user32: Added tests for CharUpper and CharLower.
[wine] / tools / widl / typegen.c
1 /*
2  * Format String Generator for IDL Compiler
3  *
4  * Copyright 2005-2006 Eric Kohl
5  * Copyright 2005-2006 Robert Shearman
6  *
7  * This library is free software; you can redistribute it and/or
8  * modify it under the terms of the GNU Lesser General Public
9  * License as published by the Free Software Foundation; either
10  * version 2.1 of the License, or (at your option) any later version.
11  *
12  * This library is distributed in the hope that it will be useful,
13  * but WITHOUT ANY WARRANTY; without even the implied warranty of
14  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
15  * Lesser General Public License for more details.
16  *
17  * You should have received a copy of the GNU Lesser General Public
18  * License along with this library; if not, write to the Free Software
19  * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
20  */
21
22 #include "config.h"
23 #include "wine/port.h"
24
25 #include <stdio.h>
26 #include <stdlib.h>
27 #ifdef HAVE_UNISTD_H
28 # include <unistd.h>
29 #endif
30 #include <string.h>
31 #include <assert.h>
32 #include <ctype.h>
33 #include <signal.h>
34 #include <limits.h>
35
36 #include "widl.h"
37 #include "utils.h"
38 #include "parser.h"
39 #include "header.h"
40 #include "windef.h"
41 #include "wine/list.h"
42
43 #include "widl.h"
44 #include "typegen.h"
45
46 static const func_t *current_func;
47 static const type_t *current_structure;
48
49 /* name of the structure variable for structure callbacks */
50 #define STRUCT_EXPR_EVAL_VAR "pS"
51
52 static struct list expr_eval_routines = LIST_INIT(expr_eval_routines);
53
54 struct expr_eval_routine
55 {
56     struct list entry;
57     const type_t *structure;
58     size_t structure_size;
59     const expr_t *expr;
60 };
61
62 static size_t type_memsize(const type_t *t, int ptr_level, const expr_t *array);
63 static size_t fields_memsize(const var_t *v);
64
65 static int compare_expr(const expr_t *a, const expr_t *b)
66 {
67     int ret;
68
69     if (a->type != b->type)
70         return a->type - b->type;
71
72     switch (a->type)
73     {
74         case EXPR_NUM:
75         case EXPR_HEXNUM:
76             return a->u.lval - b->u.lval;
77         case EXPR_IDENTIFIER:
78             return strcmp(a->u.sval, b->u.sval);
79         case EXPR_COND:
80             ret = compare_expr(a->ref, b->ref);
81             if (ret != 0)
82                 return ret;
83             ret = compare_expr(a->u.ext, b->u.ext);
84             if (ret != 0)
85                 return ret;
86             return compare_expr(a->ext2, b->ext2);
87         case EXPR_OR:
88         case EXPR_AND:
89         case EXPR_ADD:
90         case EXPR_SUB:
91         case EXPR_MUL:
92         case EXPR_DIV:
93         case EXPR_SHL:
94         case EXPR_SHR:
95             ret = compare_expr(a->ref, b->ref);
96             if (ret != 0)
97                 return ret;
98             return compare_expr(a->u.ext, b->u.ext);
99         case EXPR_NOT:
100         case EXPR_NEG:
101         case EXPR_PPTR:
102         case EXPR_CAST:
103         case EXPR_SIZEOF:
104             return compare_expr(a->ref, b->ref);
105         case EXPR_VOID:
106             return 0;
107     }
108     return -1;
109 }
110
111 #define WRITE_FCTYPE(file, fctype, typestring_offset) \
112     do { \
113         if (file) \
114             fprintf(file, "/* %2u */\n", typestring_offset); \
115         print_file((file), 2, "0x%02x,    /* " #fctype " */\n", RPC_##fctype); \
116     } \
117     while (0)
118
119 static int print_file(FILE *file, int indent, const char *format, ...)
120 {
121     va_list va;
122     int i, r;
123
124     if (!file) return 0;
125
126     va_start(va, format);
127     for (i = 0; i < indent; i++)
128         fprintf(file, "    ");
129     r = vfprintf(file, format, va);
130     va_end(va);
131     return r;
132 }
133
134 static inline int type_has_ref(const type_t *type)
135 {
136     return (type->type == 0 && type->ref);
137 }
138
139 static inline int is_base_type(unsigned char type)
140 {
141     switch (type)
142     {
143     case RPC_FC_BYTE:
144     case RPC_FC_CHAR:
145     case RPC_FC_USMALL:
146     case RPC_FC_SMALL:
147     case RPC_FC_WCHAR:
148     case RPC_FC_USHORT:
149     case RPC_FC_SHORT:
150     case RPC_FC_ULONG:
151     case RPC_FC_LONG:
152     case RPC_FC_HYPER:
153     case RPC_FC_IGNORE:
154     case RPC_FC_FLOAT:
155     case RPC_FC_DOUBLE:
156     case RPC_FC_ENUM16:
157     case RPC_FC_ENUM32:
158     case RPC_FC_ERROR_STATUS_T:
159     case RPC_FC_BIND_PRIMITIVE:
160         return TRUE;
161
162     default:
163         return FALSE;
164     }
165 }
166
167 static size_t write_procformatstring_var(FILE *file, int indent,
168     const var_t *var, int is_return, unsigned int *type_offset)
169 {
170     size_t size;
171     int ptr_level = var->ptr_level;
172     const type_t *type = var->type;
173
174     int is_in = is_attr(var->attrs, ATTR_IN);
175     int is_out = is_attr(var->attrs, ATTR_OUT);
176
177     if (!is_in && !is_out) is_in = TRUE;
178
179     if (ptr_level == 0 && type_has_ref(type))
180         type = type->ref;
181
182     if (ptr_level == 0 && !var->array && is_base_type(type->type))
183     {
184         if (is_return)
185             print_file(file, indent, "0x53,    /* FC_RETURN_PARAM_BASETYPE */\n");
186         else
187             print_file(file, indent, "0x4e,    /* FC_IN_PARAM_BASETYPE */\n");
188
189         switch(type->type)
190         {
191 #define CASE_BASETYPE(fctype) \
192         case RPC_##fctype: \
193             print_file(file, indent, "0x%02x,    /* " #fctype " */\n", RPC_##fctype); \
194             size = 2; /* includes param type prefix */ \
195             break
196
197         CASE_BASETYPE(FC_BYTE);
198         CASE_BASETYPE(FC_CHAR);
199         CASE_BASETYPE(FC_WCHAR);
200         CASE_BASETYPE(FC_USHORT);
201         CASE_BASETYPE(FC_SHORT);
202         CASE_BASETYPE(FC_ULONG);
203         CASE_BASETYPE(FC_LONG);
204         CASE_BASETYPE(FC_HYPER);
205         CASE_BASETYPE(FC_IGNORE);
206         CASE_BASETYPE(FC_USMALL);
207         CASE_BASETYPE(FC_SMALL);
208         CASE_BASETYPE(FC_FLOAT);
209         CASE_BASETYPE(FC_DOUBLE);
210         CASE_BASETYPE(FC_ERROR_STATUS_T);
211 #undef CASE_BASETYPE
212
213         case RPC_FC_BIND_PRIMITIVE:
214             print_file(file, indent, "0x%02x,    /* FC_IGNORE */\n", RPC_FC_IGNORE);
215             size = 2; /* includes param type prefix */
216             break;
217
218         default:
219             error("Unknown/unsupported type: %s (0x%02x)\n", var->name, type->type);
220             size = 0;
221         }
222     }
223     else
224     {
225         if (is_return)
226             print_file(file, indent, "0x52,    /* FC_RETURN_PARAM */\n");
227         else if (is_in && is_out)
228             print_file(file, indent, "0x50,    /* FC_IN_OUT_PARAM */\n");
229         else if (is_out)
230             print_file(file, indent, "0x51,    /* FC_OUT_PARAM */\n");
231         else
232             print_file(file, indent, "0x4d,    /* FC_IN_PARAM */\n");
233
234         print_file(file, indent, "0x01,\n");
235         print_file(file, indent, "NdrFcShort(0x%x),\n", *type_offset);
236         size = 4; /* includes param type prefix */
237     }
238     *type_offset += get_size_typeformatstring_var(var);
239     return size;
240 }
241
242 void write_procformatstring(FILE *file, type_t *iface)
243 {
244     int indent = 0;
245     var_t *var;
246     unsigned int type_offset = 2;
247
248     print_file(file, indent, "static const MIDL_PROC_FORMAT_STRING __MIDL_ProcFormatString =\n");
249     print_file(file, indent, "{\n");
250     indent++;
251     print_file(file, indent, "0,\n");
252     print_file(file, indent, "{\n");
253     indent++;
254
255     if (iface->funcs)
256     {
257         func_t *func = iface->funcs;
258         while (NEXT_LINK(func)) func = NEXT_LINK(func);
259         for (; func; func = PREV_LINK(func))
260         {
261             /* emit argument data */
262             if (func->args)
263             {
264                 var = func->args;
265                 while (NEXT_LINK(var)) var = NEXT_LINK(var);
266                 while (var)
267                 {
268                     write_procformatstring_var(file, indent, var, FALSE,
269                                                &type_offset);
270
271                     var = PREV_LINK(var);
272                 }
273             }
274
275             /* emit return value data */
276             var = func->def;
277             if (is_void(var->type, NULL))
278             {
279                 print_file(file, indent, "0x5b,    /* FC_END */\n");
280                 print_file(file, indent, "0x5c,    /* FC_PAD */\n");
281             }
282             else
283                 write_procformatstring_var(file, indent, var, TRUE,
284                                            &type_offset);
285         }
286     }
287
288     print_file(file, indent, "0x0\n");
289     indent--;
290     print_file(file, indent, "}\n");
291     indent--;
292     print_file(file, indent, "};\n");
293     print_file(file, indent, "\n");
294 }
295
296 /* write conformance / variance descriptor */
297 static size_t write_conf_or_var_desc(FILE *file, const func_t *func, const type_t *structure, const expr_t *expr)
298 {
299     unsigned char operator_type = 0;
300     const char *operator_string = "no operators";
301     const expr_t *subexpr = expr;
302     unsigned char correlation_type;
