dlls/mshtml/dispex.c

   1 /*
   2  * Copyright 2008-2009 Jacek Caban for CodeWeavers
   3  *
   4  * This library is free software; you can redistribute it and/or
   5  * modify it under the terms of the GNU Lesser General Public
   6  * License as published by the Free Software Foundation; either
   7  * version 2.1 of the License, or (at your option) any later version.
   8  *
   9  * This library is distributed in the hope that it will be useful,
  10  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  11  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  12  * Lesser General Public License for more details.
  13  *
  14  * You should have received a copy of the GNU Lesser General Public
  15  * License along with this library; if not, write to the Free Software
  16  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
  17  */
  18
  19 #include <stdarg.h>
  20 #include <assert.h>
  21
  22 #define COBJMACROS
  23
  24 #include "windef.h"
  25 #include "winbase.h"
  26 #include "winuser.h"
  27 #include "ole2.h"
  28
  29 #include "wine/debug.h"
  30
  31 #include "mshtml_private.h"
  32
  33 WINE_DEFAULT_DEBUG_CHANNEL(mshtml);
  34
  35 static CRITICAL_SECTION cs_dispex_static_data;
  36 static CRITICAL_SECTION_DEBUG cs_dispex_static_data_dbg =
  37 {
  38     0, 0, &cs_dispex_static_data,
  39     { &cs_dispex_static_data_dbg.ProcessLocksList, &cs_dispex_static_data_dbg.ProcessLocksList },
  40       0, 0, { (DWORD_PTR)(__FILE__ ": dispex_static_data") }
  41 };
  42 static CRITICAL_SECTION cs_dispex_static_data = { &cs_dispex_static_data_dbg, -1, 0, 0, 0, 0 };
  43
  44
  45 static const WCHAR objectW[] = {'[','o','b','j','e','c','t',']',0};
  46
  47 typedef struct {
  48     DISPID id;
  49     BSTR name;
  50     tid_t tid;
  51     SHORT put_vtbl_off;
  52     SHORT get_vtbl_off;
  53     SHORT func_disp_idx;
  54     VARTYPE prop_vt;
  55 } func_info_t;
  56
  57 struct dispex_data_t {
  58     DWORD func_cnt;
  59     func_info_t *funcs;
  60     func_info_t **name_table;
  61     DWORD func_disp_cnt;
  62
  63     struct list entry;
  64 };
  65
  66 typedef struct {
  67     VARIANT var;
  68     LPWSTR name;
  69     DWORD flags;
  70 } dynamic_prop_t;
  71
  72 #define DYNPROP_DELETED    0x01
  73
  74 typedef struct {
  75     DispatchEx dispex;
  76     IUnknown IUnknown_iface;
  77     LONG ref;
  78     DispatchEx *obj;
  79     func_info_t *info;
  80 } func_disp_t;
  81
  82 typedef struct {
  83     func_disp_t *func_obj;
  84     IDispatch *val;
  85 } func_obj_entry_t;
  86
  87 struct dispex_dynamic_data_t {
  88     DWORD buf_size;
  89     DWORD prop_cnt;
  90     dynamic_prop_t *props;
  91     func_obj_entry_t *func_disps;
  92 };
  93
  94 #define DISPID_DYNPROP_0    0x50000000
  95 #define DISPID_DYNPROP_MAX  0x5fffffff
  96
  97 #define FDEX_VERSION_MASK 0xf0000000
  98
  99 static ITypeLib *typelib;
 100 static ITypeInfo *typeinfos[LAST_tid];
 101 static struct list dispex_data_list = LIST_INIT(dispex_data_list);
 102
 103 static REFIID tid_ids[] = {
 104 #define XIID(iface) &IID_ ## iface,
 105 #define XDIID(iface) &DIID_ ## iface,
 106 TID_LIST
 107 #undef XIID
 108 #undef XDIID
 109 };
 110
 111 static HRESULT load_typelib(void)
 112 {
 113     HRESULT hres;
 114     ITypeLib *tl;
 115
 116     hres = LoadRegTypeLib(&LIBID_MSHTML, 4, 0, LOCALE_SYSTEM_DEFAULT, &tl);
 117     if(FAILED(hres)) {
 118         ERR("LoadRegTypeLib failed: %08x\n", hres);
 119         return hres;
 120     }
 121
 122     if(InterlockedCompareExchangePointer((void**)&typelib, tl, NULL))
 123         ITypeLib_Release(tl);
 124     return hres;
 125 }
 126
 127 static HRESULT get_typeinfo(tid_t tid, ITypeInfo **typeinfo)
 128 {
 129     HRESULT hres;
 130
 131     if (!typelib)
 132         hres = load_typelib();
 133     if (!typelib)
 134         return hres;
 135
 136     if(!typeinfos[tid]) {
 137         ITypeInfo *ti;
 138
 139         hres = ITypeLib_GetTypeInfoOfGuid(typelib, tid_ids[tid], &ti);
 140         if(FAILED(hres)) {
 141             ERR("GetTypeInfoOfGuid(%s) failed: %08x\n", debugstr_guid(tid_ids[tid]), hres);
 142             return hres;
 143         }
 144
 145         if(InterlockedCompareExchangePointer((void**)(typeinfos+tid), ti, NULL))
 146             ITypeInfo_Release(ti);
 147     }
 148
 149     *typeinfo = typeinfos[tid];
 150     return S_OK;
 151 }
 152
 153 void release_typelib(void)
 154 {
 155     dispex_data_t *iter;
 156     unsigned i;
 157
 158     while(!list_empty(&dispex_data_list)) {
 159         iter = LIST_ENTRY(list_head(&dispex_data_list), dispex_data_t, entry);
 160         list_remove(&iter->entry);
 161
 162         for(i=0; i < iter->func_cnt; i++)
 163             SysFreeString(iter->funcs[i].name);
 164
 165         heap_free(iter->funcs);
 166         heap_free(iter->name_table);
 167         heap_free(iter);
 168     }
 169
 170     if(!typelib)
 171         return;
 172
 173     for(i=0; i < sizeof(typeinfos)/sizeof(*typeinfos); i++)
 174         if(typeinfos[i])
 175             ITypeInfo_Release(typeinfos[i]);
 176
 177     ITypeLib_Release(typelib);
 178     DeleteCriticalSection(&cs_dispex_static_data);
 179 }
 180
 181 HRESULT get_htmldoc_classinfo(ITypeInfo **typeinfo)
 182 {
 183     HRESULT hres;
 184
 185     if (!typelib)
 186         hres = load_typelib();
 187     if (!typelib)
 188         return hres;
 189
 190     hres = ITypeLib_GetTypeInfoOfGuid(typelib, &CLSID_HTMLDocument, typeinfo);
 191     if(FAILED(hres))
 192         ERR("GetTypeInfoOfGuid failed: %08x\n", hres);
 193     return hres;
 194 }
 195
 196 static void add_func_info(dispex_data_t *data, DWORD *size, tid_t tid, const FUNCDESC *desc, ITypeInfo *dti)
 197 {
 198     func_info_t *info;
 199     HRESULT hres;
 200
 201     if(data->func_cnt && data->funcs[data->func_cnt-1].id == desc->memid) {
 202         info = data->funcs+data->func_cnt-1;
 203     }else {
 204         if(data->func_cnt == *size)
 205             data->funcs = heap_realloc(data->funcs, (*size <<= 1)*sizeof(func_info_t));
 206
 207         info = data->funcs+data->func_cnt;
 208         hres = ITypeInfo_GetDocumentation(dti, desc->memid, &info->name, NULL, NULL, NULL);
 209         if(FAILED(hres))
 210             return;
 211
 212         data->func_cnt++;
