dlls/ntdll/sync.c

   1 /*
   2  *      Process synchronisation
   3  *
   4  * Copyright 1996, 1997, 1998 Marcus Meissner
   5  * Copyright 1997, 1999 Alexandre Julliard
   6  * Copyright 1999, 2000 Juergen Schmied
   7  * Copyright 2003 Eric Pouech
   8  *
   9  * This library is free software; you can redistribute it and/or
  10  * modify it under the terms of the GNU Lesser General Public
  11  * License as published by the Free Software Foundation; either
  12  * version 2.1 of the License, or (at your option) any later version.
  13  *
  14  * This library is distributed in the hope that it will be useful,
  15  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  16  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  17  * Lesser General Public License for more details.
  18  *
  19  * You should have received a copy of the GNU Lesser General Public
  20  * License along with this library; if not, write to the Free Software
  21  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
  22  */
  23
  24 #include "config.h"
  25 #include "wine/port.h"
  26
  27 #include <assert.h>
  28 #include <errno.h>
  29 #include <signal.h>
  30 #ifdef HAVE_SYS_TIME_H
  31 # include <sys/time.h>
  32 #endif
  33 #ifdef HAVE_POLL_H
  34 #include <poll.h>
  35 #endif
  36 #ifdef HAVE_SYS_POLL_H
  37 # include <sys/poll.h>
  38 #endif
  39 #ifdef HAVE_UNISTD_H
  40 # include <unistd.h>
  41 #endif
  42 #ifdef HAVE_SCHED_H
  43 # include <sched.h>
  44 #endif
  45 #include <string.h>
  46 #include <stdarg.h>
  47 #include <stdio.h>
  48 #include <stdlib.h>
  49 #include <time.h>
  50
  51 #include "ntstatus.h"
  52 #define WIN32_NO_STATUS
  53 #define NONAMELESSUNION
  54 #include "windef.h"
  55 #include "winternl.h"
  56 #include "wine/server.h"
  57 #include "wine/debug.h"
  58 #include "ntdll_misc.h"
  59
  60 WINE_DEFAULT_DEBUG_CHANNEL(ntdll);
  61
  62 HANDLE keyed_event = NULL;
  63
  64 static inline int interlocked_dec_if_nonzero( int *dest )
  65 {
  66     int val, tmp;
  67     for (val = *dest;; val = tmp)
  68     {
  69         if (!val || (tmp = interlocked_cmpxchg( dest, val - 1, val )) == val)
  70             break;
  71     }
  72     return val;
  73 }
  74
  75 /* creates a struct security_descriptor and contained information in one contiguous piece of memory */
  76 NTSTATUS NTDLL_create_struct_sd(PSECURITY_DESCRIPTOR nt_sd, struct security_descriptor **server_sd,
  77                                 data_size_t *server_sd_len)
  78 {
  79     unsigned int len;
  80     PSID owner, group;
  81     ACL *dacl, *sacl;
  82     BOOLEAN owner_present, group_present, dacl_present, sacl_present;
  83     BOOLEAN defaulted;
  84     NTSTATUS status;
  85     unsigned char *ptr;
  86
  87     if (!nt_sd)
  88     {
  89         *server_sd = NULL;
  90         *server_sd_len = 0;
  91         return STATUS_SUCCESS;
  92     }
  93
  94     len = sizeof(struct security_descriptor);
  95
  96     status = RtlGetOwnerSecurityDescriptor(nt_sd, &owner, &owner_present);
  97     if (status != STATUS_SUCCESS) return status;
  98     status = RtlGetGroupSecurityDescriptor(nt_sd, &group, &group_present);
  99     if (status != STATUS_SUCCESS) return status;
 100     status = RtlGetSaclSecurityDescriptor(nt_sd, &sacl_present, &sacl, &defaulted);
 101     if (status != STATUS_SUCCESS) return status;
 102     status = RtlGetDaclSecurityDescriptor(nt_sd, &dacl_present, &dacl, &defaulted);
 103     if (status != STATUS_SUCCESS) return status;
 104
 105     if (owner_present)
 106         len += RtlLengthSid(owner);
 107     if (group_present)
 108         len += RtlLengthSid(group);
 109     if (sacl_present && sacl)
 110         len += sacl->AclSize;
 111     if (dacl_present && dacl)
 112         len += dacl->AclSize;
 113
 114     /* fix alignment for the Unicode name that follows the structure */
 115     len = (len + sizeof(WCHAR) - 1) & ~(sizeof(WCHAR) - 1);
 116     *server_sd = RtlAllocateHeap(GetProcessHeap(), 0, len);
 117     if (!*server_sd) return STATUS_NO_MEMORY;
 118
 119     (*server_sd)->control = ((SECURITY_DESCRIPTOR *)nt_sd)->Control & ~SE_SELF_RELATIVE;
 120     (*server_sd)->owner_len = owner_present ? RtlLengthSid(owner) : 0;
 121     (*server_sd)->group_len = group_present ? RtlLengthSid(group) : 0;
 122     (*server_sd)->sacl_len = (sacl_present && sacl) ? sacl->AclSize : 0;
 123     (*server_sd)->dacl_len = (dacl_present && dacl) ? dacl->AclSize : 0;
 124
 125     ptr = (unsigned char *)(*server_sd + 1);
 126     memcpy(ptr, owner, (*server_sd)->owner_len);
 127     ptr += (*server_sd)->owner_len;
 128     memcpy(ptr, group, (*server_sd)->group_len);
 129     ptr += (*server_sd)->group_len;
 130     memcpy(ptr, sacl, (*server_sd)->sacl_len);
 131     ptr += (*server_sd)->sacl_len;
 132     memcpy(ptr, dacl, (*server_sd)->dacl_len);
 133
 134     *server_sd_len = len;
 135
 136     return STATUS_SUCCESS;
 137 }
 138
 139 /* frees a struct security_descriptor allocated by NTDLL_create_struct_sd */
 140 void NTDLL_free_struct_sd(struct security_descriptor *server_sd)
 141 {
 142     RtlFreeHeap(GetProcessHeap(), 0, server_sd);
 143 }
 144
 145 /*
 146  *      Semaphores
 147  */
 148
 149 /******************************************************************************
 150  *  NtCreateSemaphore (NTDLL.@)
 151  */
 152 NTSTATUS WINAPI NtCreateSemaphore( OUT PHANDLE SemaphoreHandle,
 153                                    IN ACCESS_MASK access,
 154                                    IN const OBJECT_ATTRIBUTES *attr OPTIONAL,
 155                                    IN LONG InitialCount,
 156                                    IN LONG MaximumCount )
 157 {
 158     DWORD len = attr && attr->ObjectName ? attr->ObjectName->Length : 0;
 159     NTSTATUS ret;
 160     struct object_attributes objattr;
 161     struct security_descriptor *sd = NULL;
 162
 163     if (MaximumCount <= 0 || InitialCount < 0 || InitialCount > MaximumCount)
 164         return STATUS_INVALID_PARAMETER;
 165     if (len >= MAX_PATH * sizeof(WCHAR)) return STATUS_NAME_TOO_LONG;
 166
 167     objattr.rootdir = wine_server_obj_handle( attr ? attr->RootDirectory : 0 );
 168     objattr.sd_len = 0;
 169     objattr.name_len = len;
 170     if (attr)
 171     {
 172         ret = NTDLL_create_struct_sd( attr->SecurityDescriptor, &sd, &objattr.sd_len );
 173         if (ret != STATUS_SUCCESS) return ret;
 174     }
 175
 176     SERVER_START_REQ( create_semaphore )
 177     {
 178         req->access  = access;
 179         req->attributes = (attr) ? attr->Attributes : 0;
 180         req->initial = InitialCount;
 181         req->max     = MaximumCount;
 182         wine_server_add_data( req, &objattr, sizeof(objattr) );
 183         if (objattr.sd_len) wine_server_add_data( req, sd, objattr.sd_len );
 184         if (len) wine_server_add_data( req, attr->ObjectName->Buffer, len );
 185         ret = wine_server_call( req );
 186         *SemaphoreHandle = wine_server_ptr_handle( reply->handle );
 187     }
 188     SERVER_END_REQ;
 189
 190     NTDLL_free_struct_sd( sd );
 191
 192     return ret;
 193 }
 194
 195 /******************************************************************************
 196  *  NtOpenSemaphore (NTDLL.@)
 197  */
 198 NTSTATUS WINAPI NtOpenSemaphore( OUT PHANDLE SemaphoreHandle,
 199                                  IN ACCESS_MASK access,
 200                                  IN const OBJECT_ATTRIBUTES *attr )
 201 {
 202     DWORD len = attr && attr->ObjectName ? attr->ObjectName->Length : 0;
 203     NTSTATUS ret;
 204
 205     if (len >= MAX_PATH * sizeof(WCHAR)) return STATUS_NAME_TOO_LONG;
 206
 207     SERVER_START_REQ( open_semaphore )
 208     {
 209         req->access  = access;
 210         req->attributes = (attr) ? attr->Attributes : 0;
 211         req->rootdir = wine_server_obj_handle( attr ? attr->RootDirectory : 0 );
 212         if (len) wine_server_add_data( req, attr->ObjectName->Buffer, len );
 213         ret = wine_server_call( req );
 214         *SemaphoreHandle = wine_server_ptr_handle( reply->handle );
 215     }
 216     SERVER_END_REQ;
 217     return ret;
 218 }
 219
 220 /******************************************************************************
 221  *  NtQuerySemaphore (NTDLL.@)
 222  */
 223 NTSTATUS WINAPI NtQuerySemaphore( HANDLE handle, SEMAPHORE_INFORMATION_CLASS class,
 224                                   void *info, ULONG len, ULONG *ret_len )
 225 {
 226     NTSTATUS ret;
 227     SEMAPHORE_BASIC_INFORMATION *out = info;
 228
 229     if (class != SemaphoreBasicInformation)
 230     {
 231         FIXME("(%p,%d,%u) Unknown class\n", handle, class, len);
 232         return STATUS_INVALID_INFO_CLASS;
 233     }
 234
 235     if (len != sizeof(SEMAPHORE_BASIC_INFORMATION)) return STATUS_INFO_LENGTH_MISMATCH;
 236
 237     SERVER_START_REQ( query_semaphore )
 238     {
 239         req->handle = wine_server_obj_handle( handle );
 240         if (!(ret = wine_server_call( req )))
 241         {
 242             out->CurrentCount = reply->current;
 243             out->MaximumCount = reply->max;
 244             if (ret_len) *ret_len = sizeof(SEMAPHORE_BASIC_INFORMATION);
 245         }
 246     }
 247     SERVER_END_REQ;
 248
 249     return ret;
 250 }
 251
 252 /******************************************************************************
 253  *  NtReleaseSemaphore (NTDLL.@)
 254  */
