dlls/jscript/dispex.c

   1 /*
   2  * Copyright 2008 Jacek Caban for CodeWeavers
   3  *
   4  * This library is free software; you can redistribute it and/or
   5  * modify it under the terms of the GNU Lesser General Public
   6  * License as published by the Free Software Foundation; either
   7  * version 2.1 of the License, or (at your option) any later version.
   8  *
   9  * This library is distributed in the hope that it will be useful,
  10  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  11  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  12  * Lesser General Public License for more details.
  13  *
  14  * You should have received a copy of the GNU Lesser General Public
  15  * License along with this library; if not, write to the Free Software
  16  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
  17  */
  18
  19 #include <assert.h>
  20
  21 #include "jscript.h"
  22 #include "engine.h"
  23
  24 #include "wine/debug.h"
  25
  26 WINE_DEFAULT_DEBUG_CHANNEL(jscript);
  27
  28 static const GUID GUID_JScriptTypeInfo = {0xc59c6b12,0xf6c1,0x11cf,{0x88,0x35,0x00,0xa0,0xc9,0x11,0xe8,0xb2}};
  29
  30 #define FDEX_VERSION_MASK 0xf0000000
  31 #define GOLDEN_RATIO 0x9E3779B9U
  32
  33 typedef enum {
  34     PROP_JSVAL,
  35     PROP_BUILTIN,
  36     PROP_PROTREF,
  37     PROP_ACCESSOR,
  38     PROP_DELETED,
  39     PROP_IDX
  40 } prop_type_t;
  41
  42 struct _dispex_prop_t {
  43     WCHAR *name;
  44     unsigned hash;
  45     prop_type_t type;
  46     DWORD flags;
  47
  48     union {
  49         jsval_t val;
  50         const builtin_prop_t *p;
  51         DWORD ref;
  52         unsigned idx;
  53         struct {
  54             jsdisp_t *getter;
  55             jsdisp_t *setter;
  56         } accessor;
  57     } u;
  58
  59     int bucket_head;
  60     int bucket_next;
  61 };
  62
  63 static inline DISPID prop_to_id(jsdisp_t *This, dispex_prop_t *prop)
  64 {
  65     return prop - This->props;
  66 }
  67
  68 static inline dispex_prop_t *get_prop(jsdisp_t *This, DISPID id)
  69 {
  70     if(id < 0 || id >= This->prop_cnt || This->props[id].type == PROP_DELETED)
  71         return NULL;
  72
  73     return This->props+id;
  74 }
  75
  76 static inline BOOL is_function_prop(dispex_prop_t *prop)
  77 {
  78     BOOL ret = FALSE;
  79
  80     if (is_object_instance(prop->u.val))
  81     {
  82         jsdisp_t *jsdisp = iface_to_jsdisp(get_object(prop->u.val));
  83
  84         if (jsdisp) ret = is_class(jsdisp, JSCLASS_FUNCTION);
  85         jsdisp_release(jsdisp);
  86     }
  87     return ret;
  88 }
  89
  90 static DWORD get_flags(jsdisp_t *This, dispex_prop_t *prop)
  91 {
  92     if(prop->type == PROP_PROTREF) {
  93         dispex_prop_t *parent = get_prop(This->prototype, prop->u.ref);
  94         if(!parent) {
  95             prop->type = PROP_DELETED;
  96             return 0;
  97         }
  98
  99         return get_flags(This->prototype, parent);
 100     }
 101
 102     return prop->flags;
 103 }
 104
 105 static const builtin_prop_t *find_builtin_prop(jsdisp_t *This, const WCHAR *name)
 106 {
 107     int min = 0, max, i, r;
 108
 109     max = This->builtin_info->props_cnt-1;
 110     while(min <= max) {
 111         i = (min+max)/2;
 112
 113         r = wcscmp(name, This->builtin_info->props[i].name);
 114         if(!r) {
 115             /* Skip prop if it's available only in higher compatibility mode. */
 116             unsigned version = (This->builtin_info->props[i].flags & PROPF_VERSION_MASK)
 117                 >> PROPF_VERSION_SHIFT;
 118             if(version && version > This->ctx->version)
 119                 return NULL;
 120
 121             /* Skip prop if it's available only in HTML mode and we're not running in HTML mode. */
 122             if((This->builtin_info->props[i].flags & PROPF_HTML) && !This->ctx->html_mode)
 123                 return NULL;
 124
 125             return This->builtin_info->props + i;
 126         }
 127
 128         if(r < 0)
 129             max = i-1;
 130         else
 131             min = i+1;
 132     }
 133
 134     return NULL;
 135 }
 136
 137 static inline unsigned string_hash(const WCHAR *name)
 138 {
 139     unsigned h = 0;
 140     for(; *name; name++)
 141         h = (h>>(sizeof(unsigned)*8-4)) ^ (h<<4) ^ towlower(*name);
 142     return h;
 143 }
 144
 145 static inline unsigned get_props_idx(jsdisp_t *This, unsigned hash)
 146 {
 147     return (hash*GOLDEN_RATIO) & (This->buf_size-1);
 148 }
 149
 150 static inline HRESULT resize_props(jsdisp_t *This)
 151 {
 152     dispex_prop_t *props;
 153     int i, bucket;
 154
 155     if(This->buf_size != This->prop_cnt)
 156         return S_FALSE;
 157
 158     props = heap_realloc(This->props, sizeof(dispex_prop_t)*This->buf_size*2);
 159     if(!props)
 160         return E_OUTOFMEMORY;
 161     This->buf_size *= 2;
 162     This->props = props;
 163
 164     for(i=0; i<This->buf_size; i++) {
 165         This->props[i].bucket_head = 0;
 166         This->props[i].bucket_next = 0;
 167     }
 168
 169     for(i=1; i<This->prop_cnt; i++) {
 170         props = This->props+i;
 171
 172         bucket = get_props_idx(This, props->hash);
 173         props->bucket_next = This->props[bucket].bucket_head;
 174         This->props[bucket].bucket_head = i;
 175     }
 176
 177     return S_OK;
 178 }
 179
 180 static inline dispex_prop_t* alloc_prop(jsdisp_t *This, const WCHAR *name, prop_type_t type, DWORD flags)
 181 {
 182     dispex_prop_t *prop;
 183     unsigned bucket;
 184
 185     if(FAILED(resize_props(This)))
 186         return NULL;
 187
 188     prop = &This->props[This->prop_cnt];
 189     prop->name = heap_strdupW(name);
 190     if(!prop->name)
 191         return NULL;
 192     prop->type = type;
 193     prop->flags = flags;
 194     prop->hash = string_hash(name);
 195
 196     bucket = get_props_idx(This, prop->hash);
 197     prop->bucket_next = This->props[bucket].bucket_head;
 198     This->props[bucket].bucket_head = This->prop_cnt++;
 199     return prop;
 200 }
 201
 202 static dispex_prop_t *alloc_protref(jsdisp_t *This, const WCHAR *name, DWORD ref)
 203 {
 204     dispex_prop_t *ret;
 205
 206     ret = alloc_prop(This, name, PROP_PROTREF, 0);
 207     if(!ret)
 208         return NULL;
 209
 210     ret->u.ref = ref;
 211     return ret;
 212 }
 213
 214 static HRESULT find_prop_name(jsdisp_t *This, unsigned hash, const WCHAR *name, dispex_prop_t **ret)
 215 {
 216     const builtin_prop_t *builtin;
 217     unsigned bucket, pos, prev = 0;
 218     dispex_prop_t *prop;
 219
 220     bucket = get_props_idx(This, hash);
 221     pos = This->props[bucket].bucket_head;
 222     while(pos != 0) {
 223         if(!wcscmp(name, This->props[pos].name)) {
 224             if(prev != 0) {
 225                 This->props[prev].bucket_next = This->props[pos].bucket_next;
 226                 This->props[pos].bucket_next = This->props[bucket].bucket_head;
 227                 This->props[bucket].bucket_head = pos;
 228             }
 229
 230             *ret = &This->props[pos];
 231             return S_OK;
 232         }
 233
 234         prev = pos;
 235         pos = This->props[pos].bucket_next;
 236     }
 237
 238     builtin = find_builtin_prop(This, name);
 239     if(builtin) {
 240         unsigned flags = builtin->flags;
 241         if(flags & PROPF_METHOD)
 242             flags |= PROPF_WRITABLE | PROPF_CONFIGURABLE;
 243         else if(builtin->setter)
 244             flags |= PROPF_WRITABLE;
 245         flags &= PROPF_ENUMERABLE | PROPF_WRITABLE | PROPF_CONFIGURABLE;
 246         prop = alloc_prop(This, name, PROP_BUILTIN, flags);
 247         if(!prop)
 248             return E_OUTOFMEMORY;
 249
 250         prop->u.p = builtin;
 251         *ret = prop;
 252         return S_OK;
 253     }
 254
 255     if(This->builtin_info->idx_length) {
 256         const WCHAR *ptr;
 257         unsigned idx = 0;
 258
 259         for(ptr = name; is_digit(*ptr) && idx < 0x10000; ptr++)
 260             idx = idx*10 + (*ptr-'0');
 261         if(!*ptr && idx < This->builtin_info->idx_length(This)) {
 262             prop = alloc_prop(This, name, PROP_IDX, This->builtin_info->idx_put ? PROPF_WRITABLE : 0);
 263             if(!prop)
 264                 return E_OUTOFMEMORY;
 265
 266             prop->u.idx = idx;
 267             *ret = prop;
 268             return S_OK;
 269         }
 270     }
 271
 272     *ret = NULL;
 273     return S_OK;
 274 }
 275
 276 static HRESULT find_prop_name_prot(jsdisp_t *This, unsigned hash, const WCHAR *name, dispex_prop_t **ret)
 277 {
 278     dispex_prop_t *prop, *del=NULL;
 279     HRESULT hres;
 280
 281     hres = find_prop_name(This, hash, name, &prop);
 282     if(FAILED(hres))
 283         return hres;
 284     if(prop && prop->type==PROP_DELETED) {
 285         del = prop;
 286     } else if(prop) {
 287         *ret = prop;
 288         return S_OK;
 289     }
 290
 291     if(This->prototype) {
 292         hres = find_prop_name_prot(This->prototype, hash, name, &prop);
 293         if(FAILED(hres))
 294             return hres;
 295         if(prop) {
 296             if(del) {
 297                 del->type = PROP_PROTREF;
 298                 del->u.ref = prop - This->prototype->props;
 299                 prop = del;
 300             }else {
 301                 prop = alloc_protref(This, prop->name, prop - This->prototype->props);
 302                 if(!prop)
 303                     return E_OUTOFMEMORY;
 304             }
 305
 306             *ret = prop;
 307             return S_OK;
 308         }
 309     }
 310
 311     *ret = del;
 312     return S_OK;
 313 }
 314
 315 static HRESULT ensure_prop_name(jsdisp_t *This, const WCHAR *name, DWORD create_flags, dispex_prop_t **ret)
 316 {
 317     dispex_prop_t *prop;
 318     HRESULT hres;
 319
 320     hres = find_prop_name_prot(This, string_hash(name), name, &prop);
 321     if(SUCCEEDED(hres) && (!prop || prop->type == PROP_DELETED)) {
 322         TRACE("creating prop %s flags %x\n", debugstr_w(name), create_flags);
 323
 324         if(prop) {
 325             prop->type = PROP_JSVAL;
 326             prop->flags = create_flags;
 327             prop->u.val = jsval_undefined();
 328         }else {
 329             prop = alloc_prop(This, name, PROP_JSVAL, create_flags);
 330             if(!prop)
 331                 return E_OUTOFMEMORY;
 332         }
 333
 334         prop->u.val = jsval_undefined();
 335     }
 336
 337     *ret = prop;
 338     return hres;
 339 }
 340
 341 static IDispatch *get_this(DISPPARAMS *dp)
 342 {
 343     DWORD i;
 344
 345     for(i=0; i < dp->cNamedArgs; i++) {
 346         if(dp->rgdispidNamedArgs[i] == DISPID_THIS) {
 347             if(V_VT(dp->rgvarg+i) == VT_DISPATCH)