 213
 214         info->id = desc->memid;
 215         info->tid = tid;
 216         info->func_disp_idx = -1;
 217         info->prop_vt = VT_EMPTY;
 218         info->put_vtbl_off = 0;
 219         info->get_vtbl_off = 0;
 220     }
 221
 222     if(desc->invkind & DISPATCH_METHOD) {
 223         info->func_disp_idx = data->func_disp_cnt++;
 224     }else if(desc->invkind & (DISPATCH_PROPERTYPUT|DISPATCH_PROPERTYGET)) {
 225         VARTYPE vt = VT_EMPTY;
 226
 227         if(desc->invkind & DISPATCH_PROPERTYGET) {
 228             vt = desc->elemdescFunc.tdesc.vt;
 229             info->get_vtbl_off = desc->oVft/sizeof(void*);
 230         }
 231         if(desc->invkind & DISPATCH_PROPERTYPUT) {
 232             assert(desc->cParams == 1);
 233             vt = desc->lprgelemdescParam->tdesc.vt;
 234             info->put_vtbl_off = desc->oVft/sizeof(void*);
 235         }
 236
 237         assert(info->prop_vt == VT_EMPTY || vt == info->prop_vt);
 238         info->prop_vt = vt;
 239     }
 240 }
 241
 242 static int dispid_cmp(const void *p1, const void *p2)
 243 {
 244     return ((const func_info_t*)p1)->id - ((const func_info_t*)p2)->id;
 245 }
 246
 247 static int func_name_cmp(const void *p1, const void *p2)
 248 {
 249     return strcmpiW((*(func_info_t* const*)p1)->name, (*(func_info_t* const*)p2)->name);
 250 }
 251
 252 static dispex_data_t *preprocess_dispex_data(DispatchEx *This)
 253 {
 254     const tid_t *tid = This->data->iface_tids;
 255     FUNCDESC *funcdesc;
 256     dispex_data_t *data;
 257     DWORD size = 16, i;
 258     ITypeInfo *ti, *dti;
 259     HRESULT hres;
 260
 261     TRACE("(%p)\n", This);
 262
 263     if(This->data->disp_tid) {
 264         hres = get_typeinfo(This->data->disp_tid, &dti);
 265         if(FAILED(hres)) {
 266             ERR("Could not get disp type info: %08x\n", hres);
 267             return NULL;
 268         }
 269     }
 270
 271     data = heap_alloc(sizeof(dispex_data_t));
 272     data->func_cnt = 0;
 273     data->func_disp_cnt = 0;
 274     data->funcs = heap_alloc(size*sizeof(func_info_t));
 275     list_add_tail(&dispex_data_list, &data->entry);
 276
 277     while(*tid) {
 278         hres = get_typeinfo(*tid, &ti);
 279         if(FAILED(hres))
 280             break;
 281
 282         i=7;
 283         while(1) {
 284             hres = ITypeInfo_GetFuncDesc(ti, i++, &funcdesc);
 285             if(FAILED(hres))
 286                 break;
 287
 288             add_func_info(data, &size, *tid, funcdesc, dti);
 289             ITypeInfo_ReleaseFuncDesc(ti, funcdesc);
 290         }
 291
 292         tid++;
 293     }
 294
 295     if(!data->func_cnt) {
 296         heap_free(data->funcs);
 297         data->name_table = NULL;
 298         data->funcs = NULL;
 299         return data;
 300     }
 301
 302
 303     data->funcs = heap_realloc(data->funcs, data->func_cnt * sizeof(func_info_t));
 304     qsort(data->funcs, data->func_cnt, sizeof(func_info_t), dispid_cmp);
 305
 306     data->name_table = heap_alloc(data->func_cnt * sizeof(func_info_t*));
 307     for(i=0; i < data->func_cnt; i++)
 308         data->name_table[i] = data->funcs+i;
 309     qsort(data->name_table, data->func_cnt, sizeof(func_info_t*), func_name_cmp);
 310
 311     return data;
 312 }
 313
 314 static int id_cmp(const void *p1, const void *p2)
 315 {
 316     return *(const DISPID*)p1 - *(const DISPID*)p2;
 317 }
 318
 319 HRESULT get_dispids(tid_t tid, DWORD *ret_size, DISPID **ret)
 320 {
 321     unsigned i, func_cnt;
 322     FUNCDESC *funcdesc;
 323     ITypeInfo *ti;
 324     TYPEATTR *attr;
 325     DISPID *ids;
 326     HRESULT hres;
 327
 328     hres = get_typeinfo(tid, &ti);
 329     if(FAILED(hres))
 330         return hres;
 331
 332     hres = ITypeInfo_GetTypeAttr(ti, &attr);
 333     if(FAILED(hres)) {
 334         ITypeInfo_Release(ti);
 335         return hres;
 336     }
 337
 338     func_cnt = attr->cFuncs;
 339     ITypeInfo_ReleaseTypeAttr(ti, attr);
 340
 341     ids = heap_alloc(func_cnt*sizeof(DISPID));
 342     if(!ids) {
 343         ITypeInfo_Release(ti);
 344         return E_OUTOFMEMORY;
 345     }
 346
 347     for(i=0; i < func_cnt; i++) {
 348         hres = ITypeInfo_GetFuncDesc(ti, i, &funcdesc);
 349         if(FAILED(hres))
 350             break;
 351
 352         ids[i] = funcdesc->memid;
 353         ITypeInfo_ReleaseFuncDesc(ti, funcdesc);
 354     }
 355
 356     ITypeInfo_Release(ti);
 357     if(FAILED(hres)) {
 358         heap_free(ids);
 359         return hres;
 360     }
 361
 362     qsort(ids, func_cnt, sizeof(DISPID), id_cmp);
 363
 364     *ret_size = func_cnt;
 365     *ret = ids;
 366     return S_OK;
 367 }
 368
 369 static dispex_data_t *get_dispex_data(DispatchEx *This)
 370 {
 371     if(This->data->data)
 372         return This->data->data;
 373
 374     EnterCriticalSection(&cs_dispex_static_data);
 375
 376     if(!This->data->data)
 377         This->data->data = preprocess_dispex_data(This);
 378
 379     LeaveCriticalSection(&cs_dispex_static_data);
 380
 381     return This->data->data;
 382 }
 383
 384 static inline BOOL is_custom_dispid(DISPID id)
 385 {
 386     return MSHTML_DISPID_CUSTOM_MIN <= id && id <= MSHTML_DISPID_CUSTOM_MAX;
 387 }
 388
 389 static inline BOOL is_dynamic_dispid(DISPID id)
 390 {
 391     return DISPID_DYNPROP_0 <= id && id <= DISPID_DYNPROP_MAX;
 392 }
 393
 394 dispex_prop_type_t get_dispid_type(DISPID id)
 395 {
 396     if(is_dynamic_dispid(id))
 397         return DISPEXPROP_DYNAMIC;
 398     if(is_custom_dispid(id))
 399         return DISPEXPROP_CUSTOM;
 400     return DISPEXPROP_BUILTIN;
 401 }
 402
 403 static HRESULT variant_copy(VARIANT *dest, VARIANT *src)
 404 {
 405     if(V_VT(src) == VT_BSTR && !V_BSTR(src)) {
 406         V_VT(dest) = VT_BSTR;
 407         V_BSTR(dest) = NULL;
 408         return S_OK;
 409     }
 410
 411     return VariantCopy(dest, src);
 412 }
 413
 414 static inline dispex_dynamic_data_t *get_dynamic_data(DispatchEx *This)
 415 {
 416     if(This->dynamic_data)
 417         return This->dynamic_data;
 418
 419     This->dynamic_data = heap_alloc_zero(sizeof(dispex_dynamic_data_t));
 420     if(!This->dynamic_data)
 421         return NULL;
 422
 423     if(This->data->vtbl && This->data->vtbl->populate_props)
