rsaenh: Fix padding bytes check for 0-byte payload.
[wine] / dlls / mshtml / dispex.c
1 /*
2  * Copyright 2008-2009 Jacek Caban for CodeWeavers
3  *
4  * This library is free software; you can redistribute it and/or
5  * modify it under the terms of the GNU Lesser General Public
6  * License as published by the Free Software Foundation; either
7  * version 2.1 of the License, or (at your option) any later version.
8  *
9  * This library is distributed in the hope that it will be useful,
10  * but WITHOUT ANY WARRANTY; without even the implied warranty of
11  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
12  * Lesser General Public License for more details.
13  *
14  * You should have received a copy of the GNU Lesser General Public
15  * License along with this library; if not, write to the Free Software
16  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
17  */
18
19 #include <stdarg.h>
20
21 #define COBJMACROS
22
23 #include "windef.h"
24 #include "winbase.h"
25 #include "winuser.h"
26 #include "ole2.h"
27
28 #include "wine/debug.h"
29
30 #include "mshtml_private.h"
31
32 WINE_DEFAULT_DEBUG_CHANNEL(mshtml);
33
34 static const WCHAR objectW[] = {'[','o','b','j','e','c','t',']',0};
35
36 typedef struct {
37     DISPID id;
38     BSTR name;
39     tid_t tid;
40     int func_disp_idx;
41 } func_info_t;
42
43 struct dispex_data_t {
44     DWORD func_cnt;
45     func_info_t *funcs;
46     func_info_t **name_table;
47     DWORD func_disp_cnt;
48
49     struct list entry;
50 };
51
52 typedef struct {
53     VARIANT var;
54     LPWSTR name;
55 } dynamic_prop_t;
56
57 typedef struct {
58     DispatchEx dispex;
59     const IUnknownVtbl *lpIUnknownVtbl;
60     DispatchEx *obj;
61     func_info_t *info;
62 } func_disp_t;
63
64 #define FUNCUNKNOWN(x)  ((IUnknown*) &(x)->lpIUnknownVtbl)
65
66 struct dispex_dynamic_data_t {
67     DWORD buf_size;
68     DWORD prop_cnt;
69     dynamic_prop_t *props;
70     func_disp_t **func_disps;
71 };
72
73 #define DISPID_DYNPROP_0    0x50000000
74 #define DISPID_DYNPROP_MAX  0x5fffffff
75
76 #define FDEX_VERSION_MASK 0xf0000000
77
78 static ITypeLib *typelib;
79 static ITypeInfo *typeinfos[LAST_tid];
80 static struct list dispex_data_list = LIST_INIT(dispex_data_list);
81
82 static REFIID tid_ids[] = {
83     &IID_NULL,
84     &DIID_DispCEventObj,
85     &DIID_DispDOMChildrenCollection,
86     &DIID_DispHTMLAnchorElement,
87     &DIID_DispHTMLBody,
88     &DIID_DispHTMLCommentElement,
89     &DIID_DispHTMLCurrentStyle,
90     &DIID_DispHTMLDocument,
91     &DIID_DispHTMLDOMTextNode,
92     &DIID_DispHTMLElementCollection,
93     &DIID_DispHTMLFormElement,
94     &DIID_DispHTMLGenericElement,
95     &DIID_DispHTMLIFrame,
96     &DIID_DispHTMLImg,
97     &DIID_DispHTMLInputElement,
98     &DIID_DispHTMLLocation,
99     &DIID_DispHTMLNavigator,
100     &DIID_DispHTMLOptionElement,
101     &DIID_DispHTMLScreen,
102     &DIID_DispHTMLSelectElement,
103     &DIID_DispHTMLStyle,
104     &DIID_DispHTMLTable,
105     &DIID_DispHTMLTableRow,
106     &DIID_DispHTMLUnknownElement,
107     &DIID_DispHTMLWindow2,
108     &DIID_HTMLDocumentEvents,
109     &IID_IHTMLAnchorElement,
110     &IID_IHTMLBodyElement,
111     &IID_IHTMLBodyElement2,
112     &IID_IHTMLCommentElement,
113     &IID_IHTMLCurrentStyle,
114     &IID_IHTMLCurrentStyle2,
115     &IID_IHTMLCurrentStyle3,
116     &IID_IHTMLCurrentStyle4,
117     &IID_IHTMLDocument2,
118     &IID_IHTMLDocument3,
119     &IID_IHTMLDocument4,
120     &IID_IHTMLDocument5,
121     &IID_IHTMLDOMChildrenCollection,
122     &IID_IHTMLDOMNode,
123     &IID_IHTMLDOMNode2,
124     &IID_IHTMLDOMTextNode,
125     &IID_IHTMLElement,
126     &IID_IHTMLElement2,
127     &IID_IHTMLElement3,
128     &IID_IHTMLElement4,
129     &IID_IHTMLElementCollection,
130     &IID_IHTMLEventObj,
131     &IID_IHTMLFormElement,
132     &IID_IHTMLFrameBase,
133     &IID_IHTMLFrameBase2,
134     &IID_IHTMLGenericElement,
135     &IID_IHTMLImageElementFactory,
136     &IID_IHTMLImgElement,
137     &IID_IHTMLInputElement,
138     &IID_IHTMLLocation,
139     &IID_IHTMLOptionElement,
140     &IID_IHTMLScreen,
141     &IID_IHTMLSelectElement,
142     &IID_IHTMLStyle,
143     &IID_IHTMLStyle2,
144     &IID_IHTMLStyle3,
145     &IID_IHTMLStyle4,
146     &IID_IHTMLTable,
147     &IID_IHTMLTableRow,
148     &IID_IHTMLTextContainer,
149     &IID_IHTMLUniqueName,
150     &IID_IHTMLWindow2,
151     &IID_IHTMLWindow3,
152     &IID_IHTMLWindow4,
153     &IID_IOmNavigator
154 };
155
156 static HRESULT get_typeinfo(tid_t tid, ITypeInfo **typeinfo)
157 {
158     HRESULT hres;
159
160     if(!typelib) {