303
304     if (!file) return 4; /* optimisation for sizing pass */
305
306     if (expr->is_const)
307     {
308         if (expr->cval > UCHAR_MAX * (USHRT_MAX + 1) + USHRT_MAX)
309             error("write_conf_or_var_desc: constant value %ld is greater than "
310                   "the maximum constant size of %d\n", expr->cval,
311                   UCHAR_MAX * (USHRT_MAX + 1) + USHRT_MAX);
312
313         print_file(file, 2, "0x%x, /* Corr desc: constant, val = %ld */\n",
314                    RPC_FC_CONSTANT_CONFORMANCE, expr->cval);
315         print_file(file, 2, "0x%x,\n", expr->cval & ~USHRT_MAX);
316         print_file(file, 2, "NdrFcShort(0x%x),\n", expr->cval & USHRT_MAX);
317
318         return 4;
319     }
320
321     switch (subexpr->type)
322     {
323     case EXPR_PPTR:
324         subexpr = subexpr->ref;
325         operator_type = RPC_FC_DEREFERENCE;
326         operator_string = "FC_DEREFERENCE";
327         break;
328     case EXPR_DIV:
329         if (subexpr->u.ext->is_const && (subexpr->u.ext->cval == 2))
330         {
331             subexpr = subexpr->ref;
332             operator_type = RPC_FC_DIV_2;
333             operator_string = "FC_DIV_2";
334         }
335         break;
336     case EXPR_MUL:
337         if (subexpr->u.ext->is_const && (subexpr->u.ext->cval == 2))
338         {
339             subexpr = subexpr->ref;
340             operator_type = RPC_FC_MULT_2;
341             operator_string = "FC_MULT_2";
342         }
343         break;
344     case EXPR_SUB:
345         if (subexpr->u.ext->is_const && (subexpr->u.ext->cval == 1))
346         {
347             subexpr = subexpr->ref;
348             operator_type = RPC_FC_SUB_1;
349             operator_string = "FC_SUB_1";
350         }
351         break;
352     case EXPR_ADD:
353         if (subexpr->u.ext->is_const && (subexpr->u.ext->cval == 1))
354         {
355             subexpr = subexpr->ref;
356             operator_type = RPC_FC_ADD_1;
357             operator_string = "FC_ADD_1";
358         }
359         break;
360     default:
361         break;
362     }
363
364     if (subexpr->type == EXPR_IDENTIFIER)
365     {
366         const type_t *correlation_variable = NULL;
367         unsigned char param_type = 0;
368         const char *param_type_string = NULL;
369         size_t offset;
370
371         if (structure)
372         {
373             const var_t *var;
374
375             for (offset = 0, var = structure->fields; var; var = NEXT_LINK(var))
376             {
377                 offset -= type_memsize(var->type, var->ptr_level, var->array);
378                 if (!strcmp(var->name, subexpr->u.sval))
379                 {
380                     correlation_variable = var->type;
381                     break;
382                 }
383             }
384             if (!correlation_variable)
385                 error("write_conf_or_var_desc: couldn't find variable %s in structure\n",
386                       subexpr->u.sval);
387
388             correlation_type = RPC_FC_NORMAL_CONFORMANCE;
389         }
390         else
391         {
392             const var_t *var = func->args;
393
394             while (NEXT_LINK(var)) var = NEXT_LINK(var);
395             /* FIXME: not all stack variables are sizeof(void *) */
396             for (offset = 0; var; offset += sizeof(void *), var = PREV_LINK(var))
397             {
398                 if (!strcmp(var->name, subexpr->u.sval))
399                 {
400                     correlation_variable = var->type;
401                     break;
402                 }
403             }
404             if (!correlation_variable)
405                 error("write_conf_or_var_desc: couldn't find variable %s in function\n",
406                     subexpr->u.sval);
407
408             correlation_type = RPC_FC_TOP_LEVEL_CONFORMANCE;
409         }
410
411         while (type_has_ref(correlation_variable))
412             correlation_variable = correlation_variable->ref;
413
414         switch (correlation_variable->type)
415         {
416         case RPC_FC_CHAR:
417         case RPC_FC_SMALL:
418             param_type = RPC_FC_SMALL;
419             param_type_string = "FC_SMALL";
420             break;
421         case RPC_FC_BYTE:
422         case RPC_FC_USMALL:
423             param_type = RPC_FC_USMALL;
424             param_type_string = "FC_USMALL";
425             break;
426         case RPC_FC_WCHAR:
427         case RPC_FC_SHORT:
428             param_type = RPC_FC_SHORT;
429             param_type_string = "FC_SHORT";
430             break;
431         case RPC_FC_USHORT:
432             param_type = RPC_FC_USHORT;
433             param_type_string = "FC_USHORT";
434             break;
435         case RPC_FC_LONG:
436             param_type = RPC_FC_LONG;
437             param_type_string = "FC_LONG";
438             break;
439         case RPC_FC_ULONG:
440             param_type = RPC_FC_ULONG;
441             param_type_string = "FC_ULONG";
442             break;
443         default:
444             error("write_conf_or_var_desc: conformance variable type not supported 0x%x\n",
445                 correlation_variable->type);
446         }
447
448         print_file(file, 2, "0x%x, /* Corr desc: %s%s */\n",
449                 correlation_type | param_type,
450                 correlation_type == RPC_FC_TOP_LEVEL_CONFORMANCE ? "parameter, " : "",
451                 param_type_string);
452         print_file(file, 2, "0x%x, /* %s */\n", operator_type, operator_string);
453         print_file(file, 2, "NdrFcShort(0x%x), /* %soffset = %d */\n",
454                    offset,
455                    correlation_type == RPC_FC_TOP_LEVEL_CONFORMANCE ? "x86 stack size / " : "",
456                    offset);
457     }
458     else
459     {
460         unsigned int callback_offset = 0;
461
462         if (structure)
463         {
464             struct expr_eval_routine *eval;
465             int found = 0;
466
467             LIST_FOR_EACH_ENTRY(eval, &expr_eval_routines, struct expr_eval_routine, entry)
468             {
469                 if (!strcmp(eval->structure->name, structure->name) &&
470                     !compare_expr(eval->expr, expr))
471                 {
472                     found = 1;
473                     break;
474                 }
475                 callback_offset++;
476             }
477
478             if (!found)
479             {
480                 eval = xmalloc(sizeof(*eval));
481                 eval->structure = structure;
482                 eval->structure_size = fields_memsize(structure->fields);
483                 eval->expr = expr;
484                 list_add_tail(&expr_eval_routines, &eval->entry);
485             }
486
487             correlation_type = RPC_FC_NORMAL_CONFORMANCE;
488         }
489         else
490         {
491             error("write_conf_or_var_desc: top-level callback conformance unimplemented\n");
492             correlation_type = RPC_FC_TOP_LEVEL_CONFORMANCE;
493         }
494
495         if (callback_offset > USHRT_MAX)
496             error("Maximum number of callback routines reached\n");
497
498         print_file(file, 2, "0x%x, /* Corr desc: %s */\n",
499                    correlation_type,
500                    correlation_type == RPC_FC_TOP_LEVEL_CONFORMANCE ? "parameter" : "");
501         print_file(file, 2, "0x%x, /* %s */\n", RPC_FC_CALLBACK, "FC_CALLBACK");
502         print_file(file, 2, "NdrFcShort(0x%x), /* %u */\n", callback_offset, callback_offset);
503     }
504     return 4;
505 }
506
507 static size_t fields_memsize(const var_t *v)
508 {
509     size_t size = 0;
510     const var_t *first = v;
511     if (!v) return 0;
512     while (NEXT_LINK(v)) v = NEXT_LINK(v);
513     while (v) {
514         size += type_memsize(v->type, v->ptr_level, v->array);
515         if (v == first) break;
516         v = PREV_LINK(v);
517     }
518     return size;
519 }
520
521 static size_t type_memsize(const type_t *t, int ptr_level, const expr_t *array)
522 {
523     size_t size = 0;
524
525     if (ptr_level)
526         return sizeof(void *);
527
528     if (type_has_ref(t))
529         return type_memsize(t->ref, 0 /* FIXME */, NULL);
530
531     switch (t->type)
532     {
533     case RPC_FC_BYTE:
534     case RPC_FC_CHAR:
535     case RPC_FC_USMALL:
536     case RPC_FC_SMALL:
537         size = 1;
538         break;
539     case RPC_FC_WCHAR:
540     case RPC_FC_USHORT:
541     case RPC_FC_SHORT:
542     case RPC_FC_ENUM16:
543         size = 2;
544         break;
545     case RPC_FC_ULONG:
546     case RPC_FC_LONG:
547     case RPC_FC_ERROR_STATUS_T:
548     case RPC_FC_ENUM32:
549     case RPC_FC_FLOAT:
550         size = 4;
551         break;
552     case RPC_FC_HYPER:
553     case RPC_FC_DOUBLE:
554         size = 8;
555         break;
556     case RPC_FC_STRUCT:
557     case RPC_FC_CVSTRUCT:
558     case RPC_FC_CPSTRUCT:
559     case RPC_FC_CSTRUCT:
560     case RPC_FC_PSTRUCT:
561     case RPC_FC_BOGUS_STRUCT:
562     case RPC_FC_ENCAPSULATED_UNION:
563     case RPC_FC_NON_ENCAPSULATED_UNION:
564         size = fields_memsize(t->fields);
565         break;
566     default:
567         error("type_memsize: Unknown type %d\n", t->type);
568         size = 0;
569     }
570
571     if (array)
572     {
573         if (array->is_const)
574             size *= array->cval;
575         else
576             size = 0;
577     }
578
579     return size;
580 }
581
582 size_t get_type_memsize(const type_t *type)
583 {
584     return type_memsize(type, 0, NULL);
585 }
586
587 static int write_pointers(FILE *file, const attr_t *attrs,
