len - hdr_length)
2549   {
2550     *Payload = HeapAlloc(GetProcessHeap(), 0, common_hdr.frag_len - hdr_length);
2551     if (!*Payload)
2552     {
2553       status = RPC_S_OUT_OF_RESOURCES;
2554       goto fail;
2555     }
2556
2557     dwRead = rpcrt4_ncacn_http_read(Connection, *Payload, common_hdr.frag_len - hdr_length);
2558     if (dwRead != common_hdr.frag_len - hdr_length)
2559     {
2560       WARN("bad data length, %d/%d\n", dwRead, common_hdr.frag_len - hdr_length);
2561       status = RPC_S_PROTOCOL_ERROR;
2562       goto fail;
2563     }
2564   }
2565   else
2566     *Payload = NULL;
2567
2568   if ((*Header)->common.ptype == PKT_HTTP)
2569   {
2570     if (!RPCRT4_IsValidHttpPacket(*Header, *Payload, common_hdr.frag_len - hdr_length))
2571     {
2572       ERR("invalid http packet of length %d bytes\n", (*Header)->common.frag_len);
2573       status = RPC_S_PROTOCOL_ERROR;
2574       goto fail;
2575     }
2576     if ((*Header)->http.flags == 0x0001)
2577     {
2578       TRACE("http idle packet, waiting for real packet\n");
2579       if ((*Header)->http.num_data_items != 0)
2580       {
2581         ERR("HTTP idle packet should have no data items instead of %d\n", (*Header)->http.num_data_items);
2582         status = RPC_S_PROTOCOL_ERROR;
2583         goto fail;
2584       }
2585     }
2586     else if ((*Header)->http.flags == 0x0002)
2587     {
2588       ULONG bytes_transmitted;
2589       ULONG flow_control_increment;
2590       UUID pipe_uuid;
2591       status = RPCRT4_ParseHttpFlowControlHeader(*Header, *Payload,
2592                                                  Connection->server,
2593                                                  &bytes_transmitted,
2594                                                  &flow_control_increment,
2595                                                  &pipe_uuid);
2596       if (status != RPC_S_OK)
2597         goto fail;
2598       TRACE("received http flow control header (0x%x, 0x%x, %s)\n",
2599             bytes_transmitted, flow_control_increment, debugstr_guid(&pipe_uuid));
2600       /* FIXME: do something with parsed data */
2601     }
2602     else
2603     {
2604       FIXME("unrecognised http packet with flags 0x%04x\n", (*Header)->http.flags);
2605       status = RPC_S_PROTOCOL_ERROR;
2606       goto fail;
2607     }
2608     RPCRT4_FreeHeader(*Header);
2609     *Header = NULL;
2610     HeapFree(GetProcessHeap(), 0, *Payload);
2611     *Payload = NULL;
2612     goto again;
2613   }
2614
2615   /* success */
2616   status = RPC_S_OK;
2617
2618   httpc->bytes_received += common_hdr.frag_len;
2619
2620   TRACE("httpc->bytes_received = 0x%x\n", httpc->bytes_received);
2621
2622   if (httpc->bytes_received > httpc->flow_control_mark)
2623   {
2624     RpcPktHdr *hdr = RPCRT4_BuildHttpFlowControlHeader(httpc->common.server,
2625                                                        httpc->bytes_received,
2626                                                        httpc->flow_control_increment,
2627                                                        &httpc->out_pipe_uuid);
2628     if (hdr)
2629     {
2630       DWORD bytes_written;
2631       BOOL ret2;
2632       TRACE("sending flow control packet at 0x%x\n", httpc->bytes_received);
2633       ret2 = InternetWriteFile(httpc->in_request, hdr, hdr->common.frag_len, &bytes_written);
