dlls/mshtml/dispex.c

   1 /*
   2  * Copyright 2008-2009 Jacek Caban for CodeWeavers
   3  *
   4  * This library is free software; you can redistribute it and/or
   5  * modify it under the terms of the GNU Lesser General Public
   6  * License as published by the Free Software Foundation; either
   7  * version 2.1 of the License, or (at your option) any later version.
   8  *
   9  * This library is distributed in the hope that it will be useful,
  10  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  11  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  12  * Lesser General Public License for more details.
  13  *
  14  * You should have received a copy of the GNU Lesser General Public
  15  * License along with this library; if not, write to the Free Software
  16  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
  17  */
  18
  19 #include <stdarg.h>
  20
  21 #define COBJMACROS
  22
  23 #include "windef.h"
  24 #include "winbase.h"
  25 #include "winuser.h"
  26 #include "ole2.h"
  27
  28 #include "wine/debug.h"
  29
  30 #include "mshtml_private.h"
  31
  32 WINE_DEFAULT_DEBUG_CHANNEL(mshtml);
  33
  34 static const WCHAR objectW[] = {'[','o','b','j','e','c','t',']',0};
  35
  36 typedef struct {
  37     DISPID id;
  38     BSTR name;
  39     tid_t tid;
  40     int func_disp_idx;
  41 } func_info_t;
  42
  43 struct dispex_data_t {
  44     DWORD func_cnt;
  45     func_info_t *funcs;
  46     func_info_t **name_table;
  47     DWORD func_disp_cnt;
  48
  49     struct list entry;
  50 };
  51
  52 typedef struct {
  53     VARIANT var;
  54     LPWSTR name;
  55     DWORD flags;
  56 } dynamic_prop_t;
  57
  58 #define DYNPROP_DELETED    0x01
  59
  60 typedef struct {
  61     DispatchEx dispex;
  62     const IUnknownVtbl *lpIUnknownVtbl;
  63     DispatchEx *obj;
  64     func_info_t *info;
  65 } func_disp_t;
  66
  67 #define FUNCUNKNOWN(x)  ((IUnknown*) &(x)->lpIUnknownVtbl)
  68
  69 struct dispex_dynamic_data_t {
  70     DWORD buf_size;
  71     DWORD prop_cnt;
  72     dynamic_prop_t *props;
  73     func_disp_t **func_disps;
  74 };
  75
  76 #define DISPID_DYNPROP_0    0x50000000
  77 #define DISPID_DYNPROP_MAX  0x5fffffff
  78
  79 #define FDEX_VERSION_MASK 0xf0000000
  80
  81 static ITypeLib *typelib;
  82 static ITypeInfo *typeinfos[LAST_tid];
  83 static struct list dispex_data_list = LIST_INIT(dispex_data_list);
  84
  85 static REFIID tid_ids[] = {
  86 #define XIID(iface) &IID_ ## iface,
  87 #define XDIID(iface) &DIID_ ## iface,
  88 TID_LIST
  89 #undef XIID
  90 #undef XDIID
  91 };
  92
  93 static HRESULT get_typeinfo(tid_t tid, ITypeInfo **typeinfo)
  94 {
  95     HRESULT hres;
  96
  97     if(!typelib) {
  98         ITypeLib *tl;
  99
 100         hres = LoadRegTypeLib(&LIBID_MSHTML, 4, 0, LOCALE_SYSTEM_DEFAULT, &tl);
 101         if(FAILED(hres)) {
 102             ERR("LoadRegTypeLib failed: %08x\n", hres);
 103             return hres;
 104         }
 105
 106         if(InterlockedCompareExchangePointer((void**)&typelib, tl, NULL))
 107             ITypeLib_Release(tl);
 108     }
 109
 110     if(!typeinfos[tid]) {
 111         ITypeInfo *typeinfo;
 112
 113         hres = ITypeLib_GetTypeInfoOfGuid(typelib, tid_ids[tid], &typeinfo);
 114         if(FAILED(hres)) {
 115             ERR("GetTypeInfoOfGuid(%s) failed: %08x\n", debugstr_guid(tid_ids[tid]), hres);
 116             return hres;
 117         }
 118
 119         if(InterlockedCompareExchangePointer((void**)(typeinfos+tid), typeinfo, NULL))
 120             ITypeInfo_Release(typeinfo);
 121     }
 122
 123     *typeinfo = typeinfos[tid];
 124     return S_OK;
 125 }
 126
 127 void release_typelib(void)
 128 {
 129     dispex_data_t *iter;
 130     unsigned i;
 131
 132     while(!list_empty(&dispex_data_list)) {
 133         iter = LIST_ENTRY(list_head(&dispex_data_list), dispex_data_t, entry);
 134         list_remove(&iter->entry);
 135
 136         for(i=0; i < iter->func_cnt; i++)
 137             SysFreeString(iter->funcs[i].name);
 138
 139         heap_free(iter->funcs);
 140         heap_free(iter->name_table);
 141         heap_free(iter);
 142     }
 143
 144     if(!typelib)
 145         return;
 146
 147     for(i=0; i < sizeof(typeinfos)/sizeof(*typeinfos); i++)
 148         if(typeinfos[i])
 149             ITypeInfo_Release(typeinfos[i]);
 150
 151     ITypeLib_Release(typelib);
 152 }
 153
 154 static void add_func_info(dispex_data_t *data, DWORD *size, tid_t tid, const FUNCDESC *desc, ITypeInfo *dti)
 155 {
 156     HRESULT hres;
 157
 158     if(data->func_cnt && data->funcs[data->func_cnt-1].id == desc->memid)
 159         return;
 160
 161     if(data->func_cnt == *size)
 162         data->funcs = heap_realloc(data->funcs, (*size <<= 1)*sizeof(func_info_t));
 163