161         ITypeLib *tl;
162
163         hres = LoadRegTypeLib(&LIBID_MSHTML, 4, 0, LOCALE_SYSTEM_DEFAULT, &tl);
164         if(FAILED(hres)) {
165             ERR("LoadRegTypeLib failed: %08x\n", hres);
166             return hres;
167         }
168
169         if(InterlockedCompareExchangePointer((void**)&typelib, tl, NULL))
170             ITypeLib_Release(tl);
171     }
172
173     if(!typeinfos[tid]) {
174         ITypeInfo *typeinfo;
175
176         hres = ITypeLib_GetTypeInfoOfGuid(typelib, tid_ids[tid], &typeinfo);
177         if(FAILED(hres)) {
178             ERR("GetTypeInfoOfGuid(%s) failed: %08x\n", debugstr_guid(tid_ids[tid]), hres);
179             return hres;
180         }
181
182         if(InterlockedCompareExchangePointer((void**)(typeinfos+tid), typeinfo, NULL))
183             ITypeInfo_Release(typeinfo);
184     }
185
186     *typeinfo = typeinfos[tid];
187     return S_OK;
188 }
189
190 void release_typelib(void)
191 {
192     dispex_data_t *iter;
193     unsigned i;
194
195     while(!list_empty(&dispex_data_list)) {
196         iter = LIST_ENTRY(list_head(&dispex_data_list), dispex_data_t, entry);
197         list_remove(&iter->entry);
198
199         for(i=0; i < iter->func_cnt; i++)
200             SysFreeString(iter->funcs[i].name);
201
202         heap_free(iter->funcs);
203         heap_free(iter->name_table);
204         heap_free(iter);
205     }
206
207     if(!typelib)
208         return;
209
210     for(i=0; i < sizeof(typeinfos)/sizeof(*typeinfos); i++)
211         if(typeinfos[i])
212             ITypeInfo_Release(typeinfos[i]);
213
214     ITypeLib_Release(typelib);
215 }
216
217 static void add_func_info(dispex_data_t *data, DWORD *size, tid_t tid, const FUNCDESC *desc, ITypeInfo *dti)
218 {
219     HRESULT hres;
220
221     if(data->func_cnt && data->funcs[data->func_cnt-1].id == desc->memid)
222         return;
223
224     if(data->func_cnt == *size)
225         data->funcs = heap_realloc(data->funcs, (*size <<= 1)*sizeof(func_info_t));
226
227     hres = ITypeInfo_GetDocumentation(dti, desc->memid, &data->funcs[data->func_cnt].name, NULL, NULL, NULL);
228     if(FAILED(hres))
229         return;
230
231     data->funcs[data->func_cnt].id = desc->memid;
232     data->funcs[data->func_cnt].tid = tid;
233     data->funcs[data->func_cnt].func_disp_idx = (desc->invkind & DISPATCH_METHOD) ? data->func_disp_cnt++ : -1;
234
235     data->func_cnt++;
236 }
237
238 static int dispid_cmp(const void *p1, const void *p2)
239 {
240     return ((func_info_t*)p1)->id - ((func_info_t*)p2)->id;
241 }
242
243 static int func_name_cmp(const void *p1, const void *p2)
244 {
245     return strcmpiW((*(func_info_t**)p1)->name, (*(func_info_t**)p2)->name);
246 }
247
248 static dispex_data_t *preprocess_dispex_data(DispatchEx *This)
249 {
250     const tid_t *tid = This->data->iface_tids;
251     FUNCDESC *funcdesc;
252     dispex_data_t *data;
253     DWORD size = 16, i;
254     ITypeInfo *ti, *dti;
255     HRESULT hres;
256
257     TRACE("(%p)\n", This);
258
259     if(This->data->disp_tid) {
260         hres = get_typeinfo(This->data->disp_tid, &dti);
261         if(FAILED(hres)) {
262             ERR("Could not get disp type info: %08x\n", hres);
263             return NULL;
264         }
265     }
266
267     data = heap_alloc(sizeof(dispex_data_t));
268     data->func_cnt = 0;
269     data->func_disp_cnt = 0;
270     data->funcs = heap_alloc(size*sizeof(func_info_t));
271     list_add_tail(&dispex_data_list, &data->entry);
272
273     while(*tid) {
274         hres = get_typeinfo(*tid, &ti);
275         if(FAILED(hres))
276             break;
277
278         i=7;
279         while(1) {
280             hres = ITypeInfo_GetFuncDesc(ti, i++, &funcdesc);
281             if(FAILED(hres))
282                 break;
283
284             add_func_info(data, &size, *tid, funcdesc, dti);
285             ITypeInfo_ReleaseFuncDesc(ti, funcdesc);
286         }
287
288         tid++;
289     }
290
291     if(!data->func_cnt) {
292         heap_free(data->funcs);
293         data->funcs = NULL;
294     }else if(data->func_cnt != size) {
295         data->funcs = heap_realloc(data->funcs, data->func_cnt * sizeof(func_info_t));
296     }
297
298     qsort(data->funcs, data->func_cnt, sizeof(func_info_t), dispid_cmp);
299
300     if(data->funcs) {
301         data->name_table = heap_alloc(data->func_cnt * sizeof(func_info_t*));
302         for(i=0; i < data->func_cnt; i++)
303             data->name_table[i] = data->funcs+i;
304         qsort(data->name_table, data->func_cnt, sizeof(func_info_t*), func_name_cmp);
305     }else {
