git.oblomov.eu Git - wine/blob - dlls/ole32/oleproxy.c

   1 /*
   2  *      OLE32 proxy/stub handler
   3  *
   4  *  Copyright 2002  Marcus Meissner
   5  *  Copyright 2001  Ove Kåven, TransGaming Technologies
   6  *
   7  * This library is free software; you can redistribute it and/or
   8  * modify it under the terms of the GNU Lesser General Public
   9  * License as published by the Free Software Foundation; either
  10  * version 2.1 of the License, or (at your option) any later version.
  11  *
  12  * This library is distributed in the hope that it will be useful,
  13  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  14  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  15  * Lesser General Public License for more details.
  16  *
  17  * You should have received a copy of the GNU Lesser General Public
  18  * License along with this library; if not, write to the Free Software
  19  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
  20  */
  21
  22 /* Documentation on MSDN:
  23  *
  24  * (Top level COM documentation)
  25  * http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnanchor/html/componentdevelopmentank.asp
  26  *
  27  * (COM Proxy)
  28  * http://msdn.microsoft.com/library/default.asp?url=/library/en-us/com/htm/comext_1q0p.asp
  29  *
  30  * (COM Stub)
  31  * http://msdn.microsoft.com/library/default.asp?url=/library/en-us/com/htm/comext_1lia.asp
  32  *
  33  * (Marshal)
  34  * http://msdn.microsoft.com/library/default.asp?url=/library/en-us/com/htm/comext_1gfn.asp
  35  *
  36  */
  37
  38 #include "config.h"
  39
  40 #include <stdlib.h>
  41 #include <stdarg.h>
  42 #include <stdio.h>
  43 #include <string.h>
  44
  45 #define COBJMACROS
  46 #define NONAMELESSUNION
  47 #define NONAMELESSSTRUCT
  48
  49 #include "windef.h"
  50 #include "winbase.h"
  51 #include "winuser.h"
  52 #include "objbase.h"
  53 #include "ole2.h"
  54 #include "rpc.h"
  55 #include "winerror.h"
  56 #include "wtypes.h"
  57
  58 #include "compobj_private.h"
  59 #include "moniker.h"
  60
  61 #include "wine/debug.h"
  62
  63 WINE_DEFAULT_DEBUG_CHANNEL(ole);
  64
  65 static ULONG WINAPI RURpcProxyBufferImpl_Release(LPRPCPROXYBUFFER iface);
  66
  67 /* From: http://msdn.microsoft.com/library/en-us/com/cmi_m_4lda.asp
  68  *
  69  * The first time a client requests a pointer to an interface on a
  70  * particular object, COM loads an IClassFactory stub in the server
  71  * process and uses it to marshal the first pointer back to the
  72  * client. In the client process, COM loads the generic proxy for the
  73  * class factory object and calls its implementation of IMarshal to
  74  * unmarshal that first pointer. COM then creates the first interface
  75  * proxy and hands it a pointer to the RPC channel. Finally, COM returns
  76  * the IClassFactory pointer to the client, which uses it to call
  77  * IClassFactory::CreateInstance, passing it a reference to the interface.
  78  *
  79  * Back in the server process, COM now creates a new instance of the
  80  * object, along with a stub for the requested interface. This stub marshals
  81  * the interface pointer back to the client process, where another object
  82  * proxy is created, this time for the object itself. Also created is a
  83  * proxy for the requested interface, a pointer to which is returned to
  84  * the client. With subsequent calls to other interfaces on the object,
  85  * COM will load the appropriate interface stubs and proxies as needed.
  86  */
  87 typedef struct _CFStub {
  88     const IRpcStubBufferVtbl   *lpvtbl;
  89     LONG                        ref;
  90
  91     LPUNKNOWN                   pUnkServer;
  92 } CFStub;
  93
  94 static HRESULT WINAPI
  95 CFStub_QueryInterface(LPRPCSTUBBUFFER iface, REFIID riid, LPVOID *ppv) {
  96     if (IsEqualIID(&IID_IUnknown,riid)||IsEqualIID(&IID_IRpcStubBuffer,riid)) {
  97         *ppv = (LPVOID)iface;
  98         IUnknown_AddRef(iface);
  99         return S_OK;
 100     }
 101     FIXME("(%s), interface not supported.\n",debugstr_guid(riid));
 102     return E_NOINTERFACE;
 103 }
 104
 105 static ULONG WINAPI
 106 CFStub_AddRef(LPRPCSTUBBUFFER iface) {
 107     CFStub *This = (CFStub *)iface;
 108     return InterlockedIncrement(&This->ref);
 109 }
 110
 111 static ULONG WINAPI
 112 CFStub_Release(LPRPCSTUBBUFFER iface) {
 113     CFStub *This = (CFStub *)iface;
 114     ULONG ref;
 115
 116     ref = InterlockedDecrement(&This->ref);
 117     if (!ref) {
 118         IRpcStubBuffer_Disconnect(iface);
 119         HeapFree(GetProcessHeap(),0,This);
 120     }
 121     return ref;
 122 }
 123
 124 static HRESULT WINAPI
 125 CFStub_Connect(LPRPCSTUBBUFFER iface, IUnknown *pUnkServer) {
 126     CFStub *This = (CFStub *)iface;
 127
 128     This->pUnkServer = pUnkServer;
 129     IUnknown_AddRef(pUnkServer);
 130     return S_OK;
 131 }
 132