 164     hres = ITypeInfo_GetDocumentation(dti, desc->memid, &data->funcs[data->func_cnt].name, NULL, NULL, NULL);
 165     if(FAILED(hres))
 166         return;
 167
 168     data->funcs[data->func_cnt].id = desc->memid;
 169     data->funcs[data->func_cnt].tid = tid;
 170     data->funcs[data->func_cnt].func_disp_idx = (desc->invkind & DISPATCH_METHOD) ? data->func_disp_cnt++ : -1;
 171
 172     data->func_cnt++;
 173 }
 174
 175 static int dispid_cmp(const void *p1, const void *p2)
 176 {
 177     return ((const func_info_t*)p1)->id - ((const func_info_t*)p2)->id;
 178 }
 179
 180 static int func_name_cmp(const void *p1, const void *p2)
 181 {
 182     return strcmpiW((*(func_info_t* const*)p1)->name, (*(func_info_t* const*)p2)->name);
 183 }
 184
 185 static dispex_data_t *preprocess_dispex_data(DispatchEx *This)
 186 {
 187     const tid_t *tid = This->data->iface_tids;
 188     FUNCDESC *funcdesc;
 189     dispex_data_t *data;
 190     DWORD size = 16, i;
 191     ITypeInfo *ti, *dti;
 192     HRESULT hres;
 193
 194     TRACE("(%p)\n", This);
 195
 196     if(This->data->disp_tid) {
 197         hres = get_typeinfo(This->data->disp_tid, &dti);
 198         if(FAILED(hres)) {
 199             ERR("Could not get disp type info: %08x\n", hres);
 200             return NULL;
 201         }
 202     }
 203
 204     data = heap_alloc(sizeof(dispex_data_t));
 205     data->func_cnt = 0;
 206     data->func_disp_cnt = 0;
 207     data->funcs = heap_alloc(size*sizeof(func_info_t));
 208     list_add_tail(&dispex_data_list, &data->entry);
 209
 210     while(*tid) {
 211         hres = get_typeinfo(*tid, &ti);
 212         if(FAILED(hres))
 213             break;
 214
 215         i=7;
 216         while(1) {
 217             hres = ITypeInfo_GetFuncDesc(ti, i++, &funcdesc);
 218             if(FAILED(hres))
 219                 break;
 220
 221             add_func_info(data, &size, *tid, funcdesc, dti);
 222             ITypeInfo_ReleaseFuncDesc(ti, funcdesc);
 223         }
 224
 225         tid++;
 226     }
 227
 228     if(!data->func_cnt) {
 229         heap_free(data->funcs);
 230         data->funcs = NULL;
 231     }else if(data->func_cnt != size) {
 232         data->funcs = heap_realloc(data->funcs, data->func_cnt * sizeof(func_info_t));
 233     }
 234
 235     qsort(data->funcs, data->func_cnt, sizeof(func_info_t), dispid_cmp);
 236
 237     if(data->funcs) {
 238         data->name_table = heap_alloc(data->func_cnt * sizeof(func_info_t*));
 239         for(i=0; i < data->func_cnt; i++)
 240             data->name_table[i] = data->funcs+i;
 241         qsort(data->name_table, data->func_cnt, sizeof(func_info_t*), func_name_cmp);
 242     }else {
 243         data->name_table = NULL;
 244     }
 245
 246     return data;
 247 }
 248
 249 static int id_cmp(const void *p1, const void *p2)
 250 {
 251     return *(const DISPID*)p1 - *(const DISPID*)p2;
 252 }
 253
 254 HRESULT get_dispids(tid_t tid, DWORD *ret_size, DISPID **ret)
 255 {
 256     unsigned i, func_cnt;
 257     FUNCDESC *funcdesc;
 258     ITypeInfo *ti;
 259     TYPEATTR *attr;
 260     DISPID *ids;
 261     HRESULT hres;
 262
 263     hres = get_typeinfo(tid, &ti);
 264     if(FAILED(hres))
 265         return hres;
 266
 267     hres = ITypeInfo_GetTypeAttr(ti, &attr);
 268     if(FAILED(hres)) {
 269         ITypeInfo_Release(ti);
 270         return hres;
 271     }
 272
 273     func_cnt = attr->cFuncs;
 274     ITypeInfo_ReleaseTypeAttr(ti, attr);
 275
 276     ids = heap_alloc(func_cnt*sizeof(DISPID));
 277     if(!ids) {
 278         ITypeInfo_Release(ti);
 279         return E_OUTOFMEMORY;
 280     }
 281
 282     for(i=0; i < func_cnt; i++) {
 283         hres = ITypeInfo_GetFuncDesc(ti, i, &funcdesc);
 284         if(FAILED(hres))
 285             break;
 286
 287         ids[i] = funcdesc->memid;
 288         ITypeInfo_ReleaseFuncDesc(ti, funcdesc);
 289     }
 290
 291     ITypeInfo_Release(ti);
 292     if(FAILED(hres)) {
 293         heap_free(ids);
 294         return hres;
 295     }
 296
 297     qsort(ids, func_cnt, sizeof(DISPID), id_cmp);
 298
 299     *ret_size = func_cnt;
 300     *ret = ids;
 301     return S_OK;
 302 }
 303
 304 static CRITICAL_SECTION cs_dispex_static_data;
 305 static CRITICAL_SECTION_DEBUG cs_dispex_static_data_dbg =
 306 {
 307     0, 0, &cs_dispex_static_data,
 308     { &cs_dispex_static_data_dbg.ProcessLocksList, &cs_dispex_static_data_dbg.ProcessLocksList },
 309       0, 0, { (DWORD_PTR)(__FILE__ ": dispex_static_data") }
 310 };
 311 static CRITICAL_SECTION cs_dispex_static_data = { &cs_dispex_static_data_dbg, -1, 0, 0, 0, 0 };
 312
 313
 314 static dispex_data_t *get_dispex_data(DispatchEx *This)
 315 {
 316     if(This->data->data)
 317         return This->data->data;
 318
 319     EnterCriticalSection(&cs_dispex_static_data);