306         data->name_table = NULL;
307     }
308
309     return data;
310 }
311
312 static int id_cmp(const void *p1, const void *p2)
313 {
314     return *(DISPID*)p1 - *(DISPID*)p2;
315 }
316
317 HRESULT get_dispids(tid_t tid, DWORD *ret_size, DISPID **ret)
318 {
319     unsigned i, func_cnt;
320     FUNCDESC *funcdesc;
321     ITypeInfo *ti;
322     TYPEATTR *attr;
323     DISPID *ids;
324     HRESULT hres;
325
326     hres = get_typeinfo(tid, &ti);
327     if(FAILED(hres))
328         return hres;
329
330     hres = ITypeInfo_GetTypeAttr(ti, &attr);
331     if(FAILED(hres)) {
332         ITypeInfo_Release(ti);
333         return hres;
334     }
335
336     func_cnt = attr->cFuncs;
337     ITypeInfo_ReleaseTypeAttr(ti, attr);
338
339     ids = heap_alloc(func_cnt*sizeof(DISPID));
340     if(!ids) {
341         ITypeInfo_Release(ti);
342         return E_OUTOFMEMORY;
343     }
344
345     for(i=0; i < func_cnt; i++) {
346         hres = ITypeInfo_GetFuncDesc(ti, i, &funcdesc);
347         if(FAILED(hres))
348             break;
349
350         ids[i] = funcdesc->memid;
351         ITypeInfo_ReleaseFuncDesc(ti, funcdesc);
352     }
353
354     ITypeInfo_Release(ti);
355     if(FAILED(hres)) {
356         heap_free(ids);
357         return hres;
358     }
359
360     qsort(ids, func_cnt, sizeof(DISPID), id_cmp);
361
362     *ret_size = func_cnt;
363     *ret = ids;
364     return S_OK;
365 }
366
367 static CRITICAL_SECTION cs_dispex_static_data;
368 static CRITICAL_SECTION_DEBUG cs_dispex_static_data_dbg =
369 {
370     0, 0, &cs_dispex_static_data,
371     { &cs_dispex_static_data_dbg.ProcessLocksList, &cs_dispex_static_data_dbg.ProcessLocksList },
372       0, 0, { (DWORD_PTR)(__FILE__ ": dispex_static_data") }
373 };
374 static CRITICAL_SECTION cs_dispex_static_data = { &cs_dispex_static_data_dbg, -1, 0, 0, 0, 0 };
375
376
377 static dispex_data_t *get_dispex_data(DispatchEx *This)
378 {
379     if(This->data->data)
380         return This->data->data;
381
382     EnterCriticalSection(&cs_dispex_static_data);
383
384     if(!This->data->data)
385         This->data->data = preprocess_dispex_data(This);
386
387     LeaveCriticalSection(&cs_dispex_static_data);
388
389     return This->data->data;
390 }
391
392 HRESULT call_disp_func(IDispatch *disp, DISPPARAMS *dp)
393 {
394     EXCEPINFO ei;
395     IDispatchEx *dispex;
396     VARIANT res;
397     HRESULT hres;
398
399     hres = IDispatch_QueryInterface(disp, &IID_IDispatchEx, (void**)&dispex);
400     if(FAILED(hres)) {
401         FIXME("Could not get IDispatchEx interface: %08x\n", hres);
402         return hres;
403     }
404
405     VariantInit(&res);
406     memset(&ei, 0, sizeof(ei));
407
408     hres = IDispatchEx_InvokeEx(dispex, 0, GetUserDefaultLCID(), DISPATCH_METHOD, dp, &res, &ei, NULL);
409
410     IDispatchEx_Release(dispex);
411     VariantClear(&res);
412     return hres;
413 }
414
415 static inline BOOL is_custom_dispid(DISPID id)
416 {
417     return MSHTML_DISPID_CUSTOM_MIN <= id && id <= MSHTML_DISPID_CUSTOM_MAX;
418 }
419
420 static inline BOOL is_dynamic_dispid(DISPID id)
421 {
422     return DISPID_DYNPROP_0 <= id && id <= DISPID_DYNPROP_MAX;
423 }
424
425 static inline dispex_dynamic_data_t *get_dynamic_data(DispatchEx *This, BOOL alloc)
426 {
427     return !alloc || This->dynamic_data
428         ? This->dynamic_data
429         : (This->dynamic_data = heap_alloc_zero(sizeof(dispex_dynamic_data_t)));
430 }
431
432 static HRESULT get_dynamic_prop(DispatchEx *This, const WCHAR *name, DWORD flags, dynamic_prop_t **ret)
433 {
434     const BOOL alloc = flags & fdexNameEnsure;
435     dispex_dynamic_data_t *data;
436     unsigned i;
437
438     data = get_dynamic_data(This, alloc);
439     if(!data) {
440         if(alloc)
441             return E_OUTOFMEMORY;
442
443         TRACE("not found %s\n", debugstr_w(name));
444         return DISP_E_UNKNOWNNAME;
445     }
446
447     for(i=0; i < data->prop_cnt; i++) {
448         if(flags & fdexNameCaseInsensitive ? !strcmpiW(data->props[i].name, name) : !strcmpW(data->props[i].name, name)) {
449             *ret = data->props+i;
450             return S_OK;
451         }
452     }
453
454     if(!alloc)
455         return DISP_E_UNKNOWNNAME;
456
457     TRACE("creating dynamic prop %s\n", debugstr_w(name));
458
459     if(!data->buf_size) {
460         data->props = heap_alloc(sizeof(dynamic_prop_t)*4);
461         if(!data->props)
462             return E_OUTOFMEMORY;
463         data->buf_size = 4;
464     }else if(data->buf_size == data->prop_cnt) {
465         dynamic_prop_t *new_props;
466