588                           const type_t *type, int ptr_level,
589                           const expr_t *array, int level,
590                           size_t *typestring_offset)
591 {
592     int pointers_written = 0;
593     const var_t *v;
594
595     /* don't generate a pointer for first-level arrays since we want to
596     * descend into them to write their pointers, not stop here */
597     if ((level == 0 || ptr_level == 0) && is_array_type(attrs, ptr_level, array))
598     {
599         return write_pointers(file, NULL, type, 0, NULL, level + 1, typestring_offset);
600     }
601
602     if (ptr_level != 0)
603     {
604         /* FIXME: only general algorithm implemented, not the actual writing */
605         error("write_pointers: Writing type format string for pointer is unimplemented\n");
606         return 1;
607     }
608
609     /* FIXME: search through all refs for pointers too */
610     while(type_has_ref(type))
611         type = type->ref;
612
613     switch (type->type)
614     {
615         /* note: don't descend into complex structures or unions since these
616          * will always be generated as a separate type */
617         case RPC_FC_STRUCT:
618         case RPC_FC_CVSTRUCT:
619         case RPC_FC_CPSTRUCT:
620         case RPC_FC_CSTRUCT:
621         case RPC_FC_PSTRUCT:
622             v = type->fields;
623             if (!v) break;
624             while (NEXT_LINK(v)) v = NEXT_LINK(v);
625             for (; v; v = PREV_LINK(v))
626                 pointers_written += write_pointers(file, v->attrs, v->type,
627                                                    v->ptr_level, v->array,
628                                                    level + 1,
629                                                    typestring_offset);
630
631             break;
632
633         default:
634             /* nothing to do */
635             break;
636     }
637
638     return pointers_written;
639 }
640
641 static size_t write_pointer_description(FILE *file, const attr_t *attrs,
642                                         const type_t *type, int ptr_level,
643                                         const expr_t *array, int level,
644                                         size_t typestring_offset)
645 {
646     size_t size = 0;
647     const var_t *v;
648
649     /* don't generate a pointer for first-level arrays since we want to
650      * descend into them to write their pointers, not stop here */
651     if ((level == 0 || ptr_level == 0) && is_array_type(attrs, ptr_level, array))
652     {
653         return write_pointer_description(file, NULL, type, 0, NULL,
654                                          level + 1, typestring_offset);
655     }
656
657     if (ptr_level != 0)
658     {
659         /* FIXME: only general algorithm implemented, not the actual writing */
660         error("write_pointer_description: Writing pointer description is unimplemented\n");
661         return 0;
662     }
663
664     /* FIXME: search through all refs for pointers too */
665
666     switch (type->type)
667     {
668         /* note: don't descend into complex structures or unions since these
669          * will always be generated as a separate type */
670         case RPC_FC_STRUCT:
671         case RPC_FC_CVSTRUCT:
672         case RPC_FC_CPSTRUCT:
673         case RPC_FC_CSTRUCT:
674         case RPC_FC_PSTRUCT:
675             v = type->fields;
676             if (!v) break;
677             while (NEXT_LINK(v)) v = NEXT_LINK(v);
678             for (; v; v = PREV_LINK(v))
679                 size += write_pointer_description(file, v->attrs, v->type,
680                                                   v->ptr_level, v->array,
681                                                   level + 1,
682                                                   typestring_offset);
683
684             break;
685
686         default:
687             /* nothing to do */
688             break;
689     }
690
691     return size;
692 }
693
694 static size_t write_string_tfs(FILE *file, const attr_t *attrs,
695                                const type_t *type, const expr_t *array,
696                                const char *name, size_t *typestring_offset)
697 {
698     const expr_t *size_is = get_attrp(attrs, ATTR_SIZEIS);
699     int has_size = size_is && (size_is->type != EXPR_VOID);
700     size_t start_offset = *typestring_offset;
701     unsigned char flags = 0;
702     int pointer_type = get_attrv(attrs, ATTR_POINTERTYPE);
703     if (!pointer_type)
704         pointer_type = RPC_FC_RP;
705
706     if (!get_attrp(attrs, ATTR_SIZEIS))
707         flags |= RPC_FC_P_SIMPLEPOINTER;
708
709     while (type_has_ref(type))
710         type = type->ref;
711
712     if ((type->type != RPC_FC_BYTE) && (type->type != RPC_FC_CHAR) && (type->type != RPC_FC_WCHAR))
713     {
714         error("write_string_tfs: Unimplemented for type 0x%x of name: %s\n", type->type, name);
715         return start_offset;
716     }
717
718     print_file(file, 2,"0x%x, 0x%x,    /* %s%s */\n",
719                pointer_type, flags,
720                pointer_type == RPC_FC_FP ? "FC_FP" : (pointer_type == RPC_FC_UP ? "FC_UP" : "FC_RP"),
721                (flags & RPC_FC_P_SIMPLEPOINTER) ? " [simple_pointer]" : "");
722     *typestring_offset += 2;
723
724     if (!(flags & RPC_FC_P_SIMPLEPOINTER))
725     {
726         print_file(file, 2, "NdrFcShort(0x2),\n");
727         *typestring_offset += 2;
728     }
729
730     if (array && array->is_const)
731     {
732         if (array->cval > USHRT_MAX)
733             error("array size for parameter %s exceeds %d bytes by %ld bytes\n",
734                   name, USHRT_MAX, array->cval - USHRT_MAX);
735
736         if (type->type == RPC_FC_CHAR)
737             WRITE_FCTYPE(file, FC_CSTRING, *typestring_offset);
738         else
739             WRITE_FCTYPE(file, FC_WSTRING, *typestring_offset);
740         print_file(file, 2, "0x%x, /* FC_PAD */\n", RPC_FC_PAD);
741         *typestring_offset += 2;
742
743         print_file(file, 2, "NdrFcShort(0x%x), /* %d */\n", array->cval, array->cval);
744         *typestring_offset += 2;
745
746         return start_offset;
747     }
748     else if (has_size)
749     {
750         if (type->type == RPC_FC_CHAR)
751             WRITE_FCTYPE(file, FC_C_CSTRING, *typestring_offset);
752         else
753             WRITE_FCTYPE(file, FC_C_WSTRING, *typestring_offset);
754         print_file(file, 2, "0x%x, /* FC_STRING_SIZED */\n", RPC_FC_STRING_SIZED);
755         *typestring_offset += 2;
756
757         *typestring_offset += write_conf_or_var_desc(file, current_func, NULL, size_is);
758
759         return start_offset;
760     }
761     else
762     {
763         if (type->type == RPC_FC_CHAR)
764             WRITE_FCTYPE(file, FC_C_CSTRING, *typestring_offset);
765         else
766             WRITE_FCTYPE(file, FC_C_WSTRING, *typestring_offset);
767         print_file(file, 2, "0x%x, /* FC_PAD */\n", RPC_FC_PAD);
768         *typestring_offset += 2;
769
770         return start_offset;
771     }
772 }
773
774 static size_t write_array_tfs(FILE *file, const attr_t *attrs,
775                               const type_t *type, const expr_t *array,
776                               const char *name, size_t *typestring_offset)
777 {
778     const expr_t *length_is = get_attrp(attrs, ATTR_LENGTHIS);
779     const expr_t *size_is = get_attrp(attrs, ATTR_SIZEIS);
780     int has_length = length_is && (length_is->type != EXPR_VOID);
781     int has_size = (size_is && (size_is->type != EXPR_VOID)) || !array->is_const;
782     size_t start_offset;
783     int pointer_type = get_attrv(attrs, ATTR_POINTERTYPE);
784     if (!pointer_type)
785         pointer_type = RPC_FC_RP;
786
787     print_file(file, 2, "0x%x, 0x00,    /* %s */\n",
788                pointer_type,
789                pointer_type == RPC_FC_FP ? "FC_FP" : (pointer_type == RPC_FC_UP ? "FC_UP" : "FC_RP"));
790     print_file(file, 2, "NdrFcShort(0x2),\n");
791     *typestring_offset += 4;
792
793     if (array && NEXT_LINK(array)) /* multi-dimensional array */
794     {
795         error("write_array_tfs: Multi-dimensional arrays not implemented yet (param %s)\n", name);
796         return 0;
797     }
798     else
799     {
800         size_t pointer_start_offset = *typestring_offset;
801         int has_pointer = 0;
802
803         if (write_pointers(file, attrs, type, 0, array, 0, typestring_offset) > 0)
804             has_pointer = 1;
805
806         start_offset = *typestring_offset;
807
808         if (!has_length && !has_size)
809         {
810             /* fixed array */
811             size_t size = type_memsize(type, 0, array);
812             if (size < USHRT_MAX)
813             {
814                 WRITE_FCTYPE(file, FC_SMFARRAY, *typestring_offset);
815                 /* alignment */
816                 print_file(file, 2, "0x%x, /* 0 */\n", 0);
817                 /* size */
818                 print_file(file, 2, "NdrFcShort(0x%x), /* %d */\n", size, size);
819                 *typestring_offset += 4;
820             }
821             else
822             {
823                 WRITE_FCTYPE(file, FC_LGFARRAY, *typestring_offset);
824                 /* alignment */
825                 print_file(file, 2, "0x%x, /* 0 */\n", 0);
826                 /* size */
827                 print_file(file, 2, "NdrFcLong(0x%x), /* %d */\n", size, size);
828                 *typestring_offset += 6;
829             }
830
831             if (has_pointer)
832             {