 320
 321     if(!This->data->data)
 322         This->data->data = preprocess_dispex_data(This);
 323
 324     LeaveCriticalSection(&cs_dispex_static_data);
 325
 326     return This->data->data;
 327 }
 328
 329 HRESULT call_disp_func(IDispatch *disp, DISPPARAMS *dp)
 330 {
 331     EXCEPINFO ei;
 332     IDispatchEx *dispex;
 333     VARIANT res;
 334     HRESULT hres;
 335
 336     VariantInit(&res);
 337     memset(&ei, 0, sizeof(ei));
 338
 339     hres = IDispatch_QueryInterface(disp, &IID_IDispatchEx, (void**)&dispex);
 340     if(SUCCEEDED(hres)) {
 341         hres = IDispatchEx_InvokeEx(dispex, 0, GetUserDefaultLCID(), DISPATCH_METHOD, dp, &res, &ei, NULL);
 342         IDispatchEx_Release(dispex);
 343     }else {
 344         TRACE("Could not get IDispatchEx interface: %08x\n", hres);
 345         hres = IDispatch_Invoke(disp, 0, &IID_NULL, GetUserDefaultLCID(), DISPATCH_METHOD,
 346                 dp, &res, &ei, NULL);
 347     }
 348
 349     VariantClear(&res);
 350     return hres;
 351 }
 352
 353 static inline BOOL is_custom_dispid(DISPID id)
 354 {
 355     return MSHTML_DISPID_CUSTOM_MIN <= id && id <= MSHTML_DISPID_CUSTOM_MAX;
 356 }
 357
 358 static inline BOOL is_dynamic_dispid(DISPID id)
 359 {
 360     return DISPID_DYNPROP_0 <= id && id <= DISPID_DYNPROP_MAX;
 361 }
 362
 363 static inline dispex_dynamic_data_t *get_dynamic_data(DispatchEx *This, BOOL alloc)
 364 {
 365     return !alloc || This->dynamic_data
 366         ? This->dynamic_data
 367         : (This->dynamic_data = heap_alloc_zero(sizeof(dispex_dynamic_data_t)));
 368 }
 369
 370 static HRESULT get_dynamic_prop(DispatchEx *This, const WCHAR *name, DWORD flags, dynamic_prop_t **ret)
 371 {
 372     const BOOL alloc = flags & fdexNameEnsure;
 373     dispex_dynamic_data_t *data;
 374     dynamic_prop_t *prop;
 375
 376     data = get_dynamic_data(This, alloc);
 377     if(!data) {
 378         if(alloc)
 379             return E_OUTOFMEMORY;
 380
 381         TRACE("not found %s\n", debugstr_w(name));
 382         return DISP_E_UNKNOWNNAME;
 383     }
 384
 385     for(prop = data->props; prop < data->props+data->prop_cnt; prop++) {
 386         if(flags & fdexNameCaseInsensitive ? !strcmpiW(prop->name, name) : !strcmpW(prop->name, name)) {
 387             if(prop->flags & DYNPROP_DELETED) {
 388                 if(!alloc)
 389                     return DISP_E_UNKNOWNNAME;
 390                 prop->flags &= ~DYNPROP_DELETED;
 391             }
 392             *ret = prop;
 393             return S_OK;
 394         }
 395     }
 396
 397     if(!alloc)
 398         return DISP_E_UNKNOWNNAME;
 399
 400     TRACE("creating dynamic prop %s\n", debugstr_w(name));
 401
 402     if(!data->buf_size) {
 403         data->props = heap_alloc(sizeof(dynamic_prop_t)*4);
 404         if(!data->props)
 405             return E_OUTOFMEMORY;
 406         data->buf_size = 4;
 407     }else if(data->buf_size == data->prop_cnt) {
 408         dynamic_prop_t *new_props;
 409
 410         new_props = heap_realloc(data->props, sizeof(dynamic_prop_t)*(data->buf_size<<1));
 411         if(!new_props)
 412             return E_OUTOFMEMORY;
 413
 414         data->props = new_props;
 415         data->buf_size <<= 1;
 416     }
 417
 418     prop = data->props + data->prop_cnt;
 419
 420     prop->name = heap_strdupW(name);
 421     if(!prop->name)
 422         return E_OUTOFMEMORY;
 423
 424     VariantInit(&prop->var);
 425     prop->flags = 0;
 426     data->prop_cnt++;
 427     *ret = prop;
 428     return S_OK;
 429 }
 430
 431 HRESULT dispex_get_dprop_ref(DispatchEx *This, const WCHAR *name, BOOL alloc, VARIANT **ret)
 432 {
 433     dynamic_prop_t *prop;
 434     HRESULT hres;
 435
 436     hres = get_dynamic_prop(This, name, alloc ? fdexNameEnsure : 0, &prop);
 437     if(FAILED(hres))
 438         return hres;
 439
 440     *ret = &prop->var;
 441     return S_OK;
 442 }
 443
 444 static HRESULT dispex_value(DispatchEx *This, LCID lcid, WORD flags, DISPPARAMS *params,
 445         VARIANT *res, EXCEPINFO *ei, IServiceProvider *caller)
 446 {
 447     if(This->data->vtbl && This->data->vtbl->value)
 448         return This->data->vtbl->value(This->outer, lcid, flags, params, res, ei, caller);
 449
 450     switch(flags) {
 451     case DISPATCH_PROPERTYGET:
 452         V_VT(res) = VT_BSTR;
 453         V_BSTR(res) = SysAllocString(objectW);
 454         if(!V_BSTR(res))
 455             return E_OUTOFMEMORY;
 456         break;
 457     default:
 458         FIXME("Unimplemented flags %x\n", flags);
 459         return E_NOTIMPL;
 460     }
 461
 462     return S_OK;
 463 }
 464
 465 static HRESULT typeinfo_invoke(DispatchEx *This, func_info_t *func, WORD flags, DISPPARAMS *dp, VARIANT *res,
 466         EXCEPINFO *ei)
 467 {
 468     ITypeInfo *ti;