467         new_props = heap_realloc(data->props, sizeof(dynamic_prop_t)*(data->buf_size<<1));
468         if(!new_props)
469             return E_OUTOFMEMORY;
470
471         data->props = new_props;
472         data->buf_size <<= 1;
473     }
474
475     data->props[data->prop_cnt].name = heap_strdupW(name);
476     VariantInit(&data->props[data->prop_cnt].var);
477     *ret = data->props + data->prop_cnt++;
478
479     return S_OK;
480 }
481
482 HRESULT dispex_get_dprop_ref(DispatchEx *This, const WCHAR *name, BOOL alloc, VARIANT **ret)
483 {
484     dynamic_prop_t *prop;
485     HRESULT hres;
486
487     hres = get_dynamic_prop(This, name, alloc ? fdexNameEnsure : 0, &prop);
488     if(FAILED(hres))
489         return hres;
490
491     *ret = &prop->var;
492     return S_OK;
493 }
494
495 static HRESULT dispex_value(DispatchEx *This, LCID lcid, WORD flags, DISPPARAMS *params,
496         VARIANT *res, EXCEPINFO *ei, IServiceProvider *caller)
497 {
498     if(This->data->vtbl && This->data->vtbl->value)
499         return This->data->vtbl->value(This->outer, lcid, flags, params, res, ei, caller);
500
501     switch(flags) {
502     case DISPATCH_PROPERTYGET:
503         V_VT(res) = VT_BSTR;
504         V_BSTR(res) = SysAllocString(objectW);
505         if(!V_BSTR(res))
506             return E_OUTOFMEMORY;
507         break;
508     default:
509         FIXME("Unimplemented flags %x\n", flags);
510         return E_NOTIMPL;
511     }
512
513     return S_OK;
514 }
515
516 static HRESULT typeinfo_invoke(DispatchEx *This, func_info_t *func, WORD flags, DISPPARAMS *dp, VARIANT *res,
517         EXCEPINFO *ei)
518 {
519     ITypeInfo *ti;
520     IUnknown *unk;
521     UINT argerr=0;
522     HRESULT hres;
523
524     hres = get_typeinfo(func->tid, &ti);
525     if(FAILED(hres)) {
526         ERR("Could not get type info: %08x\n", hres);
527         return hres;
528     }
529
530     hres = IUnknown_QueryInterface(This->outer, tid_ids[func->tid], (void**)&unk);
531     if(FAILED(hres)) {
532         ERR("Could not get iface %s: %08x\n", debugstr_guid(tid_ids[func->tid]), hres);
533         return E_FAIL;
534     }
535
536     hres = ITypeInfo_Invoke(ti, unk, func->id, flags, dp, res, ei, &argerr);
537
538     IUnknown_Release(unk);
539     return hres;
540 }
541
542 #define FUNCTION_THIS(iface) DEFINE_THIS(func_disp_t, IUnknown, iface)
543
544 static HRESULT WINAPI Function_QueryInterface(IUnknown *iface, REFIID riid, void **ppv)
545 {
546     func_disp_t *This = FUNCTION_THIS(iface);
547
548     if(IsEqualGUID(&IID_IUnknown, riid)) {
549         TRACE("(%p)->(IID_IUnknown %p)\n", This, ppv);
550         *ppv = FUNCUNKNOWN(This);
551     }else if(dispex_query_interface(&This->dispex, riid, ppv)) {
552         return *ppv ? S_OK : E_NOINTERFACE;
553     }else {
554         *ppv = NULL;
555         return E_NOINTERFACE;
556     }
557
558     IUnknown_AddRef((IUnknown*)*ppv);
559     return S_OK;
560 }
561
562 static ULONG WINAPI Function_AddRef(IUnknown *iface)
563 {
564     func_disp_t *This = FUNCTION_THIS(iface);
565
566     TRACE("(%p)\n", This);
567
568     return IDispatchEx_AddRef(DISPATCHEX(This->obj));
569 }
570
571 static ULONG WINAPI Function_Release(IUnknown *iface)
572 {
573     func_disp_t *This = FUNCTION_THIS(iface);
574
575     TRACE("(%p)\n", This);
576
577     return IDispatchEx_Release(DISPATCHEX(This->obj));
578 }
579
580 static HRESULT function_value(IUnknown *iface, LCID lcid, WORD flags, DISPPARAMS *params,
581         VARIANT *res, EXCEPINFO *ei, IServiceProvider *caller)
582 {
583     func_disp_t *This = FUNCTION_THIS(iface);
584     HRESULT hres;
585
586     switch(flags) {
587     case DISPATCH_METHOD|DISPATCH_PROPERTYGET:
588         if(!res)
589             return E_INVALIDARG;
590     case DISPATCH_METHOD:
591         hres = typeinfo_invoke(This->obj, This->info, flags, params, res, ei);
592         break;
593     default:
594         FIXME("Unimplemented flags %x\n", flags);
595         hres = E_NOTIMPL;
596     }
597
598     return hres;
599 }
600
601 #undef FUNCTION_THIS
602
603 static const IUnknownVtbl FunctionUnkVtbl = {
604     Function_QueryInterface,
605     Function_AddRef,
606     Function_Release
607 };
608
609 static const dispex_static_data_vtbl_t function_dispex_vtbl = {
610     function_value,
611     NULL,
612     NULL
613 };
614
615 static const tid_t function_iface_tids[] = {0};
616
617 static dispex_static_data_t function_dispex = {
618     &function_dispex_vtbl,
619     NULL_tid,
620     NULL,
621     function_iface_tids
622 };
623
624 static func_disp_t *create_func_disp(DispatchEx *obj, func_info_t *info)