 348                 return V_DISPATCH(dp->rgvarg+i);
 349
 350             WARN("This is not VT_DISPATCH\n");
 351             return NULL;
 352         }
 353     }
 354
 355     TRACE("no this passed\n");
 356     return NULL;
 357 }
 358
 359 static HRESULT convert_params(const DISPPARAMS *dp, jsval_t *buf, unsigned *argc, jsval_t **ret)
 360 {
 361     jsval_t *argv;
 362     unsigned cnt;
 363     unsigned i;
 364     HRESULT hres;
 365
 366     cnt = dp->cArgs - dp->cNamedArgs;
 367
 368     if(cnt > 6) {
 369         argv = heap_alloc(cnt * sizeof(*argv));
 370         if(!argv)
 371             return E_OUTOFMEMORY;
 372     }else {
 373         argv = buf;
 374     }
 375
 376     for(i = 0; i < cnt; i++) {
 377         hres = variant_to_jsval(dp->rgvarg+dp->cArgs-i-1, argv+i);
 378         if(FAILED(hres)) {
 379             while(i--)
 380                 jsval_release(argv[i]);
 381             if(argv != buf)
 382                 heap_free(argv);
 383             return hres;
 384         }
 385     }
 386
 387     *argc = cnt;
 388     *ret = argv;
 389     return S_OK;
 390 }
 391
 392 static HRESULT invoke_prop_func(jsdisp_t *This, IDispatch *jsthis, dispex_prop_t *prop, WORD flags,
 393         unsigned argc, jsval_t *argv, jsval_t *r, IServiceProvider *caller)
 394 {
 395     HRESULT hres;
 396
 397     switch(prop->type) {
 398     case PROP_BUILTIN: {
 399         if(flags == DISPATCH_CONSTRUCT && (prop->flags & PROPF_METHOD)) {
 400             WARN("%s is not a constructor\n", debugstr_w(prop->name));
 401             return E_INVALIDARG;
 402         }
 403
 404         if(prop->name || This->builtin_info->class != JSCLASS_FUNCTION) {
 405             vdisp_t vthis;
 406
 407             if(This->builtin_info->class != JSCLASS_FUNCTION && prop->u.p->invoke != JSGlobal_eval)
 408                 flags &= ~DISPATCH_JSCRIPT_INTERNAL_MASK;
 409             if(jsthis)
 410                 set_disp(&vthis, jsthis);
 411             else
 412                 set_jsdisp(&vthis, This);
 413             hres = prop->u.p->invoke(This->ctx, &vthis, flags, argc, argv, r);
 414             vdisp_release(&vthis);
 415         }else {
 416             /* Function object calls are special case */
 417             hres = Function_invoke(This, jsthis, flags, argc, argv, r);
 418         }
 419         return hres;
 420     }
 421     case PROP_PROTREF:
 422         return invoke_prop_func(This->prototype, jsthis ? jsthis : (IDispatch *)&This->IDispatchEx_iface,
 423                                 This->prototype->props+prop->u.ref, flags, argc, argv, r, caller);
 424     case PROP_JSVAL: {
 425         if(!is_object_instance(prop->u.val)) {
 426             FIXME("invoke %s\n", debugstr_jsval(prop->u.val));
 427             return E_FAIL;
 428         }
 429
 430         TRACE("call %s %p\n", debugstr_w(prop->name), get_object(prop->u.val));
 431
 432         return disp_call_value(This->ctx, get_object(prop->u.val),
 433                                jsthis ? jsthis : (IDispatch*)&This->IDispatchEx_iface,
 434                                flags, argc, argv, r);
 435     }
 436     case PROP_ACCESSOR:
 437         FIXME("accessor\n");
 438         return E_NOTIMPL;
 439     case PROP_IDX:
 440         FIXME("Invoking PROP_IDX not yet supported\n");
 441         return E_NOTIMPL;
 442     case PROP_DELETED:
 443         assert(0);
 444     }
 445
 446     assert(0);
 447     return E_FAIL;
 448 }
 449
 450 static HRESULT prop_get(jsdisp_t *This, dispex_prop_t *prop,  jsval_t *r)
 451 {
 452     jsdisp_t *prop_obj = This;
 453     HRESULT hres;
 454
 455     while(prop->type == PROP_PROTREF) {
 456         prop_obj = prop_obj->prototype;
 457         prop = prop_obj->props + prop->u.ref;
 458     }
 459
 460     switch(prop->type) {
 461     case PROP_BUILTIN:
 462         if(prop->u.p->getter) {
 463             hres = prop->u.p->getter(This->ctx, This, r);
 464         }else {
 465             jsdisp_t *obj;
 466
 467             assert(prop->u.p->invoke != NULL);
 468             hres = create_builtin_function(This->ctx, prop->u.p->invoke, prop->u.p->name, NULL,
 469                     prop->u.p->flags, NULL, &obj);
 470             if(FAILED(hres))
 471                 break;
 472
 473             prop->type = PROP_JSVAL;
 474             prop->u.val = jsval_obj(obj);
 475
 476             jsdisp_addref(obj);
 477             *r = jsval_obj(obj);
 478         }
 479         break;
 480     case PROP_JSVAL:
 481         hres = jsval_copy(prop->u.val, r);
 482         break;
 483     case PROP_ACCESSOR:
 484         if(prop->u.accessor.getter) {
 485             hres = jsdisp_call_value(prop->u.accessor.getter, to_disp(This),
 486                                      DISPATCH_METHOD, 0, NULL, r);
 487         }else {
 488             *r = jsval_undefined();
 489             hres = S_OK;
 490         }
 491         break;
 492     case PROP_IDX:
 493         hres = prop_obj->builtin_info->idx_get(prop_obj, prop->u.idx, r);
 494         break;
 495     default:
 496         ERR("type %d\n", prop->type);
 497         return E_FAIL;
 498     }
 499
 500     if(FAILED(hres)) {
 501         TRACE("fail %08x\n", hres);
 502         return hres;
 503     }
 504
 505     TRACE("%s ret %s\n", debugstr_w(prop->name), debugstr_jsval(*r));
 506     return hres;
 507 }
 508
 509 static HRESULT prop_put(jsdisp_t *This, dispex_prop_t *prop, jsval_t val)
 510 {
 511     HRESULT hres;
 512
 513     if(prop->type == PROP_PROTREF) {
 514         dispex_prop_t *prop_iter = prop;
 515         jsdisp_t *prototype_iter = This;
 516
 517         do {
 518             prototype_iter = prototype_iter->prototype;
 519             prop_iter = prototype_iter->props + prop_iter->u.ref;
 520         } while(prop_iter->type == PROP_PROTREF);
 521
 522         if(prop_iter->type == PROP_ACCESSOR)
 523             prop = prop_iter;
 524     }
 525
 526     switch(prop->type) {
 527     case PROP_BUILTIN:
 528         if(!prop->u.p->setter) {
 529             TRACE("getter with no setter\n");
 530             return S_OK;
 531         }
 532         return prop->u.p->setter(This->ctx, This, val);
 533     case PROP_PROTREF:
 534     case PROP_DELETED:
 535         prop->type = PROP_JSVAL;
 536         prop->flags = PROPF_ENUMERABLE | PROPF_CONFIGURABLE | PROPF_WRITABLE;
 537         prop->u.val = jsval_undefined();
 538         break;
 539     case PROP_JSVAL:
 540         if(!(prop->flags & PROPF_WRITABLE))
 541             return S_OK;
 542
 543         jsval_release(prop->u.val);
 544         break;
 545     case PROP_ACCESSOR:
 546         if(!prop->u.accessor.setter) {
 547             TRACE("no setter\n");
 548             return S_OK;
 549         }
 550         return jsdisp_call_value(prop->u.accessor.setter, to_disp(This), DISPATCH_METHOD, 1, &val, NULL);
 551     case PROP_IDX:
 552         if(!This->builtin_info->idx_put) {
 553             TRACE("no put_idx\n");
 554             return S_OK;
 555         }
 556         return This->builtin_info->idx_put(This, prop->u.idx, val);
 557     default:
 558         ERR("type %d\n", prop->type);
 559         return E_FAIL;
 560     }
 561
 562     TRACE("%s = %s\n", debugstr_w(prop->name), debugstr_jsval(val));
 563
 564     hres = jsval_copy(val, &prop->u.val);
 565     if(FAILED(hres))
 566         return hres;
 567
 568     if(This->builtin_info->on_put)
 569         This->builtin_info->on_put(This, prop->name);
 570
 571     return S_OK;
 572 }
 573
 574 HRESULT builtin_set_const(script_ctx_t *ctx, jsdisp_t *jsthis, jsval_t value)
 575 {
 576     TRACE("%p %s\n", jsthis, debugstr_jsval(value));
 577     return S_OK;
 578 }
 579
 580 static HRESULT fill_protrefs(jsdisp_t *This)
 581 {
 582     dispex_prop_t *iter, *prop;
 583     HRESULT hres;
 584
 585     if(!This->prototype)
 586         return S_OK;
 587
 588     fill_protrefs(This->prototype);
 589
 590     for(iter = This->prototype->props; iter < This->prototype->props+This->prototype->prop_cnt; iter++) {
 591         if(!iter->name)
 592             continue;
 593         hres = find_prop_name(This, iter->hash, iter->name, &prop);
 594         if(FAILED(hres))
 595             return hres;
 596         if(!prop || prop->type==PROP_DELETED) {
 597             if(prop) {
 598                 prop->type = PROP_PROTREF;
 599                 prop->flags = 0;
 600                 prop->u.ref = iter - This->prototype->props;
 601             }else {
 602                 prop = alloc_protref(This, iter->name, iter - This->prototype->props);
 603                 if(!prop)
 604                     return E_OUTOFMEMORY;
 605             }
 606         }
 607     }
 608
 609     return S_OK;
 610 }
 611
 612 struct typeinfo_func {
 613     dispex_prop_t *prop;
 614     function_code_t *code;
 615 };
 616
 617 typedef struct {
 618     ITypeInfo ITypeInfo_iface;
 619     ITypeComp ITypeComp_iface;
 620     LONG ref;
 621
 622     UINT num_funcs;
 623     UINT num_vars;
 624     struct typeinfo_func *funcs;
 625     dispex_prop_t **vars;
 626
 627     jsdisp_t *jsdisp;
 628 } ScriptTypeInfo;
 629
 630 static struct typeinfo_func *get_func_from_memid(const ScriptTypeInfo *typeinfo, MEMBERID memid)
 631 {
 632     UINT a = 0, b = typeinfo->num_funcs;
 633
 634     while (a < b)
 635     {
 636         UINT i = (a + b - 1) / 2;
 637         MEMBERID func_memid = prop_to_id(typeinfo->jsdisp, typeinfo->funcs[i].prop);
 638
 639         if (memid == func_memid)
 640             return &typeinfo->funcs[i];
 641         else if (memid < func_memid)
 642             b = i;
 643         else
 644             a = i + 1;
 645     }
 646     return NULL;
 647 }
 648
 649 static dispex_prop_t *get_var_from_memid(const ScriptTypeInfo *typeinfo, MEMBERID memid)
 650 {
 651     UINT a = 0, b = typeinfo->num_vars;
 652
 653     while (a < b)
 654     {
 655         UINT i = (a + b - 1) / 2;
 656         MEMBERID var_memid = prop_to_id(typeinfo->jsdisp, typeinfo->vars[i]);
 657
 658         if (memid == var_memid)
 659             return typeinfo->vars[i];
 660         else if (memid < var_memid)
 661             b = i;
 662         else
 663             a = i + 1;
 664     }
 665     return NULL;
 666 }
 667
 668 static inline ScriptTypeInfo *ScriptTypeInfo_from_ITypeInfo(ITypeInfo *iface)
 669 {
 670     return CONTAINING_RECORD(iface, ScriptTypeInfo, ITypeInfo_iface);
 671 }
 672
 673 static inline ScriptTypeInfo *ScriptTypeInfo_from_ITypeComp(ITypeComp *iface)
 674 {
 675     return CONTAINING_RECORD(iface, ScriptTypeInfo, ITypeComp_iface);
 676 }
 677
 678 static HRESULT WINAPI ScriptTypeInfo_QueryInterface(ITypeInfo *iface, REFIID riid, void **ppv)
 679 {
 680     ScriptTypeInfo *This = ScriptTypeInfo_from_ITypeInfo(iface);
 681