 255 NTSTATUS WINAPI NtReleaseSemaphore( HANDLE handle, ULONG count, PULONG previous )
 256 {
 257     NTSTATUS ret;
 258     SERVER_START_REQ( release_semaphore )
 259     {
 260         req->handle = wine_server_obj_handle( handle );
 261         req->count  = count;
 262         if (!(ret = wine_server_call( req )))
 263         {
 264             if (previous) *previous = reply->prev_count;
 265         }
 266     }
 267     SERVER_END_REQ;
 268     return ret;
 269 }
 270
 271 /*
 272  *      Events
 273  */
 274
 275 /**************************************************************************
 276  * NtCreateEvent (NTDLL.@)
 277  * ZwCreateEvent (NTDLL.@)
 278  */
 279 NTSTATUS WINAPI NtCreateEvent( PHANDLE EventHandle, ACCESS_MASK DesiredAccess,
 280                                const OBJECT_ATTRIBUTES *attr, EVENT_TYPE type, BOOLEAN InitialState)
 281 {
 282     DWORD len = attr && attr->ObjectName ? attr->ObjectName->Length : 0;
 283     NTSTATUS ret;
 284     struct security_descriptor *sd = NULL;
 285     struct object_attributes objattr;
 286
 287     if (len >= MAX_PATH * sizeof(WCHAR)) return STATUS_NAME_TOO_LONG;
 288
 289     objattr.rootdir = wine_server_obj_handle( attr ? attr->RootDirectory : 0 );
 290     objattr.sd_len = 0;
 291     objattr.name_len = len;
 292     if (attr)
 293     {
 294         ret = NTDLL_create_struct_sd( attr->SecurityDescriptor, &sd, &objattr.sd_len );
 295         if (ret != STATUS_SUCCESS) return ret;
 296     }
 297
 298     SERVER_START_REQ( create_event )
 299     {
 300         req->access = DesiredAccess;
 301         req->attributes = (attr) ? attr->Attributes : 0;
 302         req->manual_reset = (type == NotificationEvent);
 303         req->initial_state = InitialState;
 304         wine_server_add_data( req, &objattr, sizeof(objattr) );
 305         if (objattr.sd_len) wine_server_add_data( req, sd, objattr.sd_len );
 306         if (len) wine_server_add_data( req, attr->ObjectName->Buffer, len );
 307         ret = wine_server_call( req );
 308         *EventHandle = wine_server_ptr_handle( reply->handle );
 309     }
 310     SERVER_END_REQ;
 311
 312     NTDLL_free_struct_sd( sd );
 313
 314     return ret;
 315 }
 316
 317 /******************************************************************************
 318  *  NtOpenEvent (NTDLL.@)
 319  *  ZwOpenEvent (NTDLL.@)
 320  */
 321 NTSTATUS WINAPI NtOpenEvent(
 322         OUT PHANDLE EventHandle,
 323         IN ACCESS_MASK DesiredAccess,
 324         IN const OBJECT_ATTRIBUTES *attr )
 325 {
 326     DWORD len = attr && attr->ObjectName ? attr->ObjectName->Length : 0;
 327     NTSTATUS ret;
 328
 329     if (len >= MAX_PATH * sizeof(WCHAR)) return STATUS_NAME_TOO_LONG;
 330
 331     SERVER_START_REQ( open_event )
 332     {
 333         req->access  = DesiredAccess;
 334         req->attributes = (attr) ? attr->Attributes : 0;
 335         req->rootdir = wine_server_obj_handle( attr ? attr->RootDirectory : 0 );
 336         if (len) wine_server_add_data( req, attr->ObjectName->Buffer, len );
 337         ret = wine_server_call( req );
 338         *EventHandle = wine_server_ptr_handle( reply->handle );
 339     }
 340     SERVER_END_REQ;
 341     return ret;
 342 }
 343
 344
 345 /******************************************************************************
 346  *  NtSetEvent (NTDLL.@)
 347  *  ZwSetEvent (NTDLL.@)
 348  */
 349 NTSTATUS WINAPI NtSetEvent( HANDLE handle, PULONG NumberOfThreadsReleased )
 350 {
 351     NTSTATUS ret;
 352
 353     /* FIXME: set NumberOfThreadsReleased */
 354
 355     SERVER_START_REQ( event_op )
 356     {
 357         req->handle = wine_server_obj_handle( handle );
 358         req->op     = SET_EVENT;
 359         ret = wine_server_call( req );
 360     }
 361     SERVER_END_REQ;
 362     return ret;
 363 }
 364
 365 /******************************************************************************
 366  *  NtResetEvent (NTDLL.@)
 367  */
 368 NTSTATUS WINAPI NtResetEvent( HANDLE handle, PULONG NumberOfThreadsReleased )
 369 {
 370     NTSTATUS ret;
 371
 372     /* resetting an event can't release any thread... */
 373     if (NumberOfThreadsReleased) *NumberOfThreadsReleased = 0;
 374
 375     SERVER_START_REQ( event_op )
 376     {
 377         req->handle = wine_server_obj_handle( handle );
 378         req->op     = RESET_EVENT;
 379         ret = wine_server_call( req );
 380     }
 381     SERVER_END_REQ;
 382     return ret;
 383 }
 384
 385 /******************************************************************************
 386  *  NtClearEvent (NTDLL.@)
 387  *
 388  * FIXME
 389  *   same as NtResetEvent ???
 390  */
 391 NTSTATUS WINAPI NtClearEvent ( HANDLE handle )
 392 {
 393     return NtResetEvent( handle, NULL );
 394 }
 395
 396 /******************************************************************************
 397  *  NtPulseEvent (NTDLL.@)
 398  *
 399  * FIXME
 400  *   PulseCount
 401  */
 402 NTSTATUS WINAPI NtPulseEvent( HANDLE handle, PULONG PulseCount )
 403 {
 404     NTSTATUS ret;
 405
 406     if (PulseCount)
 407       FIXME("(%p,%d)\n", handle, *PulseCount);
 408
 409     SERVER_START_REQ( event_op )
 410     {
 411         req->handle = wine_server_obj_handle( handle );
 412         req->op     = PULSE_EVENT;
 413         ret = wine_server_call( req );
 414     }
 415     SERVER_END_REQ;
 416     return ret;
 417 }
 418
 419 /******************************************************************************
 420  *  NtQueryEvent (NTDLL.@)
 421  */
 422 NTSTATUS WINAPI NtQueryEvent( HANDLE handle, EVENT_INFORMATION_CLASS class,
 423                               void *info, ULONG len, ULONG *ret_len )
 424 {
 425     NTSTATUS ret;
 426     EVENT_BASIC_INFORMATION *out = info;
 427
 428     if (class != EventBasicInformation)
 429     {
 430         FIXME("(%p, %d, %d) Unknown class\n",
 431               handle, class, len);
 432         return STATUS_INVALID_INFO_CLASS;
 433     }
 434
 435     if (len != sizeof(EVENT_BASIC_INFORMATION)) return STATUS_INFO_LENGTH_MISMATCH;
 436
 437     SERVER_START_REQ( query_event )
 438     {
 439         req->handle = wine_server_obj_handle( handle );
 440         if (!(ret = wine_server_call( req )))
 441         {
 442             out->EventType  = reply->manual_reset ? NotificationEvent : SynchronizationEvent;
 443             out->EventState = reply->state;
 444             if (ret_len) *ret_len = sizeof(EVENT_BASIC_INFORMATION);
 445         }
 446     }
 447     SERVER_END_REQ;
 448
 449     return ret;
 450 }
 451
 452 /*
 453  *      Mutants (known as Mutexes in Kernel32)
 454  */
 455
 456 /******************************************************************************
 457  *              NtCreateMutant                          [NTDLL.@]
 458  *              ZwCreateMutant                          [NTDLL.@]
 459  */
 460 NTSTATUS WINAPI NtCreateMutant(OUT HANDLE* MutantHandle,
 461                                IN ACCESS_MASK access,
 462                                IN const OBJECT_ATTRIBUTES* attr OPTIONAL,
 463                                IN BOOLEAN InitialOwner)
 464 {
 465     NTSTATUS status;
 466     DWORD len = attr && attr->ObjectName ? attr->ObjectName->Length : 0;
 467     struct security_descriptor *sd = NULL;
 468     struct object_attributes objattr;
 469
 470     if (len >= MAX_PATH * sizeof(WCHAR)) return STATUS_NAME_TOO_LONG;
 471
 472     objattr.rootdir = wine_server_obj_handle( attr ? attr->RootDirectory : 0 );
 473     objattr.sd_len = 0;
 474     objattr.name_len = len;
 475     if (attr)
 476     {
 477         status = NTDLL_create_struct_sd( attr->SecurityDescriptor, &sd, &objattr.sd_len );
 478         if (status != STATUS_SUCCESS) return status;
 479     }
 480
 481     SERVER_START_REQ( create_mutex )
 482     {
 483         req->access  = access;
 484         req->attributes = (attr) ? attr->Attributes : 0;
 485         req->owned   = InitialOwner;
 486         wine_server_add_data( req, &objattr, sizeof(objattr) );
 487         if (objattr.sd_len) wine_server_add_data( req, sd, objattr.sd_len );
 488         if (len) wine_server_add_data( req, attr->ObjectName->Buffer, len );
 489         status = wine_server_call( req );
 490         *MutantHandle = wine_server_ptr_handle( reply->handle );
 491     }
 492     SERVER_END_REQ;
 493
 494     NTDLL_free_struct_sd( sd );
 495
 496     return status;
 497 }
 498
 499 /**************************************************************************
 500  *              NtOpenMutant                            [NTDLL.@]
 501  *              ZwOpenMutant                            [NTDLL.@]
 502  */
 503 NTSTATUS WINAPI NtOpenMutant(OUT HANDLE* MutantHandle,
 504                              IN ACCESS_MASK access,
 505                              IN const OBJECT_ATTRIBUTES* attr )
 506 {
 507     NTSTATUS    status;
 508     DWORD       len = attr && attr->ObjectName ? attr->ObjectName->Length : 0;
 509
 510     if (len >= MAX_PATH * sizeof(WCHAR)) return STATUS_NAME_TOO_LONG;
 511
 512     SERVER_START_REQ( open_mutex )
 513     {
 514         req->access  = access;
 515         req->attributes = (attr) ? attr->Attributes : 0;
 516         req->rootdir = wine_server_obj_handle( attr ? attr->RootDirectory : 0 );
 517         if (len) wine_server_add_data( req, attr->ObjectName->Buffer, len );
 518         status = wine_server_call( req );
 519         *MutantHandle = wine_server_ptr_handle( reply->handle );