625 {
626     func_disp_t *ret;
627
628     ret = heap_alloc_zero(sizeof(func_disp_t));
629     if(!ret)
630         return NULL;
631
632     ret->lpIUnknownVtbl = &FunctionUnkVtbl;
633     init_dispex(&ret->dispex, FUNCUNKNOWN(ret),  &function_dispex);
634     ret->obj = obj;
635     ret->info = info;
636
637     return ret;
638 }
639
640 static HRESULT function_invoke(DispatchEx *This, func_info_t *func, WORD flags, DISPPARAMS *dp, VARIANT *res,
641         EXCEPINFO *ei)
642 {
643     HRESULT hres;
644
645     switch(flags) {
646     case DISPATCH_METHOD|DISPATCH_PROPERTYGET:
647         if(!res)
648             return E_INVALIDARG;
649     case DISPATCH_METHOD:
650         hres = typeinfo_invoke(This, func, flags, dp, res, ei);
651         break;
652     case DISPATCH_PROPERTYGET: {
653         dispex_dynamic_data_t *dynamic_data;
654
655         if(func->id == DISPID_VALUE) {
656             BSTR ret;
657
658             ret = SysAllocString(objectW);
659             if(!ret)
660                 return E_OUTOFMEMORY;
661
662             V_VT(res) = VT_BSTR;
663             V_BSTR(res) = ret;
664             return S_OK;
665         }
666
667         dynamic_data = get_dynamic_data(This, TRUE);
668         if(!dynamic_data)
669             return E_OUTOFMEMORY;
670
671         if(!dynamic_data->func_disps) {
672             dynamic_data->func_disps = heap_alloc_zero(This->data->data->func_disp_cnt * sizeof(func_disp_t*));
673             if(!dynamic_data->func_disps)
674                 return E_OUTOFMEMORY;
675         }
676
677         if(!dynamic_data->func_disps[func->func_disp_idx]) {
678             dynamic_data->func_disps[func->func_disp_idx] = create_func_disp(This, func);
679             if(!dynamic_data->func_disps[func->func_disp_idx])
680                 return E_OUTOFMEMORY;
681         }
682
683         V_VT(res) = VT_DISPATCH;
684         V_DISPATCH(res) = (IDispatch*)DISPATCHEX(&dynamic_data->func_disps[func->func_disp_idx]->dispex);
685         IDispatch_AddRef(V_DISPATCH(res));
686         hres = S_OK;
687         break;
688     }
689     default:
690         FIXME("Unimplemented flags %x\n", flags);
691     case DISPATCH_PROPERTYPUT:
692         hres = E_NOTIMPL;
693     }
694
695     return hres;
696 }
697
698 static HRESULT get_builtin_func(dispex_data_t *data, DISPID id, func_info_t **ret)
699 {
700     int min, max, n;
701
702     min = 0;
703     max = data->func_cnt-1;
704
705     while(min <= max) {
706         n = (min+max)/2;
707
708         if(data->funcs[n].id == id) {
709             *ret = data->funcs+n;
710             return S_OK;
711         }
712
713         if(data->funcs[n].id < id)
714             min = n+1;
715         else
716             max = n-1;
717     }
718
719     WARN("invalid id %x\n", id);
720     return DISP_E_UNKNOWNNAME;
721 }
722
723 #define DISPATCHEX_THIS(iface) DEFINE_THIS(DispatchEx, IDispatchEx, iface)
724
725 static HRESULT WINAPI DispatchEx_QueryInterface(IDispatchEx *iface, REFIID riid, void **ppv)
726 {
727     DispatchEx *This = DISPATCHEX_THIS(iface);
728
729     return IUnknown_QueryInterface(This->outer, riid, ppv);
730 }
731
732 static ULONG WINAPI DispatchEx_AddRef(IDispatchEx *iface)
733 {
734     DispatchEx *This = DISPATCHEX_THIS(iface);
735
736     return IUnknown_AddRef(This->outer);
737 }
738
739 static ULONG WINAPI DispatchEx_Release(IDispatchEx *iface)
740 {
741     DispatchEx *This = DISPATCHEX_THIS(iface);
742
743     return IUnknown_Release(This->outer);
744 }
745
746 static HRESULT WINAPI DispatchEx_GetTypeInfoCount(IDispatchEx *iface, UINT *pctinfo)
747 {
748     DispatchEx *This = DISPATCHEX_THIS(iface);
749
750     TRACE("(%p)->(%p)\n", This, pctinfo);
751
752     *pctinfo = 1;
753     return S_OK;
754 }
755
756 static HRESULT WINAPI DispatchEx_GetTypeInfo(IDispatchEx *iface, UINT iTInfo,
757                                               LCID lcid, ITypeInfo **ppTInfo)
758 {
759     DispatchEx *This = DISPATCHEX_THIS(iface);
760     HRESULT hres;
761
762     TRACE("(%p)->(%u %u %p)\n", This, iTInfo, lcid, ppTInfo);
763
764     hres = get_typeinfo(This->data->disp_tid, ppTInfo);
765     if(FAILED(hres))
766         return hres;
767
768     ITypeInfo_AddRef(*ppTInfo);
769     return S_OK;
770 }
771
772 static HRESULT WINAPI DispatchEx_GetIDsOfNames(IDispatchEx *iface, REFIID riid,
773                                                 LPOLESTR *rgszNames, UINT cNames,
774                                                 LCID lcid, DISPID *rgDispId)
775 {
776     DispatchEx *This = DISPATCHEX_THIS(iface);
777     UINT i;
778     HRESULT hres;
779