 469     IUnknown *unk;
 470     UINT argerr=0;
 471     HRESULT hres;
 472
 473     hres = get_typeinfo(func->tid, &ti);
 474     if(FAILED(hres)) {
 475         ERR("Could not get type info: %08x\n", hres);
 476         return hres;
 477     }
 478
 479     hres = IUnknown_QueryInterface(This->outer, tid_ids[func->tid], (void**)&unk);
 480     if(FAILED(hres)) {
 481         ERR("Could not get iface %s: %08x\n", debugstr_guid(tid_ids[func->tid]), hres);
 482         return E_FAIL;
 483     }
 484
 485     hres = ITypeInfo_Invoke(ti, unk, func->id, flags, dp, res, ei, &argerr);
 486
 487     IUnknown_Release(unk);
 488     return hres;
 489 }
 490
 491 #define FUNCTION_THIS(iface) DEFINE_THIS(func_disp_t, IUnknown, iface)
 492
 493 static HRESULT WINAPI Function_QueryInterface(IUnknown *iface, REFIID riid, void **ppv)
 494 {
 495     func_disp_t *This = FUNCTION_THIS(iface);
 496
 497     if(IsEqualGUID(&IID_IUnknown, riid)) {
 498         TRACE("(%p)->(IID_IUnknown %p)\n", This, ppv);
 499         *ppv = FUNCUNKNOWN(This);
 500     }else if(dispex_query_interface(&This->dispex, riid, ppv)) {
 501         return *ppv ? S_OK : E_NOINTERFACE;
 502     }else {
 503         *ppv = NULL;
 504         return E_NOINTERFACE;
 505     }
 506
 507     IUnknown_AddRef((IUnknown*)*ppv);
 508     return S_OK;
 509 }
 510
 511 static ULONG WINAPI Function_AddRef(IUnknown *iface)
 512 {
 513     func_disp_t *This = FUNCTION_THIS(iface);
 514
 515     TRACE("(%p)\n", This);
 516
 517     return IDispatchEx_AddRef(DISPATCHEX(This->obj));
 518 }
 519
 520 static ULONG WINAPI Function_Release(IUnknown *iface)
 521 {
 522     func_disp_t *This = FUNCTION_THIS(iface);
 523
 524     TRACE("(%p)\n", This);
 525
 526     return IDispatchEx_Release(DISPATCHEX(This->obj));
 527 }
 528
 529 static HRESULT function_value(IUnknown *iface, LCID lcid, WORD flags, DISPPARAMS *params,
 530         VARIANT *res, EXCEPINFO *ei, IServiceProvider *caller)
 531 {
 532     func_disp_t *This = FUNCTION_THIS(iface);
 533     HRESULT hres;
 534
 535     switch(flags) {
 536     case DISPATCH_METHOD|DISPATCH_PROPERTYGET:
 537         if(!res)
 538             return E_INVALIDARG;
 539     case DISPATCH_METHOD:
 540         hres = typeinfo_invoke(This->obj, This->info, flags, params, res, ei);
 541         break;
 542     default:
 543         FIXME("Unimplemented flags %x\n", flags);
 544         hres = E_NOTIMPL;
 545     }
 546
 547     return hres;
 548 }
 549
 550 #undef FUNCTION_THIS
 551
 552 static const IUnknownVtbl FunctionUnkVtbl = {
 553     Function_QueryInterface,
 554     Function_AddRef,
 555     Function_Release
 556 };
 557
 558 static const dispex_static_data_vtbl_t function_dispex_vtbl = {
 559     function_value,
 560     NULL,
 561     NULL
 562 };
 563
 564 static const tid_t function_iface_tids[] = {0};
 565
 566 static dispex_static_data_t function_dispex = {
 567     &function_dispex_vtbl,
 568     NULL_tid,
 569     NULL,
 570     function_iface_tids
 571 };
 572
 573 static func_disp_t *create_func_disp(DispatchEx *obj, func_info_t *info)
 574 {
 575     func_disp_t *ret;
 576
 577     ret = heap_alloc_zero(sizeof(func_disp_t));
 578     if(!ret)
 579         return NULL;
 580
 581     ret->lpIUnknownVtbl = &FunctionUnkVtbl;
 582     init_dispex(&ret->dispex, FUNCUNKNOWN(ret),  &function_dispex);
 583     ret->obj = obj;
 584     ret->info = info;
 585
 586     return ret;
 587 }
 588
 589 static HRESULT function_invoke(DispatchEx *This, func_info_t *func, WORD flags, DISPPARAMS *dp, VARIANT *res,
 590         EXCEPINFO *ei)
 591 {
 592     HRESULT hres;
 593
 594     switch(flags) {
 595     case DISPATCH_METHOD|DISPATCH_PROPERTYGET:
 596         if(!res)
 597             return E_INVALIDARG;
 598     case DISPATCH_METHOD:
 599         hres = typeinfo_invoke(This, func, flags, dp, res, ei);
 600         break;
 601     case DISPATCH_PROPERTYGET: {
 602         dispex_dynamic_data_t *dynamic_data;
 603
 604         if(func->id == DISPID_VALUE) {
 605             BSTR ret;
 606
 607             ret = SysAllocString(objectW);
 608             if(!ret)
 609                 return E_OUTOFMEMORY;
 610
 611             V_VT(res) = VT_BSTR;
 612             V_BSTR(res) = ret;
 613             return S_OK;
 614         }
 615
 616         dynamic_data = get_dynamic_data(This, TRUE);
 617         if(!dynamic_data)
 618             return E_OUTOFMEMORY;
 619
 620         if(!dynamic_data->func_disps) {
 621             dynamic_data->func_disps = heap_alloc_zero(This->data->data->func_disp_cnt * sizeof(func_disp_t*));
 622             if(!dynamic_data->func_disps)
 623                 return E_OUTOFMEMORY;
 624         }
 625
 626         if(!dynamic_data->func_disps[func->func_disp_idx]) {
 627             dynamic_data->func_disps[func->func_disp_idx] = create_func_disp(This, func);