 133 static void WINAPI
 134 CFStub_Disconnect(LPRPCSTUBBUFFER iface) {
 135     CFStub *This = (CFStub *)iface;
 136
 137     if (This->pUnkServer) {
 138         IUnknown_Release(This->pUnkServer);
 139         This->pUnkServer = NULL;
 140     }
 141 }
 142
 143 static HRESULT WINAPI
 144 CFStub_Invoke(
 145     LPRPCSTUBBUFFER iface,RPCOLEMESSAGE* msg,IRpcChannelBuffer* chanbuf
 146 ) {
 147     CFStub *This = (CFStub *)iface;
 148     HRESULT hres;
 149
 150     if (msg->iMethod == 3) { /* CreateInstance */
 151         IID iid;
 152         IClassFactory   *classfac;
 153         IUnknown        *ppv;
 154         IStream         *pStm;
 155         STATSTG         ststg;
 156         ULARGE_INTEGER  newpos;
 157         LARGE_INTEGER   seekto;
 158         ULONG           res;
 159
 160         if (msg->cbBuffer < sizeof(IID)) {
 161             FIXME("Not enough bytes in buffer (%d)?\n",msg->cbBuffer);
 162             return E_FAIL;
 163         }
 164         memcpy(&iid,msg->Buffer,sizeof(iid));
 165         TRACE("->CreateInstance(%s)\n",debugstr_guid(&iid));
 166         hres = IUnknown_QueryInterface(This->pUnkServer,&IID_IClassFactory,(LPVOID*)&classfac);
 167         if (hres) {
 168             FIXME("Ole server does not provide an IClassFactory?\n");
 169             return hres;
 170         }
 171         hres = IClassFactory_CreateInstance(classfac,NULL,&iid,(LPVOID*)&ppv);
 172         IClassFactory_Release(classfac);
 173         msg->cbBuffer = 0;
 174         if (hres) {
 175             FIXME("Failed to create an instance of %s\n",debugstr_guid(&iid));
 176             goto getbuffer;
 177         }
 178         hres = CreateStreamOnHGlobal(0,TRUE,&pStm);
 179         if (hres) {
 180             FIXME("Failed to create stream on hglobal\n");
 181             goto getbuffer;
 182         }
 183         hres = IStream_Write(pStm, &ppv, sizeof(ppv), NULL);
 184         if (hres) {
 185            ERR("IStream_Write failed, 0x%08x\n", hres);
 186            goto getbuffer;
 187         }
 188         if (ppv) {
 189         hres = CoMarshalInterface(pStm,&iid,ppv,0,NULL,0);
 190         IUnknown_Release(ppv);
 191         if (hres) {
 192             FIXME("CoMarshalInterface failed, %x!\n",hres);
 193             goto getbuffer;
 194         }
 195     }
 196         hres = IStream_Stat(pStm,&ststg,0);
 197         if (hres) {
 198             FIXME("Stat failed.\n");
 199             goto getbuffer;
 200         }
 201
 202         msg->cbBuffer = ststg.cbSize.u.LowPart;
 203
 204 getbuffer:
 205         IRpcChannelBuffer_GetBuffer(chanbuf, msg, &IID_IClassFactory);
 206         if (hres) return hres;
 207
 208         seekto.u.LowPart = 0;seekto.u.HighPart = 0;
 209         hres = IStream_Seek(pStm,seekto,SEEK_SET,&newpos);
 210         if (hres) {
 211             FIXME("IStream_Seek failed, %x\n",hres);
 212             return hres;
 213         }
 214         hres = IStream_Read(pStm,msg->Buffer,msg->cbBuffer,&res);
 215         if (hres) {
 216             FIXME("Stream Read failed, %x\n",hres);
 217             return hres;
 218         }
 219         IStream_Release(pStm);
 220         return S_OK;
 221     }
 222     FIXME("(%p,%p), stub!\n",msg,chanbuf);
 223     FIXME("iMethod is %d\n",msg->iMethod);
 224     FIXME("cbBuffer is %d\n",msg->cbBuffer);
 225     return E_FAIL;
 226 }
 227
 228 static LPRPCSTUBBUFFER WINAPI
 229 CFStub_IsIIDSupported(LPRPCSTUBBUFFER iface,REFIID riid) {
 230     FIXME("(%s), stub!\n",debugstr_guid(riid));
 231     return NULL;
 232 }
 233
 234 static ULONG WINAPI
 235 CFStub_CountRefs(LPRPCSTUBBUFFER iface) {
 236     FIXME("(), stub!\n");
 237     return 1;
 238 }
 239
 240 static HRESULT WINAPI
 241 CFStub_DebugServerQueryInterface(LPRPCSTUBBUFFER iface,void** ppv) {
 242     FIXME("(%p), stub!\n",ppv);
 243     return E_FAIL;
 244 }
 245 static void    WINAPI
 246 CFStub_DebugServerRelease(LPRPCSTUBBUFFER iface,void *pv) {
 247     FIXME("(%p), stub!\n",pv);
 248 }
 249
 250 static const IRpcStubBufferVtbl cfstubvt = {
 251     CFStub_QueryInterface,
 252     CFStub_AddRef,
 253     CFStub_Release,
 254     CFStub_Connect,
 255     CFStub_Disconnect,
 256     CFStub_Invoke,
 257     CFStub_IsIIDSupported,
 258     CFStub_CountRefs,
 259     CFStub_DebugServerQueryInterface,
 260     CFStub_DebugServerRelease
 261 };
 262
 263 static HRESULT
 264 CFStub_Construct(LPRPCSTUBBUFFER *ppv) {
 265     CFStub *cfstub;
 266     cfstub = HeapAlloc(GetProcessHeap(),HEAP_ZERO_MEMORY,sizeof(CFStub));
 267     if (!cfstub)
 268         return E_OUTOFMEMORY;
 269     *ppv = (LPRPCSTUBBUFFER)cfstub;
 270     cfstub->lpvtbl      = &cfstubvt;
 271     cfstub->ref         = 1;
 272     return S_OK;
 273 }
 274
 275 /* Since we create proxy buffers and classfactory in a pair, there is
 276  * no need for 2 separate structs. Just put them in one, but remember
 277  * the refcount.