780     TRACE("(%p)->(%s %p %u %u %p)\n", This, debugstr_guid(riid), rgszNames, cNames,
781           lcid, rgDispId);
782
783     for(i=0; i < cNames; i++) {
784         hres = IDispatchEx_GetDispID(DISPATCHEX(This), rgszNames[i], 0, rgDispId+i);
785         if(FAILED(hres))
786             return hres;
787     }
788
789     return S_OK;
790 }
791
792 static HRESULT WINAPI DispatchEx_Invoke(IDispatchEx *iface, DISPID dispIdMember,
793                             REFIID riid, LCID lcid, WORD wFlags, DISPPARAMS *pDispParams,
794                             VARIANT *pVarResult, EXCEPINFO *pExcepInfo, UINT *puArgErr)
795 {
796     DispatchEx *This = DISPATCHEX_THIS(iface);
797
798     TRACE("(%p)->(%d %s %d %d %p %p %p %p)\n", This, dispIdMember, debugstr_guid(riid),
799           lcid, wFlags, pDispParams, pVarResult, pExcepInfo, puArgErr);
800
801     return IDispatchEx_InvokeEx(DISPATCHEX(This), dispIdMember, lcid, wFlags,
802                                 pDispParams, pVarResult, pExcepInfo, NULL);
803 }
804
805 static HRESULT WINAPI DispatchEx_GetDispID(IDispatchEx *iface, BSTR bstrName, DWORD grfdex, DISPID *pid)
806 {
807     DispatchEx *This = DISPATCHEX_THIS(iface);
808     dynamic_prop_t *dprop;
809     dispex_data_t *data;
810     int min, max, n, c;
811     HRESULT hres;
812
813     TRACE("(%p)->(%s %x %p)\n", This, debugstr_w(bstrName), grfdex, pid);
814
815     if(grfdex & ~(fdexNameCaseSensitive|fdexNameCaseInsensitive|fdexNameEnsure|fdexNameImplicit|FDEX_VERSION_MASK))
816         FIXME("Unsupported grfdex %x\n", grfdex);
817
818     data = get_dispex_data(This);
819     if(!data)
820         return E_FAIL;
821
822     min = 0;
823     max = data->func_cnt-1;
824
825     while(min <= max) {
826         n = (min+max)/2;
827
828         c = strcmpiW(data->name_table[n]->name, bstrName);
829         if(!c) {
830             if((grfdex & fdexNameCaseSensitive) && strcmpW(data->name_table[n]->name, bstrName))
831                 break;
832
833             *pid = data->name_table[n]->id;
834             return S_OK;
835         }
836
837         if(c > 0)
838             max = n-1;
839         else
840             min = n+1;
841     }
842
843     if(This->data->vtbl && This->data->vtbl->get_dispid) {
844         HRESULT hres;
845
846         hres = This->data->vtbl->get_dispid(This->outer, bstrName, grfdex, pid);
847         if(hres != DISP_E_UNKNOWNNAME)
848             return hres;
849     }
850
851     hres = get_dynamic_prop(This, bstrName, grfdex, &dprop);
852     if(FAILED(hres))
853         return hres;
854
855     *pid = DISPID_DYNPROP_0 + (dprop - This->dynamic_data->props);
856     return S_OK;
857 }
858
859 static HRESULT WINAPI DispatchEx_InvokeEx(IDispatchEx *iface, DISPID id, LCID lcid, WORD wFlags, DISPPARAMS *pdp,
860         VARIANT *pvarRes, EXCEPINFO *pei, IServiceProvider *pspCaller)
861 {
862     DispatchEx *This = DISPATCHEX_THIS(iface);
863     dispex_data_t *data;
864     func_info_t *func;
865     HRESULT hres;
866
867     TRACE("(%p)->(%x %x %x %p %p %p %p)\n", This, id, lcid, wFlags, pdp, pvarRes, pei, pspCaller);
868
869     if(is_custom_dispid(id) && This->data->vtbl && This->data->vtbl->invoke)
870         return This->data->vtbl->invoke(This->outer, id, lcid, wFlags, pdp, pvarRes, pei, pspCaller);
871
872     if(wFlags == DISPATCH_CONSTRUCT) {
873         if(id == DISPID_VALUE) {
874             if(This->data->vtbl && This->data->vtbl->value) {
875                 return This->data->vtbl->value(This->outer, lcid, wFlags, pdp,
876                         pvarRes, pei, pspCaller);
877             }
878             FIXME("DISPATCH_CONSTRUCT flag but missing value function\n");
879             return E_FAIL;
880         }
881         FIXME("DISPATCH_CONSTRUCT flag without DISPID_VALUE\n");
882         return E_FAIL;
883     }
884
885     if(is_dynamic_dispid(id)) {
886         DWORD idx = id - DISPID_DYNPROP_0;
887         VARIANT *var;
888
889         if(!This->dynamic_data || This->dynamic_data->prop_cnt <= idx)
890             return DISP_E_UNKNOWNNAME;
891
892         var = &This->dynamic_data->props[idx].var;
893
894         switch(wFlags) {
895         case DISPATCH_METHOD|DISPATCH_PROPERTYGET:
896             if(!pvarRes)
897                 return E_INVALIDARG;
898         case DISPATCH_METHOD: {
899             DISPID named_arg = DISPID_THIS;
900             DISPPARAMS dp = {NULL, &named_arg, 0, 1};
901             IDispatchEx *dispex;
902
903             if(V_VT(var) != VT_DISPATCH) {
904                 FIXME("invoke vt %d\n", V_VT(var));
905                 return E_NOTIMPL;
906             }
