programs/services/rpc.c

   1 /*
   2  * Services.exe - RPC functions
   3  *
   4  * Copyright 2007 Google (Mikolaj Zalewski)
   5  *
   6  * This library is free software; you can redistribute it and/or
   7  * modify it under the terms of the GNU Lesser General Public
   8  * License as published by the Free Software Foundation; either
   9  * version 2.1 of the License, or (at your option) any later version.
  10  *
  11  * This library is distributed in the hope that it will be useful,
  12  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  13  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  14  * Lesser General Public License for more details.
  15  *
  16  * You should have received a copy of the GNU Lesser General Public
  17  * License along with this library; if not, write to the Free Software
  18  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
  19  */
  20
  21 #define WIN32_LEAN_AND_MEAN
  22 #define NONAMELESSSTRUCT
  23 #define NONAMELESSUNION
  24
  25 #include <stdarg.h>
  26 #include <windows.h>
  27 #include <winternl.h>
  28 #include <winsvc.h>
  29 #include <ntsecapi.h>
  30 #include <rpc.h>
  31
  32 #include "wine/list.h"
  33 #include "wine/debug.h"
  34
  35 #include "services.h"
  36 #include "svcctl.h"
  37
  38 WINE_DEFAULT_DEBUG_CHANNEL(service);
  39
  40 static const GENERIC_MAPPING g_scm_generic =
  41 {
  42     (STANDARD_RIGHTS_READ | SC_MANAGER_ENUMERATE_SERVICE | SC_MANAGER_QUERY_LOCK_STATUS),
  43     (STANDARD_RIGHTS_WRITE | SC_MANAGER_CREATE_SERVICE | SC_MANAGER_MODIFY_BOOT_CONFIG),
  44     (STANDARD_RIGHTS_EXECUTE | SC_MANAGER_CONNECT | SC_MANAGER_LOCK),
  45     SC_MANAGER_ALL_ACCESS
  46 };
  47
  48 static const GENERIC_MAPPING g_svc_generic =
  49 {
  50     (STANDARD_RIGHTS_READ | SERVICE_QUERY_CONFIG | SERVICE_QUERY_STATUS | SERVICE_INTERROGATE | SERVICE_ENUMERATE_DEPENDENTS),
  51     (STANDARD_RIGHTS_WRITE | SERVICE_CHANGE_CONFIG),
  52     (STANDARD_RIGHTS_EXECUTE | SERVICE_START | SERVICE_STOP | SERVICE_PAUSE_CONTINUE | SERVICE_USER_DEFINED_CONTROL),
  53     SERVICE_ALL_ACCESS
  54 };
  55
  56 typedef enum
  57 {
  58     SC_HTYPE_DONT_CARE = 0,
  59     SC_HTYPE_MANAGER,
  60     SC_HTYPE_SERVICE,
  61     SC_HTYPE_NOTIFY
  62 } SC_HANDLE_TYPE;
  63
  64 struct sc_handle
  65 {
  66     SC_HANDLE_TYPE type;
  67     DWORD access;
  68 };
  69
  70 struct sc_manager_handle       /* service control manager handle */
  71 {
  72     struct sc_handle hdr;
  73     struct scmdatabase *db;
  74 };
  75
  76 struct sc_notify_handle
  77 {
  78     struct sc_handle hdr;
  79     HANDLE event;
  80     DWORD notify_mask;
  81     LONG ref;
  82     SC_RPC_NOTIFY_PARAMS_LIST *params_list;
  83 };
  84
  85 struct sc_service_handle       /* service handle */
  86 {
  87     struct sc_handle hdr;
  88     struct list entry;
  89     BOOL status_notified;
  90     struct service_entry *service_entry;
  91     struct sc_notify_handle *notify;
  92 };
  93
  94 static void sc_notify_retain(struct sc_notify_handle *notify)
  95 {
  96     InterlockedIncrement(&notify->ref);
  97 }
  98
  99 static void sc_notify_release(struct sc_notify_handle *notify)
 100 {
 101     ULONG r = InterlockedDecrement(&notify->ref);
 102     if (r == 0)
 103     {
 104         CloseHandle(notify->event);
 105         if (notify->params_list)
 106             free(notify->params_list->NotifyParamsArray[0].params);
 107         free(notify->params_list);
 108         free(notify);
 109     }
 110 }
 111
 112 struct sc_lock
 113 {
 114     struct scmdatabase *db;
 115 };
 116
 117 static const WCHAR emptyW[] = {0};
 118 static PTP_CLEANUP_GROUP cleanup_group;
 119 HANDLE exit_event;
 120
 121 static void CALLBACK group_cancel_callback(void *object, void *userdata)
 122 {
 123     struct process_entry *process = object;
 124     release_process(process);
 125 }
 126
 127 static void CALLBACK terminate_callback(TP_CALLBACK_INSTANCE *instance, void *context,
 128                                         TP_WAIT *wait, TP_WAIT_RESULT result)
 129 {
 130     struct process_entry *process = context;
 131     if (result == WAIT_TIMEOUT) process_terminate(process);
 132     release_process(process);
 133     CloseThreadpoolWait(wait);
 134 }
 135
 136 static void terminate_after_timeout(struct process_entry *process, DWORD timeout)
 137 {
 138     TP_CALLBACK_ENVIRON environment;
 139     LARGE_INTEGER timestamp;
 140     TP_WAIT *wait;
 141     FILETIME ft;
 142
 143     memset(&environment, 0, sizeof(environment));