 682     if (IsEqualGUID(&IID_IUnknown, riid) || IsEqualGUID(&IID_ITypeInfo, riid))
 683         *ppv = &This->ITypeInfo_iface;
 684     else if (IsEqualGUID(&IID_ITypeComp, riid))
 685         *ppv = &This->ITypeComp_iface;
 686     else
 687     {
 688         WARN("(%p)->(%s %p)\n", This, debugstr_guid(riid), ppv);
 689         *ppv = NULL;
 690         return E_NOINTERFACE;
 691     }
 692
 693     TRACE("(%p)->(%s %p)\n", This, debugstr_guid(riid), ppv);
 694     IUnknown_AddRef((IUnknown*)*ppv);
 695     return S_OK;
 696 }
 697
 698 static ULONG WINAPI ScriptTypeInfo_AddRef(ITypeInfo *iface)
 699 {
 700     ScriptTypeInfo *This = ScriptTypeInfo_from_ITypeInfo(iface);
 701     LONG ref = InterlockedIncrement(&This->ref);
 702
 703     TRACE("(%p) ref=%d\n", This, ref);
 704
 705     return ref;
 706 }
 707
 708 static ULONG WINAPI ScriptTypeInfo_Release(ITypeInfo *iface)
 709 {
 710     ScriptTypeInfo *This = ScriptTypeInfo_from_ITypeInfo(iface);
 711     LONG ref = InterlockedDecrement(&This->ref);
 712     UINT i;
 713
 714     TRACE("(%p) ref=%d\n", This, ref);
 715
 716     if (!ref)
 717     {
 718         for (i = This->num_funcs; i--;)
 719             release_bytecode(This->funcs[i].code->bytecode);
 720         IDispatchEx_Release(&This->jsdisp->IDispatchEx_iface);
 721         heap_free(This->funcs);
 722         heap_free(This->vars);
 723         heap_free(This);
 724     }
 725     return ref;
 726 }
 727
 728 static HRESULT WINAPI ScriptTypeInfo_GetTypeAttr(ITypeInfo *iface, TYPEATTR **ppTypeAttr)
 729 {
 730     ScriptTypeInfo *This = ScriptTypeInfo_from_ITypeInfo(iface);
 731     TYPEATTR *attr;
 732
 733     TRACE("(%p)->(%p)\n", This, ppTypeAttr);
 734
 735     if (!ppTypeAttr) return E_INVALIDARG;
 736
 737     attr = heap_alloc_zero(sizeof(*attr));
 738     if (!attr) return E_OUTOFMEMORY;
 739
 740     attr->guid = GUID_JScriptTypeInfo;
 741     attr->lcid = LOCALE_USER_DEFAULT;
 742     attr->memidConstructor = MEMBERID_NIL;
 743     attr->memidDestructor = MEMBERID_NIL;
 744     attr->cbSizeInstance = 4;
 745     attr->typekind = TKIND_DISPATCH;
 746     attr->cFuncs = This->num_funcs;
 747     attr->cVars = This->num_vars;
 748     attr->cImplTypes = 1;
 749     attr->cbSizeVft = sizeof(IDispatchVtbl);
 750     attr->cbAlignment = 4;
 751     attr->wTypeFlags = TYPEFLAG_FDISPATCHABLE;
 752     attr->wMajorVerNum = JSCRIPT_MAJOR_VERSION;
 753     attr->wMinorVerNum = JSCRIPT_MINOR_VERSION;
 754
 755     *ppTypeAttr = attr;
 756     return S_OK;
 757 }
 758
 759 static HRESULT WINAPI ScriptTypeInfo_GetTypeComp(ITypeInfo *iface, ITypeComp **ppTComp)
 760 {
 761     ScriptTypeInfo *This = ScriptTypeInfo_from_ITypeInfo(iface);
 762
 763     TRACE("(%p)->(%p)\n", This, ppTComp);
 764
 765     if (!ppTComp) return E_INVALIDARG;
 766
 767     *ppTComp = &This->ITypeComp_iface;
 768     ITypeInfo_AddRef(iface);
 769     return S_OK;
 770 }
 771
 772 static HRESULT WINAPI ScriptTypeInfo_GetFuncDesc(ITypeInfo *iface, UINT index, FUNCDESC **ppFuncDesc)
 773 {
 774     ScriptTypeInfo *This = ScriptTypeInfo_from_ITypeInfo(iface);
 775     struct typeinfo_func *func;
 776     FUNCDESC *desc;
 777     unsigned i;
 778
 779     TRACE("(%p)->(%u %p)\n", This, index, ppFuncDesc);
 780
 781     if (!ppFuncDesc) return E_INVALIDARG;
 782     if (index >= This->num_funcs) return TYPE_E_ELEMENTNOTFOUND;
 783     func = &This->funcs[index];
 784
 785     /* Store the parameter array after the FUNCDESC structure */
 786     desc = heap_alloc_zero(sizeof(*desc) + sizeof(ELEMDESC) * func->code->param_cnt);
 787     if (!desc) return E_OUTOFMEMORY;
 788
 789     desc->memid = prop_to_id(This->jsdisp, func->prop);
 790     desc->funckind = FUNC_DISPATCH;
 791     desc->invkind = INVOKE_FUNC;
 792     desc->callconv = CC_STDCALL;
 793     desc->cParams = func->code->param_cnt;
 794     desc->elemdescFunc.tdesc.vt = VT_VARIANT;
 795
 796     if (func->code->param_cnt) desc->lprgelemdescParam = (ELEMDESC*)(desc + 1);
 797     for (i = 0; i < func->code->param_cnt; i++)
 798         desc->lprgelemdescParam[i].tdesc.vt = VT_VARIANT;
 799
 800     *ppFuncDesc = desc;
 801     return S_OK;
 802 }
 803
 804 static HRESULT WINAPI ScriptTypeInfo_GetVarDesc(ITypeInfo *iface, UINT index, VARDESC **ppVarDesc)
 805 {
 806     ScriptTypeInfo *This = ScriptTypeInfo_from_ITypeInfo(iface);
 807     VARDESC *desc;
 808
 809     TRACE("(%p)->(%u %p)\n", This, index, ppVarDesc);
 810
 811     if (!ppVarDesc) return E_INVALIDARG;
 812     if (index >= This->num_vars) return TYPE_E_ELEMENTNOTFOUND;
 813
 814     desc = heap_alloc_zero(sizeof(*desc));
 815     if (!desc) return E_OUTOFMEMORY;
 816
 817     desc->memid = prop_to_id(This->jsdisp, This->vars[index]);
 818     desc->varkind = VAR_DISPATCH;
 819     desc->elemdescVar.tdesc.vt = VT_VARIANT;
 820
 821     *ppVarDesc = desc;
 822     return S_OK;
 823 }
 824
 825 static HRESULT WINAPI ScriptTypeInfo_GetNames(ITypeInfo *iface, MEMBERID memid, BSTR *rgBstrNames,
 826         UINT cMaxNames, UINT *pcNames)
 827 {
 828     ScriptTypeInfo *This = ScriptTypeInfo_from_ITypeInfo(iface);
 829     struct typeinfo_func *func;
 830     ITypeInfo *disp_typeinfo;
 831     dispex_prop_t *var;
 832     HRESULT hr;
 833     UINT i = 0;
 834
 835     TRACE("(%p)->(%d %p %u %p)\n", This, memid, rgBstrNames, cMaxNames, pcNames);
 836
 837     if (!rgBstrNames || !pcNames) return E_INVALIDARG;
 838     if (memid <= 0) return TYPE_E_ELEMENTNOTFOUND;
 839
 840     func = get_func_from_memid(This, memid);
 841     if (!func)
 842     {
 843         var = get_var_from_memid(This, memid);
 844         if (!var)
 845         {
 846             hr = get_dispatch_typeinfo(&disp_typeinfo);
 847             if (FAILED(hr)) return hr;
 848
 849             return ITypeInfo_GetNames(disp_typeinfo, memid, rgBstrNames, cMaxNames, pcNames);
 850         }
 851     }
 852
 853     *pcNames = 0;
 854     if (!cMaxNames) return S_OK;
 855
 856     rgBstrNames[0] = SysAllocString(func ? func->prop->name : var->name);
 857     if (!rgBstrNames[0]) return E_OUTOFMEMORY;
 858     i++;
 859
 860     if (func)
 861     {
 862         unsigned num = min(cMaxNames, func->code->param_cnt + 1);
 863
 864         for (; i < num; i++)
 865         {
 866             if (!(rgBstrNames[i] = SysAllocString(func->code->params[i - 1])))
 867             {
 868                 do SysFreeString(rgBstrNames[--i]); while (i);
 869                 return E_OUTOFMEMORY;
 870             }
 871         }
 872     }
 873
 874     *pcNames = i;
 875     return S_OK;
 876 }
 877
 878 static HRESULT WINAPI ScriptTypeInfo_GetRefTypeOfImplType(ITypeInfo *iface, UINT index, HREFTYPE *pRefType)
 879 {
 880     ScriptTypeInfo *This = ScriptTypeInfo_from_ITypeInfo(iface);
 881
 882     TRACE("(%p)->(%u %p)\n", This, index, pRefType);
 883
 884     /* We only inherit from IDispatch */
 885     if (!pRefType) return E_INVALIDARG;
 886     if (index != 0) return TYPE_E_ELEMENTNOTFOUND;
 887
 888     *pRefType = 1;
 889     return S_OK;
 890 }
 891
 892 static HRESULT WINAPI ScriptTypeInfo_GetImplTypeFlags(ITypeInfo *iface, UINT index, INT *pImplTypeFlags)
 893 {
 894     ScriptTypeInfo *This = ScriptTypeInfo_from_ITypeInfo(iface);
 895
 896     TRACE("(%p)->(%u %p)\n", This, index, pImplTypeFlags);
 897
 898     if (!pImplTypeFlags) return E_INVALIDARG;
 899     if (index != 0) return TYPE_E_ELEMENTNOTFOUND;
 900
 901     *pImplTypeFlags = 0;
 902     return S_OK;
 903 }
 904
 905 static HRESULT WINAPI ScriptTypeInfo_GetIDsOfNames(ITypeInfo *iface, LPOLESTR *rgszNames, UINT cNames,
 906         MEMBERID *pMemId)
 907 {
 908     ScriptTypeInfo *This = ScriptTypeInfo_from_ITypeInfo(iface);
 909     ITypeInfo *disp_typeinfo;
 910     const WCHAR *name;
 911     HRESULT hr = S_OK;
 912     int i, j, arg;
 913
 914     TRACE("(%p)->(%p %u %p)\n", This, rgszNames, cNames, pMemId);
 915
 916     if (!rgszNames || !cNames || !pMemId) return E_INVALIDARG;
 917
 918     for (i = 0; i < cNames; i++) pMemId[i] = MEMBERID_NIL;
 919     name = rgszNames[0];
 920
 921     for (i = 0; i < This->num_funcs; i++)
 922     {
 923         struct typeinfo_func *func = &This->funcs[i];
 924
 925         if (wcsicmp(name, func->prop->name)) continue;
 926         pMemId[0] = prop_to_id(This->jsdisp, func->prop);
 927
 928         for (j = 1; j < cNames; j++)
 929         {
 930             name = rgszNames[j];
 931             for (arg = func->code->param_cnt; --arg >= 0;)
 932                 if (!wcsicmp(name, func->code->params[arg]))
 933                     break;
 934             if (arg >= 0)
 935                 pMemId[j] = arg;
 936             else
 937                 hr = DISP_E_UNKNOWNNAME;
 938         }
 939         return hr;
 940     }
 941
 942     for (i = 0; i < This->num_vars; i++)
 943     {
 944         dispex_prop_t *var = This->vars[i];
 945
 946         if (wcsicmp(name, var->name)) continue;
 947         pMemId[0] = prop_to_id(This->jsdisp, var);
 948         return S_OK;
 949     }
 950
 951     /* Look into the inherited IDispatch */
 952     hr = get_dispatch_typeinfo(&disp_typeinfo);
 953     if (FAILED(hr)) return hr;
 954
 955     return ITypeInfo_GetIDsOfNames(disp_typeinfo, rgszNames, cNames, pMemId);
 956 }
 957
 958 static HRESULT WINAPI ScriptTypeInfo_Invoke(ITypeInfo *iface, PVOID pvInstance, MEMBERID memid, WORD wFlags,
 959         DISPPARAMS *pDispParams, VARIANT *pVarResult, EXCEPINFO *pExcepInfo, UINT *puArgErr)
 960 {
 961     ScriptTypeInfo *This = ScriptTypeInfo_from_ITypeInfo(iface);
 962     ITypeInfo *disp_typeinfo;
 963     IDispatch *disp;
 964     HRESULT hr;
 965
 966     TRACE("(%p)->(%p %d %d %p %p %p %p)\n", This, pvInstance, memid, wFlags,
 967           pDispParams, pVarResult, pExcepInfo, puArgErr);
 968
 969     if (!pvInstance) return E_INVALIDARG;
 970     if (memid <= 0) return TYPE_E_ELEMENTNOTFOUND;
 971
 972     if (!get_func_from_memid(This, memid) && !get_var_from_memid(This, memid))
 973     {
 974         hr = get_dispatch_typeinfo(&disp_typeinfo);
 975         if (FAILED(hr)) return hr;
 976
 977         return ITypeInfo_Invoke(disp_typeinfo, pvInstance, memid, wFlags, pDispParams,
 978                                 pVarResult, pExcepInfo, puArgErr);
 979     }
 980
 981     hr = IUnknown_QueryInterface((IUnknown*)pvInstance, &IID_IDispatch, (void**)&disp);
 982     if (FAILED(hr)) return hr;
 983
 984     hr = IDispatch_Invoke(disp, memid, &IID_NULL, LOCALE_USER_DEFAULT, wFlags,
 985                           pDispParams, pVarResult, pExcepInfo, puArgErr);
 986     IDispatch_Release(disp);
 987
 988     return hr;
 989 }
 990
 991 static HRESULT WINAPI ScriptTypeInfo_GetDocumentation(ITypeInfo *iface, MEMBERID memid, BSTR *pBstrName,
 992         BSTR *pBstrDocString, DWORD *pdwHelpContext, BSTR *pBstrHelpFile)