 278  */
 279 typedef struct _CFProxy {
 280     const IClassFactoryVtbl             *lpvtbl_cf;
 281     const IRpcProxyBufferVtbl   *lpvtbl_proxy;
 282     LONG                                ref;
 283
 284     IRpcChannelBuffer                   *chanbuf;
 285     IUnknown *outer_unknown;
 286 } CFProxy;
 287
 288 static HRESULT WINAPI IRpcProxyBufferImpl_QueryInterface(LPRPCPROXYBUFFER iface,REFIID riid,LPVOID *ppv) {
 289     *ppv = NULL;
 290     if (IsEqualIID(riid,&IID_IRpcProxyBuffer)||IsEqualIID(riid,&IID_IUnknown)) {
 291         IRpcProxyBuffer_AddRef(iface);
 292         *ppv = (LPVOID)iface;
 293         return S_OK;
 294     }
 295     FIXME("(%s), no interface.\n",debugstr_guid(riid));
 296     return E_NOINTERFACE;
 297 }
 298
 299 static ULONG WINAPI IRpcProxyBufferImpl_AddRef(LPRPCPROXYBUFFER iface) {
 300     ICOM_THIS_MULTI(CFProxy,lpvtbl_proxy,iface);
 301     return InterlockedIncrement(&This->ref);
 302 }
 303
 304 static ULONG WINAPI IRpcProxyBufferImpl_Release(LPRPCPROXYBUFFER iface) {
 305     ICOM_THIS_MULTI(CFProxy,lpvtbl_proxy,iface);
 306     ULONG ref = InterlockedDecrement(&This->ref);
 307
 308     if (!ref) {
 309         IRpcProxyBuffer_Disconnect(iface);
 310         HeapFree(GetProcessHeap(),0,This);
 311     }
 312     return ref;
 313 }
 314
 315 static HRESULT WINAPI IRpcProxyBufferImpl_Connect(LPRPCPROXYBUFFER iface,IRpcChannelBuffer* pRpcChannelBuffer) {
 316     ICOM_THIS_MULTI(CFProxy,lpvtbl_proxy,iface);
 317
 318     This->chanbuf = pRpcChannelBuffer;
 319     IRpcChannelBuffer_AddRef(This->chanbuf);
 320     return S_OK;
 321 }
 322 static void WINAPI IRpcProxyBufferImpl_Disconnect(LPRPCPROXYBUFFER iface) {
 323     ICOM_THIS_MULTI(CFProxy,lpvtbl_proxy,iface);
 324     if (This->chanbuf) {
 325         IRpcChannelBuffer_Release(This->chanbuf);
 326         This->chanbuf = NULL;
 327     }
 328 }
 329
 330 static HRESULT WINAPI
 331 CFProxy_QueryInterface(LPCLASSFACTORY iface,REFIID riid, LPVOID *ppv) {
 332     ICOM_THIS_MULTI(CFProxy,lpvtbl_cf,iface);
 333     if (This->outer_unknown) return IUnknown_QueryInterface(This->outer_unknown, riid, ppv);
 334     *ppv = NULL;
 335     if (IsEqualIID(&IID_IClassFactory,riid) || IsEqualIID(&IID_IUnknown,riid)) {
 336         *ppv = (LPVOID)iface;
 337         IClassFactory_AddRef(iface);
 338         return S_OK;
 339     }
 340     if (IsEqualIID(riid,&IID_IMarshal)) /* just to avoid debug output */
 341         return E_NOINTERFACE;
 342     FIXME("Unhandled interface: %s\n",debugstr_guid(riid));
 343     return E_NOINTERFACE;
 344 }
 345
 346 static ULONG   WINAPI CFProxy_AddRef(LPCLASSFACTORY iface) {
 347     ICOM_THIS_MULTI(CFProxy,lpvtbl_cf,iface);
 348     if (This->outer_unknown) return IUnknown_AddRef(This->outer_unknown);
 349     return InterlockedIncrement(&This->ref);
 350 }
 351
 352 static ULONG   WINAPI CFProxy_Release(LPCLASSFACTORY iface) {
 353     ICOM_THIS_MULTI(CFProxy,lpvtbl_cf,iface);
 354     if (This->outer_unknown)
 355         return IUnknown_Release(This->outer_unknown);
 356     else
 357         return IRpcProxyBufferImpl_Release((IRpcProxyBuffer *)&This->lpvtbl_proxy);
 358 }
 359
 360 static HRESULT WINAPI CFProxy_CreateInstance(
 361     LPCLASSFACTORY iface,
 362     LPUNKNOWN pUnkOuter,/* [in] */
 363     REFIID riid,        /* [in] */
 364     LPVOID *ppv         /* [out] */
 365 ) {
 366     ICOM_THIS_MULTI(CFProxy,lpvtbl_cf,iface);
 367     HRESULT             hres;
 368     LPSTREAM            pStream;
 369     HGLOBAL             hGlobal;
 370     ULONG               srstatus;
 371     RPCOLEMESSAGE       msg;
 372
 373     TRACE("(%p,%s,%p)\n",pUnkOuter,debugstr_guid(riid),ppv);
 374
 375     /* Send CreateInstance to the remote classfactory.
 376      *
 377      * Data: Only the 'IID'.