 424         This->data->vtbl->populate_props(This);
 425
 426     return This->dynamic_data;
 427 }
 428
 429 static HRESULT get_dynamic_prop(DispatchEx *This, const WCHAR *name, DWORD flags, dynamic_prop_t **ret)
 430 {
 431     const BOOL alloc = flags & fdexNameEnsure;
 432     dispex_dynamic_data_t *data;
 433     dynamic_prop_t *prop;
 434
 435     data = get_dynamic_data(This);
 436     if(!data)
 437         return E_OUTOFMEMORY;
 438
 439     for(prop = data->props; prop < data->props+data->prop_cnt; prop++) {
 440         if(flags & fdexNameCaseInsensitive ? !strcmpiW(prop->name, name) : !strcmpW(prop->name, name)) {
 441             if(prop->flags & DYNPROP_DELETED) {
 442                 if(!alloc)
 443                     return DISP_E_UNKNOWNNAME;
 444                 prop->flags &= ~DYNPROP_DELETED;
 445             }
 446             *ret = prop;
 447             return S_OK;
 448         }
 449     }
 450
 451     if(!alloc)
 452         return DISP_E_UNKNOWNNAME;
 453
 454     TRACE("creating dynamic prop %s\n", debugstr_w(name));
 455
 456     if(!data->buf_size) {
 457         data->props = heap_alloc(sizeof(dynamic_prop_t)*4);
 458         if(!data->props)
 459             return E_OUTOFMEMORY;
 460         data->buf_size = 4;
 461     }else if(data->buf_size == data->prop_cnt) {
 462         dynamic_prop_t *new_props;
 463
 464         new_props = heap_realloc(data->props, sizeof(dynamic_prop_t)*(data->buf_size<<1));
 465         if(!new_props)
 466             return E_OUTOFMEMORY;
 467
 468         data->props = new_props;
 469         data->buf_size <<= 1;
 470     }
 471
 472     prop = data->props + data->prop_cnt;
 473
 474     prop->name = heap_strdupW(name);
 475     if(!prop->name)
 476         return E_OUTOFMEMORY;
 477
 478     VariantInit(&prop->var);
 479     prop->flags = 0;
 480     data->prop_cnt++;
 481     *ret = prop;
 482     return S_OK;
 483 }
 484
 485 HRESULT dispex_get_dprop_ref(DispatchEx *This, const WCHAR *name, BOOL alloc, VARIANT **ret)
 486 {
 487     dynamic_prop_t *prop;
 488     HRESULT hres;
 489
 490     hres = get_dynamic_prop(This, name, alloc ? fdexNameEnsure : 0, &prop);
 491     if(FAILED(hres))
 492         return hres;
 493
 494     *ret = &prop->var;
 495     return S_OK;
 496 }
 497
 498 HRESULT dispex_get_dynid(DispatchEx *This, const WCHAR *name, DISPID *id)
 499 {
 500     dynamic_prop_t *prop;
 501     HRESULT hres;
 502
 503     hres = get_dynamic_prop(This, name, fdexNameEnsure, &prop);
 504     if(FAILED(hres))
 505         return hres;
 506
 507     *id = DISPID_DYNPROP_0 + (prop - This->dynamic_data->props);
 508     return S_OK;
 509 }
 510
 511 static HRESULT dispex_value(DispatchEx *This, LCID lcid, WORD flags, DISPPARAMS *params,
 512         VARIANT *res, EXCEPINFO *ei, IServiceProvider *caller)
 513 {
 514     if(This->data->vtbl && This->data->vtbl->value)
 515         return This->data->vtbl->value(This, lcid, flags, params, res, ei, caller);
 516
 517     switch(flags) {
 518     case DISPATCH_PROPERTYGET:
 519         V_VT(res) = VT_BSTR;
 520         V_BSTR(res) = SysAllocString(objectW);
 521         if(!V_BSTR(res))
 522             return E_OUTOFMEMORY;
 523         break;
 524     default:
 525         FIXME("Unimplemented flags %x\n", flags);
 526         return E_NOTIMPL;
 527     }
 528
 529     return S_OK;
 530 }
 531
 532 static HRESULT typeinfo_invoke(DispatchEx *This, func_info_t *func, WORD flags, DISPPARAMS *dp, VARIANT *res,
 533         EXCEPINFO *ei)
 534 {
 535     ITypeInfo *ti;
 536     IUnknown *unk;
 537     UINT argerr=0;
 538     HRESULT hres;
 539
 540     hres = get_typeinfo(func->tid, &ti);
 541     if(FAILED(hres)) {
 542         ERR("Could not get type info: %08x\n", hres);
 543         return hres;
 544     }
 545
 546     hres = IUnknown_QueryInterface(This->outer, tid_ids[func->tid], (void**)&unk);
 547     if(FAILED(hres)) {
 548         ERR("Could not get iface %s: %08x\n", debugstr_guid(tid_ids[func->tid]), hres);
 549         return E_FAIL;
 550     }
 551
 552     hres = ITypeInfo_Invoke(ti, unk, func->id, flags, dp, res, ei, &argerr);
 553
 554     IUnknown_Release(unk);
 555     return hres;
 556 }
 557
 558 static inline func_disp_t *impl_from_IUnknown(IUnknown *iface)
 559 {
 560     return CONTAINING_RECORD(iface, func_disp_t, IUnknown_iface);
 561 }
 562
 563 static HRESULT WINAPI Function_QueryInterface(IUnknown *iface, REFIID riid, void **ppv)
 564 {
 565     func_disp_t *This = impl_from_IUnknown(iface);
 566
 567     if(IsEqualGUID(&IID_IUnknown, riid)) {
 568         TRACE("(%p)->(IID_IUnknown %p)\n", This, ppv);
 569         *ppv = &This->IUnknown_iface;
 570     }else if(dispex_query_interface(&This->dispex, riid, ppv)) {
 571         return *ppv ? S_OK : E_NOINTERFACE;
 572     }else {
 573         *ppv = NULL;
 574         return E_NOINTERFACE;
 575     }
 576
 577     IUnknown_AddRef((IUnknown*)*ppv);
 578     return S_OK;
 579 }
 580
 581 static ULONG WINAPI Function_AddRef(IUnknown *iface)
 582 {
 583     func_disp_t *This = impl_from_IUnknown(iface);
 584     LONG ref = InterlockedIncrement(&This->ref);
 585
 586     TRACE("(%p) ref=%d\n", This, ref);
 587
 588     return ref;
 589 }
 590
 591 static ULONG WINAPI Function_Release(IUnknown *iface)
 592 {
 593     func_disp_t *This = impl_from_IUnknown(iface);
 594     LONG ref = InterlockedDecrement(&This->ref);
 595
 596     TRACE("(%p) ref=%d\n", This, ref);
 597
 598     if(!ref) {
 599         assert(!This->obj);
 600         release_dispex(&This->dispex);
 601         heap_free(This);
 602     }
 603
 604     return ref;
 605 }
 606
 607 static const IUnknownVtbl FunctionUnkVtbl = {
 608     Function_QueryInterface,
 609     Function_AddRef,
 610     Function_Release
 611 };
 612
 613 static inline func_disp_t *impl_from_DispatchEx(DispatchEx *iface)
 614 {
 615     return CONTAINING_RECORD(iface, func_disp_t, dispex);
 616 }
 617
 618 static HRESULT function_value(DispatchEx *dispex, LCID lcid, WORD flags, DISPPARAMS *params,
 619         VARIANT *res, EXCEPINFO *ei, IServiceProvider *caller)
 620 {
 621     func_disp_t *This = impl_from_DispatchEx(dispex);
 622     HRESULT hres;
 623
 624     switch(flags) {
 625     case DISPATCH_METHOD|DISPATCH_PROPERTYGET:
 626         if(!res)
 627             return E_INVALIDARG;
 628         /* fall through */
 629     case DISPATCH_METHOD:
 630         if(!This->obj)
 631             return E_UNEXPECTED;
 632         hres = typeinfo_invoke(This->obj, This->info, flags, params, res, ei);
 633         break;
 634     default:
 635         FIXME("Unimplemented flags %x\n", flags);
 636         hres = E_NOTIMPL;
 637     }
 638
 639     return hres;
 640 }
 641
 642 static const dispex_static_data_vtbl_t function_dispex_vtbl = {
 643     function_value,
 644     NULL,
 645     NULL,
 646     NULL
 647 };
 648
 649 static const tid_t function_iface_tids[] = {0};
 650
 651 static dispex_static_data_t function_dispex = {
 652     &function_dispex_vtbl,
 653     NULL_tid,
 654     NULL,
 655     function_iface_tids
 656 };
 657
 658 static func_disp_t *create_func_disp(DispatchEx *obj, func_info_t *info)
 659 {
 660     func_disp_t *ret;
 661
 662     ret = heap_alloc_zero(sizeof(func_disp_t));
 663     if(!ret)
 664         return NULL;
 665
 666     ret->IUnknown_iface.lpVtbl = &FunctionUnkVtbl;
 667     init_dispex(&ret->dispex, &ret->IUnknown_iface,  &function_dispex);
 668     ret->ref = 1;
 669     ret->obj = obj;
 670     ret->info = info;
 671
 672     return ret;
 673 }
 674
 675 static HRESULT invoke_disp_value(DispatchEx *This, IDispatch *func_disp, LCID lcid, WORD flags, DISPPARAMS *dp,
 676         VARIANT *res, EXCEPINFO *ei, IServiceProvider *caller)
 677 {
 678     DISPID named_arg = DISPID_THIS;
 679     DISPPARAMS new_dp = {NULL, &named_arg, 0, 1};
 680     IDispatchEx *dispex;
 681     HRESULT hres;
 682
 683     if(dp->cNamedArgs) {
 684         FIXME("named args not supported\n");
 685         return E_NOTIMPL;
 686     }
 687
 688     new_dp.rgvarg = heap_alloc((dp->cArgs+1)*sizeof(VARIANTARG));
 689     if(!new_dp.rgvarg)
 690         return E_OUTOFMEMORY;
 691
 692     new_dp.cArgs = dp->cArgs+1;
 693     memcpy(new_dp.rgvarg+1, dp->rgvarg, dp->cArgs*sizeof(VARIANTARG));
 694
 695     V_VT(new_dp.rgvarg) = VT_DISPATCH;
 696     V_DISPATCH(new_dp.rgvarg) = (IDispatch*)&This->IDispatchEx_iface;
 697
 698     hres = IDispatch_QueryInterface(func_disp, &IID_IDispatchEx, (void**)&dispex);
 699     TRACE(">>>\n");
 700     if(SUCCEEDED(hres)) {
 701         hres = IDispatchEx_InvokeEx(dispex, DISPID_VALUE, lcid, flags, &new_dp, res, ei, caller);
 702         IDispatchEx_Release(dispex);
 703     }else {
 704         ULONG err = 0;
 705         hres = IDispatch_Invoke(func_disp, DISPID_VALUE, &IID_NULL, lcid, flags, &new_dp, res, ei, &err);
 706     }
 707     if(SUCCEEDED(hres))
 708         TRACE("<<< %s\n", debugstr_variant(res));
 709     else
 710         WARN("<<< %08x\n", hres);
 711
 712     heap_free(new_dp.rgvarg);
 713     return hres;
 714 }
 715
 716 static HRESULT get_func_obj_entry(DispatchEx *This, func_info_t *func, func_obj_entry_t **ret)
 717 {
 718     dispex_dynamic_data_t *dynamic_data;
 719
 720     dynamic_data = get_dynamic_data(This);
 721     if(!dynamic_data)
 722         return E_OUTOFMEMORY;
 723
 724     if(!dynamic_data->func_disps) {
 725         dynamic_data->func_disps = heap_alloc_zero(This->data->data->func_disp_cnt * sizeof(*dynamic_data->func_disps));
 726         if(!dynamic_data->func_disps)
 727             return E_OUTOFMEMORY;
 728     }
 729
 730     if(!dynamic_data->func_disps[func->func_disp_idx].func_obj) {
 731         func_disp_t *func_obj;
 732
 733         func_obj = create_func_disp(This, func);
 734         if(!func_obj)
 735             return E_OUTOFMEMORY;
 736
 737         dynamic_data->func_disps[func->func_disp_idx].func_obj = func_obj;
 738
 739         IDispatchEx_AddRef(&func_obj->dispex.IDispatchEx_iface);
 740         dynamic_data->func_disps[func->func_disp_idx].val = (IDispatch*)&func_obj->dispex.IDispatchEx_iface;
 741     }
 742
 743     *ret = dynamic_data->func_disps+func->func_disp_idx;
 744     return S_OK;
 745 }
 746
 747 static HRESULT function_invoke(DispatchEx *This, func_info_t *func, WORD flags, DISPPARAMS *dp, VARIANT *res,
 748         EXCEPINFO *ei)
 749 {
 750     HRESULT hres;
 751
 752     switch(flags) {
 753     case DISPATCH_METHOD|DISPATCH_PROPERTYGET:
 754         if(!res)
 755             return E_INVALIDARG;
 756         /* fall through */
 757     case DISPATCH_METHOD:
 758         if(This->dynamic_data && This->dynamic_data->func_disps
 759            && This->dynamic_data->func_disps[func->func_disp_idx].func_obj) {
 760             func_obj_entry_t *entry = This->dynamic_data->func_disps + func->func_disp_idx;
 761
 762             if((IDispatch*)&entry->func_obj->dispex.IDispatchEx_iface != entry->val) {
 763                 if(!entry->val) {
 764                     FIXME("Calling null\n");
 765                     return E_FAIL;
 766                 }
 767
 768                 hres = invoke_disp_value(This, entry->val, 0, flags, dp, res, ei, NULL);
 769                 break;
 770             }
 771         }
 772
 773         hres = typeinfo_invoke(This, func, flags, dp, res, ei);
 774         break;
 775     case DISPATCH_PROPERTYGET: {
 776         func_obj_entry_t *entry;
 777
 778         if(func->id == DISPID_VALUE) {
 779             BSTR ret;
 780
 781             ret = SysAllocString(objectW);
 782             if(!ret)
 783                 return E_OUTOFMEMORY;
 784
 785             V_VT(res) = VT_BSTR;
 786             V_BSTR(res) = ret;
 787             return S_OK;
 788         }
 789
 790         hres = get_func_obj_entry(This, func, &entry);
 791         if(FAILED(hres))
 792             return hres;
 793
 794         V_VT(res) = VT_DISPATCH;
 795         V_DISPATCH(res) = entry->val;
 796         if(V_DISPATCH(res))
 797             IDispatch_AddRef(V_DISPATCH(res));
 798         hres = S_OK;
 799         break;
 800     }
 801     case DISPATCH_PROPERTYPUT: {
 802         func_obj_entry_t *entry;
 803         VARIANT *v;
 804
 805         if(dp->cArgs != 1 || (dp->cNamedArgs == 1 && *dp->rgdispidNamedArgs != DISPID_PROPERTYPUT)
 806            || dp->cNamedArgs > 1) {
 807             FIXME("invalid args\n");
 808             return E_INVALIDARG;
 809         }
 810
 811         v = dp->rgvarg;
 812         /* FIXME: not exactly right */
 813         if(V_VT(v) != VT_DISPATCH)