 993 {
 994     ScriptTypeInfo *This = ScriptTypeInfo_from_ITypeInfo(iface);
 995     struct typeinfo_func *func;
 996     ITypeInfo *disp_typeinfo;
 997     dispex_prop_t *var;
 998     HRESULT hr;
 999
1000     TRACE("(%p)->(%d %p %p %p %p)\n", This, memid, pBstrName, pBstrDocString, pdwHelpContext, pBstrHelpFile);
1001
1002     if (pBstrDocString) *pBstrDocString = NULL;
1003     if (pdwHelpContext) *pdwHelpContext = 0;
1004     if (pBstrHelpFile) *pBstrHelpFile = NULL;
1005
1006     if (memid == MEMBERID_NIL)
1007     {
1008         if (pBstrName && !(*pBstrName = SysAllocString(L"JScriptTypeInfo")))
1009             return E_OUTOFMEMORY;
1010         if (pBstrDocString &&
1011             !(*pBstrDocString = SysAllocString(L"JScript Type Info")))
1012         {
1013             if (pBstrName) SysFreeString(*pBstrName);
1014             return E_OUTOFMEMORY;
1015         }
1016         return S_OK;
1017     }
1018     if (memid <= 0) return TYPE_E_ELEMENTNOTFOUND;
1019
1020     func = get_func_from_memid(This, memid);
1021     if (!func)
1022     {
1023         var = get_var_from_memid(This, memid);
1024         if (!var)
1025         {
1026             hr = get_dispatch_typeinfo(&disp_typeinfo);
1027             if (FAILED(hr)) return hr;
1028
1029             return ITypeInfo_GetDocumentation(disp_typeinfo, memid, pBstrName, pBstrDocString,
1030                                               pdwHelpContext, pBstrHelpFile);
1031         }
1032     }
1033
1034     if (pBstrName)
1035     {
1036         *pBstrName = SysAllocString(func ? func->prop->name : var->name);
1037
1038         if (!*pBstrName)
1039             return E_OUTOFMEMORY;
1040     }
1041     return S_OK;
1042 }
1043
1044 static HRESULT WINAPI ScriptTypeInfo_GetDllEntry(ITypeInfo *iface, MEMBERID memid, INVOKEKIND invKind,
1045         BSTR *pBstrDllName, BSTR *pBstrName, WORD *pwOrdinal)
1046 {
1047     ScriptTypeInfo *This = ScriptTypeInfo_from_ITypeInfo(iface);
1048     ITypeInfo *disp_typeinfo;
1049     HRESULT hr;
1050
1051     TRACE("(%p)->(%d %d %p %p %p)\n", This, memid, invKind, pBstrDllName, pBstrName, pwOrdinal);
1052
1053     if (pBstrDllName) *pBstrDllName = NULL;
1054     if (pBstrName) *pBstrName = NULL;
1055     if (pwOrdinal) *pwOrdinal = 0;
1056
1057     if (!get_func_from_memid(This, memid) && !get_var_from_memid(This, memid))
1058     {
1059         hr = get_dispatch_typeinfo(&disp_typeinfo);
1060         if (FAILED(hr)) return hr;
1061
1062         return ITypeInfo_GetDllEntry(disp_typeinfo, memid, invKind, pBstrDllName, pBstrName, pwOrdinal);
1063     }
1064     return TYPE_E_BADMODULEKIND;
1065 }
1066
1067 static HRESULT WINAPI ScriptTypeInfo_GetRefTypeInfo(ITypeInfo *iface, HREFTYPE hRefType, ITypeInfo **ppTInfo)
1068 {
1069     ScriptTypeInfo *This = ScriptTypeInfo_from_ITypeInfo(iface);
1070     HRESULT hr;
1071
1072     TRACE("(%p)->(%x %p)\n", This, hRefType, ppTInfo);
1073
1074     if (!ppTInfo || (INT)hRefType < 0) return E_INVALIDARG;
1075
1076     if (hRefType & ~3) return E_FAIL;
1077     if (hRefType & 1)
1078     {
1079         hr = get_dispatch_typeinfo(ppTInfo);
1080         if (FAILED(hr)) return hr;
1081     }
1082     else
1083         *ppTInfo = iface;
1084
1085     ITypeInfo_AddRef(*ppTInfo);
1086     return S_OK;
1087 }
1088
1089 static HRESULT WINAPI ScriptTypeInfo_AddressOfMember(ITypeInfo *iface, MEMBERID memid, INVOKEKIND invKind, PVOID *ppv)
1090 {
1091     ScriptTypeInfo *This = ScriptTypeInfo_from_ITypeInfo(iface);
1092     ITypeInfo *disp_typeinfo;
1093     HRESULT hr;
1094
1095     TRACE("(%p)->(%d %d %p)\n", This, memid, invKind, ppv);
1096
1097     if (!ppv) return E_INVALIDARG;
1098     *ppv = NULL;
1099
1100     if (!get_func_from_memid(This, memid) && !get_var_from_memid(This, memid))
1101     {
1102         hr = get_dispatch_typeinfo(&disp_typeinfo);
1103         if (FAILED(hr)) return hr;
1104
1105         return ITypeInfo_AddressOfMember(disp_typeinfo, memid, invKind, ppv);
1106     }
1107     return TYPE_E_BADMODULEKIND;
1108 }
1109
1110 static HRESULT WINAPI ScriptTypeInfo_CreateInstance(ITypeInfo *iface, IUnknown *pUnkOuter, REFIID riid, PVOID *ppvObj)
1111 {
1112     ScriptTypeInfo *This = ScriptTypeInfo_from_ITypeInfo(iface);
1113
1114     TRACE("(%p)->(%p %s %p)\n", This, pUnkOuter, debugstr_guid(riid), ppvObj);
1115
1116     if (!ppvObj) return E_INVALIDARG;
1117
1118     *ppvObj = NULL;
1119     return TYPE_E_BADMODULEKIND;
1120 }
1121
1122 static HRESULT WINAPI ScriptTypeInfo_GetMops(ITypeInfo *iface, MEMBERID memid, BSTR *pBstrMops)
1123 {
1124     ScriptTypeInfo *This = ScriptTypeInfo_from_ITypeInfo(iface);
1125     ITypeInfo *disp_typeinfo;
1126     HRESULT hr;
1127
1128     TRACE("(%p)->(%d %p)\n", This, memid, pBstrMops);
1129
1130     if (!pBstrMops) return E_INVALIDARG;
1131
1132     if (!get_func_from_memid(This, memid) && !get_var_from_memid(This, memid))
1133     {
1134         hr = get_dispatch_typeinfo(&disp_typeinfo);
1135         if (FAILED(hr)) return hr;
1136
1137         return ITypeInfo_GetMops(disp_typeinfo, memid, pBstrMops);
1138     }
1139
1140     *pBstrMops = NULL;
1141     return S_OK;
1142 }
1143
1144 static HRESULT WINAPI ScriptTypeInfo_GetContainingTypeLib(ITypeInfo *iface, ITypeLib **ppTLib, UINT *pIndex)
1145 {
1146     ScriptTypeInfo *This = ScriptTypeInfo_from_ITypeInfo(iface);
1147
1148     FIXME("(%p)->(%p %p)\n", This, ppTLib, pIndex);
1149
1150     return E_NOTIMPL;
1151 }
1152
1153 static void WINAPI ScriptTypeInfo_ReleaseTypeAttr(ITypeInfo *iface, TYPEATTR *pTypeAttr)
1154 {
1155     ScriptTypeInfo *This = ScriptTypeInfo_from_ITypeInfo(iface);
1156
1157     TRACE("(%p)->(%p)\n", This, pTypeAttr);
1158
1159     heap_free(pTypeAttr);
1160 }
1161
1162 static void WINAPI ScriptTypeInfo_ReleaseFuncDesc(ITypeInfo *iface, FUNCDESC *pFuncDesc)
1163 {
1164     ScriptTypeInfo *This = ScriptTypeInfo_from_ITypeInfo(iface);
1165
1166     TRACE("(%p)->(%p)\n", This, pFuncDesc);
1167
1168     heap_free(pFuncDesc);
1169 }
1170
1171 static void WINAPI ScriptTypeInfo_ReleaseVarDesc(ITypeInfo *iface, VARDESC *pVarDesc)
1172 {
1173     ScriptTypeInfo *This = ScriptTypeInfo_from_ITypeInfo(iface);
1174
1175     TRACE("(%p)->(%p)\n", This, pVarDesc);
1176
1177     heap_free(pVarDesc);
1178 }
1179
1180 static const ITypeInfoVtbl ScriptTypeInfoVtbl = {
1181     ScriptTypeInfo_QueryInterface,
1182     ScriptTypeInfo_AddRef,
1183     ScriptTypeInfo_Release,
1184     ScriptTypeInfo_GetTypeAttr,
1185     ScriptTypeInfo_GetTypeComp,
1186     ScriptTypeInfo_GetFuncDesc,
1187     ScriptTypeInfo_GetVarDesc,
1188     ScriptTypeInfo_GetNames,
1189     ScriptTypeInfo_GetRefTypeOfImplType,
1190     ScriptTypeInfo_GetImplTypeFlags,
1191     ScriptTypeInfo_GetIDsOfNames,
1192     ScriptTypeInfo_Invoke,
1193     ScriptTypeInfo_GetDocumentation,
1194     ScriptTypeInfo_GetDllEntry,
1195     ScriptTypeInfo_GetRefTypeInfo,
1196     ScriptTypeInfo_AddressOfMember,
1197     ScriptTypeInfo_CreateInstance,
1198     ScriptTypeInfo_GetMops,
1199     ScriptTypeInfo_GetContainingTypeLib,
1200     ScriptTypeInfo_ReleaseTypeAttr,
1201     ScriptTypeInfo_ReleaseFuncDesc,
1202     ScriptTypeInfo_ReleaseVarDesc
1203 };
1204
1205 static HRESULT WINAPI ScriptTypeComp_QueryInterface(ITypeComp *iface, REFIID riid, void **ppv)
1206 {
1207     ScriptTypeInfo *This = ScriptTypeInfo_from_ITypeComp(iface);
1208     return ITypeInfo_QueryInterface(&This->ITypeInfo_iface, riid, ppv);
1209 }
1210
1211 static ULONG WINAPI ScriptTypeComp_AddRef(ITypeComp *iface)
1212 {
1213     ScriptTypeInfo *This = ScriptTypeInfo_from_ITypeComp(iface);
1214     return ITypeInfo_AddRef(&This->ITypeInfo_iface);
1215 }
1216
1217 static ULONG WINAPI ScriptTypeComp_Release(ITypeComp *iface)
1218 {
1219     ScriptTypeInfo *This = ScriptTypeInfo_from_ITypeComp(iface);
1220     return ITypeInfo_Release(&This->ITypeInfo_iface);
1221 }
1222
1223 static HRESULT WINAPI ScriptTypeComp_Bind(ITypeComp *iface, LPOLESTR szName, ULONG lHashVal, WORD wFlags,
1224         ITypeInfo **ppTInfo, DESCKIND *pDescKind, BINDPTR *pBindPtr)
1225 {
1226     ScriptTypeInfo *This = ScriptTypeInfo_from_ITypeComp(iface);
1227     UINT flags = wFlags ? wFlags : ~0;
1228     ITypeInfo *disp_typeinfo;
1229     ITypeComp *disp_typecomp;
1230     HRESULT hr;
1231     UINT i;
1232
1233     TRACE("(%p)->(%s %08x %d %p %p %p)\n", This, debugstr_w(szName), lHashVal,
1234           wFlags, ppTInfo, pDescKind, pBindPtr);
1235
1236     if (!szName || !ppTInfo || !pDescKind || !pBindPtr)
1237         return E_INVALIDARG;
1238
1239     for (i = 0; i < This->num_funcs; i++)
1240     {
1241         if (wcsicmp(szName, This->funcs[i].prop->name)) continue;
1242         if (!(flags & INVOKE_FUNC)) return TYPE_E_TYPEMISMATCH;
1243
1244         hr = ITypeInfo_GetFuncDesc(&This->ITypeInfo_iface, i, &pBindPtr->lpfuncdesc);
1245         if (FAILED(hr)) return hr;
1246
1247         *pDescKind = DESCKIND_FUNCDESC;
1248         *ppTInfo = &This->ITypeInfo_iface;
1249         ITypeInfo_AddRef(*ppTInfo);
1250         return S_OK;
1251     }
1252
1253     for (i = 0; i < This->num_vars; i++)
1254     {
1255         if (wcsicmp(szName, This->vars[i]->name)) continue;
1256         if (!(flags & INVOKE_PROPERTYGET)) return TYPE_E_TYPEMISMATCH;
1257
1258         hr = ITypeInfo_GetVarDesc(&This->ITypeInfo_iface, i, &pBindPtr->lpvardesc);
1259         if (FAILED(hr)) return hr;
1260
1261         *pDescKind = DESCKIND_VARDESC;
1262         *ppTInfo = &This->ITypeInfo_iface;
1263         ITypeInfo_AddRef(*ppTInfo);
1264         return S_OK;
1265     }
1266
1267     /* Look into the inherited IDispatch */
1268     hr = get_dispatch_typeinfo(&disp_typeinfo);
1269     if (FAILED(hr)) return hr;
1270
1271     hr = ITypeInfo_GetTypeComp(disp_typeinfo, &disp_typecomp);
1272     if (FAILED(hr)) return hr;
1273
1274     hr = ITypeComp_Bind(disp_typecomp, szName, lHashVal, wFlags, ppTInfo, pDescKind, pBindPtr);
1275     ITypeComp_Release(disp_typecomp);
1276     return hr;
1277 }
1278
1279 static HRESULT WINAPI ScriptTypeComp_BindType(ITypeComp *iface, LPOLESTR szName, ULONG lHashVal,
1280         ITypeInfo **ppTInfo, ITypeComp **ppTComp)
1281 {
1282     ScriptTypeInfo *This = ScriptTypeInfo_from_ITypeComp(iface);
1283     ITypeInfo *disp_typeinfo;
1284     ITypeComp *disp_typecomp;
1285     HRESULT hr;
1286
1287     TRACE("(%p)->(%s %08x %p %p)\n", This, debugstr_w(szName), lHashVal, ppTInfo, ppTComp);
1288
1289     if (!szName || !ppTInfo || !ppTComp)
1290         return E_INVALIDARG;
1291
1292     /* Look into the inherited IDispatch */
1293     hr = get_dispatch_typeinfo(&disp_typeinfo);
1294     if (FAILED(hr)) return hr;
1295
1296     hr = ITypeInfo_GetTypeComp(disp_typeinfo, &disp_typecomp);
1297     if (FAILED(hr)) return hr;
1298
1299     hr = ITypeComp_BindType(disp_typecomp, szName, lHashVal, ppTInfo, ppTComp);