 520     }
 521     SERVER_END_REQ;
 522     return status;
 523 }
 524
 525 /**************************************************************************
 526  *              NtReleaseMutant                         [NTDLL.@]
 527  *              ZwReleaseMutant                         [NTDLL.@]
 528  */
 529 NTSTATUS WINAPI NtReleaseMutant( IN HANDLE handle, OUT PLONG prev_count OPTIONAL)
 530 {
 531     NTSTATUS    status;
 532
 533     SERVER_START_REQ( release_mutex )
 534     {
 535         req->handle = wine_server_obj_handle( handle );
 536         status = wine_server_call( req );
 537         if (prev_count) *prev_count = reply->prev_count;
 538     }
 539     SERVER_END_REQ;
 540     return status;
 541 }
 542
 543 /******************************************************************
 544  *              NtQueryMutant                   [NTDLL.@]
 545  *              ZwQueryMutant                   [NTDLL.@]
 546  */
 547 NTSTATUS WINAPI NtQueryMutant(IN HANDLE handle,
 548                               IN MUTANT_INFORMATION_CLASS MutantInformationClass,
 549                               OUT PVOID MutantInformation,
 550                               IN ULONG MutantInformationLength,
 551                               OUT PULONG ResultLength OPTIONAL )
 552 {
 553     FIXME("(%p %u %p %u %p): stub!\n",
 554           handle, MutantInformationClass, MutantInformation, MutantInformationLength, ResultLength);
 555     return STATUS_NOT_IMPLEMENTED;
 556 }
 557
 558 /*
 559  *      Jobs
 560  */
 561
 562 /******************************************************************************
 563  *              NtCreateJobObject   [NTDLL.@]
 564  *              ZwCreateJobObject   [NTDLL.@]
 565  */
 566 NTSTATUS WINAPI NtCreateJobObject( PHANDLE handle, ACCESS_MASK access, const OBJECT_ATTRIBUTES *attr )
 567 {
 568     FIXME( "stub: %p %x %s\n", handle, access, attr ? debugstr_us(attr->ObjectName) : "" );
 569     *handle = (HANDLE)0xdead;
 570     return STATUS_SUCCESS;
 571 }
 572
 573 /******************************************************************************
 574  *              NtOpenJobObject   [NTDLL.@]
 575  *              ZwOpenJobObject   [NTDLL.@]
 576  */
 577 NTSTATUS WINAPI NtOpenJobObject( PHANDLE handle, ACCESS_MASK access, const OBJECT_ATTRIBUTES *attr )
 578 {
 579     FIXME( "stub: %p %x %s\n", handle, access, attr ? debugstr_us(attr->ObjectName) : "" );
 580     return STATUS_NOT_IMPLEMENTED;
 581 }
 582
 583 /******************************************************************************
 584  *              NtTerminateJobObject   [NTDLL.@]
 585  *              ZwTerminateJobObject   [NTDLL.@]
 586  */
 587 NTSTATUS WINAPI NtTerminateJobObject( HANDLE handle, NTSTATUS status )
 588 {
 589     FIXME( "stub: %p %x\n", handle, status );
 590     return STATUS_SUCCESS;
 591 }
 592
 593 /******************************************************************************
 594  *              NtQueryInformationJobObject   [NTDLL.@]
 595  *              ZwQueryInformationJobObject   [NTDLL.@]
 596  */
 597 NTSTATUS WINAPI NtQueryInformationJobObject( HANDLE handle, JOBOBJECTINFOCLASS class, PVOID info,
 598                                              ULONG len, PULONG ret_len )
 599 {
 600     FIXME( "stub: %p %u %p %u %p\n", handle, class, info, len, ret_len );
 601     return STATUS_NOT_IMPLEMENTED;
 602 }
 603
 604 /******************************************************************************
 605  *              NtSetInformationJobObject   [NTDLL.@]
 606  *              ZwSetInformationJobObject   [NTDLL.@]
 607  */
 608 NTSTATUS WINAPI NtSetInformationJobObject( HANDLE handle, JOBOBJECTINFOCLASS class, PVOID info, ULONG len )
 609 {
 610     FIXME( "stub: %p %u %p %u\n", handle, class, info, len );
 611     return STATUS_SUCCESS;
 612 }
 613
 614 /******************************************************************************
 615  *              NtIsProcessInJob   [NTDLL.@]
 616  *              ZwIsProcessInJob   [NTDLL.@]
 617  */
 618 NTSTATUS WINAPI NtIsProcessInJob( HANDLE process, HANDLE job )
 619 {
 620     FIXME( "stub: %p %p\n", process, job );
 621     return STATUS_PROCESS_NOT_IN_JOB;
 622 }
 623
 624 /******************************************************************************
 625  *              NtAssignProcessToJobObject   [NTDLL.@]
 626  *              ZwAssignProcessToJobObject   [NTDLL.@]
 627  */
 628 NTSTATUS WINAPI NtAssignProcessToJobObject( HANDLE job, HANDLE process )
 629 {
 630     FIXME( "stub: %p %p\n", job, process );
 631     return STATUS_SUCCESS;
 632 }
 633
 634 /*
 635  *      Timers
 636  */
 637
 638 /**************************************************************************
 639  *              NtCreateTimer                           [NTDLL.@]
 640  *              ZwCreateTimer                           [NTDLL.@]
 641  */
 642 NTSTATUS WINAPI NtCreateTimer(OUT HANDLE *handle,
 643                               IN ACCESS_MASK access,
 644                               IN const OBJECT_ATTRIBUTES *attr OPTIONAL,
 645                               IN TIMER_TYPE timer_type)
 646 {
 647     DWORD       len = (attr && attr->ObjectName) ? attr->ObjectName->Length : 0;
 648     NTSTATUS    status;
 649
 650     if (len >= MAX_PATH * sizeof(WCHAR)) return STATUS_NAME_TOO_LONG;
 651
 652     if (timer_type != NotificationTimer && timer_type != SynchronizationTimer)
 653         return STATUS_INVALID_PARAMETER;
 654
 655     SERVER_START_REQ( create_timer )
 656     {
 657         req->access  = access;
 658         req->attributes = (attr) ? attr->Attributes : 0;
 659         req->rootdir = wine_server_obj_handle( attr ? attr->RootDirectory : 0 );
 660         req->manual  = (timer_type == NotificationTimer);
 661         if (len) wine_server_add_data( req, attr->ObjectName->Buffer, len );
 662         status = wine_server_call( req );
 663         *handle = wine_server_ptr_handle( reply->handle );
 664     }
 665     SERVER_END_REQ;
 666     return status;
 667
 668 }
 669
 670 /**************************************************************************
 671  *              NtOpenTimer                             [NTDLL.@]
 672  *              ZwOpenTimer                             [NTDLL.@]
 673  */
 674 NTSTATUS WINAPI NtOpenTimer(OUT PHANDLE handle,
 675                             IN ACCESS_MASK access,
 676                             IN const OBJECT_ATTRIBUTES* attr )
 677 {
 678     DWORD       len = (attr && attr->ObjectName) ? attr->ObjectName->Length : 0;
 679     NTSTATUS    status;
 680
 681     if (len >= MAX_PATH * sizeof(WCHAR)) return STATUS_NAME_TOO_LONG;
 682
 683     SERVER_START_REQ( open_timer )
 684     {
 685         req->access  = access;
 686         req->attributes = (attr) ? attr->Attributes : 0;
 687         req->rootdir = wine_server_obj_handle( attr ? attr->RootDirectory : 0 );
 688         if (len) wine_server_add_data( req, attr->ObjectName->Buffer, len );
 689         status = wine_server_call( req );
 690         *handle = wine_server_ptr_handle( reply->handle );
 691     }
 692     SERVER_END_REQ;
 693     return status;
 694 }
 695
 696 /**************************************************************************
 697  *              NtSetTimer                              [NTDLL.@]
 698  *              ZwSetTimer                              [NTDLL.@]
 699  */
 700 NTSTATUS WINAPI NtSetTimer(IN HANDLE handle,
 701                            IN const LARGE_INTEGER* when,
 702                            IN PTIMER_APC_ROUTINE callback,
 703                            IN PVOID callback_arg,
 704                            IN BOOLEAN resume,
 705                            IN ULONG period OPTIONAL,
 706                            OUT PBOOLEAN state OPTIONAL)
 707 {
 708     NTSTATUS    status = STATUS_SUCCESS;
 709
 710     TRACE("(%p,%p,%p,%p,%08x,0x%08x,%p) stub\n",
 711           handle, when, callback, callback_arg, resume, period, state);
 712
 713     SERVER_START_REQ( set_timer )
 714     {
 715         req->handle   = wine_server_obj_handle( handle );
 716         req->period   = period;
 717         req->expire   = when->QuadPart;
 718         req->callback = wine_server_client_ptr( callback );
 719         req->arg      = wine_server_client_ptr( callback_arg );
 720         status = wine_server_call( req );
 721         if (state) *state = reply->signaled;
 722     }
 723     SERVER_END_REQ;
 724
 725     /* set error but can still succeed */
 726     if (resume && status == STATUS_SUCCESS) return STATUS_TIMER_RESUME_IGNORED;
 727     return status;
 728 }
 729
 730 /**************************************************************************
 731  *              NtCancelTimer                           [NTDLL.@]
 732  *              ZwCancelTimer                           [NTDLL.@]
 733  */
 734 NTSTATUS WINAPI NtCancelTimer(IN HANDLE handle, OUT BOOLEAN* state)
 735 {
 736     NTSTATUS    status;
 737
 738     SERVER_START_REQ( cancel_timer )
 739     {
 740         req->handle = wine_server_obj_handle( handle );
 741         status = wine_server_call( req );
 742         if (state) *state = reply->signaled;
 743     }
 744     SERVER_END_REQ;
 745     return status;
 746 }
 747
 748 /******************************************************************************
 749  *  NtQueryTimer (NTDLL.@)
 750  *
 751  * Retrieves information about a timer.