833                 print_file(file, 2, "0x%x, /* FC_PP */\n", RPC_FC_PP);
834                 print_file(file, 2, "0x%x, /* FC_PAD */\n", RPC_FC_PAD);
835                 *typestring_offset += 2;
836                 *typestring_offset = write_pointer_description(file, attrs,
837                     type, 0, array, 0, pointer_start_offset);
838                 print_file(file, 2, "0x%x, /* FC_END */\n", RPC_FC_END);
839                 *typestring_offset += 1;
840             }
841
842             print_file(file, 2, "0x0, /* FIXME: write out conversion data */\n");
843             print_file(file, 2, "0x%x, /* FC_END */\n", RPC_FC_END);
844             *typestring_offset += 2;
845
846             return start_offset;
847         }
848         else if (has_length && !has_size)
849         {
850             /* varying array */
851             size_t element_size = type_memsize(type, 0, NULL);
852             size_t elements = array->cval;
853             size_t total_size = element_size * elements;
854
855             if (total_size < USHRT_MAX)
856             {
857                 WRITE_FCTYPE(file, FC_SMVARRAY, *typestring_offset);
858                 /* alignment */
859                 print_file(file, 2, "0x%x, /* 0 */\n", 0);
860                 /* total size */
861                 print_file(file, 2, "NdrFcShort(0x%x), /* %d */\n", total_size, total_size);
862                 /* number of elements */
863                 print_file(file, 2, "NdrFcShort(0x%x), /* %d */\n", elements, elements);
864                 *typestring_offset += 6;
865             }
866             else
867             {
868                 WRITE_FCTYPE(file, FC_LGVARRAY, *typestring_offset);
869                 /* alignment */
870                 print_file(file, 2, "0x%x, /* 0 */\n", 0);
871                 /* total size */
872                 print_file(file, 2, "NdrFcLong(0x%x), /* %d */\n", total_size, total_size);
873                 /* number of elements */
874                 print_file(file, 2, "NdrFcLong(0x%x), /* %d */\n", elements, elements);
875                 *typestring_offset += 10;
876             }
877             /* element size */
878             print_file(file, 2, "NdrFcShort(0x%x), /* %d */\n", element_size, element_size);
879             *typestring_offset += 2;
880
881             *typestring_offset += write_conf_or_var_desc(file, current_func,
882                                                          current_structure,
883                                                          length_is);
884
885             if (has_pointer)
886             {
887                 print_file(file, 2, "0x%x, /* FC_PP */\n", RPC_FC_PP);
888                 print_file(file, 2, "0x%x, /* FC_PAD */\n", RPC_FC_PAD);
889                 *typestring_offset += 2;
890                 *typestring_offset += write_pointer_description(file, attrs,
891                     type, 0, array, 0, pointer_start_offset);
892                 print_file(file, 2, "0x%x, /* FC_END */\n", RPC_FC_END);
893                 *typestring_offset += 1;
894             }
895
896             print_file(file, 2, "0x0, /* FIXME: write out conversion data */\n");
897             print_file(file, 2, "0x%x, /* FC_END */\n", RPC_FC_END);
898             *typestring_offset += 2;
899
900             return start_offset;
901         }
902         else if (!has_length && has_size)
903         {
904             /* conformant array */
905             size_t element_size = type_memsize(type, 0, NULL);
906
907             WRITE_FCTYPE(file, FC_CARRAY, *typestring_offset);
908             /* alignment */
909             print_file(file, 2, "0x%x, /* 0 */\n", 0);
910             /* element size */
911             print_file(file, 2, "NdrFcShort(0x%x), /* %d */\n", element_size, element_size);
912             *typestring_offset += 4;
913
914             *typestring_offset += write_conf_or_var_desc(file, current_func,
915                                                          current_structure,
916                                                          size_is ? size_is : array);
917
918             if (has_pointer)
919             {
920                 print_file(file, 2, "0x%x, /* FC_PP */\n", RPC_FC_PP);
921                 print_file(file, 2, "0x%x, /* FC_PAD */\n", RPC_FC_PAD);
922                 *typestring_offset += 2;
923                 *typestring_offset += write_pointer_description(file, attrs,
924                     type, 0, array, 0, pointer_start_offset);
925                 print_file(file, 2, "0x%x, /* FC_END */\n", RPC_FC_END);
926                 *typestring_offset += 1;
927             }
928
929             print_file(file, 2, "0x%x, /* FIXME: write out conversion data */\n", type->type);
930             print_file(file, 2, "0x%x, /* FC_END */\n", RPC_FC_END);
931             *typestring_offset += 2;
932
933             return start_offset;
934         }
935         else
936         {
937             /* conformant varying array */
938             size_t element_size = type_memsize(type, 0, NULL);
939
940             WRITE_FCTYPE(file, FC_CVARRAY, *typestring_offset);
941             /* alignment */
942             print_file(file, 2, "0x%x, /* 0 */\n", 0);
943             /* element size */
944             print_file(file, 2, "NdrFcShort(0x%x), /* %d */\n", element_size, element_size);
945             *typestring_offset += 4;
946
947             *typestring_offset += write_conf_or_var_desc(file, current_func,
948                                                          current_structure,
949                                                          size_is ? size_is : array);
950             *typestring_offset += write_conf_or_var_desc(file, current_func,
951                                                          current_structure,
952                                                          length_is);
953
954             if (has_pointer)
955             {
956                 print_file(file, 2, "0x%x, /* FC_PP */\n", RPC_FC_PP);
957                 print_file(file, 2, "0x%x, /* FC_PAD */\n", RPC_FC_PAD);
958                 *typestring_offset += 2;
959                 *typestring_offset += write_pointer_description(file, attrs,
960                     type, 0, array, 0, pointer_start_offset);
961                 print_file(file, 2, "0x%x, /* FC_END */\n", RPC_FC_END);
962                 *typestring_offset += 1;
963             }
964
965             print_file(file, 2, "0x0, /* FIXME: write out conversion data */\n");
966             print_file(file, 2, "0x%x, /* FC_END */\n", RPC_FC_END);
967             *typestring_offset += 2;
968
969             return start_offset;
970         }
971     }
972 }
973
974 static const var_t *find_array_or_string_in_struct(const type_t *type)
975 {
976     /* last field is the first in the fields linked list */
977     const var_t *last_field = type->fields;
978     if (is_array_type(last_field->attrs, last_field->ptr_level, last_field->array))
979         return last_field;
980
981     assert((last_field->type->type == RPC_FC_CSTRUCT) ||
982            (last_field->type->type == RPC_FC_CPSTRUCT) ||
983            (last_field->type->type == RPC_FC_CVSTRUCT));
984
985     return find_array_or_string_in_struct(last_field->type);
986 }
987
988 static size_t write_struct_members(FILE *file, const type_t *type)
989 {
990     size_t typestring_size = 0;
991     var_t *field;
992
993     field = type->fields;
994     while (NEXT_LINK(field)) field = NEXT_LINK(field);
995     for (; field; field = PREV_LINK(field))
996     {
997         if (is_base_type(field->type->type))
998         {
999             switch (field->type->type)
1000             {
1001 #define CASE_BASETYPE(fctype) \
1002             case RPC_##fctype: \
1003                 print_file(file, 2, "0x%02x,\t\t/* " #fctype " */\n", RPC_##fctype); \
1004                 typestring_size++; \
1005                 break;
1006             CASE_BASETYPE(FC_BYTE);
1007             CASE_BASETYPE(FC_CHAR);
1008             CASE_BASETYPE(FC_SMALL);
1009             CASE_BASETYPE(FC_USMALL);
1010             CASE_BASETYPE(FC_WCHAR);
1011             CASE_BASETYPE(FC_SHORT);
1012             CASE_BASETYPE(FC_USHORT);
1013             CASE_BASETYPE(FC_LONG);
1014             CASE_BASETYPE(FC_ULONG);
1015             CASE_BASETYPE(FC_FLOAT);
1016             CASE_BASETYPE(FC_HYPER);
1017             CASE_BASETYPE(FC_DOUBLE);
1018             CASE_BASETYPE(FC_ENUM16);
1019             CASE_BASETYPE(FC_ENUM32);
1020             CASE_BASETYPE(FC_IGNORE);
1021             CASE_BASETYPE(FC_ERROR_STATUS_T);
1022             default:
1023                 break;
1024 #undef CASE_BASETYPE
1025             }
1026         }
1027         else
1028             error("Unsupported member type 0x%x\n", field->type->type);
1029     }
1030
1031     if (typestring_size % 1)
1032     {
1033         print_file(file, 2, "0x%x,\t\t/* FC_PAD */\n", RPC_FC_PAD);
1034         typestring_size++;
1035     }
1036
1037     print_file(file, 2, "0x%x,\t\t/* FC_END */\n", RPC_FC_END);
1038     typestring_size++;
1039
1040     return typestring_size;
1041 }
1042
1043 static size_t write_struct_tfs(FILE *file, const type_t *type,
1044                                const char *name, size_t *typestring_offset)
1045 {
1046     size_t total_size;
1047     const var_t *array;
1048     size_t start_offset;
1049     size_t array_offset;
1050     size_t pointer_offset;
1051
1052     switch (type->type)
1053     {
1054     case RPC_FC_STRUCT:
1055     case RPC_FC_PSTRUCT:
1056         total_size = type_memsize(type, 0, NULL);
1057
1058         if (total_size > USHRT_MAX)