 378      */
 379     msg.iMethod  = 3;
 380     msg.cbBuffer = sizeof(*riid);
 381     msg.Buffer   = NULL;
 382     hres = IRpcChannelBuffer_GetBuffer(This->chanbuf,&msg,&IID_IClassFactory);
 383     if (hres) {
 384         FIXME("IRpcChannelBuffer_GetBuffer failed with %x?\n",hres);
 385         return hres;
 386     }
 387     memcpy(msg.Buffer,riid,sizeof(*riid));
 388     hres = IRpcChannelBuffer_SendReceive(This->chanbuf,&msg,&srstatus);
 389     if (hres) {
 390         FIXME("IRpcChannelBuffer_SendReceive failed with %x?\n",hres);
 391         IRpcChannelBuffer_FreeBuffer(This->chanbuf,&msg);
 392         return hres;
 393     }
 394
 395     if (!msg.cbBuffer) { /* interface not found on remote */
 396         IRpcChannelBuffer_FreeBuffer(This->chanbuf,&msg);
 397         return srstatus;
 398     }
 399
 400     /* We got back: [Marshalled Interface data] */
 401     TRACE("got %d bytes data.\n",msg.cbBuffer);
 402     hGlobal = GlobalAlloc(GMEM_MOVEABLE|GMEM_NODISCARD|GMEM_SHARE,msg.cbBuffer);
 403     memcpy(GlobalLock(hGlobal),msg.Buffer,msg.cbBuffer);
 404     hres = CreateStreamOnHGlobal(hGlobal,TRUE,&pStream);
 405     if (hres != S_OK) {
 406         FIXME("CreateStreamOnHGlobal failed with %x\n",hres);
 407         IRpcChannelBuffer_FreeBuffer(This->chanbuf,&msg);
 408         GlobalFree(hGlobal);
 409         return hres;
 410     }
 411     hres = IStream_Read(pStream, ppv, sizeof(*ppv), NULL);
 412     if (hres != S_OK)
 413         hres = E_FAIL;
 414     else if (*ppv) {
 415         hres = CoUnmarshalInterface(
 416                pStream,
 417                riid,
 418                ppv
 419         );
 420     }
 421     IStream_Release(pStream); /* Does GlobalFree hGlobal too. */
 422
 423     IRpcChannelBuffer_FreeBuffer(This->chanbuf,&msg);
 424
 425     if (hres) {
 426         FIXME("CoMarshalInterface failed, %x\n",hres);
 427         return hres;
 428     }
 429     return S_OK;
 430 }
 431
 432 static HRESULT WINAPI CFProxy_LockServer(LPCLASSFACTORY iface,BOOL fLock) {
 433     /*ICOM_THIS_MULTI(CFProxy,lpvtbl_cf,iface);*/
 434     FIXME("(%d), stub!\n",fLock);
 435     /* basically: write BOOL, read empty */
 436     return S_OK;
 437 }
 438
 439 static const IRpcProxyBufferVtbl pspbvtbl = {
 440     IRpcProxyBufferImpl_QueryInterface,
 441     IRpcProxyBufferImpl_AddRef,
 442     IRpcProxyBufferImpl_Release,
 443     IRpcProxyBufferImpl_Connect,
 444     IRpcProxyBufferImpl_Disconnect
 445 };
 446 static const IClassFactoryVtbl cfproxyvt = {
 447     CFProxy_QueryInterface,
 448     CFProxy_AddRef,
 449     CFProxy_Release,
 450     CFProxy_CreateInstance,
 451     CFProxy_LockServer
 452 };
 453
 454 static HRESULT
 455 CFProxy_Construct(IUnknown *pUnkOuter, LPVOID *ppv,LPVOID *ppProxy) {
 456     CFProxy *cf;
 457
 458     cf = HeapAlloc(GetProcessHeap(),HEAP_ZERO_MEMORY,sizeof(CFProxy));
 459     if (!cf)
 460         return E_OUTOFMEMORY;
 461
 462     cf->lpvtbl_cf       = &cfproxyvt;
 463     cf->lpvtbl_proxy    = &pspbvtbl;
 464     /* one reference for the proxy buffer */
 465     cf->ref             = 1;
 466     cf->outer_unknown = pUnkOuter;
 467     *ppv                = &(cf->lpvtbl_cf);
 468     *ppProxy            = &(cf->lpvtbl_proxy);
 469     /* and one reference for the object */
 470     IUnknown_AddRef((IUnknown *)*ppv);
 471     return S_OK;
 472 }
 473
 474
 475 /********************* IRemUnknown Proxy/Stub ********************************/
 476
 477 typedef struct
 478 {
 479     const IRpcStubBufferVtbl *lpVtbl;
 480     LONG refs;
 481     IRemUnknown *iface;
 482 } RemUnkStub;
 483
 484 static HRESULT WINAPI RemUnkStub_QueryInterface(LPRPCSTUBBUFFER iface,
 485                                              REFIID riid,
 486                                              LPVOID *obj)
 487 {
 488   RemUnkStub *This = (RemUnkStub *)iface;
 489   TRACE("(%p)->QueryInterface(%s,%p)\n",This,debugstr_guid(riid),obj);
 490   if (IsEqualGUID(&IID_IUnknown,riid) ||
 491       IsEqualGUID(&IID_IRpcStubBuffer,riid)) {
 492     *obj = This;
 493     return S_OK;
 494   }
 495   return E_NOINTERFACE;
 496 }
 497
 498 static ULONG WINAPI RemUnkStub_AddRef(LPRPCSTUBBUFFER iface)
 499 {
 500   RemUnkStub *This = (RemUnkStub *)iface;
 501   TRACE("(%p)->AddRef()\n",This);
 502   return InterlockedIncrement(&This->refs);
 503 }
 504
 505 static ULONG WINAPI RemUnkStub_Release(LPRPCSTUBBUFFER iface)
 506 {
 507   RemUnkStub *This = (RemUnkStub *)iface;
 508   ULONG refs;
 509   TRACE("(%p)->Release()\n",This);