 752  *
 753  * PARAMS
 754  *  TimerHandle           [I] The timer to retrieve information about.
 755  *  TimerInformationClass [I] The type of information to retrieve.
 756  *  TimerInformation      [O] Pointer to buffer to store information in.
 757  *  Length                [I] The length of the buffer pointed to by TimerInformation.
 758  *  ReturnLength          [O] Optional. The size of buffer actually used.
 759  *
 760  * RETURNS
 761  *  Success: STATUS_SUCCESS
 762  *  Failure: STATUS_INFO_LENGTH_MISMATCH, if Length doesn't match the required data
 763  *           size for the class specified.
 764  *           STATUS_INVALID_INFO_CLASS, if an invalid TimerInformationClass was specified.
 765  *           STATUS_ACCESS_DENIED, if TimerHandle does not have TIMER_QUERY_STATE access
 766  *           to the timer.
 767  */
 768 NTSTATUS WINAPI NtQueryTimer(
 769     HANDLE TimerHandle,
 770     TIMER_INFORMATION_CLASS TimerInformationClass,
 771     PVOID TimerInformation,
 772     ULONG Length,
 773     PULONG ReturnLength)
 774 {
 775     TIMER_BASIC_INFORMATION * basic_info = TimerInformation;
 776     NTSTATUS status;
 777     LARGE_INTEGER now;
 778
 779     TRACE("(%p,%d,%p,0x%08x,%p)\n", TimerHandle, TimerInformationClass,
 780        TimerInformation, Length, ReturnLength);
 781
 782     switch (TimerInformationClass)
 783     {
 784     case TimerBasicInformation:
 785         if (Length < sizeof(TIMER_BASIC_INFORMATION))
 786             return STATUS_INFO_LENGTH_MISMATCH;
 787
 788         SERVER_START_REQ(get_timer_info)
 789         {
 790             req->handle = wine_server_obj_handle( TimerHandle );
 791             status = wine_server_call(req);
 792
 793             /* convert server time to absolute NTDLL time */
 794             basic_info->RemainingTime.QuadPart = reply->when;
 795             basic_info->TimerState = reply->signaled;
 796         }
 797         SERVER_END_REQ;
 798
 799         /* convert from absolute into relative time */
 800         NtQuerySystemTime(&now);
 801         if (now.QuadPart > basic_info->RemainingTime.QuadPart)
 802             basic_info->RemainingTime.QuadPart = 0;
 803         else
 804             basic_info->RemainingTime.QuadPart -= now.QuadPart;
 805
 806         if (ReturnLength) *ReturnLength = sizeof(TIMER_BASIC_INFORMATION);
 807
 808         return status;
 809     }
 810
 811     FIXME("Unhandled class %d\n", TimerInformationClass);
 812     return STATUS_INVALID_INFO_CLASS;
 813 }
 814
 815
 816 /******************************************************************************
 817  * NtQueryTimerResolution [NTDLL.@]
 818  */
 819 NTSTATUS WINAPI NtQueryTimerResolution(OUT ULONG* min_resolution,
 820                                        OUT ULONG* max_resolution,
 821                                        OUT ULONG* current_resolution)
 822 {
 823     FIXME("(%p,%p,%p), stub!\n",
 824           min_resolution, max_resolution, current_resolution);
 825
 826     return STATUS_NOT_IMPLEMENTED;
 827 }
 828
 829 /******************************************************************************
 830  * NtSetTimerResolution [NTDLL.@]
 831  */
 832 NTSTATUS WINAPI NtSetTimerResolution(IN ULONG resolution,
 833                                      IN BOOLEAN set_resolution,
 834                                      OUT ULONG* current_resolution )
 835 {
 836     FIXME("(%u,%u,%p), stub!\n",
 837           resolution, set_resolution, current_resolution);
 838
 839     return STATUS_NOT_IMPLEMENTED;
 840 }
 841
 842
 843
 844 /* wait operations */
 845
 846 /******************************************************************
 847  *              NtWaitForMultipleObjects (NTDLL.@)
 848  */
 849 NTSTATUS WINAPI NtWaitForMultipleObjects( DWORD count, const HANDLE *handles,
 850                                           BOOLEAN wait_any, BOOLEAN alertable,
 851                                           const LARGE_INTEGER *timeout )
 852 {
 853     select_op_t select_op;
 854     UINT i, flags = SELECT_INTERRUPTIBLE;
 855
 856     if (!count || count > MAXIMUM_WAIT_OBJECTS) return STATUS_INVALID_PARAMETER_1;
 857
 858     if (alertable) flags |= SELECT_ALERTABLE;
 859     select_op.wait.op = wait_any ? SELECT_WAIT : SELECT_WAIT_ALL;
 860     for (i = 0; i < count; i++) select_op.wait.handles[i] = wine_server_obj_handle( handles[i] );
 861     return server_select( &select_op, offsetof( select_op_t, wait.handles[count] ), flags, timeout );
 862 }
 863
 864
 865 /******************************************************************
 866  *              NtWaitForSingleObject (NTDLL.@)
 867  */
 868 NTSTATUS WINAPI NtWaitForSingleObject(HANDLE handle, BOOLEAN alertable, const LARGE_INTEGER *timeout )
 869 {
 870     return NtWaitForMultipleObjects( 1, &handle, FALSE, alertable, timeout );
 871 }
 872
 873
 874 /******************************************************************
 875  *              NtSignalAndWaitForSingleObject (NTDLL.@)
 876  */
 877 NTSTATUS WINAPI NtSignalAndWaitForSingleObject( HANDLE hSignalObject, HANDLE hWaitObject,
 878                                                 BOOLEAN alertable, const LARGE_INTEGER *timeout )
 879 {
 880     select_op_t select_op;
 881     UINT flags = SELECT_INTERRUPTIBLE;
 882
 883     if (!hSignalObject) return STATUS_INVALID_HANDLE;
 884
 885     if (alertable) flags |= SELECT_ALERTABLE;
 886     select_op.signal_and_wait.op = SELECT_SIGNAL_AND_WAIT;
 887     select_op.signal_and_wait.wait = wine_server_obj_handle( hWaitObject );
 888     select_op.signal_and_wait.signal = wine_server_obj_handle( hSignalObject );
 889     return server_select( &select_op, sizeof(select_op.signal_and_wait), flags, timeout );
 890 }
 891
 892
 893 /******************************************************************
 894  *              NtYieldExecution (NTDLL.@)
 895  */
 896 NTSTATUS WINAPI NtYieldExecution(void)
 897 {
 898 #ifdef HAVE_SCHED_YIELD
 899     sched_yield();
 900     return STATUS_SUCCESS;
 901 #else
 902     return STATUS_NO_YIELD_PERFORMED;
 903 #endif
 904 }
 905
 906
 907 /******************************************************************
 908  *              NtDelayExecution (NTDLL.@)
 909  */
 910 NTSTATUS WINAPI NtDelayExecution( BOOLEAN alertable, const LARGE_INTEGER *timeout )
 911 {
 912     /* if alertable, we need to query the server */
 913     if (alertable)
 914         return server_select( NULL, 0, SELECT_INTERRUPTIBLE | SELECT_ALERTABLE, timeout );
 915
 916     if (!timeout || timeout->QuadPart == TIMEOUT_INFINITE)  /* sleep forever */
 917     {
 918         for (;;) select( 0, NULL, NULL, NULL, NULL );
 919     }
 920     else
 921     {
 922         LARGE_INTEGER now;
 923         timeout_t when, diff;
 924
 925         if ((when = timeout->QuadPart) < 0)
 926         {
 927             NtQuerySystemTime( &now );
 928             when = now.QuadPart - when;
 929         }
 930
 931         /* Note that we yield after establishing the desired timeout */
 932         NtYieldExecution();
 933         if (!when) return STATUS_SUCCESS;
 934
 935         for (;;)
 936         {
 937             struct timeval tv;
 938             NtQuerySystemTime( &now );
 939             diff = (when - now.QuadPart + 9) / 10;
 940             if (diff <= 0) break;
 941             tv.tv_sec  = diff / 1000000;
 942             tv.tv_usec = diff % 1000000;
 943             if (select( 0, NULL, NULL, NULL, &tv ) != -1) break;
 944         }
 945     }
 946     return STATUS_SUCCESS;
 947 }
 948
 949
 950 /******************************************************************************
 951  *              NtCreateKeyedEvent (NTDLL.@)
 952  */
 953 NTSTATUS WINAPI NtCreateKeyedEvent( HANDLE *handle, ACCESS_MASK access,
 954                                     const OBJECT_ATTRIBUTES *attr, ULONG flags )
 955 {
 956     DWORD len = attr && attr->ObjectName ? attr->ObjectName->Length : 0;
 957     NTSTATUS ret;
 958     struct security_descriptor *sd = NULL;
 959     struct object_attributes objattr;
 960
 961     if (len >= MAX_PATH * sizeof(WCHAR)) return STATUS_NAME_TOO_LONG;
 962
 963     objattr.rootdir = wine_server_obj_handle( attr ? attr->RootDirectory : 0 );
 964     objattr.sd_len = 0;
 965     objattr.name_len = len;
 966     if (attr)
 967     {
 968         ret = NTDLL_create_struct_sd( attr->SecurityDescriptor, &sd, &objattr.sd_len );
 969         if (ret != STATUS_SUCCESS) return ret;
 970     }
 971
 972     SERVER_START_REQ( create_keyed_event )
 973     {
 974         req->access = access;
 975         req->attributes = attr ? attr->Attributes : 0;
 976         wine_server_add_data( req, &objattr, sizeof(objattr) );