1300     ITypeComp_Release(disp_typecomp);
1301     return hr;
1302 }
1303
1304 static const ITypeCompVtbl ScriptTypeCompVtbl = {
1305     ScriptTypeComp_QueryInterface,
1306     ScriptTypeComp_AddRef,
1307     ScriptTypeComp_Release,
1308     ScriptTypeComp_Bind,
1309     ScriptTypeComp_BindType
1310 };
1311
1312 static inline jsdisp_t *impl_from_IDispatchEx(IDispatchEx *iface)
1313 {
1314     return CONTAINING_RECORD(iface, jsdisp_t, IDispatchEx_iface);
1315 }
1316
1317 static HRESULT WINAPI DispatchEx_QueryInterface(IDispatchEx *iface, REFIID riid, void **ppv)
1318 {
1319     jsdisp_t *This = impl_from_IDispatchEx(iface);
1320
1321     if(IsEqualGUID(&IID_IUnknown, riid)) {
1322         TRACE("(%p)->(IID_IUnknown %p)\n", This, ppv);
1323         *ppv = &This->IDispatchEx_iface;
1324     }else if(IsEqualGUID(&IID_IDispatch, riid)) {
1325         TRACE("(%p)->(IID_IDispatch %p)\n", This, ppv);
1326         *ppv = &This->IDispatchEx_iface;
1327     }else if(IsEqualGUID(&IID_IDispatchEx, riid)) {
1328         TRACE("(%p)->(IID_IDispatchEx %p)\n", This, ppv);
1329         *ppv = &This->IDispatchEx_iface;
1330     }else {
1331         WARN("(%p)->(%s %p)\n", This, debugstr_guid(riid), ppv);
1332         *ppv = NULL;
1333         return E_NOINTERFACE;
1334     }
1335
1336     jsdisp_addref(This);
1337     return S_OK;
1338 }
1339
1340 static ULONG WINAPI DispatchEx_AddRef(IDispatchEx *iface)
1341 {
1342     jsdisp_t *This = impl_from_IDispatchEx(iface);
1343     jsdisp_addref(This);
1344     return This->ref;
1345 }
1346
1347 static ULONG WINAPI DispatchEx_Release(IDispatchEx *iface)
1348 {
1349     jsdisp_t *This = impl_from_IDispatchEx(iface);
1350     ULONG ref = --This->ref;
1351     TRACE("(%p) ref=%d\n", This, ref);
1352     if(!ref)
1353         jsdisp_free(This);
1354     return ref;
1355 }
1356
1357 static HRESULT WINAPI DispatchEx_GetTypeInfoCount(IDispatchEx *iface, UINT *pctinfo)
1358 {
1359     jsdisp_t *This = impl_from_IDispatchEx(iface);
1360
1361     TRACE("(%p)->(%p)\n", This, pctinfo);
1362
1363     *pctinfo = 1;
1364     return S_OK;
1365 }
1366
1367 static HRESULT WINAPI DispatchEx_GetTypeInfo(IDispatchEx *iface, UINT iTInfo, LCID lcid,
1368                                               ITypeInfo **ppTInfo)
1369 {
1370     jsdisp_t *This = impl_from_IDispatchEx(iface);
1371     dispex_prop_t *prop, *cur, *end, **typevar;
1372     UINT num_funcs = 0, num_vars = 0;
1373     struct typeinfo_func *typefunc;
1374     function_code_t *func_code;
1375     ScriptTypeInfo *typeinfo;
1376     unsigned pos;
1377
1378     TRACE("(%p)->(%u %u %p)\n", This, iTInfo, lcid, ppTInfo);
1379
1380     if (iTInfo != 0) return DISP_E_BADINDEX;
1381
1382     for (prop = This->props, end = prop + This->prop_cnt; prop != end; prop++)
1383     {
1384         if (!prop->name || prop->type != PROP_JSVAL || !(prop->flags & PROPF_ENUMERABLE))
1385             continue;
1386
1387         /* If two identifiers differ only by case, the TypeInfo fails */
1388         pos = This->props[get_props_idx(This, prop->hash)].bucket_head;
1389         while (pos)
1390         {
1391             cur = This->props + pos;
1392
1393             if (prop->hash == cur->hash && prop != cur &&
1394                 cur->type == PROP_JSVAL && (cur->flags & PROPF_ENUMERABLE) &&
1395                 !wcsicmp(prop->name, cur->name))
1396             {
1397                 return TYPE_E_AMBIGUOUSNAME;
1398             }
1399             pos = cur->bucket_next;
1400         }
1401
1402         if (is_function_prop(prop))
1403         {
1404             if (Function_get_code(as_jsdisp(get_object(prop->u.val))))
1405                 num_funcs++;
1406         }
1407         else num_vars++;
1408     }
1409
1410     if (!(typeinfo = heap_alloc(sizeof(*typeinfo))))
1411         return E_OUTOFMEMORY;
1412
1413     typeinfo->ITypeInfo_iface.lpVtbl = &ScriptTypeInfoVtbl;
1414     typeinfo->ITypeComp_iface.lpVtbl = &ScriptTypeCompVtbl;
1415     typeinfo->ref = 1;
1416     typeinfo->num_vars = num_vars;
1417     typeinfo->num_funcs = num_funcs;
1418     typeinfo->jsdisp = This;
1419
1420     typeinfo->funcs = heap_alloc(sizeof(*typeinfo->funcs) * num_funcs);
1421     if (!typeinfo->funcs)
1422     {
1423         heap_free(typeinfo);
1424         return E_OUTOFMEMORY;
1425     }
1426
1427     typeinfo->vars = heap_alloc(sizeof(*typeinfo->vars) * num_vars);
1428     if (!typeinfo->vars)
1429     {
1430         heap_free(typeinfo->funcs);
1431         heap_free(typeinfo);
1432         return E_OUTOFMEMORY;
1433     }
1434
1435     typefunc = typeinfo->funcs;
1436     typevar = typeinfo->vars;
1437     for (prop = This->props; prop != end; prop++)
1438     {
1439         if (!prop->name || prop->type != PROP_JSVAL || !(prop->flags & PROPF_ENUMERABLE))
1440             continue;
1441
1442         if (is_function_prop(prop))
1443         {
1444             func_code = Function_get_code(as_jsdisp(get_object(prop->u.val)));
1445             if (!func_code) continue;
1446
1447             typefunc->prop = prop;
1448             typefunc->code = func_code;
1449             typefunc++;
1450
1451             /* The function may be deleted, so keep a ref */
1452             bytecode_addref(func_code->bytecode);
1453         }
1454         else
1455             *typevar++ = prop;
1456     }
1457
1458     /* Keep a ref to the props and their names */
1459     IDispatchEx_AddRef(&This->IDispatchEx_iface);
1460
1461     *ppTInfo = &typeinfo->ITypeInfo_iface;
1462     return S_OK;
1463 }
1464
1465 static HRESULT WINAPI DispatchEx_GetIDsOfNames(IDispatchEx *iface, REFIID riid,
1466                                                 LPOLESTR *rgszNames, UINT cNames, LCID lcid,
1467                                                 DISPID *rgDispId)
1468 {
1469     jsdisp_t *This = impl_from_IDispatchEx(iface);
1470     UINT i;
1471     HRESULT hres;
1472
1473     TRACE("(%p)->(%s %p %u %u %p)\n", This, debugstr_guid(riid), rgszNames, cNames,
1474           lcid, rgDispId);
1475
1476     for(i=0; i < cNames; i++) {
1477         hres = IDispatchEx_GetDispID(&This->IDispatchEx_iface, rgszNames[i], 0, rgDispId+i);
1478         if(FAILED(hres))
1479             return hres;
1480     }
1481
1482     return S_OK;
1483 }
1484
1485 static HRESULT WINAPI DispatchEx_Invoke(IDispatchEx *iface, DISPID dispIdMember,
1486                                         REFIID riid, LCID lcid, WORD wFlags, DISPPARAMS *pDispParams,
1487                             VARIANT *pVarResult, EXCEPINFO *pExcepInfo, UINT *puArgErr)
1488 {
1489     jsdisp_t *This = impl_from_IDispatchEx(iface);
1490
1491     TRACE("(%p)->(%d %s %d %d %p %p %p %p)\n", This, dispIdMember, debugstr_guid(riid),
1492           lcid, wFlags, pDispParams, pVarResult, pExcepInfo, puArgErr);
1493
1494     return IDispatchEx_InvokeEx(&This->IDispatchEx_iface, dispIdMember, lcid, wFlags,
1495             pDispParams, pVarResult, pExcepInfo, NULL);
1496 }
1497
1498 static HRESULT WINAPI DispatchEx_GetDispID(IDispatchEx *iface, BSTR bstrName, DWORD grfdex, DISPID *pid)
1499 {
1500     jsdisp_t *This = impl_from_IDispatchEx(iface);
1501
1502     TRACE("(%p)->(%s %x %p)\n", This, debugstr_w(bstrName), grfdex, pid);
1503
1504     if(grfdex & ~(fdexNameCaseSensitive|fdexNameEnsure|fdexNameImplicit|FDEX_VERSION_MASK)) {
1505         FIXME("Unsupported grfdex %x\n", grfdex);
1506         return E_NOTIMPL;
1507     }
1508
1509     return jsdisp_get_id(This, bstrName, grfdex, pid);
1510 }
1511
1512 static HRESULT WINAPI DispatchEx_InvokeEx(IDispatchEx *iface, DISPID id, LCID lcid, WORD wFlags, DISPPARAMS *pdp,
1513         VARIANT *pvarRes, EXCEPINFO *pei, IServiceProvider *pspCaller)
1514 {
1515     jsdisp_t *This = impl_from_IDispatchEx(iface);
1516     dispex_prop_t *prop;
1517     jsexcept_t ei;
1518     HRESULT hres;
1519
1520     TRACE("(%p)->(%x %x %x %p %p %p %p)\n", This, id, lcid, wFlags, pdp, pvarRes, pei, pspCaller);
1521
1522     if(pvarRes)
1523         V_VT(pvarRes) = VT_EMPTY;
1524
1525     prop = get_prop(This, id);
1526     if(!prop || prop->type == PROP_DELETED) {
1527         TRACE("invalid id\n");
1528         return DISP_E_MEMBERNOTFOUND;
1529     }
1530
1531     enter_script(This->ctx, &ei);
1532
1533     switch(wFlags) {
1534     case DISPATCH_METHOD|DISPATCH_PROPERTYGET:
1535         wFlags = DISPATCH_METHOD;
1536         /* fall through */
1537     case DISPATCH_METHOD:
1538     case DISPATCH_CONSTRUCT: {
1539         jsval_t *argv, buf[6], r;
1540         unsigned argc;
1541
1542         hres = convert_params(pdp, buf, &argc, &argv);
1543         if(FAILED(hres))
1544             break;
1545
1546         hres = invoke_prop_func(This, get_this(pdp), prop, wFlags, argc, argv, pvarRes ? &r : NULL, pspCaller);
1547         if(argv != buf)
1548             heap_free(argv);
1549         if(SUCCEEDED(hres) && pvarRes) {
1550             hres = jsval_to_variant(r, pvarRes);
1551             jsval_release(r);
1552         }
1553         break;
1554     }
1555     case DISPATCH_PROPERTYGET: {
1556         jsval_t r;
1557
1558         hres = prop_get(This, prop, &r);
1559         if(SUCCEEDED(hres)) {
1560             hres = jsval_to_variant(r, pvarRes);
1561             jsval_release(r);
1562         }
1563         break;
1564     }
1565     case DISPATCH_PROPERTYPUT: {
1566         jsval_t val;
1567         DWORD i;
1568
1569         for(i=0; i < pdp->cNamedArgs; i++) {
1570             if(pdp->rgdispidNamedArgs[i] == DISPID_PROPERTYPUT)
1571                 break;
1572         }
1573
1574         if(i == pdp->cNamedArgs) {
1575             TRACE("no value to set\n");
1576             hres = DISP_E_PARAMNOTOPTIONAL;
1577             break;
1578         }
1579
1580         hres = variant_to_jsval(pdp->rgvarg+i, &val);
1581         if(FAILED(hres))
1582             break;
1583
1584         hres = prop_put(This, prop, val);
1585         jsval_release(val);
1586         break;
1587     }
1588     default:
1589         FIXME("Unimplemented flags %x\n", wFlags);
1590         hres = E_INVALIDARG;
1591         break;
1592     }
1593
1594     return leave_script(This->ctx, hres);
1595 }
1596
1597 static HRESULT delete_prop(dispex_prop_t *prop, BOOL *ret)
1598 {
1599     if(!(prop->flags & PROPF_CONFIGURABLE)) {
1600         *ret = FALSE;
1601         return S_OK;
1602     }
1603
1604     *ret = TRUE; /* FIXME: not exactly right */
1605
1606     if(prop->type == PROP_JSVAL) {
1607         jsval_release(prop->u.val);
1608         prop->type = PROP_DELETED;
1609     }
1610     if(prop->type == PROP_ACCESSOR)
1611         FIXME("not supported on accessor property\n");
1612     return S_OK;
1613 }
1614
1615 static HRESULT WINAPI DispatchEx_DeleteMemberByName(IDispatchEx *iface, BSTR bstrName, DWORD grfdex)
1616 {