1059             error("structure size for parameter %s exceeds %d bytes by %d bytes\n",
1060                   name, USHRT_MAX, total_size - USHRT_MAX);
1061
1062         if (type->type == RPC_FC_PSTRUCT)
1063         {
1064             pointer_offset = *typestring_offset;
1065             write_pointers(file, NULL, type, 0, NULL, 0, typestring_offset);
1066         }
1067         else pointer_offset = 0; /* silence warning */
1068
1069         start_offset = *typestring_offset;
1070         if (type->type == RPC_FC_STRUCT)
1071             WRITE_FCTYPE(file, FC_STRUCT, *typestring_offset);
1072         else
1073             WRITE_FCTYPE(file, FC_PSTRUCT, *typestring_offset);
1074         /* alignment */
1075         print_file(file, 2, "0x3,\n"); /* FIXME */
1076         /* total size */
1077         print_file(file, 2, "NdrFcShort(0x%x), /* %u */\n", total_size, total_size);
1078         *typestring_offset += 4;
1079
1080         if (type->type == RPC_FC_PSTRUCT)
1081         {
1082             print_file(file, 2, "0x%x, /* FC_PP */\n", RPC_FC_PP);
1083             print_file(file, 2, "0x%x, /* FC_PAD */\n", RPC_FC_PAD);
1084             *typestring_offset += 2;
1085             *typestring_offset += write_pointer_description(file, NULL,
1086                 type, 0, NULL, 0, pointer_offset);
1087             print_file(file, 2, "0x%x, /* FC_END */\n", RPC_FC_END);
1088             *typestring_offset += 1;
1089         }
1090
1091         /* member layout */
1092         *typestring_offset += write_struct_members(file, type);
1093         return start_offset;
1094     case RPC_FC_CSTRUCT:
1095     case RPC_FC_CPSTRUCT:
1096         total_size = type_memsize(type, 0, NULL);
1097
1098         if (total_size > USHRT_MAX)
1099             error("structure size for parameter %s exceeds %d bytes by %d bytes\n",
1100                   name, USHRT_MAX, total_size - USHRT_MAX);
1101
1102         array = find_array_or_string_in_struct(type);
1103         current_structure = type;
1104         array_offset = write_array_tfs(file, array->attrs, array->type,
1105                                        array->array, array->name,
1106                                        typestring_offset);
1107         current_structure = NULL;
1108
1109         if (type->type == RPC_FC_CPSTRUCT)
1110         {
1111             pointer_offset = *typestring_offset;
1112             write_pointers(file, NULL, type, 0, NULL, 0, typestring_offset);
1113         }
1114         else pointer_offset = 0; /* silence warning */
1115
1116         start_offset = *typestring_offset;
1117         if (type->type == RPC_FC_CSTRUCT)
1118             WRITE_FCTYPE(file, FC_CSTRUCT, *typestring_offset);
1119         else
1120             WRITE_FCTYPE(file, FC_CPSTRUCT, *typestring_offset);
1121         /* alignment */
1122         print_file(file, 2, "0x0,\n");
1123         /* total size */
1124         print_file(file, 2, "NdrFcShort(0x%x), /* %u */\n", total_size, total_size);
1125         *typestring_offset += 4;
1126         print_file(file, 2, "NdrFcShort(0x%x), /* offset = %d (%u) */\n",
1127                    array_offset - *typestring_offset,
1128                    array_offset - *typestring_offset,
1129                    array_offset);
1130         *typestring_offset += 2;
1131
1132         if (type->type == RPC_FC_CPSTRUCT)
1133         {
1134             print_file(file, 2, "0x%x, /* FC_PP */\n", RPC_FC_PP);
1135             print_file(file, 2, "0x%x, /* FC_PAD */\n", RPC_FC_PAD);
1136             *typestring_offset += 2;
1137             *typestring_offset += write_pointer_description(file, NULL,
1138                 type, 0, NULL, 0, pointer_offset);
1139             print_file(file, 2, "0x%x, /* FC_END */\n", RPC_FC_END);
1140             *typestring_offset += 1;
1141         }
1142
1143         print_file(file, 2, "0x%x, /* FC_END */\n", RPC_FC_END);
1144         *typestring_offset += 1;
1145
1146         return start_offset;
1147     case RPC_FC_CVSTRUCT:
1148         total_size = type_memsize(type, 0, NULL);
1149
1150         if (total_size > USHRT_MAX)
1151             error("structure size for parameter %s exceeds %d bytes by %d bytes\n",
1152                   name, USHRT_MAX, total_size - USHRT_MAX);
1153
1154         array = find_array_or_string_in_struct(type);
1155         current_structure = type;
1156         if (is_attr(array->attrs, ATTR_STRING))
1157             array_offset = write_string_tfs(file, array->attrs, array->type,
1158                                             array->array, array->name,
1159                                             typestring_offset);
1160         else
1161             array_offset = write_array_tfs(file, array->attrs, array->type,
1162                                            array->array, array->name,
1163                                            typestring_offset);
1164         current_structure = NULL;
1165
1166         pointer_offset = *typestring_offset;
1167         if (!write_pointers(file, NULL, type, 0, NULL, 0, typestring_offset))
1168             pointer_offset = 0;
1169
1170         start_offset = *typestring_offset;
1171         WRITE_FCTYPE(file, FC_CVSTRUCT, *typestring_offset);
1172         /* alignment */
1173         print_file(file, 2, "0x0,\n");
1174         /* total size */
1175         print_file(file, 2, "NdrFcShort(0x%x), /* %u */\n", total_size, total_size);
1176         *typestring_offset += 4;
1177         print_file(file, 2, "NdrFcShort(0x%x), /* offset = %d (%u) */\n",
1178                    array_offset - *typestring_offset,
1179                    array_offset - *typestring_offset,
1180                    array_offset);
1181         *typestring_offset += 2;
1182
1183         if (pointer_offset != 0)
1184         {
1185             print_file(file, 2, "0x%x, /* FC_PP */\n", RPC_FC_PP);
1186             print_file(file, 2, "0x%x, /* FC_PAD */\n", RPC_FC_PAD);
1187             *typestring_offset += 2;
1188             *typestring_offset += write_pointer_description(file, NULL,
1189                 type, 0, NULL, 0, pointer_offset);
1190             print_file(file, 2, "0x%x, /* FC_END */\n", RPC_FC_END);
1191             *typestring_offset += 1;
1192         }
1193
1194         print_file(file, 2, "0x%x, /* FC_END */\n", RPC_FC_END);
1195         *typestring_offset += 1;
1196
1197         return start_offset;
1198     default:
1199         error("write_struct_tfs: Unimplemented for type 0x%x\n", type->type);
1200         return *typestring_offset;
1201     }
1202 }
1203
1204 static void write_pointer_only_tfs(FILE *file, const attr_t *attrs, size_t offset, size_t *typeformat_offset)
1205 {
1206     int in_attr, out_attr;
1207     unsigned char flags = 0;
1208     int pointer_type = get_attrv(attrs, ATTR_POINTERTYPE);
1209     if (!pointer_type) pointer_type = RPC_FC_RP;
1210     in_attr = is_attr(attrs, ATTR_IN);
1211     out_attr = is_attr(attrs, ATTR_OUT);
1212     if (!in_attr && !out_attr) in_attr = 1;
1213
1214     if (out_attr && !in_attr && pointer_type == RPC_FC_RP)
1215         flags |= 0x04;
1216
1217     print_file(file, 2, "0x%x, 0x%x,\t\t/* %s%s */\n",
1218                pointer_type,
1219                flags,
1220                pointer_type == RPC_FC_FP ? "FC_FP" : (pointer_type == RPC_FC_UP ? "FC_UP" : "FC_RP"),
1221                (flags & 0x04) ? " [allocated_on_stack]" : "");
1222     print_file(file, 2, "NdrFcShort(0x%x),    /* %d */\n", offset, offset);
1223     *typeformat_offset += 4;
1224 }
1225
1226 static size_t write_union_tfs(FILE *file, const attr_t *attrs,
1227                               const type_t *type, const char *name,
1228                               size_t *typeformat_offset)
1229 {
1230     error("write_union_tfs: Unimplemented\n");
1231     return *typeformat_offset;
1232 }
1233
1234 static size_t write_typeformatstring_var(FILE *file, int indent,
1235     const var_t *var, size_t *typeformat_offset)
1236 {
1237     const type_t *type = var->type;
1238     int ptr_level = var->ptr_level;
1239
1240     chat("write_typeformatstring_var: %s\n", var->name);
1241
1242     while (TRUE)
1243     {
1244         chat("write_typeformatstring: type->type = 0x%x, type->name = %s, ptr_level = %d\n", type->type, type->name, ptr_level);
1245
1246         if (is_string_type(var->attrs, ptr_level, var->array))
1247             return write_string_tfs(file, var->attrs, type, var->array, var->name, typeformat_offset);
1248
1249         if (is_array_type(var->attrs, ptr_level, var->array))
1250             return write_array_tfs(file, var->attrs, type, var->array, var->name, typeformat_offset);
1251
1252         if (ptr_level == 0)
1253         {
1254             /* follow reference if the type has one */
1255             if (type_has_ref(type))
1256             {
1257                 type = type->ref;
1258                 /* FIXME: get new ptr_level from type */
1259                 continue;
1260             }
1261
1262             /* basic types don't need a type format string */
1263             if (is_base_type(type->type))
1264                 return 0;
1265
1266             switch (type->type)
1267             {
1268             case RPC_FC_STRUCT:
1269             case RPC_FC_PSTRUCT:
1270             case RPC_FC_CSTRUCT:
1271             case RPC_FC_CPSTRUCT:
1272             case RPC_FC_CVSTRUCT:
1273             case RPC_FC_BOGUS_STRUCT:
1274                 return write_struct_tfs(file, type, var->name, typeformat_offset);
1275             case RPC_FC_ENCAPSULATED_UNION:
1276             case RPC_FC_NON_ENCAPSULATED_UNION:
1277                 return write_union_tfs(file, var->attrs, type, var->name, typeformat_offset);
1278             case RPC_FC_IGNORE:
1279             case RPC_FC_BIND_PRIMITIVE:
1280                 /* nothing to do */
1281                 return 0;
1282             default:
1283                 error("write_typeformatstring_var: Unsupported type 0x%x for variable %s\n", type->type, var->name);
1284             }
1285         }
1286         else if (ptr_level == 1 && !type_has_ref(type))
1287         {
1288             size_t start_offset = *typeformat_offset;
1289             int in_attr = is_attr(var->attrs, ATTR_IN);
1290             int out_attr = is_attr(var->attrs, ATTR_OUT);
1291             int pointer_type = get_attrv(var->attrs, ATTR_POINTERTYPE);
1292             if (!pointer_type) pointer_type = RPC_FC_RP;
1293
1294             /* special case for pointers to base types */
1295             switch (type->type)
1296             {
1297 #define CASE_BASETYPE(fctype) \
1298             case RPC_##fctype: \
1299                 print_file(file, indent, "0x%x, 0x%x,    /* %s %s[simple_pointer] */\n", \
1300                            pointer_type, \
1301                            (!in_attr && out_attr) ? 0x0C : 0x08, \
1302                            pointer_type == RPC_FC_FP ? "FC_FP" : (pointer_type == RPC_FC_UP ? "FC_UP" : "FC_RP"), \
1303                            (!in_attr && out_attr) ? "[allocated_on_stack] " : ""); \
1304                 print_file(file, indent, "0x%02x,    /* " #fctype " */\n", RPC_##fctype); \
1305                 print_file(file, indent, "0x5c,          /* FC_PAD */\n"); \
1306                 *typeformat_offset += 4; \
1307                 return start_offset
1308             CASE_BASETYPE(FC_BYTE);
1309             CASE_BASETYPE(FC_CHAR);
1310             CASE_BASETYPE(FC_SMALL);
1311             CASE_BASETYPE(FC_USMALL);
1312             CASE_BASETYPE(FC_WCHAR);
1313             CASE_BASETYPE(FC_SHORT);
1314             CASE_BASETYPE(FC_USHORT);
1315             CASE_BASETYPE(FC_LONG);
1316             CASE_BASETYPE(FC_ULONG);
1317             CASE_BASETYPE(FC_FLOAT);
1318             CASE_BASETYPE(FC_HYPER);
1319             CASE_BASETYPE(FC_DOUBLE);
1320             CASE_BASETYPE(FC_ENUM16);
1321             CASE_BASETYPE(FC_ENUM32);
1322             CASE_BASETYPE(FC_IGNORE);
1323             CASE_BASETYPE(FC_ERROR_STATUS_T);
1324             default:
1325                 break;
1326             }
1327         }
1328
1329         assert(ptr_level > 0);
1330
1331         if (file)
1332             fprintf(file, "/* %2u */\n", *typeformat_offset);
1333         write_pointer_only_tfs(file, var->attrs, 2, typeformat_offset);
1334
1335         ptr_level--;
1336     }
1337 }
1338
1339
1340 void write_typeformatstring(FILE *file, type_t *iface)
1341 {
1342     int indent = 0;
1343     var_t *var;
1344     size_t typeformat_offset;
1345
1346     print_file(file, indent, "static const MIDL_TYPE_FORMAT_STRING __MIDL_TypeFormatString =\n");
1347     print_file(file, indent, "{\n");
1348     indent++;
1349     print_file(file, indent, "0,\n");
1350     print_file(file, indent, "{\n");
1351     indent++;
1352     print_file(file, indent, "NdrFcShort(0x0),\n");
1353     typeformat_offset = 2;
1354
1355     if (iface->funcs)
1356     {
1357         func_t *func = iface->funcs;
1358         while (NEXT_LINK(func)) func = NEXT_LINK(func);
1359         for (; func; func = PREV_LINK(func))
1360         {
1361             current_func = func;
1362             if (func->args)
1363             {
1364                 var = func->args;
1365                 while (NEXT_LINK(var)) var = NEXT_LINK(var);
1366                 while (var)
1367                 {
1368                     write_typeformatstring_var(file, indent, var,
1369                                                &typeformat_offset);
1370                     var = PREV_LINK(var);
1371                 }
1372             }
1373         }
1374     }
1375
1376     print_file(file, indent, "0x0\n");
1377     indent--;
1378     print_file(file, indent, "}\n");
1379     indent--;
1380     print_file(file, indent, "};\n");
1381     print_file(file, indent, "\n");
1382 }
1383
1384 static unsigned int get_required_buffer_size_type(
1385     const type_t *type, int ptr_level, const expr_t *array,
1386     const char *name, unsigned int *alignment)
1387 {
1388     *alignment = 0;
1389     if (ptr_level == 0 && !array && !type_has_ref(type))
1390     {
1391         switch (type->type)
1392         {
1393         case RPC_FC_BYTE:
1394         case RPC_FC_CHAR:
1395         case RPC_FC_USMALL:
1396         case RPC_FC_SMALL:
1397             *alignment = 4;
1398             return 1;
1399
1400         case RPC_FC_WCHAR:
1401         case RPC_FC_USHORT:
1402         case RPC_FC_SHORT:
1403             *alignment = 4;
1404             return 2;
1405
1406         case RPC_FC_ULONG:
1407         case RPC_FC_LONG:
1408         case RPC_FC_FLOAT:
1409         case RPC_FC_ERROR_STATUS_T:
1410             *alignment = 4;
1411             return 4;
1412
1413         case RPC_FC_HYPER:
1414         case RPC_FC_DOUBLE:
1415             *alignment = 8;
1416             return 8;
1417
1418         case RPC_FC_IGNORE:
1419         case RPC_FC_BIND_PRIMITIVE:
1420             return 0;
1421
1422         case RPC_FC_STRUCT:
1423         {
1424             size_t size = 0;
1425             const var_t *field;
1426             for (field = type->fields; field; field = NEXT_LINK(field))
1427             {
1428                 unsigned int alignment;
1429                 size += get_required_buffer_size_type(
1430                     field->type, field->ptr_level, field->array, field->name,
1431                     &alignment);
1432             }
1433             return size;
1434         }
1435
1436         default:
1437             error("get_required_buffer_size: Unknown/unsupported type: %s (0x%02x)\n", name, type->type);
1438             return 0;
1439         }
1440     }
1441     if (ptr_level == 0 && type_has_ref(type))
1442         return get_required_buffer_size_type(type->ref, 0 /* FIXME */, array, name, alignment);
1443     return 0;
1444 }
1445
1446 unsigned int get_required_buffer_size(const var_t *var, unsigned int *alignment, enum pass pass)
1447 {
1448     expr_t *size_is = get_attrp(var->attrs, ATTR_SIZEIS);
1449     int has_size = (size_is && (size_is->type != EXPR_VOID));
1450     int in_attr = is_attr(var->attrs, ATTR_IN);
1451     int out_attr = is_attr(var->attrs, ATTR_OUT);
1452
1453     if (!in_attr && !out_attr)
1454         in_attr = 1;
1455
1456     *alignment = 0;
1457
1458     if (pass == PASS_OUT)
1459     {
1460         if (out_attr && var->ptr_level > 0)
1461         {
1462             type_t *type = var->type;
1463             while (type->type == 0 && type->ref)
1464                 type = type->ref;
1465
1466             if (type->type == RPC_FC_STRUCT)
1467             {
1468                 const var_t *field;
1469                 unsigned int size = 36;
1470                 for (field = type->fields; field; field = NEXT_LINK(field))
1471                 {
1472                     unsigned int align;
1473                     size += get_required_buffer_size_type(
1474                         field->type, field->ptr_level, field->array, field->name,
1475                         &align);
1476                 }
1477                 return size;
1478             }
1479         }
1480         return 0;
1481     }
1482     else
1483     {
1484         if ((!out_attr || in_attr) && !has_size && !is_attr(var->attrs, ATTR_STRING) && !var->array)
1485         {
1486             if (var->ptr_level > 0 || (var->ptr_level == 0 && type_has_ref(var->type)))
1487             {
1488                 type_t *type = var->type;
1489                 while (type->type == 0 && type->ref)
1490                     type = type->ref;
1491
1492                 if (is_base_type(type->type))
1493                 {
1494                     return 25;
1495                 }
1496                 else if (type->type == RPC_FC_STRUCT)
1497                 {
1498                     unsigned int size = 36;
1499                     const var_t *field;
1500                     for (field = type->fields; field; field = NEXT_LINK(field))
1501                     {
1502                         unsigned int align;
1503                         size += get_required_buffer_size_type(
1504                             field->type, field->ptr_level, field->array, field->name,
1505                             &align);
1506                     }
1507                     return size;
1508                 }
1509             }
1510         }
1511
1512         return get_required_buffer_size_type(var->type, var->ptr_level, var->array, var->name, alignment);
1513     }
1514 }
1515
1516 static void print_phase_function(FILE *file, int indent, const char *type,
1517                                  enum remoting_phase phase,
1518                                  const char *varname, unsigned int type_offset)
1519 {
1520     const char *function;
1521     switch (phase)
1522     {
1523     case PHASE_BUFFERSIZE:
1524         function = "BufferSize";
1525         break;
1526     case PHASE_MARSHAL:
1527         function = "Marshall";
1528         break;
1529     case PHASE_UNMARSHAL:
1530         function = "Unmarshall";
1531         break;
1532     case PHASE_FREE:
1533         function = "Free";
1534         break;
1535     default:
1536         assert(0);
1537         return;
1538     }
1539
1540     print_file(file, indent, "Ndr%s%s(\n", type, function);