 977         if (objattr.sd_len) wine_server_add_data( req, sd, objattr.sd_len );
 978         if (len) wine_server_add_data( req, attr->ObjectName->Buffer, len );
 979         ret = wine_server_call( req );
 980         *handle = wine_server_ptr_handle( reply->handle );
 981     }
 982     SERVER_END_REQ;
 983
 984     NTDLL_free_struct_sd( sd );
 985     return ret;
 986 }
 987
 988 /******************************************************************************
 989  *              NtOpenKeyedEvent (NTDLL.@)
 990  */
 991 NTSTATUS WINAPI NtOpenKeyedEvent( HANDLE *handle, ACCESS_MASK access, const OBJECT_ATTRIBUTES *attr )
 992 {
 993     DWORD len = attr && attr->ObjectName ? attr->ObjectName->Length : 0;
 994     NTSTATUS ret;
 995
 996     if (len >= MAX_PATH * sizeof(WCHAR)) return STATUS_NAME_TOO_LONG;
 997
 998     SERVER_START_REQ( open_keyed_event )
 999     {
1000         req->access  = access;
1001         req->attributes = attr ? attr->Attributes : 0;
1002         req->rootdir = wine_server_obj_handle( attr ? attr->RootDirectory : 0 );
1003         if (len) wine_server_add_data( req, attr->ObjectName->Buffer, len );
1004         ret = wine_server_call( req );
1005         *handle = wine_server_ptr_handle( reply->handle );
1006     }
1007     SERVER_END_REQ;
1008     return ret;
1009 }
1010
1011 /******************************************************************************
1012  *              NtWaitForKeyedEvent (NTDLL.@)
1013  */
1014 NTSTATUS WINAPI NtWaitForKeyedEvent( HANDLE handle, const void *key,
1015                                      BOOLEAN alertable, const LARGE_INTEGER *timeout )
1016 {
1017     select_op_t select_op;
1018     UINT flags = SELECT_INTERRUPTIBLE;
1019
1020     if ((ULONG_PTR)key & 1) return STATUS_INVALID_PARAMETER_1;
1021     if (alertable) flags |= SELECT_ALERTABLE;
1022     select_op.keyed_event.op     = SELECT_KEYED_EVENT_WAIT;
1023     select_op.keyed_event.handle = wine_server_obj_handle( handle );
1024     select_op.keyed_event.key    = wine_server_client_ptr( key );
1025     return server_select( &select_op, sizeof(select_op.keyed_event), flags, timeout );
1026 }
1027
1028 /******************************************************************************
1029  *              NtReleaseKeyedEvent (NTDLL.@)
1030  */
1031 NTSTATUS WINAPI NtReleaseKeyedEvent( HANDLE handle, const void *key,
1032                                      BOOLEAN alertable, const LARGE_INTEGER *timeout )
1033 {
1034     select_op_t select_op;
1035     UINT flags = SELECT_INTERRUPTIBLE;
1036
1037     if ((ULONG_PTR)key & 1) return STATUS_INVALID_PARAMETER_1;
1038     if (alertable) flags |= SELECT_ALERTABLE;
1039     select_op.keyed_event.op     = SELECT_KEYED_EVENT_RELEASE;
1040     select_op.keyed_event.handle = wine_server_obj_handle( handle );
1041     select_op.keyed_event.key    = wine_server_client_ptr( key );
1042     return server_select( &select_op, sizeof(select_op.keyed_event), flags, timeout );
1043 }
1044
1045 /******************************************************************
1046  *              NtCreateIoCompletion (NTDLL.@)
1047  *              ZwCreateIoCompletion (NTDLL.@)
1048  *
1049  * Creates I/O completion object.
1050  *
1051  * PARAMS
1052  *      CompletionPort            [O] created completion object handle will be placed there
1053  *      DesiredAccess             [I] desired access to a handle (combination of IO_COMPLETION_*)
1054  *      ObjectAttributes          [I] completion object attributes
1055  *      NumberOfConcurrentThreads [I] desired number of concurrent active worker threads
1056  *
1057  */
1058 NTSTATUS WINAPI NtCreateIoCompletion( PHANDLE CompletionPort, ACCESS_MASK DesiredAccess,
1059                                       POBJECT_ATTRIBUTES ObjectAttributes, ULONG NumberOfConcurrentThreads )
1060 {
1061     NTSTATUS status;
1062
1063     TRACE("(%p, %x, %p, %d)\n", CompletionPort, DesiredAccess,
1064           ObjectAttributes, NumberOfConcurrentThreads);
1065
1066     if (!CompletionPort)
1067         return STATUS_INVALID_PARAMETER;
1068
1069     SERVER_START_REQ( create_completion )
1070     {
1071         req->access     = DesiredAccess;
1072         req->attributes = ObjectAttributes ? ObjectAttributes->Attributes : 0;
1073         req->rootdir    = wine_server_obj_handle( ObjectAttributes ? ObjectAttributes->RootDirectory : 0 );
1074         req->concurrent = NumberOfConcurrentThreads;
1075         if (ObjectAttributes && ObjectAttributes->ObjectName)
1076             wine_server_add_data( req, ObjectAttributes->ObjectName->Buffer,
1077                                        ObjectAttributes->ObjectName->Length );
1078         if (!(status = wine_server_call( req )))
1079             *CompletionPort = wine_server_ptr_handle( reply->handle );
1080     }
1081     SERVER_END_REQ;
1082     return status;
1083 }
1084
1085 /******************************************************************
1086  *              NtSetIoCompletion (NTDLL.@)
1087  *              ZwSetIoCompletion (NTDLL.@)
1088  *
1089  * Inserts completion message into queue
1090  *
1091  * PARAMS
1092  *      CompletionPort           [I] HANDLE to completion object
1093  *      CompletionKey            [I] completion key
1094  *      CompletionValue          [I] completion value (usually pointer to OVERLAPPED)
1095  *      Status                   [I] operation status
1096  *      NumberOfBytesTransferred [I] number of bytes transferred
1097  */
1098 NTSTATUS WINAPI NtSetIoCompletion( HANDLE CompletionPort, ULONG_PTR CompletionKey,
1099                                    ULONG_PTR CompletionValue, NTSTATUS Status,
1100                                    SIZE_T NumberOfBytesTransferred )
1101 {
1102     NTSTATUS status;
1103
1104     TRACE("(%p, %lx, %lx, %x, %lx)\n", CompletionPort, CompletionKey,
1105           CompletionValue, Status, NumberOfBytesTransferred);
1106
1107     SERVER_START_REQ( add_completion )
1108     {
1109         req->handle      = wine_server_obj_handle( CompletionPort );
1110         req->ckey        = CompletionKey;
1111         req->cvalue      = CompletionValue;
1112         req->status      = Status;
1113         req->information = NumberOfBytesTransferred;
1114         status = wine_server_call( req );
1115     }
1116     SERVER_END_REQ;
1117     return status;
1118 }
1119
1120 /******************************************************************
1121  *              NtRemoveIoCompletion (NTDLL.@)
1122  *              ZwRemoveIoCompletion (NTDLL.@)
1123  *
1124  * (Wait for and) retrieve first completion message from completion object's queue
1125  *
1126  * PARAMS
1127  *      CompletionPort  [I] HANDLE to I/O completion object
1128  *      CompletionKey   [O] completion key
1129  *      CompletionValue [O] Completion value given in NtSetIoCompletion or in async operation
1130  *      iosb            [O] IO_STATUS_BLOCK of completed asynchronous operation
1131  *      WaitTime        [I] optional wait time in NTDLL format
1132  *
1133  */
1134 NTSTATUS WINAPI NtRemoveIoCompletion( HANDLE CompletionPort, PULONG_PTR CompletionKey,
1135                                       PULONG_PTR CompletionValue, PIO_STATUS_BLOCK iosb,
1136                                       PLARGE_INTEGER WaitTime )
1137 {
1138     NTSTATUS status;
1139
1140     TRACE("(%p, %p, %p, %p, %p)\n", CompletionPort, CompletionKey,
1141           CompletionValue, iosb, WaitTime);
1142
1143     for(;;)
1144     {
1145         SERVER_START_REQ( remove_completion )
1146         {
1147             req->handle = wine_server_obj_handle( CompletionPort );
1148             if (!(status = wine_server_call( req )))
1149             {
1150                 *CompletionKey    = reply->ckey;
1151                 *CompletionValue  = reply->cvalue;
1152                 iosb->Information = reply->information;
1153                 iosb->u.Status    = reply->status;
1154             }
1155         }
1156         SERVER_END_REQ;
1157         if (status != STATUS_PENDING) break;
1158
1159         status = NtWaitForSingleObject( CompletionPort, FALSE, WaitTime );
1160         if (status != WAIT_OBJECT_0) break;
1161     }
1162     return status;
1163 }
1164
1165 /******************************************************************
1166  *              NtOpenIoCompletion (NTDLL.@)
1167  *              ZwOpenIoCompletion (NTDLL.@)
1168  *
1169  * Opens I/O completion object
1170  *
1171  * PARAMS
1172  *      CompletionPort     [O] completion object handle will be placed there
1173  *      DesiredAccess      [I] desired access to a handle (combination of IO_COMPLETION_*)
1174  *      ObjectAttributes   [I] completion object name
1175  *
1176  */
1177 NTSTATUS WINAPI NtOpenIoCompletion( PHANDLE CompletionPort, ACCESS_MASK DesiredAccess,