 628             if(!dynamic_data->func_disps[func->func_disp_idx])
 629                 return E_OUTOFMEMORY;
 630         }
 631
 632         V_VT(res) = VT_DISPATCH;
 633         V_DISPATCH(res) = (IDispatch*)DISPATCHEX(&dynamic_data->func_disps[func->func_disp_idx]->dispex);
 634         IDispatch_AddRef(V_DISPATCH(res));
 635         hres = S_OK;
 636         break;
 637     }
 638     default:
 639         FIXME("Unimplemented flags %x\n", flags);
 640     case DISPATCH_PROPERTYPUT:
 641         hres = E_NOTIMPL;
 642     }
 643
 644     return hres;
 645 }
 646
 647 static HRESULT get_builtin_func(dispex_data_t *data, DISPID id, func_info_t **ret)
 648 {
 649     int min, max, n;
 650
 651     min = 0;
 652     max = data->func_cnt-1;
 653
 654     while(min <= max) {
 655         n = (min+max)/2;
 656
 657         if(data->funcs[n].id == id) {
 658             *ret = data->funcs+n;
 659             return S_OK;
 660         }
 661
 662         if(data->funcs[n].id < id)
 663             min = n+1;
 664         else
 665             max = n-1;
 666     }
 667
 668     WARN("invalid id %x\n", id);
 669     return DISP_E_UNKNOWNNAME;
 670 }
 671
 672 static HRESULT get_builtin_id(DispatchEx *This, BSTR name, DWORD grfdex, DISPID *ret)
 673 {
 674     dispex_data_t *data;
 675     int min, max, n, c;
 676
 677     data = get_dispex_data(This);
 678     if(!data)
 679         return E_FAIL;
 680
 681     min = 0;
 682     max = data->func_cnt-1;
 683
 684     while(min <= max) {
 685         n = (min+max)/2;
 686
 687         c = strcmpiW(data->name_table[n]->name, name);
 688         if(!c) {
 689             if((grfdex & fdexNameCaseSensitive) && strcmpW(data->name_table[n]->name, name))
 690                 break;
 691
 692             *ret = data->name_table[n]->id;
 693             return S_OK;
 694         }
 695
 696         if(c > 0)
 697             max = n-1;
 698         else
 699             min = n+1;
 700     }
 701
 702     if(This->data->vtbl && This->data->vtbl->get_dispid) {
 703         HRESULT hres;
 704
 705         hres = This->data->vtbl->get_dispid(This->outer, name, grfdex, ret);
 706         if(hres != DISP_E_UNKNOWNNAME)
 707             return hres;
 708     }
 709
 710     return DISP_E_UNKNOWNNAME;
 711 }
 712
 713 static HRESULT invoke_builtin_prop(DispatchEx *This, DISPID id, LCID lcid, WORD flags, DISPPARAMS *dp,
 714         VARIANT *res, EXCEPINFO *ei, IServiceProvider *caller)
 715 {
 716     dispex_data_t *data;
 717     func_info_t *func;
 718     HRESULT hres;
 719
 720     data = get_dispex_data(This);
 721     if(!data)
 722         return E_FAIL;
 723
 724     hres = get_builtin_func(data, id, &func);
 725     if(id == DISPID_VALUE && hres == DISP_E_UNKNOWNNAME)
 726         return dispex_value(This, lcid, flags, dp, res, ei, caller);
 727     if(FAILED(hres))
 728         return hres;
 729
 730     if(func->func_disp_idx == -1)
 731         hres = typeinfo_invoke(This, func, flags, dp, res, ei);
 732     else
 733         hres = function_invoke(This, func, flags, dp, res, ei);
 734
 735     return hres;
 736 }
 737
 738 HRESULT remove_prop(DispatchEx *This, BSTR name, VARIANT_BOOL *success)
 739 {
 740     dynamic_prop_t *prop;
 741     DISPID id;
 742     HRESULT hres;
 743
 744     hres = get_builtin_id(This, name, 0, &id);
 745     if(hres == S_OK) {
 746         DISPID named_id = DISPID_PROPERTYPUT;
 747         VARIANT var;
 748         DISPPARAMS dp = {&var,&named_id,1,1};
 749         EXCEPINFO ei;
 750
 751         V_VT(&var) = VT_EMPTY;
 752         memset(&ei, 0, sizeof(ei));
 753         hres = invoke_builtin_prop(This, id, 0, DISPATCH_PROPERTYPUT, &dp, NULL, &ei, NULL);
 754         if(FAILED(hres))
 755             return hres;
 756
 757         *success = VARIANT_TRUE;
 758         return S_OK;
 759     }
 760
 761     hres = get_dynamic_prop(This, name, 0, &prop);
 762     if(FAILED(hres)) {
 763         if(hres != DISP_E_UNKNOWNNAME)
 764             return hres;
 765         *success = VARIANT_FALSE;
 766         return S_OK;
 767     }
 768
 769     VariantClear(&prop->var);
 770     prop->flags |= DYNPROP_DELETED;
 771     *success = VARIANT_TRUE;
 772     return S_OK;
 773 }
 774
 775 #define DISPATCHEX_THIS(iface) DEFINE_THIS(DispatchEx, IDispatchEx, iface)
 776
 777 static HRESULT WINAPI DispatchEx_QueryInterface(IDispatchEx *iface, REFIID riid, void **ppv)
 778 {
 779     DispatchEx *This = DISPATCHEX_THIS(iface);
 780
 781     return IUnknown_QueryInterface(This->outer, riid, ppv);
 782 }
 783
 784 static ULONG WINAPI DispatchEx_AddRef(IDispatchEx *iface)
 785 {
 786     DispatchEx *This = DISPATCHEX_THIS(iface);
 787
 788     return IUnknown_AddRef(This->outer);
 789 }
 790
 791 static ULONG WINAPI DispatchEx_Release(IDispatchEx *iface)