2634       RPCRT4_FreeHeader(hdr);
2635       if (ret2)
2636         httpc->flow_control_mark = httpc->bytes_received + httpc->flow_control_increment / 2;
2637     }
2638   }
2639
2640 fail:
2641   if (status != RPC_S_OK) {
2642     RPCRT4_FreeHeader(*Header);
2643     *Header = NULL;
2644     HeapFree(GetProcessHeap(), 0, *Payload);
2645     *Payload = NULL;
2646   }
2647   return status;
2648 }
2649
2650 static int rpcrt4_ncacn_http_write(RpcConnection *Connection,
2651                                  const void *buffer, unsigned int count)
2652 {
2653   RpcConnection_http *httpc = (RpcConnection_http *) Connection;
2654   DWORD bytes_written;
2655   BOOL ret;
2656
2657   httpc->last_sent_time = ~0U; /* disable idle packet sending */
2658   ret = InternetWriteFile(httpc->in_request, buffer, count, &bytes_written);
2659   httpc->last_sent_time = GetTickCount();
2660   TRACE("%p %p %u -> %s\n", httpc->in_request, buffer, count, ret ? "TRUE" : "FALSE");
2661   return ret ? bytes_written : -1;
2662 }
2663
2664 static int rpcrt4_ncacn_http_close(RpcConnection *Connection)
2665 {
2666   RpcConnection_http *httpc = (RpcConnection_http *) Connection;
2667
2668   TRACE("\n");
2669
2670   SetEvent(httpc->timer_cancelled);
2671   if (httpc->in_request)
2672     InternetCloseHandle(httpc->in_request);
2673   httpc->in_request = NULL;
2674   if (httpc->out_request)
2675     InternetCloseHandle(httpc->out_request);
2676   httpc->out_request = NULL;
2677   if (httpc->app_info)
2678     InternetCloseHandle(httpc->app_info);
2679   httpc->app_info = NULL;
2680   if (httpc->session)
2681     InternetCloseHandle(httpc->session);
2682   httpc->session = NULL;
2683   RpcHttpAsyncData_Release(httpc->async_data);
2684   if (httpc->cancel_event)
2685     CloseHandle(httpc->cancel_event);
2686
2687   return 0;
2688 }
2689
2690 static void rpcrt4_ncacn_http_cancel_call(RpcConnection *Connection)
2691 {
2692   RpcConnection_http *httpc = (RpcConnection_http *) Connection;
2693
2694   SetEvent(httpc->cancel_event);
2695 }
2696
2697 static int rpcrt4_ncacn_http_wait_for_incoming_data(RpcConnection *Connection)
2698 {
2699   RpcConnection_http *httpc = (RpcConnection_http *) Connection;
2700   BOOL ret;
2701   RPC_STATUS status;
2702
2703   prepare_async_request(httpc->async_data);
2704   ret = InternetQueryDataAvailable(httpc->out_request,
2705     &httpc->async_data->inet_buffers.dwBufferLength, IRF_ASYNC, 0);
2706   status = wait_async_request(httpc->async_data, ret, httpc->cancel_event);
2707   return status == RPC_S_OK ? 0 : -1;
2708 }
2709
2710 static size_t rpcrt4_ncacn_http_get_top_of_tower(unsigned char *tower_data,
2711                                                  const char *networkaddr,
2712                                                  const char *endpoint)
2713 {
2714     return rpcrt4_ip_tcp_get_top_of_tower(tower_data, networkaddr,
2715                                           EPM_PROTOCOL_HTTP, endpoint);
2716 }
2717
2718 static RPC_STATUS rpcrt4_ncacn_http_parse_top_of_tower(const unsigned char *tower_data,
2719                                                        size_t tower_size,
2720                                                        char **networkaddr,
2721                                                        char **endpoint)
2722 {
2723     return rpcrt4_ip_tcp_parse_top_of_tower(tower_data, tower_size,