1178                                     POBJECT_ATTRIBUTES ObjectAttributes )
1179 {
1180     NTSTATUS status;
1181
1182     TRACE("(%p, 0x%x, %p)\n", CompletionPort, DesiredAccess, ObjectAttributes);
1183
1184     if (!CompletionPort || !ObjectAttributes || !ObjectAttributes->ObjectName)
1185         return STATUS_INVALID_PARAMETER;
1186
1187     SERVER_START_REQ( open_completion )
1188     {
1189         req->access     = DesiredAccess;
1190         req->rootdir    = wine_server_obj_handle( ObjectAttributes->RootDirectory );
1191         wine_server_add_data( req, ObjectAttributes->ObjectName->Buffer,
1192                                    ObjectAttributes->ObjectName->Length );
1193         if (!(status = wine_server_call( req )))
1194             *CompletionPort = wine_server_ptr_handle( reply->handle );
1195     }
1196     SERVER_END_REQ;
1197     return status;
1198 }
1199
1200 /******************************************************************
1201  *              NtQueryIoCompletion (NTDLL.@)
1202  *              ZwQueryIoCompletion (NTDLL.@)
1203  *
1204  * Requests information about given I/O completion object
1205  *
1206  * PARAMS
1207  *      CompletionPort        [I] HANDLE to completion port to request
1208  *      InformationClass      [I] information class
1209  *      CompletionInformation [O] user-provided buffer for data
1210  *      BufferLength          [I] buffer length
1211  *      RequiredLength        [O] required buffer length
1212  *
1213  */
1214 NTSTATUS WINAPI NtQueryIoCompletion( HANDLE CompletionPort, IO_COMPLETION_INFORMATION_CLASS InformationClass,
1215                                      PVOID CompletionInformation, ULONG BufferLength, PULONG RequiredLength )
1216 {
1217     NTSTATUS status;
1218
1219     TRACE("(%p, %d, %p, 0x%x, %p)\n", CompletionPort, InformationClass, CompletionInformation,
1220           BufferLength, RequiredLength);
1221
1222     if (!CompletionInformation) return STATUS_INVALID_PARAMETER;
1223     switch( InformationClass )
1224     {
1225         case IoCompletionBasicInformation:
1226             {
1227                 ULONG *info = CompletionInformation;
1228
1229                 if (RequiredLength) *RequiredLength = sizeof(*info);
1230                 if (BufferLength != sizeof(*info))
1231                     status = STATUS_INFO_LENGTH_MISMATCH;
1232                 else
1233                 {
1234                     SERVER_START_REQ( query_completion )
1235                     {
1236                         req->handle = wine_server_obj_handle( CompletionPort );
1237                         if (!(status = wine_server_call( req )))
1238                             *info = reply->depth;
1239                     }
1240                     SERVER_END_REQ;
1241                 }
1242             }
1243             break;
1244         default:
1245             status = STATUS_INVALID_PARAMETER;
1246             break;
1247     }
1248     return status;
1249 }
1250
1251 NTSTATUS NTDLL_AddCompletion( HANDLE hFile, ULONG_PTR CompletionValue,
1252                               NTSTATUS CompletionStatus, ULONG Information )
1253 {
1254     NTSTATUS status;
1255
1256     SERVER_START_REQ( add_fd_completion )
1257     {
1258         req->handle      = wine_server_obj_handle( hFile );
1259         req->cvalue      = CompletionValue;
1260         req->status      = CompletionStatus;
1261         req->information = Information;
1262         status = wine_server_call( req );
1263     }
1264     SERVER_END_REQ;
1265     return status;
1266 }
1267
1268 /******************************************************************
1269  *              RtlRunOnceInitialize (NTDLL.@)
1270  */
1271 void WINAPI RtlRunOnceInitialize( RTL_RUN_ONCE *once )
1272 {
1273     once->Ptr = NULL;
1274 }
1275
1276 /******************************************************************
1277  *              RtlRunOnceBeginInitialize (NTDLL.@)
1278  */
1279 DWORD WINAPI RtlRunOnceBeginInitialize( RTL_RUN_ONCE *once, ULONG flags, void **context )
1280 {
1281     if (flags & RTL_RUN_ONCE_CHECK_ONLY)
1282     {
1283         ULONG_PTR val = (ULONG_PTR)once->Ptr;
1284
1285         if (flags & RTL_RUN_ONCE_ASYNC) return STATUS_INVALID_PARAMETER;
1286         if ((val & 3) != 2) return STATUS_UNSUCCESSFUL;
1287         if (context) *context = (void *)(val & ~3);
1288         return STATUS_SUCCESS;
1289     }
1290
1291     for (;;)
1292     {
1293         ULONG_PTR next, val = (ULONG_PTR)once->Ptr;
1294
1295         switch (val & 3)
1296         {
1297         case 0:  /* first time */
1298             if (!interlocked_cmpxchg_ptr( &once->Ptr,
1299                                           (flags & RTL_RUN_ONCE_ASYNC) ? (void *)3 : (void *)1, 0 ))
1300                 return STATUS_PENDING;
1301             break;
1302
1303         case 1:  /* in progress, wait */
1304             if (flags & RTL_RUN_ONCE_ASYNC) return STATUS_INVALID_PARAMETER;
1305             next = val & ~3;
1306             if (interlocked_cmpxchg_ptr( &once->Ptr, (void *)((ULONG_PTR)&next | 1),
1307                                          (void *)val ) == (void *)val)
1308                 NtWaitForKeyedEvent( keyed_event, &next, FALSE, NULL );
1309             break;
1310
1311         case 2:  /* done */
1312             if (context) *context = (void *)(val & ~3);
1313             return STATUS_SUCCESS;
1314
1315         case 3:  /* in progress, async */
1316             if (!(flags & RTL_RUN_ONCE_ASYNC)) return STATUS_INVALID_PARAMETER;
1317             return STATUS_PENDING;
1318         }
1319     }
1320 }
1321
1322 /******************************************************************
1323  *              RtlRunOnceComplete (NTDLL.@)
1324  */
1325 DWORD WINAPI RtlRunOnceComplete( RTL_RUN_ONCE *once, ULONG flags, void *context )
1326 {
1327     if ((ULONG_PTR)context & 3) return STATUS_INVALID_PARAMETER;
1328
1329     if (flags & RTL_RUN_ONCE_INIT_FAILED)
1330     {
1331         if (context) return STATUS_INVALID_PARAMETER;
1332         if (flags & RTL_RUN_ONCE_ASYNC) return STATUS_INVALID_PARAMETER;
1333     }
1334     else context = (void *)((ULONG_PTR)context | 2);
1335
1336     for (;;)
1337     {
1338         ULONG_PTR val = (ULONG_PTR)once->Ptr;
1339
1340         switch (val & 3)
1341         {
1342         case 1:  /* in progress */
1343             if (interlocked_cmpxchg_ptr( &once->Ptr, context, (void *)val ) != (void *)val) break;
1344             val &= ~3;
1345             while (val)
1346             {
1347                 ULONG_PTR next = *(ULONG_PTR *)val;
1348                 NtReleaseKeyedEvent( keyed_event, (void *)val, FALSE, NULL );
1349                 val = next;
1350             }
1351             return STATUS_SUCCESS;
1352
1353         case 3:  /* in progress, async */
1354             if (!(flags & RTL_RUN_ONCE_ASYNC)) return STATUS_INVALID_PARAMETER;
1355             if (interlocked_cmpxchg_ptr( &once->Ptr, context, (void *)val ) != (void *)val) break;
1356             return STATUS_SUCCESS;
1357
1358         default:
1359             return STATUS_UNSUCCESSFUL;
1360         }
1361     }
1362 }
1363
1364 /******************************************************************
1365  *              RtlRunOnceExecuteOnce (NTDLL.@)
1366  */
1367 DWORD WINAPI RtlRunOnceExecuteOnce( RTL_RUN_ONCE *once, PRTL_RUN_ONCE_INIT_FN func,
1368                                     void *param, void **context )
1369 {
1370     DWORD ret = RtlRunOnceBeginInitialize( once, 0, context );
1371
1372     if (ret != STATUS_PENDING) return ret;
1373
1374     if (!func( once, param, context ))
1375     {
1376         RtlRunOnceComplete( once, RTL_RUN_ONCE_INIT_FAILED, NULL );
1377         return STATUS_UNSUCCESSFUL;
1378     }
1379
1380     return RtlRunOnceComplete( once, 0, context ? *context : NULL );
1381 }
1382
1383
1384 /* SRW locks implementation
1385  *
1386  * The memory layout used by the lock is:
1387  *
1388  * 32 31            16               0
1389  *  ________________ ________________
1390  * | X| #exclusive  |    #shared     |
1391  *  ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
1392  * Since there is no space left for a separate counter of shared access
1393  * threads inside the locked section the #shared field is used for multiple
1394  * purposes. The following table lists all possible states the lock can be
1395  * in, notation: [X, #exclusive, #shared]:
1396  *
1397  * [0,   0,   N] -> locked by N shared access threads, if N=0 its unlocked
1398  * [0, >=1, >=1] -> threads are requesting exclusive locks, but there are
1399  * still shared access threads inside. #shared should not be incremented
1400  * anymore!