 510   refs = InterlockedDecrement(&This->refs);
 511   if (!refs)
 512     HeapFree(GetProcessHeap(), 0, This);
 513   return refs;
 514 }
 515
 516 static HRESULT WINAPI RemUnkStub_Connect(LPRPCSTUBBUFFER iface,
 517                                       LPUNKNOWN lpUnkServer)
 518 {
 519   RemUnkStub *This = (RemUnkStub *)iface;
 520   TRACE("(%p)->Connect(%p)\n",This,lpUnkServer);
 521   This->iface = (IRemUnknown*)lpUnkServer;
 522   IRemUnknown_AddRef(This->iface);
 523   return S_OK;
 524 }
 525
 526 static void WINAPI RemUnkStub_Disconnect(LPRPCSTUBBUFFER iface)
 527 {
 528   RemUnkStub *This = (RemUnkStub *)iface;
 529   TRACE("(%p)->Disconnect()\n",This);
 530   IUnknown_Release(This->iface);
 531   This->iface = NULL;
 532 }
 533
 534 static HRESULT WINAPI RemUnkStub_Invoke(LPRPCSTUBBUFFER iface,
 535                                      PRPCOLEMESSAGE pMsg,
 536                                      LPRPCCHANNELBUFFER pChannel)
 537 {
 538   RemUnkStub *This = (RemUnkStub *)iface;
 539   ULONG iMethod = pMsg->iMethod;
 540   LPBYTE buf = pMsg->Buffer;
 541   HRESULT hr = RPC_E_INVALIDMETHOD;
 542
 543   TRACE("(%p)->Invoke(%p,%p) method %d\n", This, pMsg, pChannel, iMethod);
 544   switch (iMethod)
 545   {
 546   case 3: /* RemQueryInterface */
 547   {
 548     IPID ipid;
 549     ULONG cRefs;
 550     USHORT cIids;
 551     IID *iids;
 552     REMQIRESULT *pQIResults = NULL;
 553
 554     /* in */
 555     memcpy(&ipid, buf, sizeof(ipid));
 556     buf += sizeof(ipid);
 557     memcpy(&cRefs, buf, sizeof(cRefs));
 558     buf += sizeof(cRefs);
 559     memcpy(&cIids, buf, sizeof(cIids));
 560     buf += sizeof(cIids);
 561     iids = (IID *)buf;
 562
 563     hr = IRemUnknown_RemQueryInterface(This->iface, &ipid, cRefs, cIids, iids, &pQIResults);
 564
 565     /* out */
 566     pMsg->cbBuffer = cIids * sizeof(REMQIRESULT) + sizeof(HRESULT);
 567
 568     IRpcChannelBuffer_GetBuffer(pChannel, pMsg, &IID_IRemUnknown);
 569
 570     buf = pMsg->Buffer;
 571     *(HRESULT *)buf = hr;
 572     buf += sizeof(HRESULT);
 573
 574     if (hr) return hr;
 575     /* FIXME: pQIResults is a unique pointer so pQIResults can be NULL! */
 576     memcpy(buf, pQIResults, cIids * sizeof(REMQIRESULT));
 577
 578     break;
 579   }
 580   case 4: /* RemAddRef */
 581   {
 582     USHORT cIids;
 583     REMINTERFACEREF *ir;
 584     HRESULT *pResults;
 585
 586     /* in */
 587     memcpy(&cIids, buf, sizeof(USHORT));
 588     buf += sizeof(USHORT);
 589     ir = (REMINTERFACEREF*)buf;
 590     pResults = CoTaskMemAlloc(cIids * sizeof(HRESULT));
 591     if (!pResults) return E_OUTOFMEMORY;
 592
 593     hr = IRemUnknown_RemAddRef(This->iface, cIids, ir, pResults);
 594
 595     /* out */
 596     pMsg->cbBuffer = cIids * sizeof(HRESULT);
 597
 598     IRpcChannelBuffer_GetBuffer(pChannel, pMsg, &IID_IRemUnknown);
 599     if (!hr)
 600     {
 601         buf = pMsg->Buffer;
 602         memcpy(buf, pResults, cIids * sizeof(HRESULT));
 603     }
 604
 605     CoTaskMemFree(pResults);
 606
 607     break;
 608   }
 609   case 5: /* RemRelease */
 610   {
 611     USHORT cIids;
 612     REMINTERFACEREF *ir;
 613
 614     /* in */
 615     memcpy(&cIids, buf, sizeof(USHORT));
 616     buf += sizeof(USHORT);
 617     ir = (REMINTERFACEREF*)buf;
 618
 619     hr = IRemUnknown_RemRelease(This->iface, cIids, ir);
 620
 621     /* out */
 622     pMsg->cbBuffer = 0;
 623     IRpcChannelBuffer_GetBuffer(pChannel, pMsg, &IID_IRemUnknown);
 624     break;
 625   }
 626   }
 627   return hr;
 628 }
 629
 630 static LPRPCSTUBBUFFER WINAPI RemUnkStub_IsIIDSupported(LPRPCSTUBBUFFER iface,
 631                                                      REFIID riid)
 632 {
 633   RemUnkStub *This = (RemUnkStub *)iface;
 634   TRACE("(%p)->IsIIDSupported(%s)\n", This, debugstr_guid(riid));
 635   return IsEqualGUID(&IID_IRemUnknown, riid) ? iface : NULL;
 636 }
 637
 638 static ULONG WINAPI RemUnkStub_CountRefs(LPRPCSTUBBUFFER iface)
 639 {
 640   RemUnkStub *This = (RemUnkStub *)iface;
 641   FIXME("(%p)->CountRefs()\n", This);
 642   return 1;
 643 }
 644
 645 static HRESULT WINAPI RemUnkStub_DebugServerQueryInterface(LPRPCSTUBBUFFER iface,
 646                                                         LPVOID *ppv)
 647 {
 648   RemUnkStub *This = (RemUnkStub *)iface;
 649   FIXME("(%p)->DebugServerQueryInterface(%p)\n",This,ppv);
 650   return E_NOINTERFACE;
 651 }
 652
 653 static void WINAPI RemUnkStub_DebugServerRelease(LPRPCSTUBBUFFER iface,
 654                                               LPVOID pv)
 655 {