1541     indent++;
1542     print_file(file, indent, "&_StubMsg,\n");
1543     print_file(file, indent, "%s%s,\n",
1544                (phase == PHASE_UNMARSHAL) ? "(unsigned char **)&" : "(unsigned char *)",
1545                varname);
1546     print_file(file, indent, "(PFORMAT_STRING)&__MIDL_TypeFormatString.Format[%d]%s\n",
1547                type_offset, (phase == PHASE_UNMARSHAL) ? "," : ");");
1548     if (phase == PHASE_UNMARSHAL)
1549         print_file(file, indent, "0);\n");
1550     indent--;
1551 }
1552
1553 void print_phase_basetype(FILE *file, int indent, enum remoting_phase phase,
1554                           enum pass pass, const var_t *var,
1555                           const char *varname)
1556 {
1557     const type_t *type = var->type;
1558     unsigned int size;
1559     unsigned int alignment = 0;
1560
1561     /* no work to do for other phases, buffer sizing is done elsewhere */
1562     if (phase != PHASE_MARSHAL && phase != PHASE_UNMARSHAL)
1563         return;
1564
1565     while (type_has_ref(type))
1566         type = type->ref;
1567
1568     switch (type->type)
1569     {
1570         case RPC_FC_BYTE:
1571         case RPC_FC_CHAR:
1572         case RPC_FC_SMALL:
1573         case RPC_FC_USMALL:
1574             size = 1;
1575             alignment = 1;
1576             break;
1577
1578         case RPC_FC_WCHAR:
1579         case RPC_FC_USHORT:
1580         case RPC_FC_SHORT:
1581             size = 2;
1582             alignment = 2;
1583             break;
1584
1585         case RPC_FC_ULONG:
1586         case RPC_FC_LONG:
1587         case RPC_FC_FLOAT:
1588         case RPC_FC_ERROR_STATUS_T:
1589             size = 4;
1590             alignment = 4;
1591             break;
1592
1593         case RPC_FC_HYPER:
1594         case RPC_FC_DOUBLE:
1595             size = 8;
1596             alignment = 8;
1597             break;
1598
1599         case RPC_FC_IGNORE:
1600         case RPC_FC_BIND_PRIMITIVE:
1601             /* no marshalling needed */
1602             return;
1603
1604         default:
1605             error("print_phase_basetype: Unsupported type: %s (0x%02x, ptr_level: 0)\n", var->name, type->type);
1606             size = 0;
1607     }
1608
1609     print_file(file, indent, "_StubMsg.Buffer = (unsigned char *)(((long)_StubMsg.Buffer + %u) & ~0x%x);\n",
1610                 alignment - 1, alignment - 1);
1611
1612     if (phase == PHASE_MARSHAL)
1613     {
1614         print_file(file, indent, "*(");
1615         write_type(file, var->type, NULL, var->tname);
1616         if (var->ptr_level)
1617             fprintf(file, " *)_StubMsg.Buffer = *");
1618         else
1619             fprintf(file, " *)_StubMsg.Buffer = ");
1620         fprintf(file, varname);
1621         fprintf(file, ";\n");
1622     }
1623     else if (phase == PHASE_UNMARSHAL)
1624     {
1625         if (pass == PASS_IN || pass == PASS_RETURN)
1626             print_file(file, indent, "");
1627         else
1628             print_file(file, indent, "*");
1629         fprintf(file, varname);
1630         if (pass == PASS_IN && var->ptr_level)
1631             fprintf(file, " = (");
1632         else
1633             fprintf(file, " = *(");
1634         write_type(file, var->type, NULL, var->tname);
1635         fprintf(file, " *)_StubMsg.Buffer;\n");
1636     }
1637
1638     print_file(file, indent, "_StubMsg.Buffer += sizeof(");
1639     write_type(file, var->type, NULL, var->tname);
1640     fprintf(file, ");\n");
1641 }
1642
1643 /* returns whether the MaxCount, Offset or ActualCount members need to be
1644  * filled in for the specified phase */
1645 static inline int is_size_needed_for_phase(enum remoting_phase phase)
1646 {
1647     return (phase != PHASE_UNMARSHAL);
1648 }
1649
1650 void write_remoting_arguments(FILE *file, int indent, const func_t *func,
1651                               unsigned int *type_offset, enum pass pass,
1652                               enum remoting_phase phase)
1653 {
1654     const expr_t *length_is;
1655     const expr_t *size_is;
1656     int in_attr, out_attr, has_length, has_size, pointer_type;
1657     var_t *var;
1658
1659     if (!func->args)
1660         return;
1661
1662     var = func->args;
1663     while (NEXT_LINK(var)) var = NEXT_LINK(var);
1664     for (; var; *type_offset += get_size_typeformatstring_var(var), var = PREV_LINK(var))
1665     {
1666         const type_t *type = var->type;
1667         length_is = get_attrp(var->attrs, ATTR_LENGTHIS);
1668         size_is = get_attrp(var->attrs, ATTR_SIZEIS);
1669         has_length = length_is && (length_is->type != EXPR_VOID);
1670         has_size = (size_is && (size_is->type != EXPR_VOID)) || (var->array && !var->array->is_const);
1671
1672         pointer_type = get_attrv(var->attrs, ATTR_POINTERTYPE);
1673         if (!pointer_type)
1674             pointer_type = RPC_FC_RP;
1675
1676         in_attr = is_attr(var->attrs, ATTR_IN);
1677         out_attr = is_attr(var->attrs, ATTR_OUT);
1678         if (!in_attr && !out_attr)
1679             in_attr = 1;
1680
1681         switch (pass)
1682         {
1683         case PASS_IN:
1684             if (!in_attr)
1685                 continue;
1686             break;
1687         case PASS_OUT:
1688             if (!out_attr)
1689                 continue;
1690             break;
1691         case PASS_RETURN:
1692             break;
1693         }
1694
1695         while (type_has_ref(type))
1696             type = type->ref;
1697
1698         if (is_string_type(var->attrs, var->ptr_level, var->array))
1699         {
1700             if (var->array && var->array->is_const)
1701                 print_phase_function(file, indent, "NonConformantString", phase, var->name, *type_offset);
1702             else
1703             {
1704                 if (size_is && is_size_needed_for_phase(phase))
1705                 {
1706                     print_file(file, indent, "_StubMsg.MaxCount = (unsigned long)");
1707                     write_expr(file, size_is, 1);
1708                     fprintf(file, ";\n");
1709                 }
1710
1711                 if ((phase == PHASE_FREE) || (pointer_type == RPC_FC_UP))
1712                     print_phase_function(file, indent, "Pointer", phase, var->name, *type_offset);
1713                 else
1714                     print_phase_function(file, indent, "ConformantString", phase, var->name,
1715                                          *type_offset + (has_size ? 4 : 2));
1716             }
1717         }
1718         else if (is_array_type(var->attrs, var->ptr_level, var->array))
1719         {
1720             const char *array_type;
1721
1722             if (var->array && NEXT_LINK(var->array)) /* multi-dimensional array */
1723                 array_type = "ComplexArray";
1724             else
1725             {
1726                 if (!has_length && !has_size)
1727                     array_type = "FixedArray";
1728                 else if (has_length && !has_size)
1729                 {
1730                     if (is_size_needed_for_phase(phase))
1731                     {
1732                         print_file(file, indent, "_StubMsg.Offset = (unsigned long)0;\n"); /* FIXME */
1733                         print_file(file, indent, "_StubMsg.ActualCount = (unsigned long)");
1734                         write_expr(file, length_is, 1);
1735                         fprintf(file, ";\n\n");
1736                     }
1737                     array_type = "VaryingArray";
1738                 }
1739                 else if (!has_length && has_size)
1740                 {
1741                     if (is_size_needed_for_phase(phase) && phase != PHASE_FREE)
1742                     {
1743                         print_file(file, indent, "_StubMsg.MaxCount = (unsigned long)");
1744                         write_expr(file, size_is ? size_is : var->array, 1);
1745                         fprintf(file, ";\n\n");
1746                     }
1747                     array_type = "ConformantArray";
1748                 }
1749                 else
1750                 {
1751                     if (is_size_needed_for_phase(phase))
1752                     {
1753                         print_file(file, indent, "_StubMsg.MaxCount = (unsigned long)");
1754                         write_expr(file, size_is ? size_is : var->array, 1);
1755                         fprintf(file, ";\n");
1756                         print_file(file, indent, "_StubMsg.Offset = (unsigned long)0;\n"); /* FIXME */
1757                         print_file(file, indent, "_StubMsg.ActualCount = (unsigned long)");
1758                         write_expr(file, length_is, 1);
1759                         fprintf(file, ";\n\n");
1760                     }
1761                     array_type = "ConformantVaryingArray";
1762                 }
1763             }
1764
1765             if (!in_attr && phase == PHASE_FREE)
1766             {
1767                 print_file(file, indent, "if (%s)\n", var->name);
1768                 indent++;
1769                 print_file(file, indent, "_StubMsg.pfnFree(%s);\n", var->name);
1770             }
1771             else if (phase != PHASE_FREE)
1772             {
1773                 if (pointer_type == RPC_FC_UP)
1774                     print_phase_function(file, indent, "Pointer", phase, var->name, *type_offset);
1775                 else
1776                     print_phase_function(file, indent, array_type, phase, var->name, *type_offset + 4);
1777             }
1778         }