2724                                             networkaddr, EPM_PROTOCOL_HTTP,
2725                                             endpoint);
2726 }
2727
2728 static const struct connection_ops conn_protseq_list[] = {
2729   { "ncacn_np",
2730     { EPM_PROTOCOL_NCACN, EPM_PROTOCOL_SMB },
2731     rpcrt4_conn_np_alloc,
2732     rpcrt4_ncacn_np_open,
2733     rpcrt4_ncacn_np_handoff,
2734     rpcrt4_conn_np_read,
2735     rpcrt4_conn_np_write,
2736     rpcrt4_conn_np_close,
2737     rpcrt4_conn_np_cancel_call,
2738     rpcrt4_conn_np_wait_for_incoming_data,
2739     rpcrt4_ncacn_np_get_top_of_tower,
2740     rpcrt4_ncacn_np_parse_top_of_tower,
2741     NULL,
2742     RPCRT4_default_is_authorized,
2743     RPCRT4_default_authorize,
2744     RPCRT4_default_secure_packet,
2745     rpcrt4_conn_np_impersonate_client,
2746     rpcrt4_conn_np_revert_to_self,
2747     RPCRT4_default_inquire_auth_client,
2748   },
2749   { "ncalrpc",
2750     { EPM_PROTOCOL_NCALRPC, EPM_PROTOCOL_PIPE },
2751     rpcrt4_conn_np_alloc,
2752     rpcrt4_ncalrpc_open,
2753     rpcrt4_ncalrpc_handoff,
2754     rpcrt4_conn_np_read,
2755     rpcrt4_conn_np_write,
2756     rpcrt4_conn_np_close,
2757     rpcrt4_conn_np_cancel_call,
2758     rpcrt4_conn_np_wait_for_incoming_data,
2759     rpcrt4_ncalrpc_get_top_of_tower,
2760     rpcrt4_ncalrpc_parse_top_of_tower,
2761     NULL,
2762     rpcrt4_ncalrpc_is_authorized,
2763     rpcrt4_ncalrpc_authorize,
2764     rpcrt4_ncalrpc_secure_packet,
2765     rpcrt4_conn_np_impersonate_client,
2766     rpcrt4_conn_np_revert_to_self,
2767     rpcrt4_ncalrpc_inquire_auth_client,
2768   },
2769   { "ncacn_ip_tcp",
2770     { EPM_PROTOCOL_NCACN, EPM_PROTOCOL_TCP },
2771     rpcrt4_conn_tcp_alloc,
2772     rpcrt4_ncacn_ip_tcp_open,
2773     rpcrt4_conn_tcp_handoff,
2774     rpcrt4_conn_tcp_read,
2775     rpcrt4_conn_tcp_write,
2776     rpcrt4_conn_tcp_close,
2777     rpcrt4_conn_tcp_cancel_call,
2778     rpcrt4_conn_tcp_wait_for_incoming_data,
2779     rpcrt4_ncacn_ip_tcp_get_top_of_tower,
2780     rpcrt4_ncacn_ip_tcp_parse_top_of_tower,
2781     NULL,
2782     RPCRT4_default_is_authorized,
2783     RPCRT4_default_authorize,
2784     RPCRT4_default_secure_packet,
2785     RPCRT4_default_impersonate_client,
2786     RPCRT4_default_revert_to_self,
2787     RPCRT4_default_inquire_auth_client,
2788   },
2789   { "ncacn_http",
2790     { EPM_PROTOCOL_NCACN, EPM_PROTOCOL_HTTP },
2791     rpcrt4_ncacn_http_alloc,
2792     rpcrt4_ncacn_http_open,
2793     rpcrt4_ncacn_http_handoff,
2794     rpcrt4_ncacn_http_read,
2795     rpcrt4_ncacn_http_write,
2796     rpcrt4_ncacn_http_close,
2797     rpcrt4_ncacn_http_cancel_call,
2798     rpcrt4_ncacn_http_wait_for_incoming_data,
2799     rpcrt4_ncacn_http_get_top_of_tower,
2800     rpcrt4_ncacn_http_parse_top_of_tower,
2801     rpcrt4_ncacn_http_receive_fragment,
2802     RPCRT4_default_is_authorized,
2803     RPCRT4_default_authorize,
2804     RPCRT4_default_secure_packet,
2805     RPCRT4_default_impersonate_client,
2806     RPCRT4_default_revert_to_self,
2807     RPCRT4_default_inquire_auth_client,
2808   },
2809 };
2810
2811
2812 static const struct protseq_ops protseq_list[] =
2813 {
2814     {
2815         "ncacn_np",
2816         rpcrt4_protseq_np_alloc,
2817         rpcrt4_protseq_np_signal_state_changed,
2818         rpcrt4_protseq_np_get_wait_array,
2819         rpcrt4_protseq_np_free_wait_array,