 656   RemUnkStub *This = (RemUnkStub *)iface;
 657   FIXME("(%p)->DebugServerRelease(%p)\n", This, pv);
 658 }
 659
 660 static const IRpcStubBufferVtbl RemUnkStub_VTable =
 661 {
 662   RemUnkStub_QueryInterface,
 663   RemUnkStub_AddRef,
 664   RemUnkStub_Release,
 665   RemUnkStub_Connect,
 666   RemUnkStub_Disconnect,
 667   RemUnkStub_Invoke,
 668   RemUnkStub_IsIIDSupported,
 669   RemUnkStub_CountRefs,
 670   RemUnkStub_DebugServerQueryInterface,
 671   RemUnkStub_DebugServerRelease
 672 };
 673
 674 static HRESULT RemUnkStub_Construct(IRpcStubBuffer **ppStub)
 675 {
 676     RemUnkStub *This = HeapAlloc(GetProcessHeap(), 0, sizeof(*This));
 677     if (!This) return E_OUTOFMEMORY;
 678     This->lpVtbl = &RemUnkStub_VTable;
 679     This->refs = 1;
 680     This->iface = NULL;
 681     *ppStub = (IRpcStubBuffer*)This;
 682     return S_OK;
 683 }
 684
 685
 686 typedef struct _RemUnkProxy {
 687     const IRemUnknownVtbl               *lpvtbl_remunk;
 688     const IRpcProxyBufferVtbl   *lpvtbl_proxy;
 689     LONG                                refs;
 690
 691     IRpcChannelBuffer                   *chan;
 692     IUnknown *outer_unknown;
 693 } RemUnkProxy;
 694
 695 static HRESULT WINAPI RemUnkProxy_QueryInterface(LPREMUNKNOWN iface, REFIID riid, void **ppv)
 696 {
 697     RemUnkProxy *This = (RemUnkProxy *)iface;
 698     if (This->outer_unknown)
 699         return IUnknown_QueryInterface(This->outer_unknown, riid, ppv);
 700     if (IsEqualIID(riid, &IID_IUnknown) ||
 701         IsEqualIID(riid, &IID_IRemUnknown))
 702     {
 703         IRemUnknown_AddRef(iface);
 704         *ppv = (LPVOID)iface;
 705         return S_OK;
 706     }
 707     return E_NOINTERFACE;
 708 }
 709
 710 static ULONG WINAPI RemUnkProxy_AddRef(LPREMUNKNOWN iface)
 711 {
 712   RemUnkProxy *This = (RemUnkProxy *)iface;
 713   ULONG refs;
 714
 715   TRACE("(%p)->AddRef()\n",This);
 716
 717   if (This->outer_unknown)
 718       refs = IUnknown_AddRef(This->outer_unknown);
 719   else
 720       refs = InterlockedIncrement(&This->refs);
 721   return refs;
 722 }
 723
 724 static ULONG WINAPI RemUnkProxy_Release(LPREMUNKNOWN iface)
 725 {
 726   RemUnkProxy *This = (RemUnkProxy *)iface;
 727
 728   TRACE("(%p)->Release()\n",This);
 729   if (This->outer_unknown)
 730       return IUnknown_Release(This->outer_unknown);
 731   else
 732       return IRpcProxyBufferImpl_Release((IRpcProxyBuffer *)&This->lpvtbl_proxy);
 733 }
 734
 735 static HRESULT WINAPI RemUnkProxy_RemQueryInterface(LPREMUNKNOWN iface,
 736                                                  REFIPID ripid,
 737                                                  ULONG cRefs,
 738                                                  USHORT cIids,
 739                                                  IID* iids,
 740                                                  REMQIRESULT** ppQIResults)
 741 {
 742   RemUnkProxy *This = (RemUnkProxy *)iface;
 743   RPCOLEMESSAGE msg;
 744   HRESULT hr = S_OK;
 745   ULONG status;
 746
 747   TRACE("(%p)->(%s,%d,%d,%p,%p)\n",This,
 748         debugstr_guid(ripid),cRefs,cIids,iids,ppQIResults);
 749
 750   *ppQIResults = NULL;
 751   memset(&msg, 0, sizeof(msg));
 752   msg.iMethod = 3;
 753   msg.cbBuffer = sizeof(IPID) + sizeof(ULONG) +
 754     sizeof(USHORT) + cIids*sizeof(IID);
 755   hr = IRpcChannelBuffer_GetBuffer(This->chan, &msg, &IID_IRemUnknown);
 756   if (SUCCEEDED(hr)) {
 757     LPBYTE buf = msg.Buffer;
 758     memcpy(buf, ripid, sizeof(IPID));
 759     buf += sizeof(IPID);
 760     memcpy(buf, &cRefs, sizeof(ULONG));
 761     buf += sizeof(ULONG);
 762     memcpy(buf, &cIids, sizeof(USHORT));
 763     buf += sizeof(USHORT);
 764     memcpy(buf, iids, cIids*sizeof(IID));
 765
 766     hr = IRpcChannelBuffer_SendReceive(This->chan, &msg, &status);
 767
 768     buf = msg.Buffer;
 769
 770     if (SUCCEEDED(hr)) {
 771         hr = *(HRESULT *)buf;
 772         buf += sizeof(HRESULT);
 773     }
 774
 775     if (SUCCEEDED(hr)) {
 776       *ppQIResults = CoTaskMemAlloc(cIids*sizeof(REMQIRESULT));
 777       memcpy(*ppQIResults, buf, cIids*sizeof(REMQIRESULT));
 778     }
 779
 780     IRpcChannelBuffer_FreeBuffer(This->chan, &msg);
 781   }
 782
 783   return hr;
 784 }
 785
 786 static HRESULT WINAPI RemUnkProxy_RemAddRef(LPREMUNKNOWN iface,
 787                                          USHORT cInterfaceRefs,
 788                                          REMINTERFACEREF* InterfaceRefs,
 789                                          HRESULT* pResults)
 790 {