 814             return E_NOTIMPL;
 815
 816         hres = get_func_obj_entry(This, func, &entry);
 817         if(FAILED(hres))
 818             return hres;
 819
 820         if(entry->val)
 821             IDispatch_Release(entry->val);
 822         entry->val = V_DISPATCH(v);
 823         if(entry->val)
 824             IDispatch_AddRef(entry->val);
 825         hres = S_OK;
 826         break;
 827     }
 828     default:
 829         FIXME("Unimplemented flags %x\n", flags);
 830         hres = E_NOTIMPL;
 831     }
 832
 833     return hres;
 834 }
 835
 836 static HRESULT get_builtin_func(dispex_data_t *data, DISPID id, func_info_t **ret)
 837 {
 838     int min, max, n;
 839
 840     min = 0;
 841     max = data->func_cnt-1;
 842
 843     while(min <= max) {
 844         n = (min+max)/2;
 845
 846         if(data->funcs[n].id == id) {
 847             *ret = data->funcs+n;
 848             return S_OK;
 849         }
 850
 851         if(data->funcs[n].id < id)
 852             min = n+1;
 853         else
 854             max = n-1;
 855     }
 856
 857     WARN("invalid id %x\n", id);
 858     return DISP_E_UNKNOWNNAME;
 859 }
 860
 861 static HRESULT get_builtin_id(DispatchEx *This, BSTR name, DWORD grfdex, DISPID *ret)
 862 {
 863     dispex_data_t *data;
 864     int min, max, n, c;
 865
 866     data = get_dispex_data(This);
 867     if(!data)
 868         return E_FAIL;
 869
 870     min = 0;
 871     max = data->func_cnt-1;
 872
 873     while(min <= max) {
 874         n = (min+max)/2;
 875
 876         c = strcmpiW(data->name_table[n]->name, name);
 877         if(!c) {
 878             if((grfdex & fdexNameCaseSensitive) && strcmpW(data->name_table[n]->name, name))
 879                 break;
 880
 881             *ret = data->name_table[n]->id;
 882             return S_OK;
 883         }
 884
 885         if(c > 0)
 886             max = n-1;
 887         else
 888             min = n+1;
 889     }
 890
 891     if(This->data->vtbl && This->data->vtbl->get_dispid) {
 892         HRESULT hres;
 893
 894         hres = This->data->vtbl->get_dispid(This, name, grfdex, ret);
 895         if(hres != DISP_E_UNKNOWNNAME)
 896             return hres;
 897     }
 898
 899     return DISP_E_UNKNOWNNAME;
 900 }
 901
 902 /* List all types used by IDispatchEx-based properties */
 903 #define BUILTIN_TYPES_SWITCH                            \
 904     CASE_VT(VT_I2, INT16, V_I2);                        \
 905     CASE_VT(VT_I4, INT32, V_I4);                        \
 906     CASE_VT(VT_R4, float, V_R4);                        \
 907     CASE_VT(VT_BSTR, BSTR, V_BSTR);                     \
 908     CASE_VT(VT_BOOL, VARIANT_BOOL, V_BOOL);             \
 909     CASE_VT(VT_VARIANT, VARIANT, *);                    \
 910     CASE_VT(VT_PTR, void*, V_BYREF);                    \
 911     CASE_VT(VT_UNKNOWN, IUnknown*, V_UNKNOWN);          \
 912     CASE_VT(VT_DISPATCH, IDispatch*, V_DISPATCH)
 913
 914 static HRESULT change_type(VARIANT *dst, VARIANT *src, VARTYPE vt, IServiceProvider *caller)
 915 {
 916     V_VT(dst) = VT_EMPTY;
 917
 918     if(caller) {
 919         IVariantChangeType *change_type = NULL;
 920         HRESULT hres;
 921
 922         hres = IServiceProvider_QueryService(caller, &SID_VariantConversion, &IID_IVariantChangeType, (void**)&change_type);
 923         if(SUCCEEDED(hres)) {
 924             hres = IVariantChangeType_ChangeType(change_type, dst, src, LOCALE_NEUTRAL, vt);
 925             IVariantChangeType_Release(change_type);
 926             return hres;
 927         }
 928     }
 929
 930     switch(vt) {
 931     case VT_BOOL:
 932         if(V_VT(src) == VT_BSTR) {
 933             V_VT(dst) = VT_BOOL;
 934             V_BOOL(dst) = V_BSTR(src) && *V_BSTR(src) ? VARIANT_TRUE : VARIANT_FALSE;
 935             return S_OK;
 936         }
 937         break;
 938     }
 939
 940     return VariantChangeType(dst, src, 0, vt);
 941 }
 942
 943 static HRESULT builtin_propget(DispatchEx *This, func_info_t *func, DISPPARAMS *dp, VARIANT *res)
 944 {
 945     IUnknown *iface;
 946     HRESULT hres;
 947
 948     if(dp && dp->cArgs) {
 949         FIXME("cArgs %d\n", dp->cArgs);
 950         return E_NOTIMPL;
 951     }
 952
 953     assert(func->get_vtbl_off);
 954
 955     hres = IUnknown_QueryInterface(This->outer, tid_ids[func->tid], (void**)&iface);
 956     if(SUCCEEDED(hres)) {
 957         switch(func->prop_vt) {
 958 #define CASE_VT(vt,type,access) \
 959         case vt: { \
 960             type val; \
 961             hres = ((HRESULT (WINAPI*)(IUnknown*,type*))((void**)iface->lpVtbl)[func->get_vtbl_off])(iface,&val); \
 962             if(SUCCEEDED(hres)) \
 963                 access(res) = val; \
 964             } \
 965             break
 966         BUILTIN_TYPES_SWITCH;
 967 #undef CASE_VT
 968         default:
 969             FIXME("Unhandled vt %d\n", func->prop_vt);
 970             hres = E_NOTIMPL;
 971         }
 972         IUnknown_Release(iface);
 973     }
 974
 975     if(FAILED(hres))
 976         return hres;
 977
 978     if(func->prop_vt != VT_VARIANT)
 979         V_VT(res) = func->prop_vt == VT_PTR ? VT_DISPATCH : func->prop_vt;
 980     return S_OK;
 981 }
 982
 983 static HRESULT builtin_propput(DispatchEx *This, func_info_t *func, DISPPARAMS *dp, IServiceProvider *caller)
 984 {
 985     VARIANT *v, tmpv;
 986     IUnknown *iface;
 987     HRESULT hres;
 988
 989     if(dp->cArgs != 1 || (dp->cNamedArgs == 1 && *dp->rgdispidNamedArgs != DISPID_PROPERTYPUT)
 990             || dp->cNamedArgs > 1) {
 991         FIXME("invalid args\n");
 992         return E_INVALIDARG;
 993     }
 994
 995     if(!func->put_vtbl_off) {
 996         FIXME("No setter\n");
 997         return E_FAIL;
 998     }
 999
1000     v = dp->rgvarg;
1001     if(func->prop_vt != VT_VARIANT && V_VT(v) != func->prop_vt) {
1002         hres = change_type(&tmpv, v, func->prop_vt, caller);
1003         if(FAILED(hres))
1004             return hres;
1005         v = &tmpv;
1006     }
1007
1008     hres = IUnknown_QueryInterface(This->outer, tid_ids[func->tid], (void**)&iface);
1009     if(SUCCEEDED(hres)) {
1010         switch(func->prop_vt) {
1011 #define CASE_VT(vt,type,access) \
1012         case vt: \