2820         rpcrt4_protseq_np_wait_for_new_connection,
2821         rpcrt4_protseq_ncacn_np_open_endpoint,
2822     },
2823     {
2824         "ncalrpc",
2825         rpcrt4_protseq_np_alloc,
2826         rpcrt4_protseq_np_signal_state_changed,
2827         rpcrt4_protseq_np_get_wait_array,
2828         rpcrt4_protseq_np_free_wait_array,
2829         rpcrt4_protseq_np_wait_for_new_connection,
2830         rpcrt4_protseq_ncalrpc_open_endpoint,
2831     },
2832     {
2833         "ncacn_ip_tcp",
2834         rpcrt4_protseq_sock_alloc,
2835         rpcrt4_protseq_sock_signal_state_changed,
2836         rpcrt4_protseq_sock_get_wait_array,
2837         rpcrt4_protseq_sock_free_wait_array,
2838         rpcrt4_protseq_sock_wait_for_new_connection,
2839         rpcrt4_protseq_ncacn_ip_tcp_open_endpoint,
2840     },
2841 };
2842
2843 #define ARRAYSIZE(a) (sizeof((a)) / sizeof((a)[0]))
2844
2845 const struct protseq_ops *rpcrt4_get_protseq_ops(const char *protseq)
2846 {
2847   unsigned int i;
2848   for(i=0; i<ARRAYSIZE(protseq_list); i++)
2849     if (!strcmp(protseq_list[i].name, protseq))
2850       return &protseq_list[i];
2851   return NULL;
2852 }
2853
2854 static const struct connection_ops *rpcrt4_get_conn_protseq_ops(const char *protseq)
2855 {
2856     unsigned int i;
2857     for(i=0; i<ARRAYSIZE(conn_protseq_list); i++)
2858         if (!strcmp(conn_protseq_list[i].name, protseq))
2859             return &conn_protseq_list[i];
2860     return NULL;
2861 }
2862
2863 /**** interface to rest of code ****/
2864
2865 RPC_STATUS RPCRT4_OpenClientConnection(RpcConnection* Connection)
2866 {
2867   TRACE("(Connection == ^%p)\n", Connection);
2868
2869   assert(!Connection->server);
2870   return Connection->ops->open_connection_client(Connection);
2871 }
2872
2873 RPC_STATUS RPCRT4_CloseConnection(RpcConnection* Connection)
2874 {
2875   TRACE("(Connection == ^%p)\n", Connection);
2876   if (SecIsValidHandle(&Connection->ctx))
2877   {
2878     DeleteSecurityContext(&Connection->ctx);
2879     SecInvalidateHandle(&Connection->ctx);
2880   }
2881   rpcrt4_conn_close(Connection);
2882   return RPC_S_OK;
2883 }
2884
2885 RPC_STATUS RPCRT4_CreateConnection(RpcConnection** Connection, BOOL server,
2886     LPCSTR Protseq, LPCSTR NetworkAddr, LPCSTR Endpoint,
2887     LPCWSTR NetworkOptions, RpcAuthInfo* AuthInfo, RpcQualityOfService *QOS)
2888 {
2889   static LONG next_id;
2890   const struct connection_ops *ops;
2891   RpcConnection* NewConnection;
2892
2893   ops = rpcrt4_get_conn_protseq_ops(Protseq);
2894   if (!ops)
2895   {
2896     FIXME("not supported for protseq %s\n", Protseq);
2897     return RPC_S_PROTSEQ_NOT_SUPPORTED;
2898   }
2899
2900   NewConnection = ops->alloc();
2901   NewConnection->ref = 1;
2902   NewConnection->Next = NULL;
2903   NewConnection->server_binding = NULL;
2904   NewConnection->server = server;
2905   NewConnection->ops = ops;
2906   NewConnection->NetworkAddr = RPCRT4_strdupA(NetworkAddr);
2907   NewConnection->Endpoint = RPCRT4_strdupA(Endpoint);
2908   NewConnection->NetworkOptions = RPCRT4_strdupW(NetworkOptions);
2909   NewConnection->MaxTransmissionSize = RPC_MAX_PACKET_SIZE;
2910   memset(&NewConnection->ActiveInterface, 0, sizeof(NewConnection->ActiveInterface));
2911   NewConnection->NextCallId = 1;
2912
2913   SecInvalidateHandle(&NewConnection->ctx);
2914   memset(&NewConnection->exp, 0, sizeof(NewConnection->exp));