1401  * [1, >=1, >=0] -> lock is owned by an exclusive thread and the #shared
1402  * counter can be used again to count the number of threads waiting in the
1403  * queue for shared access.
1404  *
1405  * the following states are invalid and will never occur:
1406  * [0, >=1,   0], [1,   0, >=0]
1407  *
1408  * The main problem arising from the fact that we have no separate counter
1409  * of shared access threads inside the locked section is that in the state
1410  * [0, >=1, >=1] above we cannot add additional waiting threads to the
1411  * shared access queue - it wouldn't be possible to distinguish waiting
1412  * threads and those that are still inside. To solve this problem the lock
1413  * uses the following approach: a thread that isn't able to allocate a
1414  * shared lock just uses the exclusive queue instead. As soon as the thread
1415  * is woken up it is in the state [1, >=1, >=0]. In this state it's again
1416  * possible to use the shared access queue. The thread atomically moves
1417  * itself to the shared access queue and releases the exclusive lock, so
1418  * that the "real" exclusive access threads have a chance. As soon as they
1419  * are all ready the shared access threads are processed.
1420  */
1421
1422 #define SRWLOCK_MASK_IN_EXCLUSIVE     0x80000000
1423 #define SRWLOCK_MASK_EXCLUSIVE_QUEUE  0x7fff0000
1424 #define SRWLOCK_MASK_SHARED_QUEUE     0x0000ffff
1425 #define SRWLOCK_RES_EXCLUSIVE         0x00010000
1426 #define SRWLOCK_RES_SHARED            0x00000001
1427
1428 #ifdef WORDS_BIGENDIAN
1429 #define srwlock_key_exclusive(lock)   (&lock->Ptr)
1430 #define srwlock_key_shared(lock)      ((void *)((char *)&lock->Ptr + 2))
1431 #else
1432 #define srwlock_key_exclusive(lock)   ((void *)((char *)&lock->Ptr + 2))
1433 #define srwlock_key_shared(lock)      (&lock->Ptr)
1434 #endif
1435
1436 static inline void srwlock_check_invalid( unsigned int val )
1437 {
1438     /* Throw exception if it's impossible to acquire/release this lock. */
1439     if ((val & SRWLOCK_MASK_EXCLUSIVE_QUEUE) == SRWLOCK_MASK_EXCLUSIVE_QUEUE ||
1440             (val & SRWLOCK_MASK_SHARED_QUEUE) == SRWLOCK_MASK_SHARED_QUEUE)
1441         RtlRaiseStatus(STATUS_RESOURCE_NOT_OWNED);
1442 }
1443
1444 static inline unsigned int srwlock_lock_exclusive( unsigned int *dest, int incr )
1445 {
1446     unsigned int val, tmp;
1447     /* Atomically modifies the value of *dest by adding incr. If the shared
1448      * queue is empty and there are threads waiting for exclusive access, then
1449      * sets the mark SRWLOCK_MASK_IN_EXCLUSIVE to signal other threads that
1450      * they are allowed again to use the shared queue counter. */
1451     for (val = *dest;; val = tmp)
1452     {
1453         tmp = val + incr;
1454         srwlock_check_invalid( tmp );
1455         if ((tmp & SRWLOCK_MASK_EXCLUSIVE_QUEUE) && !(tmp & SRWLOCK_MASK_SHARED_QUEUE))
1456             tmp |= SRWLOCK_MASK_IN_EXCLUSIVE;
1457         if ((tmp = interlocked_cmpxchg( (int *)dest, tmp, val )) == val)
1458             break;
1459     }
1460     return val;
1461 }
1462
1463 static inline unsigned int srwlock_unlock_exclusive( unsigned int *dest, int incr )
1464 {
1465     unsigned int val, tmp;
1466     /* Atomically modifies the value of *dest by adding incr. If the queue of
1467      * threads waiting for exclusive access is empty, then remove the
1468      * SRWLOCK_MASK_IN_EXCLUSIVE flag (only the shared queue counter will
1469      * remain). */
1470     for (val = *dest;; val = tmp)
1471     {
1472         tmp = val + incr;
1473         srwlock_check_invalid( tmp );
1474         if (!(tmp & SRWLOCK_MASK_EXCLUSIVE_QUEUE))
1475             tmp &= SRWLOCK_MASK_SHARED_QUEUE;
1476         if ((tmp = interlocked_cmpxchg( (int *)dest, tmp, val )) == val)
1477             break;
1478     }
1479     return val;
1480 }
1481
1482 static inline void srwlock_leave_exclusive( RTL_SRWLOCK *lock, unsigned int val )
1483 {
1484     /* Used when a thread leaves an exclusive section. If there are other
1485      * exclusive access threads they are processed first, followed by
1486      * the shared waiters. */
1487     if (val & SRWLOCK_MASK_EXCLUSIVE_QUEUE)
1488         NtReleaseKeyedEvent( keyed_event, srwlock_key_exclusive(lock), FALSE, NULL );
1489     else
1490     {
1491         val &= SRWLOCK_MASK_SHARED_QUEUE; /* remove SRWLOCK_MASK_IN_EXCLUSIVE */
1492         while (val--)
1493             NtReleaseKeyedEvent( keyed_event, srwlock_key_shared(lock), FALSE, NULL );
1494     }
1495 }
1496
1497 static inline void srwlock_leave_shared( RTL_SRWLOCK *lock, unsigned int val )
1498 {
1499     /* Wake up one exclusive thread as soon as the last shared access thread
1500      * has left. */
1501     if ((val & SRWLOCK_MASK_EXCLUSIVE_QUEUE) && !(val & SRWLOCK_MASK_SHARED_QUEUE))
1502         NtReleaseKeyedEvent( keyed_event, srwlock_key_exclusive(lock), FALSE, NULL );
1503 }
1504
1505 /***********************************************************************
1506  *              RtlInitializeSRWLock (NTDLL.@)
1507  *
1508  * NOTES
1509  *  Please note that SRWLocks do not keep track of the owner of a lock.
1510  *  It doesn't make any difference which thread for example unlocks an
1511  *  SRWLock (see corresponding tests). This implementation uses two
1512  *  keyed events (one for the exclusive waiters and one for the shared
1513  *  waiters) and is limited to 2^15-1 waiting threads.
1514  */
1515 void WINAPI RtlInitializeSRWLock( RTL_SRWLOCK *lock )
1516 {
1517     lock->Ptr = NULL;
1518 }
1519
1520 /***********************************************************************
1521  *              RtlAcquireSRWLockExclusive (NTDLL.@)
1522  *
1523  * NOTES
1524  *  Unlike RtlAcquireResourceExclusive this function doesn't allow
1525  *  nested calls from the same thread. "Upgrading" a shared access lock
1526  *  to an exclusive access lock also doesn't seem to be supported.
1527  */
1528 void WINAPI RtlAcquireSRWLockExclusive( RTL_SRWLOCK *lock )
1529 {
1530     if (srwlock_lock_exclusive( (unsigned int *)&lock->Ptr, SRWLOCK_RES_EXCLUSIVE ))
1531         NtWaitForKeyedEvent( keyed_event, srwlock_key_exclusive(lock), FALSE, NULL );
1532 }
1533
1534 /***********************************************************************
1535  *              RtlAcquireSRWLockShared (NTDLL.@)
1536  *
1537  * NOTES
1538  *   Do not call this function recursively - it will only succeed when
1539  *   there are no threads waiting for an exclusive lock!