1013             hres = ((HRESULT (WINAPI*)(IUnknown*,type))((void**)iface->lpVtbl)[func->put_vtbl_off])(iface,access(v)); \
1014             break
1015         BUILTIN_TYPES_SWITCH;
1016 #undef CASE_VT
1017         default:
1018             FIXME("Unimplemented vt %d\n", func->prop_vt);
1019             hres = E_NOTIMPL;
1020         }
1021
1022         IUnknown_Release(iface);
1023     }
1024
1025     if(v == &tmpv)
1026         VariantClear(v);
1027     return hres;
1028 }
1029
1030 static HRESULT invoke_builtin_prop(DispatchEx *This, DISPID id, LCID lcid, WORD flags, DISPPARAMS *dp,
1031         VARIANT *res, EXCEPINFO *ei, IServiceProvider *caller)
1032 {
1033     dispex_data_t *data;
1034     func_info_t *func;
1035     HRESULT hres;
1036
1037     data = get_dispex_data(This);
1038     if(!data)
1039         return E_FAIL;
1040
1041     hres = get_builtin_func(data, id, &func);
1042     if(id == DISPID_VALUE && hres == DISP_E_UNKNOWNNAME)
1043         return dispex_value(This, lcid, flags, dp, res, ei, caller);
1044     if(FAILED(hres))
1045         return hres;
1046
1047     if(func->func_disp_idx != -1)
1048         return function_invoke(This, func, flags, dp, res, ei);
1049
1050     switch(flags) {
1051     case DISPATCH_PROPERTYPUT:
1052         if(res)
1053             V_VT(res) = VT_EMPTY;
1054         hres = builtin_propput(This, func, dp, caller);
1055         break;
1056     case DISPATCH_PROPERTYGET:
1057         hres = builtin_propget(This, func, dp, res);
1058         break;
1059     default:
1060         if(!func->get_vtbl_off) {
1061             hres = typeinfo_invoke(This, func, flags, dp, res, ei);
1062         }else {
1063             VARIANT v;
1064
1065             hres = builtin_propget(This, func, NULL, &v);
1066             if(FAILED(hres))
1067                 return hres;
1068
1069             if(flags != (DISPATCH_PROPERTYGET|DISPATCH_METHOD)) {
1070                 if(V_VT(&v) != VT_DISPATCH) {
1071                     FIXME("Not a function %s\n", debugstr_variant(&v));
1072                     VariantClear(&v);
1073                     return E_FAIL;
1074                 }
1075
1076                 hres = invoke_disp_value(This, V_DISPATCH(&v), lcid, flags, dp, res, ei, caller);
1077                 IDispatch_Release(V_DISPATCH(&v));
1078             }else if(res) {
1079                 *res = v;
1080             }else {
1081                 IDispatch_Release(V_DISPATCH(&v));
1082             }
1083         }
1084     }
1085
1086     return hres;
1087 }
1088
1089 HRESULT remove_prop(DispatchEx *This, BSTR name, VARIANT_BOOL *success)
1090 {
1091     dynamic_prop_t *prop;
1092     DISPID id;
1093     HRESULT hres;
1094
1095     hres = get_builtin_id(This, name, 0, &id);
1096     if(hres == S_OK) {
1097         DISPID named_id = DISPID_PROPERTYPUT;
1098         VARIANT var;
1099         DISPPARAMS dp = {&var,&named_id,1,1};
1100         EXCEPINFO ei;
1101
1102         V_VT(&var) = VT_EMPTY;
1103         memset(&ei, 0, sizeof(ei));
1104         hres = invoke_builtin_prop(This, id, 0, DISPATCH_PROPERTYPUT, &dp, NULL, &ei, NULL);
1105         if(FAILED(hres))
1106             return hres;
1107
1108         *success = VARIANT_TRUE;
1109         return S_OK;
1110     }
1111
1112     hres = get_dynamic_prop(This, name, 0, &prop);
1113     if(FAILED(hres)) {
1114         if(hres != DISP_E_UNKNOWNNAME)
1115             return hres;
1116         *success = VARIANT_FALSE;
1117         return S_OK;
1118     }
1119
1120     VariantClear(&prop->var);
1121     prop->flags |= DYNPROP_DELETED;
1122     *success = VARIANT_TRUE;
1123     return S_OK;
1124 }
1125
1126 static inline DispatchEx *impl_from_IDispatchEx(IDispatchEx *iface)
1127 {
1128     return CONTAINING_RECORD(iface, DispatchEx, IDispatchEx_iface);
1129 }
1130
1131 static HRESULT WINAPI DispatchEx_QueryInterface(IDispatchEx *iface, REFIID riid, void **ppv)
1132 {
1133     DispatchEx *This = impl_from_IDispatchEx(iface);
1134
1135     return IUnknown_QueryInterface(This->outer, riid, ppv);
1136 }
1137
1138 static ULONG WINAPI DispatchEx_AddRef(IDispatchEx *iface)
1139 {
1140     DispatchEx *This = impl_from_IDispatchEx(iface);
1141
1142     return IUnknown_AddRef(This->outer);
1143 }
1144
1145 static ULONG WINAPI DispatchEx_Release(IDispatchEx *iface)
1146 {
1147     DispatchEx *This = impl_from_IDispatchEx(iface);
1148
1149     return IUnknown_Release(This->outer);
1150 }
1151
1152 static HRESULT WINAPI DispatchEx_GetTypeInfoCount(IDispatchEx *iface, UINT *pctinfo)
1153 {
1154     DispatchEx *This = impl_from_IDispatchEx(iface);
1155
1156     TRACE("(%p)->(%p)\n", This, pctinfo);
1157
1158     *pctinfo = 1;
1159     return S_OK;
1160 }
1161
1162 static HRESULT WINAPI DispatchEx_GetTypeInfo(IDispatchEx *iface, UINT iTInfo,
1163                                               LCID lcid, ITypeInfo **ppTInfo)
1164 {
1165     DispatchEx *This = impl_from_IDispatchEx(iface);
1166     HRESULT hres;
1167
1168     TRACE("(%p)->(%u %u %p)\n", This, iTInfo, lcid, ppTInfo);
1169
1170     hres = get_typeinfo(This->data->disp_tid, ppTInfo);
1171     if(FAILED(hres))
1172         return hres;
1173
1174     ITypeInfo_AddRef(*ppTInfo);
1175     return S_OK;
1176 }
1177
1178 static HRESULT WINAPI DispatchEx_GetIDsOfNames(IDispatchEx *iface, REFIID riid,
1179                                                 LPOLESTR *rgszNames, UINT cNames,
1180                                                 LCID lcid, DISPID *rgDispId)
1181 {
1182     DispatchEx *This = impl_from_IDispatchEx(iface);
1183     UINT i;
1184     HRESULT hres;
1185
1186     TRACE("(%p)->(%s %p %u %u %p)\n", This, debugstr_guid(riid), rgszNames, cNames,
1187           lcid, rgDispId);
1188
1189     for(i=0; i < cNames; i++) {
1190         hres = IDispatchEx_GetDispID(&This->IDispatchEx_iface, rgszNames[i], 0, rgDispId+i);
1191         if(FAILED(hres))
1192             return hres;
1193     }
1194
1195     return S_OK;
1196 }
1197
1198 static HRESULT WINAPI DispatchEx_Invoke(IDispatchEx *iface, DISPID dispIdMember,
1199                             REFIID riid, LCID lcid, WORD wFlags, DISPPARAMS *pDispParams,
1200                             VARIANT *pVarResult, EXCEPINFO *pExcepInfo, UINT *puArgErr)
1201 {
1202     DispatchEx *This = impl_from_IDispatchEx(iface);
1203