2915   NewConnection->attr = 0;
2916   if (AuthInfo) RpcAuthInfo_AddRef(AuthInfo);
2917   NewConnection->AuthInfo = AuthInfo;
2918   NewConnection->auth_context_id = InterlockedIncrement( &next_id );
2919   NewConnection->encryption_auth_len = 0;
2920   NewConnection->signature_auth_len = 0;
2921   if (QOS) RpcQualityOfService_AddRef(QOS);
2922   NewConnection->QOS = QOS;
2923
2924   list_init(&NewConnection->conn_pool_entry);
2925   NewConnection->async_state = NULL;
2926
2927   TRACE("connection: %p\n", NewConnection);
2928   *Connection = NewConnection;
2929
2930   return RPC_S_OK;
2931 }
2932
2933 static RPC_STATUS RPCRT4_SpawnConnection(RpcConnection** Connection, RpcConnection* OldConnection)
2934 {
2935   RPC_STATUS err;
2936
2937   err = RPCRT4_CreateConnection(Connection, OldConnection->server,
2938                                 rpcrt4_conn_get_name(OldConnection),
2939                                 OldConnection->NetworkAddr,
2940                                 OldConnection->Endpoint, NULL,
2941                                 OldConnection->AuthInfo, OldConnection->QOS);
2942   if (err == RPC_S_OK)
2943     rpcrt4_conn_handoff(OldConnection, *Connection);
2944   return err;
2945 }
2946
2947 RpcConnection *RPCRT4_GrabConnection( RpcConnection *conn )
2948 {
2949     InterlockedIncrement( &conn->ref );
2950     return conn;
2951 }
2952
2953 RPC_STATUS RPCRT4_ReleaseConnection(RpcConnection* Connection)
2954 {
2955   if (InterlockedDecrement( &Connection->ref ) > 0) return RPC_S_OK;
2956
2957   TRACE("destroying connection %p\n", Connection);
2958
2959   RPCRT4_CloseConnection(Connection);
2960   RPCRT4_strfree(Connection->Endpoint);
2961   RPCRT4_strfree(Connection->NetworkAddr);
2962   HeapFree(GetProcessHeap(), 0, Connection->NetworkOptions);
2963   if (Connection->AuthInfo) RpcAuthInfo_Release(Connection->AuthInfo);
2964   if (Connection->QOS) RpcQualityOfService_Release(Connection->QOS);
2965
2966   /* server-only */
2967   if (Connection->server_binding) RPCRT4_ReleaseBinding(Connection->server_binding);
2968
2969   HeapFree(GetProcessHeap(), 0, Connection);
2970   return RPC_S_OK;
2971 }
2972
2973 RPC_STATUS RpcTransport_GetTopOfTower(unsigned char *tower_data,
2974                                       size_t *tower_size,
2975                                       const char *protseq,
2976                                       const char *networkaddr,
2977                                       const char *endpoint)
2978 {
2979     twr_empty_floor_t *protocol_floor;
2980     const struct connection_ops *protseq_ops = rpcrt4_get_conn_protseq_ops(protseq);
2981
2982     *tower_size = 0;
2983
2984     if (!protseq_ops)
2985         return RPC_S_INVALID_RPC_PROTSEQ;
2986
2987     if (!tower_data)
2988     {
2989         *tower_size = sizeof(*protocol_floor);
2990         *tower_size += protseq_ops->get_top_of_tower(NULL, networkaddr, endpoint);
2991         return RPC_S_OK;
2992     }
2993
2994     protocol_floor = (twr_empty_floor_t *)tower_data;
2995     protocol_floor->count_lhs = sizeof(protocol_floor->protid);
2996     protocol_floor->protid = protseq_ops->epm_protocols[0];
2997     protocol_floor->count_rhs = 0;
2998
2999     tower_data += sizeof(*protocol_floor);
3000
3001     *tower_size = protseq_ops->get_top_of_tower(tower_data, networkaddr, endpoint);
3002     if (!*tower_size)