1617     jsdisp_t *This = impl_from_IDispatchEx(iface);
1618     dispex_prop_t *prop;
1619     BOOL b;
1620     HRESULT hres;
1621
1622     TRACE("(%p)->(%s %x)\n", This, debugstr_w(bstrName), grfdex);
1623
1624     if(grfdex & ~(fdexNameCaseSensitive|fdexNameEnsure|fdexNameImplicit|FDEX_VERSION_MASK))
1625         FIXME("Unsupported grfdex %x\n", grfdex);
1626
1627     hres = find_prop_name(This, string_hash(bstrName), bstrName, &prop);
1628     if(FAILED(hres))
1629         return hres;
1630     if(!prop) {
1631         TRACE("not found\n");
1632         return S_OK;
1633     }
1634
1635     return delete_prop(prop, &b);
1636 }
1637
1638 static HRESULT WINAPI DispatchEx_DeleteMemberByDispID(IDispatchEx *iface, DISPID id)
1639 {
1640     jsdisp_t *This = impl_from_IDispatchEx(iface);
1641     dispex_prop_t *prop;
1642     BOOL b;
1643
1644     TRACE("(%p)->(%x)\n", This, id);
1645
1646     prop = get_prop(This, id);
1647     if(!prop) {
1648         WARN("invalid id\n");
1649         return DISP_E_MEMBERNOTFOUND;
1650     }
1651
1652     return delete_prop(prop, &b);
1653 }
1654
1655 static HRESULT WINAPI DispatchEx_GetMemberProperties(IDispatchEx *iface, DISPID id, DWORD grfdexFetch, DWORD *pgrfdex)
1656 {
1657     jsdisp_t *This = impl_from_IDispatchEx(iface);
1658     FIXME("(%p)->(%x %x %p)\n", This, id, grfdexFetch, pgrfdex);
1659     return E_NOTIMPL;
1660 }
1661
1662 static HRESULT WINAPI DispatchEx_GetMemberName(IDispatchEx *iface, DISPID id, BSTR *pbstrName)
1663 {
1664     jsdisp_t *This = impl_from_IDispatchEx(iface);
1665     dispex_prop_t *prop;
1666
1667     TRACE("(%p)->(%x %p)\n", This, id, pbstrName);
1668
1669     prop = get_prop(This, id);
1670     if(!prop || !prop->name || prop->type == PROP_DELETED)
1671         return DISP_E_MEMBERNOTFOUND;
1672
1673     *pbstrName = SysAllocString(prop->name);
1674     if(!*pbstrName)
1675         return E_OUTOFMEMORY;
1676
1677     return S_OK;
1678 }
1679
1680 static HRESULT WINAPI DispatchEx_GetNextDispID(IDispatchEx *iface, DWORD grfdex, DISPID id, DISPID *pid)
1681 {
1682     jsdisp_t *This = impl_from_IDispatchEx(iface);
1683     HRESULT hres;
1684
1685     TRACE("(%p)->(%x %x %p)\n", This, grfdex, id, pid);
1686
1687     hres = jsdisp_next_prop(This, id, FALSE, pid);
1688     if(hres == S_FALSE)
1689         *pid = DISPID_STARTENUM;
1690     return hres;
1691 }
1692
1693 static HRESULT WINAPI DispatchEx_GetNameSpaceParent(IDispatchEx *iface, IUnknown **ppunk)
1694 {
1695     jsdisp_t *This = impl_from_IDispatchEx(iface);
1696     FIXME("(%p)->(%p)\n", This, ppunk);
1697     return E_NOTIMPL;
1698 }
1699
1700 static IDispatchExVtbl DispatchExVtbl = {
1701     DispatchEx_QueryInterface,
1702     DispatchEx_AddRef,
1703     DispatchEx_Release,
1704     DispatchEx_GetTypeInfoCount,
1705     DispatchEx_GetTypeInfo,
1706     DispatchEx_GetIDsOfNames,
1707     DispatchEx_Invoke,
1708     DispatchEx_GetDispID,
1709     DispatchEx_InvokeEx,
1710     DispatchEx_DeleteMemberByName,
1711     DispatchEx_DeleteMemberByDispID,
1712     DispatchEx_GetMemberProperties,
1713     DispatchEx_GetMemberName,
1714     DispatchEx_GetNextDispID,
1715     DispatchEx_GetNameSpaceParent
1716 };
1717
1718 jsdisp_t *as_jsdisp(IDispatch *disp)
1719 {
1720     assert(disp->lpVtbl == (IDispatchVtbl*)&DispatchExVtbl);
1721     return impl_from_IDispatchEx((IDispatchEx*)disp);
1722 }
1723
1724 jsdisp_t *to_jsdisp(IDispatch *disp)
1725 {
1726     return disp->lpVtbl == (IDispatchVtbl*)&DispatchExVtbl ? impl_from_IDispatchEx((IDispatchEx*)disp) : NULL;
1727 }
1728
1729 HRESULT init_dispex(jsdisp_t *dispex, script_ctx_t *ctx, const builtin_info_t *builtin_info, jsdisp_t *prototype)
1730 {
1731     TRACE("%p (%p)\n", dispex, prototype);
1732
1733     dispex->IDispatchEx_iface.lpVtbl = &DispatchExVtbl;
1734     dispex->ref = 1;
1735     dispex->builtin_info = builtin_info;
1736
1737     dispex->props = heap_alloc_zero(sizeof(dispex_prop_t)*(dispex->buf_size=4));
1738     if(!dispex->props)
1739         return E_OUTOFMEMORY;
1740
1741     dispex->prototype = prototype;
1742     if(prototype)
1743         jsdisp_addref(prototype);
1744
1745     dispex->prop_cnt = 1;
1746     if(builtin_info->value_prop.invoke || builtin_info->value_prop.getter) {
1747         dispex->props[0].type = PROP_BUILTIN;
1748         dispex->props[0].u.p = &builtin_info->value_prop;
1749     }else {
1750         dispex->props[0].type = PROP_DELETED;
1751     }
1752
1753     script_addref(ctx);
1754     dispex->ctx = ctx;
1755
1756     return S_OK;
1757 }
1758
1759 static const builtin_info_t dispex_info = {
1760     JSCLASS_NONE,
1761     {NULL, NULL, 0},
1762     0, NULL,
1763     NULL,
1764     NULL
1765 };
1766
1767 HRESULT create_dispex(script_ctx_t *ctx, const builtin_info_t *builtin_info, jsdisp_t *prototype, jsdisp_t **dispex)
1768 {
1769     jsdisp_t *ret;
1770     HRESULT hres;
1771
1772     ret = heap_alloc_zero(sizeof(jsdisp_t));
1773     if(!ret)
1774         return E_OUTOFMEMORY;
1775
1776     hres = init_dispex(ret, ctx, builtin_info ? builtin_info : &dispex_info, prototype);
1777     if(FAILED(hres)) {
1778         heap_free(ret);
1779         return hres;
1780     }
1781
1782     *dispex = ret;
1783     return S_OK;
1784 }
1785
1786 void jsdisp_free(jsdisp_t *obj)
1787 {
1788     dispex_prop_t *prop;
1789
1790     TRACE("(%p)\n", obj);
1791
1792     for(prop = obj->props; prop < obj->props+obj->prop_cnt; prop++) {
1793         switch(prop->type) {
1794         case PROP_JSVAL:
1795             jsval_release(prop->u.val);
1796             break;
1797         case PROP_ACCESSOR:
1798             if(prop->u.accessor.getter)
1799                 jsdisp_release(prop->u.accessor.getter);
1800             if(prop->u.accessor.setter)
1801                 jsdisp_release(prop->u.accessor.setter);
1802             break;
1803         default:
1804             break;
1805         };
1806         heap_free(prop->name);
1807     }
1808     heap_free(obj->props);
1809     script_release(obj->ctx);
1810     if(obj->prototype)
1811         jsdisp_release(obj->prototype);
1812
1813     if(obj->builtin_info->destructor)
1814         obj->builtin_info->destructor(obj);
1815     else
1816         heap_free(obj);
1817 }
1818
1819 #ifdef TRACE_REFCNT
1820
1821 jsdisp_t *jsdisp_addref(jsdisp_t *jsdisp)
1822 {
1823     ULONG ref = ++jsdisp->ref;
1824     TRACE("(%p) ref=%d\n", jsdisp, ref);
1825     return jsdisp;
1826 }
1827
1828 void jsdisp_release(jsdisp_t *jsdisp)
1829 {
1830     ULONG ref = --jsdisp->ref;
1831
1832     TRACE("(%p) ref=%d\n", jsdisp, ref);
1833
1834     if(!ref)
1835         jsdisp_free(jsdisp);
1836 }
1837
1838 #endif
1839
1840 HRESULT init_dispex_from_constr(jsdisp_t *dispex, script_ctx_t *ctx, const builtin_info_t *builtin_info, jsdisp_t *constr)
1841 {
1842     jsdisp_t *prot = NULL;
1843     dispex_prop_t *prop;
1844     HRESULT hres;
1845
1846     static const WCHAR prototypeW[] = {'p','r','o','t','o','t','y','p','e',0};
1847
1848     hres = find_prop_name_prot(constr, string_hash(prototypeW), prototypeW, &prop);
1849     if(SUCCEEDED(hres) && prop && prop->type!=PROP_DELETED) {
1850         jsval_t val;
1851
1852         hres = prop_get(constr, prop, &val);
1853         if(FAILED(hres)) {
1854             ERR("Could not get prototype\n");
1855             return hres;
1856         }
1857
1858         if(is_object_instance(val))
1859             prot = iface_to_jsdisp(get_object(val));
1860         jsval_release(val);
1861     }
1862
1863     hres = init_dispex(dispex, ctx, builtin_info, prot);
1864
1865     if(prot)
1866         jsdisp_release(prot);
1867     return hres;
1868 }
1869
1870 jsdisp_t *iface_to_jsdisp(IDispatch *iface)
1871 {
1872     return iface->lpVtbl == (const IDispatchVtbl*)&DispatchExVtbl
1873         ? jsdisp_addref( impl_from_IDispatchEx((IDispatchEx*)iface))
1874         : NULL;
1875 }
1876
1877 HRESULT jsdisp_get_id(jsdisp_t *jsdisp, const WCHAR *name, DWORD flags, DISPID *id)
1878 {
1879     dispex_prop_t *prop;
1880     HRESULT hres;
1881
1882     if(flags & fdexNameEnsure)
1883         hres = ensure_prop_name(jsdisp, name, PROPF_ENUMERABLE | PROPF_CONFIGURABLE | PROPF_WRITABLE,
1884                                 &prop);
1885     else
1886         hres = find_prop_name_prot(jsdisp, string_hash(name), name, &prop);
1887     if(FAILED(hres))
1888         return hres;
1889
1890     if(prop && prop->type!=PROP_DELETED) {
1891         *id = prop_to_id(jsdisp, prop);
1892         return S_OK;
1893     }
1894
1895     TRACE("not found %s\n", debugstr_w(name));
1896     *id = DISPID_UNKNOWN;
1897     return DISP_E_UNKNOWNNAME;
1898 }
1899
1900 HRESULT jsdisp_call_value(jsdisp_t *jsfunc, IDispatch *jsthis, WORD flags, unsigned argc, jsval_t *argv, jsval_t *r)
1901 {
1902     HRESULT hres;
1903
1904     assert(!(flags & ~(DISPATCH_METHOD|DISPATCH_CONSTRUCT|DISPATCH_JSCRIPT_INTERNAL_MASK)));
1905
1906     if(is_class(jsfunc, JSCLASS_FUNCTION)) {
1907         hres = Function_invoke(jsfunc, jsthis, flags, argc, argv, r);
1908     }else {
1909         vdisp_t vdisp;
1910
1911         if(!jsfunc->builtin_info->value_prop.invoke) {
1912             WARN("Not a function\n");
1913             return JS_E_FUNCTION_EXPECTED;
1914         }
1915
1916         set_disp(&vdisp, jsthis);
1917         flags &= ~DISPATCH_JSCRIPT_INTERNAL_MASK;
1918         hres = jsfunc->builtin_info->value_prop.invoke(jsfunc->ctx, &vdisp, flags, argc, argv, r);
1919         vdisp_release(&vdisp);
1920     }
1921     return hres;
1922 }
1923
1924 HRESULT jsdisp_call(jsdisp_t *disp, DISPID id, WORD flags, unsigned argc, jsval_t *argv, jsval_t *r)
1925 {
1926     dispex_prop_t *prop;
1927
1928     prop = get_prop(disp, id);
1929     if(!prop)
1930         return DISP_E_MEMBERNOTFOUND;
1931
1932     return invoke_prop_func(disp, to_disp(disp), prop, flags, argc, argv, r, NULL);
1933 }
1934
1935 HRESULT jsdisp_call_name(jsdisp_t *disp, const WCHAR *name, WORD flags, unsigned argc, jsval_t *argv, jsval_t *r)
1936 {
1937     dispex_prop_t *prop;
1938     HRESULT hres;
1939
1940     hres = find_prop_name_prot(disp, string_hash(name), name, &prop);
1941     if(FAILED(hres))
1942         return hres;
1943
1944     return invoke_prop_func(disp, to_disp(disp), prop, flags, argc, argv, r, NULL);
1945 }
1946
1947 static HRESULT disp_invoke(script_ctx_t *ctx, IDispatch *disp, DISPID id, WORD flags, DISPPARAMS *params, VARIANT *r)
1948 {
1949     IDispatchEx *dispex;
1950     EXCEPINFO ei;
1951     HRESULT hres;
1952
1953     memset(&ei, 0, sizeof(ei));
1954     hres = IDispatch_QueryInterface(disp, &IID_IDispatchEx, (void**)&dispex);
1955     if(SUCCEEDED(hres)) {
1956         hres = IDispatchEx_InvokeEx(dispex, id, ctx->lcid, flags, params, r, &ei, &ctx->jscaller->IServiceProvider_iface);
1957         IDispatchEx_Release(dispex);
1958     }else {