907
908             if(pdp->cNamedArgs) {
909                 FIXME("named args not supported\n");
910                 return E_NOTIMPL;
911             }
912
913             dp.rgvarg = heap_alloc((pdp->cArgs+1)*sizeof(VARIANTARG));
914             if(!dp.rgvarg)
915                 return E_OUTOFMEMORY;
916
917             dp.cArgs = pdp->cArgs+1;
918             memcpy(dp.rgvarg+1, pdp->rgvarg, pdp->cArgs*sizeof(VARIANTARG));
919
920             V_VT(dp.rgvarg) = VT_DISPATCH;
921             V_DISPATCH(dp.rgvarg) = (IDispatch*)DISPATCHEX(This);
922
923             hres = IDispatch_QueryInterface(V_DISPATCH(var), &IID_IDispatchEx, (void**)&dispex);
924             TRACE("%s call\n", debugstr_w(This->dynamic_data->props[idx].name));
925             if(SUCCEEDED(hres)) {
926                 hres = IDispatchEx_InvokeEx(dispex, DISPID_VALUE, lcid, wFlags, &dp, pvarRes, pei, pspCaller);
927                 IDispatchEx_Release(dispex);
928             }else {
929                 ULONG err = 0;
930                 hres = IDispatch_Invoke(V_DISPATCH(var), DISPID_VALUE, &IID_NULL, lcid, wFlags, pdp, pvarRes, pei, &err);
931             }
932             TRACE("%s ret %08x\n", debugstr_w(This->dynamic_data->props[idx].name), hres);
933
934             heap_free(dp.rgvarg);
935             return hres;
936         }
937         case DISPATCH_PROPERTYGET:
938             return VariantCopy(pvarRes, var);
939         case DISPATCH_PROPERTYPUT|DISPATCH_PROPERTYPUTREF:
940         case DISPATCH_PROPERTYPUT:
941             if(pdp->cArgs != 1 || (pdp->cNamedArgs == 1 && *pdp->rgdispidNamedArgs != DISPID_PROPERTYPUT)
942                || pdp->cNamedArgs > 1) {
943                 FIXME("invalid args\n");
944                 return E_INVALIDARG;
945             }
946
947             TRACE("put %s\n", debugstr_variant(pdp->rgvarg));
948             VariantClear(var);
949             return VariantCopy(var, pdp->rgvarg);
950         default:
951             FIXME("unhandled wFlags %x\n", wFlags);
952             return E_NOTIMPL;
953         }
954     }
955
956     data = get_dispex_data(This);
957     if(!data)
958         return E_FAIL;
959
960     hres = get_builtin_func(data, id, &func);
961     if(id == DISPID_VALUE && hres == DISP_E_UNKNOWNNAME)
962         return dispex_value(This, lcid, wFlags, pdp, pvarRes, pei, pspCaller);
963     if(FAILED(hres))
964         return hres;
965
966     if(func->func_disp_idx == -1)
967         hres = typeinfo_invoke(This, func, wFlags, pdp, pvarRes, pei);
968     else
969         hres = function_invoke(This, func, wFlags, pdp, pvarRes, pei);
970
971     return hres;
972 }
973
974 static HRESULT WINAPI DispatchEx_DeleteMemberByName(IDispatchEx *iface, BSTR bstrName, DWORD grfdex)
975 {
976     DispatchEx *This = DISPATCHEX_THIS(iface);
977     FIXME("(%p)->(%s %x)\n", This, debugstr_w(bstrName), grfdex);
978     return E_NOTIMPL;
979 }
980
981 static HRESULT WINAPI DispatchEx_DeleteMemberByDispID(IDispatchEx *iface, DISPID id)
982 {
983     DispatchEx *This = DISPATCHEX_THIS(iface);
984     FIXME("(%p)->(%x)\n", This, id);
985     return E_NOTIMPL;
986 }
987
988 static HRESULT WINAPI DispatchEx_GetMemberProperties(IDispatchEx *iface, DISPID id, DWORD grfdexFetch, DWORD *pgrfdex)
989 {
990     DispatchEx *This = DISPATCHEX_THIS(iface);
991     FIXME("(%p)->(%x %x %p)\n", This, id, grfdexFetch, pgrfdex);
992     return E_NOTIMPL;
993 }
994
995 static HRESULT WINAPI DispatchEx_GetMemberName(IDispatchEx *iface, DISPID id, BSTR *pbstrName)
996 {
997     DispatchEx *This = DISPATCHEX_THIS(iface);
998     dispex_data_t *data;
999     func_info_t *func;
1000     HRESULT hres;
1001
1002     TRACE("(%p)->(%x %p)\n", This, id, pbstrName);
1003
1004     if(is_dynamic_dispid(id)) {
1005         DWORD idx = id - DISPID_DYNPROP_0;
1006
1007         if(!This->dynamic_data || This->dynamic_data->prop_cnt <= idx)
1008             return DISP_E_UNKNOWNNAME;
1009
1010         *pbstrName = SysAllocString(This->dynamic_data->props[idx].name);
1011         if(!*pbstrName)
1012             return E_OUTOFMEMORY;
1013
1014         return S_OK;
1015     }
1016
1017     data = get_dispex_data(This);
1018     if(!data)
1019         return E_FAIL;
1020
1021     hres = get_builtin_func(data, id, &func);
1022     if(FAILED(hres))
1023         return hres;
1024
1025     *pbstrName = SysAllocString(func->name);
1026     if(!*pbstrName)
1027         return E_OUTOFMEMORY;
1028     return S_OK;
1029 }
1030
1031 static HRESULT WINAPI DispatchEx_GetNextDispID(IDispatchEx *iface, DWORD grfdex, DISPID id, DISPID *pid)
1032 {