 792 {
 793     DispatchEx *This = DISPATCHEX_THIS(iface);
 794
 795     return IUnknown_Release(This->outer);
 796 }
 797
 798 static HRESULT WINAPI DispatchEx_GetTypeInfoCount(IDispatchEx *iface, UINT *pctinfo)
 799 {
 800     DispatchEx *This = DISPATCHEX_THIS(iface);
 801
 802     TRACE("(%p)->(%p)\n", This, pctinfo);
 803
 804     *pctinfo = 1;
 805     return S_OK;
 806 }
 807
 808 static HRESULT WINAPI DispatchEx_GetTypeInfo(IDispatchEx *iface, UINT iTInfo,
 809                                               LCID lcid, ITypeInfo **ppTInfo)
 810 {
 811     DispatchEx *This = DISPATCHEX_THIS(iface);
 812     HRESULT hres;
 813
 814     TRACE("(%p)->(%u %u %p)\n", This, iTInfo, lcid, ppTInfo);
 815
 816     hres = get_typeinfo(This->data->disp_tid, ppTInfo);
 817     if(FAILED(hres))
 818         return hres;
 819
 820     ITypeInfo_AddRef(*ppTInfo);
 821     return S_OK;
 822 }
 823
 824 static HRESULT WINAPI DispatchEx_GetIDsOfNames(IDispatchEx *iface, REFIID riid,
 825                                                 LPOLESTR *rgszNames, UINT cNames,
 826                                                 LCID lcid, DISPID *rgDispId)
 827 {
 828     DispatchEx *This = DISPATCHEX_THIS(iface);
 829     UINT i;
 830     HRESULT hres;
 831
 832     TRACE("(%p)->(%s %p %u %u %p)\n", This, debugstr_guid(riid), rgszNames, cNames,
 833           lcid, rgDispId);
 834
 835     for(i=0; i < cNames; i++) {
 836         hres = IDispatchEx_GetDispID(DISPATCHEX(This), rgszNames[i], 0, rgDispId+i);
 837         if(FAILED(hres))
 838             return hres;
 839     }
 840
 841     return S_OK;
 842 }
 843
 844 static HRESULT WINAPI DispatchEx_Invoke(IDispatchEx *iface, DISPID dispIdMember,
 845                             REFIID riid, LCID lcid, WORD wFlags, DISPPARAMS *pDispParams,
 846                             VARIANT *pVarResult, EXCEPINFO *pExcepInfo, UINT *puArgErr)
 847 {
 848     DispatchEx *This = DISPATCHEX_THIS(iface);
 849
 850     TRACE("(%p)->(%d %s %d %d %p %p %p %p)\n", This, dispIdMember, debugstr_guid(riid),
 851           lcid, wFlags, pDispParams, pVarResult, pExcepInfo, puArgErr);
 852
 853     return IDispatchEx_InvokeEx(DISPATCHEX(This), dispIdMember, lcid, wFlags,
 854                                 pDispParams, pVarResult, pExcepInfo, NULL);
 855 }
 856
 857 static HRESULT WINAPI DispatchEx_GetDispID(IDispatchEx *iface, BSTR bstrName, DWORD grfdex, DISPID *pid)
 858 {
 859     DispatchEx *This = DISPATCHEX_THIS(iface);
 860     dynamic_prop_t *dprop;
 861     HRESULT hres;
 862
 863     TRACE("(%p)->(%s %x %p)\n", This, debugstr_w(bstrName), grfdex, pid);
 864
 865     if(grfdex & ~(fdexNameCaseSensitive|fdexNameCaseInsensitive|fdexNameEnsure|fdexNameImplicit|FDEX_VERSION_MASK))
 866         FIXME("Unsupported grfdex %x\n", grfdex);
 867
 868     hres = get_builtin_id(This, bstrName, grfdex, pid);
 869     if(hres != DISP_E_UNKNOWNNAME)
 870         return hres;
 871
 872     hres = get_dynamic_prop(This, bstrName, grfdex, &dprop);
 873     if(FAILED(hres))
 874         return hres;
 875
 876     *pid = DISPID_DYNPROP_0 + (dprop - This->dynamic_data->props);
 877     return S_OK;
 878 }
 879
 880 static HRESULT WINAPI DispatchEx_InvokeEx(IDispatchEx *iface, DISPID id, LCID lcid, WORD wFlags, DISPPARAMS *pdp,
 881         VARIANT *pvarRes, EXCEPINFO *pei, IServiceProvider *pspCaller)
 882 {
 883     DispatchEx *This = DISPATCHEX_THIS(iface);
 884     HRESULT hres;
 885
 886     TRACE("(%p)->(%x %x %x %p %p %p %p)\n", This, id, lcid, wFlags, pdp, pvarRes, pei, pspCaller);
 887
 888     if(is_custom_dispid(id) && This->data->vtbl && This->data->vtbl->invoke)
 889         return This->data->vtbl->invoke(This->outer, id, lcid, wFlags, pdp, pvarRes, pei, pspCaller);
 890
 891     if(wFlags == DISPATCH_CONSTRUCT) {
 892         if(id == DISPID_VALUE) {
 893             if(This->data->vtbl && This->data->vtbl->value) {
 894                 return This->data->vtbl->value(This->outer, lcid, wFlags, pdp,
 895                         pvarRes, pei, pspCaller);
 896             }
 897             FIXME("DISPATCH_CONSTRUCT flag but missing value function\n");
 898             return E_FAIL;
 899         }
 900         FIXME("DISPATCH_CONSTRUCT flag without DISPID_VALUE\n");
 901         return E_FAIL;
 902     }
 903
 904     if(is_dynamic_dispid(id)) {
 905         DWORD idx = id - DISPID_DYNPROP_0;
 906         dynamic_prop_t *prop;
 907
 908         if(!This->dynamic_data || This->dynamic_data->prop_cnt <= idx)
 909             return DISP_E_UNKNOWNNAME;
 910
 911         prop = This->dynamic_data->props+idx;
 912
 913         switch(wFlags) {
 914         case DISPATCH_METHOD|DISPATCH_PROPERTYGET:
 915             if(!pvarRes)
 916                 return E_INVALIDARG;
 917         case DISPATCH_METHOD: {