1959         UINT err = 0;
1960
1961         if(flags == DISPATCH_CONSTRUCT) {
1962             WARN("IDispatch cannot be constructor\n");
1963             return DISP_E_MEMBERNOTFOUND;
1964         }
1965
1966         if(params->cNamedArgs == 1 && params->rgdispidNamedArgs[0] == DISPID_THIS) {
1967             params->cNamedArgs = 0;
1968             params->rgdispidNamedArgs = NULL;
1969             params->cArgs--;
1970             params->rgvarg++;
1971         }
1972
1973         TRACE("using IDispatch\n");
1974         hres = IDispatch_Invoke(disp, id, &IID_NULL, ctx->lcid, flags, params, r, &ei, &err);
1975     }
1976
1977     if(hres == DISP_E_EXCEPTION) {
1978         TRACE("DISP_E_EXCEPTION: %08x %s %s\n", ei.scode, debugstr_w(ei.bstrSource), debugstr_w(ei.bstrDescription));
1979         reset_ei(ctx->ei);
1980         ctx->ei->error = (SUCCEEDED(ei.scode) || ei.scode == DISP_E_EXCEPTION) ? E_FAIL : ei.scode;
1981         if(ei.bstrSource)
1982             ctx->ei->source = jsstr_alloc_len(ei.bstrSource, SysStringLen(ei.bstrSource));
1983         if(ei.bstrDescription)
1984             ctx->ei->message = jsstr_alloc_len(ei.bstrDescription, SysStringLen(ei.bstrDescription));
1985         SysFreeString(ei.bstrSource);
1986         SysFreeString(ei.bstrDescription);
1987         SysFreeString(ei.bstrHelpFile);
1988     }
1989
1990     return hres;
1991 }
1992
1993 HRESULT disp_call(script_ctx_t *ctx, IDispatch *disp, DISPID id, WORD flags, unsigned argc, jsval_t *argv, jsval_t *ret)
1994 {
1995     VARIANT buf[6], retv;
1996     jsdisp_t *jsdisp;
1997     DISPPARAMS dp;
1998     unsigned i;
1999     HRESULT hres;
2000
2001     jsdisp = iface_to_jsdisp(disp);
2002     if(jsdisp && jsdisp->ctx == ctx) {
2003         if(flags & DISPATCH_PROPERTYPUT) {
2004             FIXME("disp_call(propput) on builtin object\n");
2005             return E_FAIL;
2006         }
2007
2008         if(ctx != jsdisp->ctx)
2009             flags &= ~DISPATCH_JSCRIPT_INTERNAL_MASK;
2010         hres = jsdisp_call(jsdisp, id, flags, argc, argv, ret);
2011         jsdisp_release(jsdisp);
2012         return hres;
2013     }
2014
2015     flags &= ~DISPATCH_JSCRIPT_INTERNAL_MASK;
2016     if(ret && argc)
2017         flags |= DISPATCH_PROPERTYGET;
2018
2019     dp.cArgs = argc;
2020
2021     if(flags & DISPATCH_PROPERTYPUT) {
2022         static DISPID propput_dispid = DISPID_PROPERTYPUT;
2023
2024         dp.cNamedArgs = 1;
2025         dp.rgdispidNamedArgs = &propput_dispid;
2026     }else {
2027         dp.cNamedArgs = 0;
2028         dp.rgdispidNamedArgs = NULL;
2029     }
2030
2031     if(dp.cArgs > ARRAY_SIZE(buf)) {
2032         dp.rgvarg = heap_alloc(argc*sizeof(VARIANT));
2033         if(!dp.rgvarg)
2034             return E_OUTOFMEMORY;
2035     }else {
2036         dp.rgvarg = buf;
2037     }
2038
2039     for(i=0; i<argc; i++) {
2040         hres = jsval_to_variant(argv[i], dp.rgvarg+argc-i-1);
2041         if(FAILED(hres)) {
2042             while(i--)
2043                 VariantClear(dp.rgvarg+argc-i-1);
2044             if(dp.rgvarg != buf)
2045                 heap_free(dp.rgvarg);
2046             return hres;
2047         }
2048     }
2049
2050     V_VT(&retv) = VT_EMPTY;
2051     hres = disp_invoke(ctx, disp, id, flags, &dp, ret ? &retv : NULL);
2052
2053     for(i=0; i<argc; i++)
2054         VariantClear(dp.rgvarg+argc-i-1);
2055     if(dp.rgvarg != buf)
2056         heap_free(dp.rgvarg);
2057
2058     if(SUCCEEDED(hres) && ret)
2059         hres = variant_to_jsval(&retv, ret);
2060     VariantClear(&retv);
2061     return hres;
2062 }
2063
2064 HRESULT disp_call_value(script_ctx_t *ctx, IDispatch *disp, IDispatch *jsthis, WORD flags, unsigned argc, jsval_t *argv,
2065         jsval_t *r)
2066 {
2067     VARIANT buf[6], retv, *args = buf;
2068     jsdisp_t *jsdisp;
2069     DISPPARAMS dp;
2070     unsigned i;
2071     HRESULT hres = S_OK;
2072
2073     static DISPID this_id = DISPID_THIS;
2074
2075     assert(!(flags & ~(DISPATCH_METHOD|DISPATCH_CONSTRUCT|DISPATCH_JSCRIPT_INTERNAL_MASK)));
2076
2077     jsdisp = iface_to_jsdisp(disp);
2078     if(jsdisp && jsdisp->ctx == ctx) {
2079         if(ctx != jsdisp->ctx)
2080             flags &= ~DISPATCH_JSCRIPT_INTERNAL_MASK;
2081         hres = jsdisp_call_value(jsdisp, jsthis, flags, argc, argv, r);
2082         jsdisp_release(jsdisp);
2083         return hres;
2084     }
2085
2086     flags &= ~DISPATCH_JSCRIPT_INTERNAL_MASK;
2087     if(r && argc && flags == DISPATCH_METHOD)
2088         flags |= DISPATCH_PROPERTYGET;
2089
2090     if(jsthis) {
2091         dp.cArgs = argc + 1;
2092         dp.cNamedArgs = 1;
2093         dp.rgdispidNamedArgs = &this_id;
2094     }else {
2095         dp.cArgs = argc;
2096         dp.cNamedArgs = 0;
2097         dp.rgdispidNamedArgs = NULL;
2098     }
2099
2100     if(dp.cArgs > ARRAY_SIZE(buf) && !(args = heap_alloc(dp.cArgs * sizeof(VARIANT))))
2101         return E_OUTOFMEMORY;
2102     dp.rgvarg = args;
2103
2104     if(jsthis) {
2105         V_VT(dp.rgvarg) = VT_DISPATCH;
2106         V_DISPATCH(dp.rgvarg) = jsthis;
2107     }
2108
2109     for(i=0; SUCCEEDED(hres) && i < argc; i++)
2110         hres = jsval_to_variant(argv[i], dp.rgvarg+dp.cArgs-i-1);
2111
2112     if(SUCCEEDED(hres)) {
2113         V_VT(&retv) = VT_EMPTY;
2114         hres = disp_invoke(ctx, disp, DISPID_VALUE, flags, &dp, r ? &retv : NULL);
2115     }
2116
2117     for(i = 0; i < argc; i++)
2118         VariantClear(dp.rgvarg + dp.cArgs - i - 1);
2119     if(args != buf)
2120         heap_free(args);
2121
2122     if(!r)
2123         return S_OK;
2124
2125     hres = variant_to_jsval(&retv, r);
2126     VariantClear(&retv);
2127     return hres;
2128 }
2129
2130 HRESULT jsdisp_propput(jsdisp_t *obj, const WCHAR *name, DWORD flags, jsval_t val)
2131 {
2132     dispex_prop_t *prop;
2133     HRESULT hres;
2134
2135     hres = ensure_prop_name(obj, name, flags, &prop);
2136     if(FAILED(hres))
2137         return hres;
2138
2139     return prop_put(obj, prop, val);
2140 }
2141
2142 HRESULT jsdisp_propput_name(jsdisp_t *obj, const WCHAR *name, jsval_t val)
2143 {
2144     return jsdisp_propput(obj, name, PROPF_ENUMERABLE | PROPF_CONFIGURABLE | PROPF_WRITABLE, val);
2145 }
2146
2147 HRESULT jsdisp_propput_idx(jsdisp_t *obj, DWORD idx, jsval_t val)
2148 {
2149     WCHAR buf[12];
2150
2151     static const WCHAR formatW[] = {'%','d',0};
2152
2153     swprintf(buf, ARRAY_SIZE(buf), formatW, idx);
2154     return jsdisp_propput_name(obj, buf, val);
2155 }
2156
2157 HRESULT disp_propput(script_ctx_t *ctx, IDispatch *disp, DISPID id, jsval_t val)
2158 {
2159     jsdisp_t *jsdisp;
2160     HRESULT hres;
2161
2162     jsdisp = iface_to_jsdisp(disp);
2163     if(jsdisp && jsdisp->ctx == ctx) {
2164         dispex_prop_t *prop;
2165
2166         prop = get_prop(jsdisp, id);
2167         if(prop)
2168             hres = prop_put(jsdisp, prop, val);
2169         else
2170             hres = DISP_E_MEMBERNOTFOUND;
2171
2172         jsdisp_release(jsdisp);
2173     }else {
2174         DISPID dispid = DISPID_PROPERTYPUT;
2175         DWORD flags = DISPATCH_PROPERTYPUT;
2176         VARIANT var;
2177         DISPPARAMS dp  = {&var, &dispid, 1, 1};
2178
2179         hres = jsval_to_variant(val, &var);
2180         if(FAILED(hres))
2181             return hres;
2182
2183         if(V_VT(&var) == VT_DISPATCH)
2184             flags |= DISPATCH_PROPERTYPUTREF;
2185
2186         hres = disp_invoke(ctx, disp, id, flags, &dp, NULL);
2187         VariantClear(&var);
2188     }
2189
2190     return hres;
2191 }
2192
2193 HRESULT jsdisp_propget_name(jsdisp_t *obj, const WCHAR *name, jsval_t *val)
2194 {
2195     dispex_prop_t *prop;
2196     HRESULT hres;
2197
2198     hres = find_prop_name_prot(obj, string_hash(name), name, &prop);
2199     if(FAILED(hres))
2200         return hres;
2201
2202     if(!prop || prop->type==PROP_DELETED) {
2203         *val = jsval_undefined();
2204         return S_OK;
2205     }
2206
2207     return prop_get(obj, prop, val);
2208 }
2209
2210 HRESULT jsdisp_get_idx(jsdisp_t *obj, DWORD idx, jsval_t *r)
2211 {
2212     WCHAR name[12];
2213     dispex_prop_t *prop;
2214     HRESULT hres;
2215
2216     static const WCHAR formatW[] = {'%','d',0};
2217
2218     swprintf(name, ARRAY_SIZE(name), formatW, idx);
2219
2220     hres = find_prop_name_prot(obj, string_hash(name), name, &prop);
2221     if(FAILED(hres))
2222         return hres;
2223
2224     if(!prop || prop->type==PROP_DELETED) {
2225         *r = jsval_undefined();
2226         return DISP_E_UNKNOWNNAME;
2227     }
2228
2229     return prop_get(obj, prop, r);
2230 }
2231
2232 HRESULT jsdisp_propget(jsdisp_t *jsdisp, DISPID id, jsval_t *val)
2233 {
2234     dispex_prop_t *prop;
2235
2236     prop = get_prop(jsdisp, id);
2237     if(!prop)
2238         return DISP_E_MEMBERNOTFOUND;
2239
2240     return prop_get(jsdisp, prop, val);
2241 }
2242
2243 HRESULT disp_propget(script_ctx_t *ctx, IDispatch *disp, DISPID id, jsval_t *val)
2244 {
2245     DISPPARAMS dp  = {NULL,NULL,0,0};
2246     jsdisp_t *jsdisp;
2247     VARIANT var;
2248     HRESULT hres;
2249
2250     jsdisp = iface_to_jsdisp(disp);
2251     if(jsdisp && jsdisp->ctx == ctx) {
2252         hres = jsdisp_propget(jsdisp, id, val);
2253         jsdisp_release(jsdisp);
2254         return hres;
2255     }
2256
2257     V_VT(&var) = VT_EMPTY;
2258     hres = disp_invoke(ctx, disp, id, INVOKE_PROPERTYGET, &dp, &var);
2259     if(SUCCEEDED(hres)) {
2260         hres = variant_to_jsval(&var, val);
2261         VariantClear(&var);
2262     }
2263     return hres;
2264 }
2265
2266 HRESULT jsdisp_delete_idx(jsdisp_t *obj, DWORD idx)
2267 {
2268     static const WCHAR formatW[] = {'%','d',0};
2269     WCHAR buf[12];
2270     dispex_prop_t *prop;
2271     BOOL b;
2272     HRESULT hres;
2273
2274     swprintf(buf, ARRAY_SIZE(buf), formatW, idx);
2275
2276     hres = find_prop_name(obj, string_hash(buf), buf, &prop);
2277     if(FAILED(hres) || !prop)
2278         return hres;
2279
2280     return delete_prop(prop, &b);
2281 }
2282
2283 HRESULT disp_delete(IDispatch *disp, DISPID id, BOOL *ret)
2284 {
2285     IDispatchEx *dispex;
2286     jsdisp_t *jsdisp;
2287     HRESULT hres;
2288
2289     jsdisp = iface_to_jsdisp(disp);
2290     if(jsdisp) {
2291         dispex_prop_t *prop;
2292
2293         prop = get_prop(jsdisp, id);
2294         if(prop)
2295             hres = delete_prop(prop, ret);
2296         else
2297             hres = DISP_E_MEMBERNOTFOUND;
2298
2299         jsdisp_release(jsdisp);
2300         return hres;
2301     }
2302
2303     hres = IDispatch_QueryInterface(disp, &IID_IDispatchEx, (void**)&dispex);
2304     if(FAILED(hres)) {
2305         *ret = FALSE;
2306         return S_OK;
2307     }
2308
2309     hres = IDispatchEx_DeleteMemberByDispID(dispex, id);