1204     TRACE("(%p)->(%d %s %d %d %p %p %p %p)\n", This, dispIdMember, debugstr_guid(riid),
1205           lcid, wFlags, pDispParams, pVarResult, pExcepInfo, puArgErr);
1206
1207     return IDispatchEx_InvokeEx(&This->IDispatchEx_iface, dispIdMember, lcid, wFlags, pDispParams,
1208             pVarResult, pExcepInfo, NULL);
1209 }
1210
1211 static HRESULT WINAPI DispatchEx_GetDispID(IDispatchEx *iface, BSTR bstrName, DWORD grfdex, DISPID *pid)
1212 {
1213     DispatchEx *This = impl_from_IDispatchEx(iface);
1214     dynamic_prop_t *dprop;
1215     HRESULT hres;
1216
1217     TRACE("(%p)->(%s %x %p)\n", This, debugstr_w(bstrName), grfdex, pid);
1218
1219     if(grfdex & ~(fdexNameCaseSensitive|fdexNameCaseInsensitive|fdexNameEnsure|fdexNameImplicit|FDEX_VERSION_MASK))
1220         FIXME("Unsupported grfdex %x\n", grfdex);
1221
1222     hres = get_builtin_id(This, bstrName, grfdex, pid);
1223     if(hres != DISP_E_UNKNOWNNAME)
1224         return hres;
1225
1226     hres = get_dynamic_prop(This, bstrName, grfdex, &dprop);
1227     if(FAILED(hres))
1228         return hres;
1229
1230     *pid = DISPID_DYNPROP_0 + (dprop - This->dynamic_data->props);
1231     return S_OK;
1232 }
1233
1234 static HRESULT WINAPI DispatchEx_InvokeEx(IDispatchEx *iface, DISPID id, LCID lcid, WORD wFlags, DISPPARAMS *pdp,
1235         VARIANT *pvarRes, EXCEPINFO *pei, IServiceProvider *pspCaller)
1236 {
1237     DispatchEx *This = impl_from_IDispatchEx(iface);
1238     HRESULT hres;
1239
1240     TRACE("(%p)->(%x %x %x %p %p %p %p)\n", This, id, lcid, wFlags, pdp, pvarRes, pei, pspCaller);
1241
1242     switch(get_dispid_type(id)) {
1243     case DISPEXPROP_CUSTOM:
1244         if(!This->data->vtbl || !This->data->vtbl->invoke)
1245             return DISP_E_UNKNOWNNAME;
1246         return This->data->vtbl->invoke(This, id, lcid, wFlags, pdp, pvarRes, pei, pspCaller);
1247
1248     case DISPEXPROP_DYNAMIC: {
1249         DWORD idx = id - DISPID_DYNPROP_0;
1250         dynamic_prop_t *prop;
1251
1252         if(!get_dynamic_data(This) || This->dynamic_data->prop_cnt <= idx)
1253             return DISP_E_UNKNOWNNAME;
1254
1255         prop = This->dynamic_data->props+idx;
1256
1257         switch(wFlags) {
1258         case DISPATCH_METHOD|DISPATCH_PROPERTYGET:
1259             if(!pvarRes)
1260                 return E_INVALIDARG;
1261             /* fall through */
1262         case DISPATCH_METHOD:
1263             if(V_VT(&prop->var) != VT_DISPATCH) {
1264                 FIXME("invoke %s\n", debugstr_variant(&prop->var));
1265                 return E_NOTIMPL;
1266             }
1267
1268             return invoke_disp_value(This, V_DISPATCH(&prop->var), lcid, wFlags, pdp, pvarRes, pei, pspCaller);
1269         case DISPATCH_PROPERTYGET:
1270             if(prop->flags & DYNPROP_DELETED)
1271                 return DISP_E_UNKNOWNNAME;
1272             V_VT(pvarRes) = VT_EMPTY;
1273             return variant_copy(pvarRes, &prop->var);
1274         case DISPATCH_PROPERTYPUT|DISPATCH_PROPERTYPUTREF:
1275         case DISPATCH_PROPERTYPUT:
1276             if(pdp->cArgs != 1 || (pdp->cNamedArgs == 1 && *pdp->rgdispidNamedArgs != DISPID_PROPERTYPUT)
1277                || pdp->cNamedArgs > 1) {
1278                 FIXME("invalid args\n");
1279                 return E_INVALIDARG;
1280             }
1281
1282             TRACE("put %s\n", debugstr_variant(pdp->rgvarg));
1283             VariantClear(&prop->var);
1284             hres = variant_copy(&prop->var, pdp->rgvarg);
1285             if(FAILED(hres))
1286                 return hres;
1287
1288             prop->flags &= ~DYNPROP_DELETED;
1289             return S_OK;
1290         default:
1291             FIXME("unhandled wFlags %x\n", wFlags);
1292             return E_NOTIMPL;
1293         }
1294     }
1295     case DISPEXPROP_BUILTIN:
1296         if(wFlags == DISPATCH_CONSTRUCT) {
1297             if(id == DISPID_VALUE) {
1298                 if(This->data->vtbl && This->data->vtbl->value) {
1299                     return This->data->vtbl->value(This, lcid, wFlags, pdp, pvarRes, pei, pspCaller);
1300                 }
1301                 FIXME("DISPATCH_CONSTRUCT flag but missing value function\n");
1302                 return E_FAIL;
1303             }
1304             FIXME("DISPATCH_CONSTRUCT flag without DISPID_VALUE\n");
1305             return E_FAIL;
1306         }
1307
1308         return invoke_builtin_prop(This, id, lcid, wFlags, pdp, pvarRes, pei, pspCaller);
1309     default:
1310         assert(0);
1311         return E_FAIL;
1312     }
1313 }
1314
1315 static HRESULT WINAPI DispatchEx_DeleteMemberByName(IDispatchEx *iface, BSTR bstrName, DWORD grfdex)
1316 {
1317     DispatchEx *This = impl_from_IDispatchEx(iface);
1318
1319     TRACE("(%p)->(%s %x)\n", This, debugstr_w(bstrName), grfdex);
1320
1321     /* Not implemented by IE */
1322     return E_NOTIMPL;
1323 }
1324
1325 static HRESULT WINAPI DispatchEx_DeleteMemberByDispID(IDispatchEx *iface, DISPID id)
1326 {
1327     DispatchEx *This = impl_from_IDispatchEx(iface);
1328
1329     TRACE("(%p)->(%x)\n", This, id);
1330
1331     /* Not implemented by IE */
1332     return E_NOTIMPL;
1333 }
1334
1335 static HRESULT WINAPI DispatchEx_GetMemberProperties(IDispatchEx *iface, DISPID id, DWORD grfdexFetch, DWORD *pgrfdex)
1336 {
1337     DispatchEx *This = impl_from_IDispatchEx(iface);
1338     FIXME("(%p)->(%x %x %p)\n", This, id, grfdexFetch, pgrfdex);
1339     return E_NOTIMPL;
1340 }
1341
1342 static HRESULT WINAPI DispatchEx_GetMemberName(IDispatchEx *iface, DISPID id, BSTR *pbstrName)
1343 {
1344     DispatchEx *This = impl_from_IDispatchEx(iface);
1345     dispex_data_t *data;
1346     func_info_t *func;
1347     HRESULT hres;
1348
1349     TRACE("(%p)->(%x %p)\n", This, id, pbstrName);
1350
1351     if(is_dynamic_dispid(id)) {
1352         DWORD idx = id - DISPID_DYNPROP_0;
1353
1354         if(!get_dynamic_data(This) || This->dynamic_data->prop_cnt <= idx)
1355             return DISP_E_UNKNOWNNAME;
1356
1357         *pbstrName = SysAllocString(This->dynamic_data->props[idx].name);
1358         if(!*pbstrName)
1359             return E_OUTOFMEMORY;
1360
1361         return S_OK;
1362     }
1363
1364     data = get_dispex_data(This);
1365     if(!data)
1366         return E_FAIL;
1367
1368     hres = get_builtin_func(data, id, &func);