 918             DISPID named_arg = DISPID_THIS;
 919             DISPPARAMS dp = {NULL, &named_arg, 0, 1};
 920             IDispatchEx *dispex;
 921
 922             if(V_VT(&prop->var) != VT_DISPATCH) {
 923                 FIXME("invoke %s\n", debugstr_variant(&prop->var));
 924                 return E_NOTIMPL;
 925             }
 926
 927             if(pdp->cNamedArgs) {
 928                 FIXME("named args not supported\n");
 929                 return E_NOTIMPL;
 930             }
 931
 932             dp.rgvarg = heap_alloc((pdp->cArgs+1)*sizeof(VARIANTARG));
 933             if(!dp.rgvarg)
 934                 return E_OUTOFMEMORY;
 935
 936             dp.cArgs = pdp->cArgs+1;
 937             memcpy(dp.rgvarg+1, pdp->rgvarg, pdp->cArgs*sizeof(VARIANTARG));
 938
 939             V_VT(dp.rgvarg) = VT_DISPATCH;
 940             V_DISPATCH(dp.rgvarg) = (IDispatch*)DISPATCHEX(This);
 941
 942             hres = IDispatch_QueryInterface(V_DISPATCH(&prop->var), &IID_IDispatchEx, (void**)&dispex);
 943             TRACE("%s call\n", debugstr_w(This->dynamic_data->props[idx].name));
 944             if(SUCCEEDED(hres)) {
 945                 hres = IDispatchEx_InvokeEx(dispex, DISPID_VALUE, lcid, wFlags, &dp, pvarRes, pei, pspCaller);
 946                 IDispatchEx_Release(dispex);
 947             }else {
 948                 ULONG err = 0;
 949                 hres = IDispatch_Invoke(V_DISPATCH(&prop->var), DISPID_VALUE, &IID_NULL, lcid, wFlags, pdp, pvarRes, pei, &err);
 950             }
 951             TRACE("%s ret %08x\n", debugstr_w(This->dynamic_data->props[idx].name), hres);
 952
 953             heap_free(dp.rgvarg);
 954             return hres;
 955         }
 956         case DISPATCH_PROPERTYGET:
 957             if(prop->flags & DYNPROP_DELETED)
 958                 return DISP_E_UNKNOWNNAME;
 959             return VariantCopy(pvarRes, &prop->var);
 960         case DISPATCH_PROPERTYPUT|DISPATCH_PROPERTYPUTREF:
 961         case DISPATCH_PROPERTYPUT:
 962             if(pdp->cArgs != 1 || (pdp->cNamedArgs == 1 && *pdp->rgdispidNamedArgs != DISPID_PROPERTYPUT)
 963                || pdp->cNamedArgs > 1) {
 964                 FIXME("invalid args\n");
 965                 return E_INVALIDARG;
 966             }
 967
 968             TRACE("put %s\n", debugstr_variant(pdp->rgvarg));
 969             VariantClear(&prop->var);
 970             hres = VariantCopy(&prop->var, pdp->rgvarg);
 971             if(FAILED(hres))
 972                 return hres;
 973
 974             prop->flags &= ~DYNPROP_DELETED;
 975             return S_OK;
 976         default:
 977             FIXME("unhandled wFlags %x\n", wFlags);
 978             return E_NOTIMPL;
 979         }
 980     }
 981
 982     return invoke_builtin_prop(This, id, lcid, wFlags, pdp, pvarRes, pei, pspCaller);
 983 }
 984
 985 static HRESULT WINAPI DispatchEx_DeleteMemberByName(IDispatchEx *iface, BSTR bstrName, DWORD grfdex)
 986 {
 987     DispatchEx *This = DISPATCHEX_THIS(iface);
 988
 989     TRACE("(%p)->(%s %x)\n", This, debugstr_w(bstrName), grfdex);
 990
 991     /* Not implemented by IE */
 992     return E_NOTIMPL;
 993 }
 994
 995 static HRESULT WINAPI DispatchEx_DeleteMemberByDispID(IDispatchEx *iface, DISPID id)
 996 {
 997     DispatchEx *This = DISPATCHEX_THIS(iface);
 998     FIXME("(%p)->(%x)\n", This, id);
 999     return E_NOTIMPL;
1000 }
1001
1002 static HRESULT WINAPI DispatchEx_GetMemberProperties(IDispatchEx *iface, DISPID id, DWORD grfdexFetch, DWORD *pgrfdex)
1003 {
1004     DispatchEx *This = DISPATCHEX_THIS(iface);
1005     FIXME("(%p)->(%x %x %p)\n", This, id, grfdexFetch, pgrfdex);
1006     return E_NOTIMPL;
1007 }
1008
1009 static HRESULT WINAPI DispatchEx_GetMemberName(IDispatchEx *iface, DISPID id, BSTR *pbstrName)
1010 {
1011     DispatchEx *This = DISPATCHEX_THIS(iface);
1012     dispex_data_t *data;
1013     func_info_t *func;
1014     HRESULT hres;
1015
1016     TRACE("(%p)->(%x %p)\n", This, id, pbstrName);
1017
1018     if(is_dynamic_dispid(id)) {
1019         DWORD idx = id - DISPID_DYNPROP_0;
1020
1021         if(!This->dynamic_data || This->dynamic_data->prop_cnt <= idx)
1022             return DISP_E_UNKNOWNNAME;
1023
1024         *pbstrName = SysAllocString(This->dynamic_data->props[idx].name);
1025         if(!*pbstrName)
1026             return E_OUTOFMEMORY;
1027
1028         return S_OK;
1029     }
1030
1031     data = get_dispex_data(This);
1032     if(!data)
1033         return E_FAIL;
1034
1035     hres = get_builtin_func(data, id, &func);
1036     if(FAILED(hres))
1037         return hres;
1038
1039     *pbstrName = SysAllocString(func->name);
1040     if(!*pbstrName)
1041         return E_OUTOFMEMORY;
1042     return S_OK;
1043 }
1044
1045 static HRESULT WINAPI DispatchEx_GetNextDispID(IDispatchEx *iface, DWORD grfdex, DISPID id, DISPID *pid)