3003         return EPT_S_NOT_REGISTERED;
3004
3005     *tower_size += sizeof(*protocol_floor);
3006
3007     return RPC_S_OK;
3008 }
3009
3010 RPC_STATUS RpcTransport_ParseTopOfTower(const unsigned char *tower_data,
3011                                         size_t tower_size,
3012                                         char **protseq,
3013                                         char **networkaddr,
3014                                         char **endpoint)
3015 {
3016     const twr_empty_floor_t *protocol_floor;
3017     const twr_empty_floor_t *floor4;
3018     const struct connection_ops *protseq_ops = NULL;
3019     RPC_STATUS status;
3020     unsigned int i;
3021
3022     if (tower_size < sizeof(*protocol_floor))
3023         return EPT_S_NOT_REGISTERED;
3024
3025     protocol_floor = (const twr_empty_floor_t *)tower_data;
3026     tower_data += sizeof(*protocol_floor);
3027     tower_size -= sizeof(*protocol_floor);
3028     if ((protocol_floor->count_lhs != sizeof(protocol_floor->protid)) ||
3029         (protocol_floor->count_rhs > tower_size))
3030         return EPT_S_NOT_REGISTERED;
3031     tower_data += protocol_floor->count_rhs;
3032     tower_size -= protocol_floor->count_rhs;
3033
3034     floor4 = (const twr_empty_floor_t *)tower_data;
3035     if ((tower_size < sizeof(*floor4)) ||
3036         (floor4->count_lhs != sizeof(floor4->protid)))
3037         return EPT_S_NOT_REGISTERED;
3038
3039     for(i = 0; i < ARRAYSIZE(conn_protseq_list); i++)
3040         if ((protocol_floor->protid == conn_protseq_list[i].epm_protocols[0]) &&
3041             (floor4->protid == conn_protseq_list[i].epm_protocols[1]))
3042         {
3043             protseq_ops = &conn_protseq_list[i];
3044             break;
3045         }
3046
3047     if (!protseq_ops)
3048         return EPT_S_NOT_REGISTERED;
3049
3050     status = protseq_ops->parse_top_of_tower(tower_data, tower_size, networkaddr, endpoint);
3051
3052     if ((status == RPC_S_OK) && protseq)
3053     {
3054         *protseq = I_RpcAllocate(strlen(protseq_ops->name) + 1);
3055         strcpy(*protseq, protseq_ops->name);
3056     }
3057
3058     return status;
3059 }
3060
3061 /***********************************************************************
3062  *             RpcNetworkIsProtseqValidW (RPCRT4.@)
3063  *
3064  * Checks if the given protocol sequence is known by the RPC system.
3065  * If it is, returns RPC_S_OK, otherwise RPC_S_PROTSEQ_NOT_SUPPORTED.
3066  *
3067  */
3068 RPC_STATUS WINAPI RpcNetworkIsProtseqValidW(RPC_WSTR protseq)
3069 {
3070   char ps[0x10];
3071
3072   WideCharToMultiByte(CP_ACP, 0, protseq, -1,
3073                       ps, sizeof ps, NULL, NULL);
3074   if (rpcrt4_get_conn_protseq_ops(ps))
3075     return RPC_S_OK;
3076
3077   FIXME("Unknown protseq %s\n", debugstr_w(protseq));
3078
3079   return RPC_S_INVALID_RPC_PROTSEQ;
3080 }
3081
3082 /***********************************************************************
3083  *             RpcNetworkIsProtseqValidA (RPCRT4.@)
3084  */
3085 RPC_STATUS WINAPI RpcNetworkIsProtseqValidA(RPC_CSTR protseq)
3086 {
3087   UNICODE_STRING protseqW;
3088
3089   if (RtlCreateUnicodeStringFromAsciiz(&protseqW, (char*)protseq))
3090   {
3091     RPC_STATUS ret = RpcNetworkIsProtseqValidW(protseqW.Buffer);
3092     RtlFreeUnicodeString(&protseqW);
3093     return ret;
3094   }