1369     if(FAILED(hres))
1370         return hres;
1371
1372     *pbstrName = SysAllocString(func->name);
1373     if(!*pbstrName)
1374         return E_OUTOFMEMORY;
1375     return S_OK;
1376 }
1377
1378 static HRESULT WINAPI DispatchEx_GetNextDispID(IDispatchEx *iface, DWORD grfdex, DISPID id, DISPID *pid)
1379 {
1380     DispatchEx *This = impl_from_IDispatchEx(iface);
1381     dispex_data_t *data;
1382     func_info_t *func;
1383     HRESULT hres;
1384
1385     TRACE("(%p)->(%x %x %p)\n", This, grfdex, id, pid);
1386
1387     if(is_dynamic_dispid(id)) {
1388         DWORD idx = id - DISPID_DYNPROP_0;
1389
1390         if(!get_dynamic_data(This) || This->dynamic_data->prop_cnt <= idx)
1391             return DISP_E_UNKNOWNNAME;
1392
1393         while(++idx < This->dynamic_data->prop_cnt && This->dynamic_data->props[idx].flags & DYNPROP_DELETED);
1394
1395         if(idx == This->dynamic_data->prop_cnt) {
1396             *pid = DISPID_STARTENUM;
1397             return S_FALSE;
1398         }
1399
1400         *pid = DISPID_DYNPROP_0+idx;
1401         return S_OK;
1402     }
1403
1404     data = get_dispex_data(This);
1405     if(!data)
1406         return E_FAIL;
1407
1408     if(id == DISPID_STARTENUM) {
1409         func = data->funcs;
1410     }else {
1411         hres = get_builtin_func(data, id, &func);
1412         if(FAILED(hres))
1413             return hres;
1414         func++;
1415     }
1416
1417     while(func < data->funcs+data->func_cnt) {
1418         /* FIXME: Skip hidden properties */
1419         if(func->func_disp_idx == -1) {
1420             *pid = func->id;
1421             return S_OK;
1422         }
1423         func++;
1424     }
1425
1426     if(get_dynamic_data(This) && This->dynamic_data->prop_cnt) {
1427         *pid = DISPID_DYNPROP_0;
1428         return S_OK;
1429     }
1430
1431     *pid = DISPID_STARTENUM;
1432     return S_FALSE;
1433 }
1434
1435 static HRESULT WINAPI DispatchEx_GetNameSpaceParent(IDispatchEx *iface, IUnknown **ppunk)
1436 {
1437     DispatchEx *This = impl_from_IDispatchEx(iface);
1438     FIXME("(%p)->(%p)\n", This, ppunk);
1439     return E_NOTIMPL;
1440 }
1441
1442 static IDispatchExVtbl DispatchExVtbl = {
1443     DispatchEx_QueryInterface,
1444     DispatchEx_AddRef,
1445     DispatchEx_Release,
1446     DispatchEx_GetTypeInfoCount,
1447     DispatchEx_GetTypeInfo,
1448     DispatchEx_GetIDsOfNames,
1449     DispatchEx_Invoke,
1450     DispatchEx_GetDispID,
1451     DispatchEx_InvokeEx,
1452     DispatchEx_DeleteMemberByName,
1453     DispatchEx_DeleteMemberByDispID,
1454     DispatchEx_GetMemberProperties,
1455     DispatchEx_GetMemberName,
1456     DispatchEx_GetNextDispID,
1457     DispatchEx_GetNameSpaceParent
1458 };
1459
1460 BOOL dispex_query_interface(DispatchEx *This, REFIID riid, void **ppv)
1461 {
1462     static const IID IID_UndocumentedScriptIface =
1463         {0x719c3050,0xf9d3,0x11cf,{0xa4,0x93,0x00,0x40,0x05,0x23,0xa8,0xa0}};
1464     static const IID IID_IDispatchJS =
1465         {0x719c3050,0xf9d3,0x11cf,{0xa4,0x93,0x00,0x40,0x05,0x23,0xa8,0xa6}};
1466
1467     if(IsEqualGUID(&IID_IDispatch, riid)) {
1468         TRACE("(%p)->(IID_IDispatch %p)\n", This, ppv);
1469         *ppv = &This->IDispatchEx_iface;
1470     }else if(IsEqualGUID(&IID_IDispatchEx, riid)) {
1471         TRACE("(%p)->(IID_IDispatchEx %p)\n", This, ppv);
1472         *ppv = &This->IDispatchEx_iface;
1473     }else if(IsEqualGUID(&IID_IDispatchJS, riid)) {
1474         TRACE("(%p)->(IID_IDispatchJS %p) returning NULL\n", This, ppv);
1475         *ppv = NULL;
1476     }else if(IsEqualGUID(&IID_UndocumentedScriptIface, riid)) {
1477         TRACE("(%p)->(IID_UndocumentedScriptIface %p) returning NULL\n", This, ppv);
1478         *ppv = NULL;
1479     }else {
1480         return FALSE;
1481     }
1482
1483     if(*ppv)
1484         IUnknown_AddRef((IUnknown*)*ppv);
1485     return TRUE;
1486 }
1487
1488 void dispex_traverse(DispatchEx *This, nsCycleCollectionTraversalCallback *cb)
1489 {
1490     dynamic_prop_t *prop;
1491
1492     if(!This->dynamic_data)
1493         return;
1494
1495     for(prop = This->dynamic_data->props; prop < This->dynamic_data->props + This->dynamic_data->prop_cnt; prop++) {
1496         if(V_VT(&prop->var) == VT_DISPATCH)
1497             note_cc_edge((nsISupports*)V_DISPATCH(&prop->var), "dispex_data", cb);
1498     }
1499
1500     /* FIXME: Traverse func_disps */
1501 }
1502
1503 void dispex_unlink(DispatchEx *This)
1504 {
1505     dynamic_prop_t *prop;
1506
1507     if(!This->dynamic_data)
1508         return;
1509
1510     for(prop = This->dynamic_data->props; prop < This->dynamic_data->props + This->dynamic_data->prop_cnt; prop++) {
1511         if(V_VT(&prop->var) == VT_DISPATCH) {
1512             V_VT(&prop->var) = VT_EMPTY;
1513             IDispatch_Release(V_DISPATCH(&prop->var));
1514         }else {
1515             VariantClear(&prop->var);
1516         }
1517     }
1518 }
1519
1520 void release_dispex(DispatchEx *This)
1521 {
1522     dynamic_prop_t *prop;
1523
1524     if(!This->dynamic_data)
1525         return;
1526
1527     for(prop = This->dynamic_data->props; prop < This->dynamic_data->props + This->dynamic_data->prop_cnt; prop++) {
1528         VariantClear(&prop->var);
1529         heap_free(prop->name);
1530     }
1531
1532     heap_free(This->dynamic_data->props);
1533
1534     if(This->dynamic_data->func_disps) {
1535         func_obj_entry_t *iter;
1536
1537         for(iter = This->dynamic_data->func_disps; iter < This->dynamic_data->func_disps+This->data->data->func_disp_cnt; iter++) {
1538             if(iter->func_obj) {
1539                 iter->func_obj->obj = NULL;
1540                 IDispatchEx_Release(&iter->func_obj->dispex.IDispatchEx_iface);
1541             }
1542             if(iter->val)
1543                 IDispatch_Release(iter->val);
1544         }
1545
1546         heap_free(This->dynamic_data->func_disps);
1547     }
1548
1549     heap_free(This->dynamic_data);
1550 }
1551
1552 void init_dispex(DispatchEx *dispex, IUnknown *outer, dispex_static_data_t *data)
1553 {
1554     dispex->IDispatchEx_iface.lpVtbl = &DispatchExVtbl;
1555     dispex->outer = outer;
1556     dispex->data = data;
1557     dispex->dynamic_data = NULL;
1558 }