1540  */
1541 void WINAPI RtlAcquireSRWLockShared( RTL_SRWLOCK *lock )
1542 {
1543     unsigned int val, tmp;
1544     /* Acquires a shared lock. If it's currently not possible to add elements to
1545      * the shared queue, then request exclusive access instead. */
1546     for (val = *(unsigned int *)&lock->Ptr;; val = tmp)
1547     {
1548         if ((val & SRWLOCK_MASK_EXCLUSIVE_QUEUE) && !(val & SRWLOCK_MASK_IN_EXCLUSIVE))
1549             tmp = val + SRWLOCK_RES_EXCLUSIVE;
1550         else
1551             tmp = val + SRWLOCK_RES_SHARED;
1552         if ((tmp = interlocked_cmpxchg( (int *)&lock->Ptr, tmp, val )) == val)
1553             break;
1554     }
1555
1556     /* Drop exclusive access again and instead requeue for shared access. */
1557     if ((val & SRWLOCK_MASK_EXCLUSIVE_QUEUE) && !(val & SRWLOCK_MASK_IN_EXCLUSIVE))
1558     {
1559         NtWaitForKeyedEvent( keyed_event, srwlock_key_exclusive(lock), FALSE, NULL );
1560         val = srwlock_unlock_exclusive( (unsigned int *)&lock->Ptr, (SRWLOCK_RES_SHARED
1561                                         - SRWLOCK_RES_EXCLUSIVE) ) - SRWLOCK_RES_EXCLUSIVE;
1562         srwlock_leave_exclusive( lock, val );
1563     }
1564
1565     if (val & SRWLOCK_MASK_EXCLUSIVE_QUEUE)
1566         NtWaitForKeyedEvent( keyed_event, srwlock_key_shared(lock), FALSE, NULL );
1567 }
1568
1569 /***********************************************************************
1570  *              RtlReleaseSRWLockExclusive (NTDLL.@)
1571  */
1572 void WINAPI RtlReleaseSRWLockExclusive( RTL_SRWLOCK *lock )
1573 {
1574     srwlock_leave_exclusive( lock, srwlock_unlock_exclusive( (unsigned int *)&lock->Ptr,
1575                              - SRWLOCK_RES_EXCLUSIVE ) - SRWLOCK_RES_EXCLUSIVE );
1576 }
1577
1578 /***********************************************************************
1579  *              RtlReleaseSRWLockShared (NTDLL.@)
1580  */
1581 void WINAPI RtlReleaseSRWLockShared( RTL_SRWLOCK *lock )
1582 {
1583     srwlock_leave_shared( lock, srwlock_lock_exclusive( (unsigned int *)&lock->Ptr,
1584                           - SRWLOCK_RES_SHARED ) - SRWLOCK_RES_SHARED );
1585 }
1586
1587 /***********************************************************************
1588  *              RtlTryAcquireSRWLockExclusive (NTDLL.@)
1589  *
1590  * NOTES
1591  *  Similar to AcquireSRWLockExclusive recusive calls are not allowed
1592  *  and will fail with return value FALSE.
1593  */
1594 BOOLEAN WINAPI RtlTryAcquireSRWLockExclusive( RTL_SRWLOCK *lock )
1595 {
1596     return interlocked_cmpxchg( (int *)&lock->Ptr, SRWLOCK_MASK_IN_EXCLUSIVE |
1597                                 SRWLOCK_RES_EXCLUSIVE, 0 ) == 0;
1598 }
1599
1600 /***********************************************************************
1601  *              RtlTryAcquireSRWLockShared (NTDLL.@)
1602  */
1603 BOOLEAN WINAPI RtlTryAcquireSRWLockShared( RTL_SRWLOCK *lock )
1604 {
1605     unsigned int val, tmp;
1606     for (val = *(unsigned int *)&lock->Ptr;; val = tmp)
1607     {
1608         if (val & SRWLOCK_MASK_EXCLUSIVE_QUEUE)
1609             return FALSE;
1610         if ((tmp = interlocked_cmpxchg( (int *)&lock->Ptr, val + SRWLOCK_RES_SHARED, val )) == val)
1611             break;
1612     }
1613     return TRUE;
1614 }
1615
1616 /***********************************************************************
1617  *           RtlInitializeConditionVariable   (NTDLL.@)
1618  *
1619  * Initializes the condition variable with NULL.
1620  *
1621  * PARAMS
1622  *  variable [O] condition variable
1623  *
1624  * RETURNS
1625  *  Nothing.
1626  */
1627 void WINAPI RtlInitializeConditionVariable( RTL_CONDITION_VARIABLE *variable )
1628 {
1629     variable->Ptr = NULL;
1630 }
1631
1632 /***********************************************************************
1633  *           RtlWakeConditionVariable   (NTDLL.@)
1634  *
1635  * Wakes up one thread waiting on the condition variable.
1636  *
1637  * PARAMS
1638  *  variable [I/O] condition variable to wake up.
1639  *
1640  * RETURNS
1641  *  Nothing.
1642  *
1643  * NOTES
1644  *  The calling thread does not have to own any lock in order to call
1645  *  this function.
1646  */
1647 void WINAPI RtlWakeConditionVariable( RTL_CONDITION_VARIABLE *variable )
1648 {
1649     if (interlocked_dec_if_nonzero( (int *)&variable->Ptr ))
1650         NtReleaseKeyedEvent( keyed_event, &variable->Ptr, FALSE, NULL );
1651 }
1652
1653 /***********************************************************************
1654  *           RtlWakeAllConditionVariable   (NTDLL.@)
1655  *
1656  * See WakeConditionVariable, wakes up all waiting threads.
1657  */
1658 void WINAPI RtlWakeAllConditionVariable( RTL_CONDITION_VARIABLE *variable )
1659 {
1660     int val = interlocked_xchg( (int *)&variable->Ptr, 0 );
1661     while (val-- > 0)
1662         NtReleaseKeyedEvent( keyed_event, &variable->Ptr, FALSE, NULL );
1663 }
1664
1665 /***********************************************************************
1666  *           RtlSleepConditionVariableCS   (NTDLL.@)
1667  *
1668  * Atomically releases the critical section and suspends the thread,
1669  * waiting for a Wake(All)ConditionVariable event. Afterwards it enters
1670  * the critical section again and returns.
1671  *
1672  * PARAMS
1673  *  variable  [I/O] condition variable
1674  *  crit      [I/O] critical section to leave temporarily
1675  *  timeout   [I]   timeout
1676  *
1677  * RETURNS
1678  *  see NtWaitForKeyedEvent for all possible return values.
1679  */
1680 NTSTATUS WINAPI RtlSleepConditionVariableCS( RTL_CONDITION_VARIABLE *variable, RTL_CRITICAL_SECTION *crit,
1681                                              const LARGE_INTEGER *timeout )
1682 {
1683     NTSTATUS status;
1684     interlocked_xchg_add( (int *)&variable->Ptr, 1 );
1685     RtlLeaveCriticalSection( crit );
1686
1687     status = NtWaitForKeyedEvent( keyed_event, &variable->Ptr, FALSE, timeout );
1688     if (status != STATUS_SUCCESS)
1689     {
1690         if (!interlocked_dec_if_nonzero( (int *)&variable->Ptr ))
1691             status = NtWaitForKeyedEvent( keyed_event, &variable->Ptr, FALSE, NULL );
1692     }
1693
1694     RtlEnterCriticalSection( crit );
1695     return status;
1696 }
1697
1698 /***********************************************************************
1699  *           RtlSleepConditionVariableSRW   (NTDLL.@)
1700  *
1701  * Atomically releases the SRWLock and suspends the thread,
1702  * waiting for a Wake(All)ConditionVariable event. Afterwards it enters
1703  * the SRWLock again with the same access rights and returns.
1704  *
1705  * PARAMS
1706  *  variable  [I/O] condition variable
1707  *  lock      [I/O] SRWLock to leave temporarily
1708  *  timeout   [I]   timeout
1709  *  flags     [I]   type of the current lock (exclusive / shared)
1710  *
1711  * RETURNS
1712  *  see NtWaitForKeyedEvent for all possible return values.
1713  *
1714  * NOTES
1715  *  the behaviour is undefined if the thread doesn't own the lock.
1716  */
1717 NTSTATUS WINAPI RtlSleepConditionVariableSRW( RTL_CONDITION_VARIABLE *variable, RTL_SRWLOCK *lock,
1718                                               const LARGE_INTEGER *timeout, ULONG flags )
1719 {
1720     NTSTATUS status;
1721     interlocked_xchg_add( (int *)&variable->Ptr, 1 );
1722
1723     if (flags & RTL_CONDITION_VARIABLE_LOCKMODE_SHARED)
1724         RtlReleaseSRWLockShared( lock );
1725     else
1726         RtlReleaseSRWLockExclusive( lock );
1727
1728     status = NtWaitForKeyedEvent( keyed_event, &variable->Ptr, FALSE, timeout );
1729     if (status != STATUS_SUCCESS)
1730     {
1731         if (!interlocked_dec_if_nonzero( (int *)&variable->Ptr ))
1732             status = NtWaitForKeyedEvent( keyed_event, &variable->Ptr, FALSE, NULL );
1733     }
1734
1735     if (flags & RTL_CONDITION_VARIABLE_LOCKMODE_SHARED)
1736         RtlAcquireSRWLockShared( lock );
1737     else
1738         RtlAcquireSRWLockExclusive( lock );
1739     return status;
1740 }