2310     IDispatchEx_Release(dispex);
2311     if(FAILED(hres))
2312         return hres;
2313
2314     *ret = hres == S_OK;
2315     return S_OK;
2316 }
2317
2318 HRESULT jsdisp_next_prop(jsdisp_t *obj, DISPID id, BOOL own_only, DISPID *ret)
2319 {
2320     dispex_prop_t *iter;
2321     HRESULT hres;
2322
2323     if(id == DISPID_STARTENUM && !own_only) {
2324         hres = fill_protrefs(obj);
2325         if(FAILED(hres))
2326             return hres;
2327     }
2328
2329     if(id + 1 < 0 || id+1 >= obj->prop_cnt)
2330         return S_FALSE;
2331
2332     for(iter = &obj->props[id + 1]; iter < obj->props + obj->prop_cnt; iter++) {
2333         if(!iter->name || iter->type == PROP_DELETED)
2334             continue;
2335         if(own_only && iter->type == PROP_PROTREF)
2336             continue;
2337         if(!(get_flags(obj, iter) & PROPF_ENUMERABLE))
2338             continue;
2339         *ret = prop_to_id(obj, iter);
2340         return S_OK;
2341     }
2342
2343     return S_FALSE;
2344 }
2345
2346 HRESULT disp_delete_name(script_ctx_t *ctx, IDispatch *disp, jsstr_t *name, BOOL *ret)
2347 {
2348     IDispatchEx *dispex;
2349     jsdisp_t *jsdisp;
2350     BSTR bstr;
2351     HRESULT hres;
2352
2353     jsdisp = iface_to_jsdisp(disp);
2354     if(jsdisp) {
2355         dispex_prop_t *prop;
2356         const WCHAR *ptr;
2357
2358         ptr = jsstr_flatten(name);
2359         if(!ptr) {
2360             jsdisp_release(jsdisp);
2361             return E_OUTOFMEMORY;
2362         }
2363
2364         hres = find_prop_name(jsdisp, string_hash(ptr), ptr, &prop);
2365         if(prop) {
2366             hres = delete_prop(prop, ret);
2367         }else {
2368             *ret = TRUE;
2369             hres = S_OK;
2370         }
2371
2372         jsdisp_release(jsdisp);
2373         return hres;
2374     }
2375
2376     bstr = SysAllocStringLen(NULL, jsstr_length(name));
2377     if(!bstr)
2378         return E_OUTOFMEMORY;
2379     jsstr_flush(name, bstr);
2380
2381     hres = IDispatch_QueryInterface(disp, &IID_IDispatchEx, (void**)&dispex);
2382     if(SUCCEEDED(hres)) {
2383         hres = IDispatchEx_DeleteMemberByName(dispex, bstr, make_grfdex(ctx, fdexNameCaseSensitive));
2384         if(SUCCEEDED(hres))
2385             *ret = hres == S_OK;
2386         IDispatchEx_Release(dispex);
2387     }else {
2388         DISPID id;
2389
2390         hres = IDispatch_GetIDsOfNames(disp, &IID_NULL, &bstr, 1, 0, &id);
2391         if(SUCCEEDED(hres)) {
2392             /* Property exists and we can't delete it from pure IDispatch interface, so return false. */
2393             *ret = FALSE;
2394         }else if(hres == DISP_E_UNKNOWNNAME) {
2395             /* Property doesn't exist, so nothing to delete */
2396             *ret = TRUE;
2397             hres = S_OK;
2398         }
2399     }
2400
2401     SysFreeString(bstr);
2402     return hres;
2403 }
2404
2405 HRESULT jsdisp_get_own_property(jsdisp_t *obj, const WCHAR *name, BOOL flags_only,
2406                                 property_desc_t *desc)
2407 {
2408     dispex_prop_t *prop;
2409     HRESULT hres;
2410
2411     hres = find_prop_name(obj, string_hash(name), name, &prop);
2412     if(FAILED(hres))
2413         return hres;
2414
2415     if(!prop)
2416         return DISP_E_UNKNOWNNAME;
2417
2418     memset(desc, 0, sizeof(*desc));
2419
2420     switch(prop->type) {
2421     case PROP_BUILTIN:
2422     case PROP_JSVAL:
2423         desc->mask |= PROPF_WRITABLE;
2424         desc->explicit_value = TRUE;
2425         if(!flags_only) {
2426             hres = prop_get(obj, prop, &desc->value);
2427             if(FAILED(hres))
2428                 return hres;
2429         }
2430         break;
2431     case PROP_ACCESSOR:
2432         desc->explicit_getter = desc->explicit_setter = TRUE;
2433         if(!flags_only) {
2434             desc->getter = prop->u.accessor.getter
2435                 ? jsdisp_addref(prop->u.accessor.getter) : NULL;
2436             desc->setter = prop->u.accessor.setter
2437                 ? jsdisp_addref(prop->u.accessor.setter) : NULL;
2438         }
2439         break;
2440     default:
2441         return DISP_E_UNKNOWNNAME;
2442     }
2443
2444     desc->flags = prop->flags & (PROPF_ENUMERABLE | PROPF_WRITABLE | PROPF_CONFIGURABLE);
2445     desc->mask |= PROPF_ENUMERABLE | PROPF_CONFIGURABLE;
2446     return S_OK;
2447 }
2448
2449 HRESULT jsdisp_define_property(jsdisp_t *obj, const WCHAR *name, property_desc_t *desc)
2450 {
2451     dispex_prop_t *prop;
2452     HRESULT hres;
2453
2454     hres = find_prop_name(obj, string_hash(name), name, &prop);
2455     if(FAILED(hres))
2456         return hres;
2457
2458     if(!prop && !(prop = alloc_prop(obj, name, PROP_DELETED, 0)))
2459        return E_OUTOFMEMORY;
2460
2461     if(prop->type == PROP_DELETED || prop->type == PROP_PROTREF) {
2462         prop->flags = desc->flags;
2463         if(desc->explicit_getter || desc->explicit_setter) {
2464             prop->type = PROP_ACCESSOR;
2465             prop->u.accessor.getter = desc->getter ? jsdisp_addref(desc->getter) : NULL;
2466             prop->u.accessor.setter = desc->setter ? jsdisp_addref(desc->setter) : NULL;
2467             TRACE("%s = accessor { get: %p set: %p }\n", debugstr_w(name),
2468                   prop->u.accessor.getter, prop->u.accessor.setter);
2469         }else {
2470             prop->type = PROP_JSVAL;
2471             if(desc->explicit_value) {
2472                 hres = jsval_copy(desc->value, &prop->u.val);
2473                 if(FAILED(hres))
2474                     return hres;
2475             }else {
2476                 prop->u.val = jsval_undefined();
2477             }
2478             TRACE("%s = %s\n", debugstr_w(name), debugstr_jsval(prop->u.val));
2479         }
2480         return S_OK;
2481     }
2482
2483     TRACE("existing prop %s prop flags %x desc flags %x desc mask %x\n", debugstr_w(name),
2484           prop->flags, desc->flags, desc->mask);
2485
2486     if(!(prop->flags & PROPF_CONFIGURABLE)) {
2487         if(((desc->mask & PROPF_CONFIGURABLE) && (desc->flags & PROPF_CONFIGURABLE))
2488            || ((desc->mask & PROPF_ENUMERABLE)
2489                && ((desc->flags & PROPF_ENUMERABLE) != (prop->flags & PROPF_ENUMERABLE))))
2490             return throw_error(obj->ctx, JS_E_NONCONFIGURABLE_REDEFINED, name);
2491     }
2492
2493     if(desc->explicit_value || (desc->mask & PROPF_WRITABLE)) {
2494         if(prop->type == PROP_ACCESSOR) {
2495             if(!(prop->flags & PROPF_CONFIGURABLE))
2496                 return throw_error(obj->ctx, JS_E_NONCONFIGURABLE_REDEFINED, name);
2497             if(prop->u.accessor.getter)
2498                 jsdisp_release(prop->u.accessor.getter);
2499             if(prop->u.accessor.setter)
2500                 jsdisp_release(prop->u.accessor.setter);
2501
2502             prop->type = PROP_JSVAL;
2503             hres = jsval_copy(desc->value, &prop->u.val);
2504             if(FAILED(hres)) {
2505                 prop->u.val = jsval_undefined();
2506                 return hres;
2507             }
2508         }else {
2509             if(!(prop->flags & PROPF_CONFIGURABLE) && !(prop->flags & PROPF_WRITABLE)) {
2510                 if((desc->mask & PROPF_WRITABLE) && (desc->flags & PROPF_WRITABLE))
2511                     return throw_error(obj->ctx, JS_E_NONWRITABLE_MODIFIED, name);
2512                 if(desc->explicit_value) {
2513                     if(prop->type == PROP_JSVAL) {
2514                         BOOL eq;
2515                         hres = jsval_strict_equal(desc->value, prop->u.val, &eq);
2516                         if(FAILED(hres))
2517                             return hres;
2518                         if(!eq)
2519                             return throw_error(obj->ctx, JS_E_NONWRITABLE_MODIFIED, name);
2520                     }else {
2521                         FIXME("redefinition of property type %d\n", prop->type);
2522                     }
2523                 }
2524             }
2525             if(desc->explicit_value) {
2526                 if(prop->type == PROP_JSVAL)
2527                     jsval_release(prop->u.val);
2528                 else
2529                     prop->type = PROP_JSVAL;
2530                 hres = jsval_copy(desc->value, &prop->u.val);
2531                 if(FAILED(hres)) {
2532                     prop->u.val = jsval_undefined();
2533                     return hres;
2534                 }
2535             }
2536         }
2537     }else if(desc->explicit_getter || desc->explicit_setter) {
2538         if(prop->type != PROP_ACCESSOR) {
2539             if(!(prop->flags & PROPF_CONFIGURABLE))
2540                 return throw_error(obj->ctx, JS_E_NONCONFIGURABLE_REDEFINED, name);
2541             if(prop->type == PROP_JSVAL)
2542                 jsval_release(prop->u.val);
2543             prop->type = PROP_ACCESSOR;
2544             prop->u.accessor.getter = prop->u.accessor.setter = NULL;
2545         }else if(!(prop->flags & PROPF_CONFIGURABLE)) {
2546             if((desc->explicit_getter && desc->getter != prop->u.accessor.getter)
2547                || (desc->explicit_setter && desc->setter != prop->u.accessor.setter))
2548                 return throw_error(obj->ctx, JS_E_NONCONFIGURABLE_REDEFINED, name);
2549         }
2550
2551         if(desc->explicit_getter) {
2552             if(prop->u.accessor.getter) {
2553                 jsdisp_release(prop->u.accessor.getter);
2554                 prop->u.accessor.getter = NULL;
2555             }
2556             if(desc->getter)
2557                 prop->u.accessor.getter = jsdisp_addref(desc->getter);
2558         }
2559         if(desc->explicit_setter) {
2560             if(prop->u.accessor.setter) {
2561                 jsdisp_release(prop->u.accessor.setter);
2562                 prop->u.accessor.setter = NULL;
2563             }
2564             if(desc->setter)
2565                 prop->u.accessor.setter = jsdisp_addref(desc->setter);
2566         }
2567     }
2568
2569     prop->flags = (prop->flags & ~desc->mask) | (desc->flags & desc->mask);
2570     return S_OK;
2571 }
2572
2573 HRESULT jsdisp_define_data_property(jsdisp_t *obj, const WCHAR *name, unsigned flags, jsval_t value)
2574 {
2575     property_desc_t prop_desc = { flags, flags, TRUE };
2576     prop_desc.value = value;
2577     return jsdisp_define_property(obj, name, &prop_desc);
2578 }
2579
2580 HRESULT jsdisp_get_prop_name(jsdisp_t *obj, DISPID id, jsstr_t **r)
2581 {
2582     dispex_prop_t *prop = get_prop(obj, id);
2583
2584     if(!prop || !prop->name || prop->type == PROP_DELETED)
2585         return DISP_E_MEMBERNOTFOUND;
2586
2587     *r = jsstr_alloc(prop->name);
2588     return *r ? S_OK : E_OUTOFMEMORY;
2589 }