 791   RemUnkProxy *This = (RemUnkProxy *)iface;
 792   RPCOLEMESSAGE msg;
 793   HRESULT hr = S_OK;
 794   ULONG status;
 795
 796   TRACE("(%p)->(%d,%p,%p)\n",This,
 797         cInterfaceRefs,InterfaceRefs,pResults);
 798
 799   memset(&msg, 0, sizeof(msg));
 800   msg.iMethod = 4;
 801   msg.cbBuffer = sizeof(USHORT) + cInterfaceRefs*sizeof(REMINTERFACEREF);
 802   hr = IRpcChannelBuffer_GetBuffer(This->chan, &msg, &IID_IRemUnknown);
 803   if (SUCCEEDED(hr)) {
 804     LPBYTE buf = msg.Buffer;
 805     memcpy(buf, &cInterfaceRefs, sizeof(USHORT));
 806     buf += sizeof(USHORT);
 807     memcpy(buf, InterfaceRefs, cInterfaceRefs*sizeof(REMINTERFACEREF));
 808
 809     hr = IRpcChannelBuffer_SendReceive(This->chan, &msg, &status);
 810
 811     if (SUCCEEDED(hr)) {
 812       buf = msg.Buffer;
 813       memcpy(pResults, buf, cInterfaceRefs*sizeof(HRESULT));
 814     }
 815
 816     IRpcChannelBuffer_FreeBuffer(This->chan, &msg);
 817   }
 818
 819   return hr;
 820 }
 821
 822 static HRESULT WINAPI RemUnkProxy_RemRelease(LPREMUNKNOWN iface,
 823                                           USHORT cInterfaceRefs,
 824                                           REMINTERFACEREF* InterfaceRefs)
 825 {
 826   RemUnkProxy *This = (RemUnkProxy *)iface;
 827   RPCOLEMESSAGE msg;
 828   HRESULT hr = S_OK;
 829   ULONG status;
 830
 831   TRACE("(%p)->(%d,%p)\n",This,
 832         cInterfaceRefs,InterfaceRefs);
 833
 834   memset(&msg, 0, sizeof(msg));
 835   msg.iMethod = 5;
 836   msg.cbBuffer = sizeof(USHORT) + cInterfaceRefs*sizeof(REMINTERFACEREF);
 837   hr = IRpcChannelBuffer_GetBuffer(This->chan, &msg, &IID_IRemUnknown);
 838   if (SUCCEEDED(hr)) {
 839     LPBYTE buf = msg.Buffer;
 840     memcpy(buf, &cInterfaceRefs, sizeof(USHORT));
 841     buf += sizeof(USHORT);
 842     memcpy(buf, InterfaceRefs, cInterfaceRefs*sizeof(REMINTERFACEREF));
 843
 844     hr = IRpcChannelBuffer_SendReceive(This->chan, &msg, &status);
 845
 846     IRpcChannelBuffer_FreeBuffer(This->chan, &msg);
 847   }
 848
 849   return hr;
 850 }
 851
 852 static const IRemUnknownVtbl RemUnkProxy_VTable =
 853 {
 854   RemUnkProxy_QueryInterface,
 855   RemUnkProxy_AddRef,
 856   RemUnkProxy_Release,
 857   RemUnkProxy_RemQueryInterface,
 858   RemUnkProxy_RemAddRef,
 859   RemUnkProxy_RemRelease
 860 };
 861
 862
 863 static HRESULT WINAPI RURpcProxyBufferImpl_QueryInterface(LPRPCPROXYBUFFER iface,REFIID riid,LPVOID *ppv) {
 864     *ppv = NULL;
 865     if (IsEqualIID(riid,&IID_IRpcProxyBuffer)||IsEqualIID(riid,&IID_IUnknown)) {
 866         IRpcProxyBuffer_AddRef(iface);
 867         *ppv = (LPVOID)iface;
 868         return S_OK;
 869     }
 870     FIXME("(%s), no interface.\n",debugstr_guid(riid));
 871     return E_NOINTERFACE;
 872 }
 873
 874 static ULONG WINAPI RURpcProxyBufferImpl_AddRef(LPRPCPROXYBUFFER iface) {
 875     ICOM_THIS_MULTI(RemUnkProxy,lpvtbl_proxy,iface);
 876     TRACE("%p, %d\n", iface, This->refs + 1);
 877     return InterlockedIncrement(&This->refs);
 878 }
 879
 880 static ULONG WINAPI RURpcProxyBufferImpl_Release(LPRPCPROXYBUFFER iface) {
 881     ICOM_THIS_MULTI(RemUnkProxy,lpvtbl_proxy,iface);
 882     ULONG ref = InterlockedDecrement(&This->refs);
 883     TRACE("%p, %d\n", iface, ref);
 884     if (!ref) {
 885         IRpcProxyBuffer_Disconnect(iface);
 886         HeapFree(GetProcessHeap(),0,This);
 887     }
 888     return ref;
 889 }
 890
 891 static HRESULT WINAPI RURpcProxyBufferImpl_Connect(LPRPCPROXYBUFFER iface,IRpcChannelBuffer* pRpcChannelBuffer) {
 892     ICOM_THIS_MULTI(RemUnkProxy,lpvtbl_proxy,iface);
 893
 894     TRACE("%p, %p\n", iface, pRpcChannelBuffer);
 895     This->chan = pRpcChannelBuffer;
 896     IRpcChannelBuffer_AddRef(This->chan);
 897     return S_OK;
 898 }
 899 static void WINAPI RURpcProxyBufferImpl_Disconnect(LPRPCPROXYBUFFER iface) {
 900     ICOM_THIS_MULTI(RemUnkProxy,lpvtbl_proxy,iface);
 901     TRACE("%p, %p\n", iface, This->chan);
 902     if (This->chan) {
 903         IRpcChannelBuffer_Release(This->chan);
 904         This->chan = NULL;
 905     }
 906 }
 907
 908
 909 static const IRpcProxyBufferVtbl RURpcProxyBuffer_VTable = {
 910     RURpcProxyBufferImpl_QueryInterface,
 911     RURpcProxyBufferImpl_AddRef,
 912     RURpcProxyBufferImpl_Release,
 913     RURpcProxyBufferImpl_Connect,
 914     RURpcProxyBufferImpl_Disconnect
 915 };
 916
 917 static HRESULT
 918 RemUnkProxy_Construct(IUnknown *pUnkOuter, LPVOID *ppv,LPVOID *ppProxy) {
 919     RemUnkProxy *This;
 920
 921     This = HeapAlloc(GetProcessHeap(),HEAP_ZERO_MEMORY,sizeof(*This));