3095   return RPC_S_OUT_OF_MEMORY;
3096 }
3097
3098 /***********************************************************************
3099  *             RpcProtseqVectorFreeA (RPCRT4.@)
3100  */
3101 RPC_STATUS WINAPI RpcProtseqVectorFreeA(RPC_PROTSEQ_VECTORA **protseqs)
3102 {
3103   TRACE("(%p)\n", protseqs);
3104
3105   if (*protseqs)
3106   {
3107     int i;
3108     for (i = 0; i < (*protseqs)->Count; i++)
3109       HeapFree(GetProcessHeap(), 0, (*protseqs)->Protseq[i]);
3110     HeapFree(GetProcessHeap(), 0, *protseqs);
3111     *protseqs = NULL;
3112   }
3113   return RPC_S_OK;
3114 }
3115
3116 /***********************************************************************
3117  *             RpcProtseqVectorFreeW (RPCRT4.@)
3118  */
3119 RPC_STATUS WINAPI RpcProtseqVectorFreeW(RPC_PROTSEQ_VECTORW **protseqs)
3120 {
3121   TRACE("(%p)\n", protseqs);
3122
3123   if (*protseqs)
3124   {
3125     int i;
3126     for (i = 0; i < (*protseqs)->Count; i++)
3127       HeapFree(GetProcessHeap(), 0, (*protseqs)->Protseq[i]);
3128     HeapFree(GetProcessHeap(), 0, *protseqs);
3129     *protseqs = NULL;
3130   }
3131   return RPC_S_OK;
3132 }
3133
3134 /***********************************************************************
3135  *             RpcNetworkInqProtseqsW (RPCRT4.@)
3136  */
3137 RPC_STATUS WINAPI RpcNetworkInqProtseqsW( RPC_PROTSEQ_VECTORW** protseqs )
3138 {
3139   RPC_PROTSEQ_VECTORW *pvector;
3140   int i = 0;
3141   RPC_STATUS status = RPC_S_OUT_OF_MEMORY;
3142
3143   TRACE("(%p)\n", protseqs);
3144
3145   *protseqs = HeapAlloc(GetProcessHeap(), 0, sizeof(RPC_PROTSEQ_VECTORW)+(sizeof(unsigned short*)*ARRAYSIZE(protseq_list)));
3146   if (!*protseqs)
3147     goto end;
3148   pvector = *protseqs;
3149   pvector->Count = 0;
3150   for (i = 0; i < ARRAYSIZE(protseq_list); i++)
3151   {
3152     pvector->Protseq[i] = HeapAlloc(GetProcessHeap(), 0, (strlen(protseq_list[i].name)+1)*sizeof(unsigned short));
3153     if (pvector->Protseq[i] == NULL)
3154       goto end;
3155     MultiByteToWideChar(CP_ACP, 0, (CHAR*)protseq_list[i].name, -1,
3156       (WCHAR*)pvector->Protseq[i], strlen(protseq_list[i].name) + 1);
3157     pvector->Count++;
3158   }
3159   status = RPC_S_OK;
3160
3161 end:
3162   if (status != RPC_S_OK)
3163     RpcProtseqVectorFreeW(protseqs);
3164   return status;
3165 }
3166
3167 /***********************************************************************
3168  *             RpcNetworkInqProtseqsA (RPCRT4.@)
3169  */
3170 RPC_STATUS WINAPI RpcNetworkInqProtseqsA(RPC_PROTSEQ_VECTORA** protseqs)
3171 {
3172   RPC_PROTSEQ_VECTORA *pvector;
3173   int i = 0;
3174   RPC_STATUS status = RPC_S_OUT_OF_MEMORY;
3175
3176   TRACE("(%p)\n", protseqs);
3177
3178   *protseqs = HeapAlloc(GetProcessHeap(), 0, sizeof(RPC_PROTSEQ_VECTORW)+(sizeof(unsigned char*)*ARRAYSIZE(protseq_list)));
3179   if (!*protseqs)
3180     goto end;
3181   pvector = *protseqs;
3182   pvector->Count = 0;
3183   for (i = 0; i < ARRAYSIZE(protseq_list); i++)
3184   {
3185     pvector->Protseq[i] = HeapAlloc(GetProcessHeap(), 0, strlen(protseq_list[i].name)+1);
3186     if (pvector->Protseq[i] == NULL)
3187       goto end;
3188     strcpy((char*)pvector->Protseq[i], protseq_list[i].name);
3189     pvector->Count++;
3190   }
3191   status = RPC_S_OK;
3192
3193 end:
3194   if (status != RPC_S_OK)
3195     RpcProtseqVectorFreeA(protseqs);
3196   return status;
3197 }