1046 {
1047     DispatchEx *This = DISPATCHEX_THIS(iface);
1048     dispex_data_t *data;
1049     func_info_t *func;
1050     HRESULT hres;
1051
1052     TRACE("(%p)->(%x %x %p)\n", This, grfdex, id, pid);
1053
1054     if(is_dynamic_dispid(id)) {
1055         DWORD idx = id - DISPID_DYNPROP_0;
1056
1057         if(!This->dynamic_data || This->dynamic_data->prop_cnt <= idx)
1058             return DISP_E_UNKNOWNNAME;
1059
1060         while(++idx < This->dynamic_data->prop_cnt && This->dynamic_data->props[idx].flags & DYNPROP_DELETED);
1061
1062         if(idx == This->dynamic_data->prop_cnt) {
1063             *pid = DISPID_STARTENUM;
1064             return S_FALSE;
1065         }
1066
1067         *pid = DISPID_DYNPROP_0+idx;
1068         return S_OK;
1069     }
1070
1071     data = get_dispex_data(This);
1072     if(!data)
1073         return E_FAIL;
1074
1075     if(id == DISPID_STARTENUM) {
1076         func = data->funcs;
1077     }else {
1078         hres = get_builtin_func(data, id, &func);
1079         if(FAILED(hres))
1080             return hres;
1081         func++;
1082     }
1083
1084     while(func < data->funcs+data->func_cnt) {
1085         /* FIXME: Skip hidden properties */
1086         if(func->func_disp_idx == -1) {
1087             *pid = func->id;
1088             return S_OK;
1089         }
1090         func++;
1091     }
1092
1093     if(This->dynamic_data && This->dynamic_data->prop_cnt) {
1094         *pid = DISPID_DYNPROP_0;
1095         return S_OK;
1096     }
1097
1098     *pid = DISPID_STARTENUM;
1099     return S_FALSE;
1100 }
1101
1102 static HRESULT WINAPI DispatchEx_GetNameSpaceParent(IDispatchEx *iface, IUnknown **ppunk)
1103 {
1104     DispatchEx *This = DISPATCHEX_THIS(iface);
1105     FIXME("(%p)->(%p)\n", This, ppunk);
1106     return E_NOTIMPL;
1107 }
1108
1109 #undef DISPATCHEX_THIS
1110
1111 static IDispatchExVtbl DispatchExVtbl = {
1112     DispatchEx_QueryInterface,
1113     DispatchEx_AddRef,
1114     DispatchEx_Release,
1115     DispatchEx_GetTypeInfoCount,
1116     DispatchEx_GetTypeInfo,
1117     DispatchEx_GetIDsOfNames,
1118     DispatchEx_Invoke,
1119     DispatchEx_GetDispID,
1120     DispatchEx_InvokeEx,
1121     DispatchEx_DeleteMemberByName,
1122     DispatchEx_DeleteMemberByDispID,
1123     DispatchEx_GetMemberProperties,
1124     DispatchEx_GetMemberName,
1125     DispatchEx_GetNextDispID,
1126     DispatchEx_GetNameSpaceParent
1127 };
1128
1129 BOOL dispex_query_interface(DispatchEx *This, REFIID riid, void **ppv)
1130 {
1131     static const IID IID_UndocumentedScriptIface =
1132         {0x719c3050,0xf9d3,0x11cf,{0xa4,0x93,0x00,0x40,0x05,0x23,0xa8,0xa0}};
1133     static const IID IID_IDispatchJS =
1134         {0x719c3050,0xf9d3,0x11cf,{0xa4,0x93,0x00,0x40,0x05,0x23,0xa8,0xa6}};
1135
1136     if(IsEqualGUID(&IID_IDispatch, riid)) {
1137         TRACE("(%p)->(IID_IDispatch %p)\n", This, ppv);
1138         *ppv = DISPATCHEX(This);
1139     }else if(IsEqualGUID(&IID_IDispatchEx, riid)) {
1140         TRACE("(%p)->(IID_IDispatchEx %p)\n", This, ppv);
1141         *ppv = DISPATCHEX(This);
1142     }else if(IsEqualGUID(&IID_IDispatchJS, riid)) {
1143         TRACE("(%p)->(IID_IDispatchJS %p) returning NULL\n", This, ppv);
1144         *ppv = NULL;
1145     }else if(IsEqualGUID(&IID_UndocumentedScriptIface, riid)) {
1146         TRACE("(%p)->(IID_UndocumentedScriptIface %p) returning NULL\n", This, ppv);
1147         *ppv = NULL;
1148     }else {
1149         return FALSE;
1150     }
1151
1152     if(*ppv)
1153         IUnknown_AddRef((IUnknown*)*ppv);
1154     return TRUE;
1155 }
1156
1157 void release_dispex(DispatchEx *This)
1158 {
1159     dynamic_prop_t *prop;
1160
1161     if(!This->dynamic_data)
1162         return;
1163
1164     for(prop = This->dynamic_data->props; prop < This->dynamic_data->props + This->dynamic_data->prop_cnt; prop++) {
1165         VariantClear(&prop->var);
1166         heap_free(prop->name);
1167     }
1168
1169     heap_free(This->dynamic_data->props);
1170
1171     if(This->dynamic_data->func_disps) {
1172         unsigned i;
1173
1174         for(i=0; i < This->data->data->func_disp_cnt; i++) {
1175             if(This->dynamic_data->func_disps[i]) {
1176                 release_dispex(&This->dynamic_data->func_disps[i]->dispex);
1177                 heap_free(This->dynamic_data->func_disps[i]);
1178             }
1179         }
1180
1181         heap_free(This->dynamic_data->func_disps);
1182     }
1183
1184     heap_free(This->dynamic_data);
1185 }
1186
1187 void init_dispex(DispatchEx *dispex, IUnknown *outer, dispex_static_data_t *data)
1188 {
1189     dispex->lpIDispatchExVtbl = &DispatchExVtbl;
1190     dispex->outer = outer;
1191     dispex->data = data;
1192     dispex->dynamic_data = NULL;
1193 }