1779         else if (var->ptr_level == 0 && is_base_type(type->type))
1780         {
1781             print_phase_basetype(file, indent, phase, pass, var, var->name);
1782         }
1783         else if (var->ptr_level == 0)
1784         {
1785             const char *ndrtype;
1786
1787             switch (type->type)
1788             {
1789             case RPC_FC_STRUCT:
1790                 ndrtype = "SimpleStruct";
1791                 break;
1792             case RPC_FC_CSTRUCT:
1793             case RPC_FC_CPSTRUCT:
1794                 ndrtype = "ConformantStruct";
1795                 break;
1796             case RPC_FC_CVSTRUCT:
1797                 ndrtype = "ConformantVaryingStruct";
1798                 break;
1799             case RPC_FC_BOGUS_STRUCT:
1800                 ndrtype = "ComplexStruct";
1801                 break;
1802             default:
1803                 error("write_remoting_arguments: Unsupported type: %s (0x%02x, ptr_level: %d)\n",
1804                     var->name, type->type, var->ptr_level);
1805                 ndrtype = NULL;
1806             }
1807
1808             print_phase_function(file, indent, ndrtype, phase, var->name, *type_offset);
1809         }
1810         else
1811         {
1812             if ((var->ptr_level == 1) && (pointer_type == RPC_FC_RP) && is_base_type(type->type))
1813             {
1814                 print_phase_basetype(file, indent, phase, pass, var, var->name);
1815             }
1816             else if ((var->ptr_level == 1) && (pointer_type == RPC_FC_RP) && (type->type == RPC_FC_STRUCT))
1817             {
1818                 if (phase != PHASE_BUFFERSIZE && phase != PHASE_FREE)
1819                     print_phase_function(file, indent, "SimpleStruct", phase, var->name, *type_offset + 4);
1820             }
1821             else
1822             {
1823                 print_phase_function(file, indent, "Pointer", phase, var->name, *type_offset);
1824             }
1825         }
1826         fprintf(file, "\n");
1827     }
1828 }
1829
1830
1831 size_t get_size_procformatstring_var(const var_t *var)
1832 {
1833     unsigned int type_offset = 2;
1834     return write_procformatstring_var(NULL, 0, var, FALSE, &type_offset);
1835 }
1836
1837
1838 size_t get_size_typeformatstring_var(const var_t *var)
1839 {
1840     size_t type_offset = 0;
1841     write_typeformatstring_var(NULL, 0, var, &type_offset);
1842     return type_offset;
1843 }
1844
1845 size_t get_size_procformatstring(const type_t *iface)
1846 {
1847     size_t size = 1;
1848     func_t *func;
1849     var_t *var;
1850
1851     if (iface->funcs)
1852     {
1853         func = iface->funcs;
1854         while (NEXT_LINK(func)) func = NEXT_LINK(func);
1855         while (func)
1856         {
1857             /* argument list size */
1858             if (func->args)
1859             {
1860                 var = func->args;
1861                 while (NEXT_LINK(var)) var = NEXT_LINK(var);
1862                 while (var)
1863                 {
1864                     size += get_size_procformatstring_var(var);
1865                     var = PREV_LINK(var);
1866                 }
1867             }
1868
1869             /* return value size */
1870             size += 2; /* FIXME: determine real size */
1871             func = PREV_LINK(func);
1872         }
1873     }
1874     return size;
1875 }
1876
1877 size_t get_size_typeformatstring(const type_t *iface)
1878 {
1879     size_t size = 3;
1880     func_t *func;
1881     var_t *var;
1882
1883     if (iface->funcs)
1884     {
1885         func = iface->funcs;
1886         while (NEXT_LINK(func)) func = NEXT_LINK(func);
1887         while (func)
1888         {
1889             /* argument list size */
1890             if (func->args)
1891             {
1892                 var = func->args;
1893                 while (NEXT_LINK(var)) var = NEXT_LINK(var);
1894                 while (var)
1895                 {
1896                     size += get_size_typeformatstring_var(var);
1897                     var = PREV_LINK(var);
1898                 }
1899             }
1900
1901             func = PREV_LINK(func);
1902         }
1903     }
1904     return size;
1905 }
1906
1907 static void write_struct_expr(FILE *h, const expr_t *e, int brackets,
1908                               const var_t *fields, const char *structvar)
1909 {
1910     switch (e->type) {
1911         case EXPR_VOID:
1912             break;
1913         case EXPR_NUM:
1914             fprintf(h, "%ld", e->u.lval);
1915             break;
1916         case EXPR_HEXNUM:
1917             fprintf(h, "0x%lx", e->u.lval);
1918             break;
1919         case EXPR_IDENTIFIER:
1920         {
1921             const var_t *field;
1922             for (field = fields; field; field = NEXT_LINK(field))
1923             {
1924                 if (!strcmp(e->u.sval, field->name))
1925                 {
1926                     fprintf(h, "%s->%s", structvar, e->u.sval);
1927                     break;
1928                 }
1929             }
1930             if (!field) error("no field found for identifier %s\n", e->u.sval);
1931             break;
1932         }
1933         case EXPR_NEG:
1934             fprintf(h, "-");
1935             write_struct_expr(h, e->ref, 1, fields, structvar);
1936             break;
1937         case EXPR_NOT:
1938             fprintf(h, "~");
1939             write_struct_expr(h, e->ref, 1, fields, structvar);
1940             break;
1941         case EXPR_PPTR:
1942             fprintf(h, "*");
1943             write_struct_expr(h, e->ref, 1, fields, structvar);
1944             break;
1945         case EXPR_CAST:
1946             fprintf(h, "(");
1947             write_type(h, e->u.tref->ref, NULL, e->u.tref->name);
1948             fprintf(h, ")");
1949             write_struct_expr(h, e->ref, 1, fields, structvar);
1950             break;
1951         case EXPR_SIZEOF:
1952             fprintf(h, "sizeof(");
1953             write_type(h, e->u.tref->ref, NULL, e->u.tref->name);
1954             fprintf(h, ")");
1955             break;
1956         case EXPR_SHL:
1957         case EXPR_SHR:
1958         case EXPR_MUL:
1959         case EXPR_DIV:
1960         case EXPR_ADD:
1961         case EXPR_SUB:
1962         case EXPR_AND:
1963         case EXPR_OR:
1964             if (brackets) fprintf(h, "(");
1965             write_struct_expr(h, e->ref, 1, fields, structvar);
1966             switch (e->type) {
1967                 case EXPR_SHL: fprintf(h, " << "); break;
1968                 case EXPR_SHR: fprintf(h, " >> "); break;
1969                 case EXPR_MUL: fprintf(h, " * "); break;
1970                 case EXPR_DIV: fprintf(h, " / "); break;
1971                 case EXPR_ADD: fprintf(h, " + "); break;
1972                 case EXPR_SUB: fprintf(h, " - "); break;
1973                 case EXPR_AND: fprintf(h, " & "); break;
1974                 case EXPR_OR:  fprintf(h, " | "); break;
1975                 default: break;
1976             }
1977             write_struct_expr(h, e->u.ext, 1, fields, structvar);
1978             if (brackets) fprintf(h, ")");
1979             break;
1980         case EXPR_COND:
1981             if (brackets) fprintf(h, "(");
1982             write_struct_expr(h, e->ref, 1, fields, structvar);
1983             fprintf(h, " ? ");
1984             write_struct_expr(h, e->u.ext, 1, fields, structvar);
1985             fprintf(h, " : ");
1986             write_struct_expr(h, e->ext2, 1, fields, structvar);
1987             if (brackets) fprintf(h, ")");
1988             break;
1989     }
1990 }
1991
1992 int write_expr_eval_routines(FILE *file, const char *iface)
1993 {
1994     int result = 0;
1995     struct expr_eval_routine *eval;
1996     unsigned short callback_offset = 0;
1997
1998     LIST_FOR_EACH_ENTRY(eval, &expr_eval_routines, struct expr_eval_routine, entry)
1999     {
2000         int indent = 0;
2001         result = 1;
2002         print_file(file, indent, "static void __RPC_USER %s_%sExprEval_%04u(PMIDL_STUB_MESSAGE pStubMsg)\n",
2003                   iface, eval->structure->name, callback_offset);
2004         print_file(file, indent, "{\n");
2005         indent++;
2006         print_file(file, indent, "struct %s *" STRUCT_EXPR_EVAL_VAR " = (struct %s *)(pStubMsg->StackTop - %u);\n",
2007                    eval->structure->name, eval->structure->name, eval->structure_size);
2008         fprintf(file, "\n");
2009         print_file(file, indent, "pStubMsg->Offset = 0;\n"); /* FIXME */
2010         print_file(file, indent, "pStubMsg->MaxCount = (unsigned long)");
2011         write_struct_expr(file, eval->expr, 1, eval->structure->fields, STRUCT_EXPR_EVAL_VAR);
2012         fprintf(file, ";\n");
2013         indent--;
2014         print_file(file, indent, "}\n\n");
2015         callback_offset++;
2016     }
2017     return result;
2018 }
2019
2020 void write_expr_eval_routine_list(FILE *file, const char *iface)
2021 {
2022     struct expr_eval_routine *eval;
2023     struct expr_eval_routine *cursor;
2024     unsigned short callback_offset = 0;
2025
2026     fprintf(file, "static const EXPR_EVAL ExprEvalRoutines[] =\n");
2027     fprintf(file, "{\n");
2028
2029     LIST_FOR_EACH_ENTRY_SAFE(eval, cursor, &expr_eval_routines, struct expr_eval_routine, entry)
2030     {
2031         print_file(file, 1, "%s_%sExprEval_%04u,\n",
2032                    iface, eval->structure->name, callback_offset);
2033
2034         callback_offset++;
2035         list_remove(&eval->entry);
2036         free(eval);
2037     }
2038
2039     fprintf(file, "};\n\n");
2040 }