1033     DispatchEx *This = DISPATCHEX_THIS(iface);
1034     dispex_data_t *data;
1035     func_info_t *func;
1036     HRESULT hres;
1037
1038     TRACE("(%p)->(%x %x %p)\n", This, grfdex, id, pid);
1039
1040     if(is_dynamic_dispid(id)) {
1041         DWORD idx = id - DISPID_DYNPROP_0;
1042
1043         if(!This->dynamic_data || This->dynamic_data->prop_cnt <= idx)
1044             return DISP_E_UNKNOWNNAME;
1045
1046         if(idx+1 == This->dynamic_data->prop_cnt) {
1047             *pid = DISPID_STARTENUM;
1048             return S_FALSE;
1049         }
1050
1051         *pid = id+1;
1052         return S_OK;
1053     }
1054
1055     data = get_dispex_data(This);
1056     if(!data)
1057         return E_FAIL;
1058
1059     if(id == DISPID_STARTENUM) {
1060         func = data->funcs;
1061     }else {
1062         hres = get_builtin_func(data, id, &func);
1063         if(FAILED(hres))
1064             return hres;
1065         func++;
1066     }
1067
1068     while(func < data->funcs+data->func_cnt) {
1069         /* FIXME: Skip hidden properties */
1070         if(func->func_disp_idx == -1) {
1071             *pid = func->id;
1072             return S_OK;
1073         }
1074         func++;
1075     }
1076
1077     if(This->dynamic_data && This->dynamic_data->prop_cnt) {
1078         *pid = DISPID_DYNPROP_0;
1079         return S_OK;
1080     }
1081
1082     *pid = DISPID_STARTENUM;
1083     return S_FALSE;
1084 }
1085
1086 static HRESULT WINAPI DispatchEx_GetNameSpaceParent(IDispatchEx *iface, IUnknown **ppunk)
1087 {
1088     DispatchEx *This = DISPATCHEX_THIS(iface);
1089     FIXME("(%p)->(%p)\n", This, ppunk);
1090     return E_NOTIMPL;
1091 }
1092
1093 #undef DISPATCHEX_THIS
1094
1095 static IDispatchExVtbl DispatchExVtbl = {
1096     DispatchEx_QueryInterface,
1097     DispatchEx_AddRef,
1098     DispatchEx_Release,
1099     DispatchEx_GetTypeInfoCount,
1100     DispatchEx_GetTypeInfo,
1101     DispatchEx_GetIDsOfNames,
1102     DispatchEx_Invoke,
1103     DispatchEx_GetDispID,
1104     DispatchEx_InvokeEx,
1105     DispatchEx_DeleteMemberByName,
1106     DispatchEx_DeleteMemberByDispID,
1107     DispatchEx_GetMemberProperties,
1108     DispatchEx_GetMemberName,
1109     DispatchEx_GetNextDispID,
1110     DispatchEx_GetNameSpaceParent
1111 };
1112
1113 BOOL dispex_query_interface(DispatchEx *This, REFIID riid, void **ppv)
1114 {
1115     static const IID IID_UndocumentedScriptIface =
1116         {0x719c3050,0xf9d3,0x11cf,{0xa4,0x93,0x00,0x40,0x05,0x23,0xa8,0xa0}};
1117     static const IID IID_IDispatchJS =
1118         {0x719c3050,0xf9d3,0x11cf,{0xa4,0x93,0x00,0x40,0x05,0x23,0xa8,0xa6}};
1119
1120     if(IsEqualGUID(&IID_IDispatch, riid)) {
1121         TRACE("(%p)->(IID_IDispatch %p)\n", This, ppv);
1122         *ppv = DISPATCHEX(This);
1123     }else if(IsEqualGUID(&IID_IDispatchEx, riid)) {
1124         TRACE("(%p)->(IID_IDispatchEx %p)\n", This, ppv);
1125         *ppv = DISPATCHEX(This);
1126     }else if(IsEqualGUID(&IID_IDispatchJS, riid)) {
1127         TRACE("(%p)->(IID_IDispatchJS %p) returning NULL\n", This, ppv);
1128         *ppv = NULL;
1129     }else if(IsEqualGUID(&IID_UndocumentedScriptIface, riid)) {
1130         TRACE("(%p)->(IID_UndocumentedScriptIface %p) returning NULL\n", This, ppv);
1131         *ppv = NULL;
1132     }else {
1133         return FALSE;
1134     }
1135
1136     if(*ppv)
1137         IUnknown_AddRef((IUnknown*)*ppv);
1138     return TRUE;
1139 }
1140
1141 void release_dispex(DispatchEx *This)
1142 {
1143     dynamic_prop_t *prop;
1144
1145     if(!This->dynamic_data)
1146         return;
1147
1148     for(prop = This->dynamic_data->props; prop < This->dynamic_data->props + This->dynamic_data->prop_cnt; prop++) {
1149         VariantClear(&prop->var);
1150         heap_free(prop->name);
1151     }
1152
1153     heap_free(This->dynamic_data->props);
1154
1155     if(This->dynamic_data->func_disps) {
1156         unsigned i;
1157
1158         for(i=0; i < This->data->data->func_disp_cnt; i++) {
1159             if(This->dynamic_data->func_disps[i]) {
1160                 release_dispex(&This->dynamic_data->func_disps[i]->dispex);
1161                 heap_free(This->dynamic_data->func_disps[i]);
1162             }
1163         }
1164
1165         heap_free(This->dynamic_data->func_disps);
1166     }
1167
1168     heap_free(This->dynamic_data);
1169 }
1170
1171 void init_dispex(DispatchEx *dispex, IUnknown *outer, dispex_static_data_t *data)
1172 {
1173     dispex->lpIDispatchExVtbl = &DispatchExVtbl;
1174     dispex->outer = outer;
1175     dispex->data = data;
1176     dispex->dynamic_data = NULL;
1177 }