 922     if (!This)
 923         return E_OUTOFMEMORY;
 924
 925     This->lpvtbl_remunk = &RemUnkProxy_VTable;
 926     This->lpvtbl_proxy  = &RURpcProxyBuffer_VTable;
 927     /* only one reference for the proxy buffer */
 928     This->refs          = 1;
 929     This->outer_unknown = pUnkOuter;
 930     *ppv                = &(This->lpvtbl_remunk);
 931     *ppProxy            = &(This->lpvtbl_proxy);
 932     /* and one reference for the object */
 933     IUnknown_AddRef((IUnknown *)*ppv);
 934     return S_OK;
 935 }
 936
 937
 938 /********************* OLE Proxy/Stub Factory ********************************/
 939 static HRESULT WINAPI
 940 PSFacBuf_QueryInterface(LPPSFACTORYBUFFER iface, REFIID iid, LPVOID *ppv) {
 941     if (IsEqualIID(iid,&IID_IPSFactoryBuffer)||IsEqualIID(iid,&IID_IUnknown)) {
 942         *ppv = (LPVOID)iface;
 943         /* No ref counting, static class */
 944         return S_OK;
 945     }
 946     FIXME("(%s) unknown IID?\n",debugstr_guid(iid));
 947     return E_NOINTERFACE;
 948 }
 949
 950 static ULONG WINAPI PSFacBuf_AddRef(LPPSFACTORYBUFFER iface) { return 2; }
 951 static ULONG WINAPI PSFacBuf_Release(LPPSFACTORYBUFFER iface) { return 1; }
 952
 953 static HRESULT WINAPI
 954 PSFacBuf_CreateProxy(
 955     LPPSFACTORYBUFFER iface, IUnknown* pUnkOuter, REFIID riid,
 956     IRpcProxyBuffer **ppProxy, LPVOID *ppv
 957 ) {
 958     if (IsEqualIID(&IID_IClassFactory,riid))
 959         return CFProxy_Construct(pUnkOuter, ppv,(LPVOID*)ppProxy);
 960     else if (IsEqualIID(&IID_IRemUnknown,riid))
 961         return RemUnkProxy_Construct(pUnkOuter, ppv,(LPVOID*)ppProxy);
 962     FIXME("proxying not implemented for (%s) yet!\n",debugstr_guid(riid));
 963     return E_FAIL;
 964 }
 965
 966 static HRESULT WINAPI
 967 PSFacBuf_CreateStub(
 968     LPPSFACTORYBUFFER iface, REFIID riid,IUnknown *pUnkServer,
 969     IRpcStubBuffer** ppStub
 970 ) {
 971     HRESULT hres;
 972
 973     TRACE("(%s,%p,%p)\n",debugstr_guid(riid),pUnkServer,ppStub);
 974
 975     if (IsEqualIID(&IID_IClassFactory, riid) ||
 976         IsEqualIID(&IID_IUnknown, riid) /* FIXME: fixup stub manager and remove this*/) {
 977         hres = CFStub_Construct(ppStub);
 978         if (!hres)
 979             IRpcStubBuffer_Connect((*ppStub),pUnkServer);
 980         return hres;
 981     } else if (IsEqualIID(&IID_IRemUnknown,riid)) {
 982         hres = RemUnkStub_Construct(ppStub);
 983         if (!hres)
 984             IRpcStubBuffer_Connect((*ppStub),pUnkServer);
 985         return hres;
 986     }
 987     FIXME("stubbing not implemented for (%s) yet!\n",debugstr_guid(riid));
 988     return E_FAIL;
 989 }
 990
 991 static const IPSFactoryBufferVtbl psfacbufvtbl = {
 992     PSFacBuf_QueryInterface,
 993     PSFacBuf_AddRef,
 994     PSFacBuf_Release,
 995     PSFacBuf_CreateProxy,
 996     PSFacBuf_CreateStub
 997 };
 998
 999 /* This is the whole PSFactoryBuffer object, just the vtableptr */
1000 static const IPSFactoryBufferVtbl *lppsfac = &psfacbufvtbl;
1001
1002 /***********************************************************************
1003  *           DllGetClassObject [OLE32.@]
1004  */
1005 HRESULT WINAPI DllGetClassObject(REFCLSID rclsid, REFIID iid,LPVOID *ppv)
1006 {
1007     *ppv = NULL;
1008     if (IsEqualIID(rclsid, &CLSID_PSFactoryBuffer))
1009         return IPSFactoryBuffer_QueryInterface((IPSFactoryBuffer *)&lppsfac, iid, ppv);
1010     if (IsEqualIID(rclsid,&CLSID_DfMarshal)&&(
1011                 IsEqualIID(iid,&IID_IClassFactory) ||
1012                 IsEqualIID(iid,&IID_IUnknown)
1013         )
1014     )
1015         return MARSHAL_GetStandardMarshalCF(ppv);
1016     if (IsEqualIID(rclsid,&CLSID_StdGlobalInterfaceTable) && (IsEqualIID(iid,&IID_IClassFactory) || IsEqualIID(iid,&IID_IUnknown)))
1017         return StdGlobalInterfaceTable_GetFactory(ppv);
1018     if (IsEqualCLSID(rclsid, &CLSID_FileMoniker))
1019         return FileMonikerCF_Create(iid, ppv);
1020     if (IsEqualCLSID(rclsid, &CLSID_ItemMoniker))
1021         return ItemMonikerCF_Create(iid, ppv);
1022     if (IsEqualCLSID(rclsid, &CLSID_AntiMoniker))
1023         return AntiMonikerCF_Create(iid, ppv);
1024     if (IsEqualCLSID(rclsid, &CLSID_CompositeMoniker))
1025         return CompositeMonikerCF_Create(iid, ppv);
1026     if (IsEqualCLSID(rclsid, &CLSID_ClassMoniker))
1027         return ClassMonikerCF_Create(iid, ppv);
1028
1029     FIXME("\n\tCLSID:\t%s,\n\tIID:\t%s\n",debugstr_guid(rclsid),debugstr_guid(iid));
1030     return CLASS_E_CLASSNOTAVAILABLE;
1031 }