 144     environment.Version = 1;
 145     environment.CleanupGroup = cleanup_group;
 146     environment.CleanupGroupCancelCallback = group_cancel_callback;
 147
 148     timestamp.QuadPart = (ULONGLONG)timeout * -10000;
 149     ft.dwLowDateTime   = timestamp.u.LowPart;
 150     ft.dwHighDateTime  = timestamp.u.HighPart;
 151
 152     if ((wait = CreateThreadpoolWait(terminate_callback, grab_process(process), &environment)))
 153         SetThreadpoolWait(wait, process->process, &ft);
 154     else
 155         release_process(process);
 156 }
 157
 158 static void CALLBACK shutdown_callback(TP_CALLBACK_INSTANCE *instance, void *context)
 159 {
 160     struct process_entry *process = context;
 161     DWORD result;
 162
 163     result = WaitForSingleObject(process->control_mutex, 30000);
 164     if (result == WAIT_OBJECT_0)
 165     {
 166         process_send_control(process, FALSE, emptyW, SERVICE_CONTROL_STOP, NULL, 0, &result);
 167         ReleaseMutex(process->control_mutex);
 168     }
 169
 170     release_process(process);
 171 }
 172
 173 static void shutdown_shared_process(struct process_entry *process)
 174 {
 175     TP_CALLBACK_ENVIRON environment;
 176     struct service_entry *service;
 177     struct scmdatabase *db = process->db;
 178
 179     scmdatabase_lock(db);
 180     LIST_FOR_EACH_ENTRY(service, &db->services, struct service_entry, entry)
 181     {
 182         if (service->process != process) continue;
 183         service->status.dwCurrentState = SERVICE_STOP_PENDING;
 184     }
 185     scmdatabase_unlock(db);
 186
 187     memset(&environment, 0, sizeof(environment));
 188     environment.Version = 1;
 189     environment.CleanupGroup = cleanup_group;
 190     environment.CleanupGroupCancelCallback = group_cancel_callback;
 191
 192     if (!TrySubmitThreadpoolCallback(shutdown_callback, grab_process(process), &environment))
 193         release_process(process);
 194 }
 195
 196 static void free_service_strings(struct service_entry *old, struct service_entry *new)
 197 {
 198     QUERY_SERVICE_CONFIGW *old_cfg = &old->config;
 199     QUERY_SERVICE_CONFIGW *new_cfg = &new->config;
 200
 201     if (old_cfg->lpBinaryPathName != new_cfg->lpBinaryPathName)
 202         free(old_cfg->lpBinaryPathName);
 203
 204     if (old_cfg->lpLoadOrderGroup != new_cfg->lpLoadOrderGroup)
 205         free(old_cfg->lpLoadOrderGroup);
 206
 207     if (old_cfg->lpServiceStartName != new_cfg->lpServiceStartName)
 208         free(old_cfg->lpServiceStartName);
 209
 210     if (old_cfg->lpDisplayName != new_cfg->lpDisplayName)
 211         free(old_cfg->lpDisplayName);
 212
 213     if (old->dependOnServices != new->dependOnServices)
 214         free(old->dependOnServices);
 215
 216     if (old->dependOnGroups != new->dependOnGroups)
 217         free(old->dependOnGroups);
 218 }
 219
 220 /* Check if the given handle is of the required type and allows the requested access. */
 221 static DWORD validate_context_handle(SC_RPC_HANDLE handle, DWORD type, DWORD needed_access, struct sc_handle **out_hdr)
 222 {
 223     struct sc_handle *hdr = handle;
 224
 225     if (type != SC_HTYPE_DONT_CARE && hdr->type != type)
 226     {
 227         WINE_ERR("Handle is of an invalid type (%d, %ld)\n", hdr->type, type);
 228         return ERROR_INVALID_HANDLE;
 229     }
 230
 231     if ((needed_access & hdr->access) != needed_access)
 232     {
 233         WINE_ERR("Access denied - handle created with access %lx, needed %lx\n", hdr->access, needed_access);
 234         return ERROR_ACCESS_DENIED;
 235     }
 236
 237     *out_hdr = hdr;
 238     return ERROR_SUCCESS;
 239 }
 240
 241 static DWORD validate_scm_handle(SC_RPC_HANDLE handle, DWORD needed_access, struct sc_manager_handle **manager)
 242 {
 243     struct sc_handle *hdr;
 244     DWORD err = validate_context_handle(handle, SC_HTYPE_MANAGER, needed_access, &hdr);
 245     if (err == ERROR_SUCCESS)
 246         *manager = (struct sc_manager_handle *)hdr;
 247     return err;
 248 }
 249
 250 static DWORD validate_service_handle(SC_RPC_HANDLE handle, DWORD needed_access, struct sc_service_handle **service)
 251 {
 252     struct sc_handle *hdr;
 253     DWORD err = validate_context_handle(handle, SC_HTYPE_SERVICE, needed_access, &hdr);
 254     if (err == ERROR_SUCCESS)
 255         *service = (struct sc_service_handle *)hdr;
 256     return err;
 257 }
 258
 259 static DWORD validate_notify_handle(SC_RPC_HANDLE handle, DWORD needed_access, struct sc_notify_handle **notify)
 260 {
 261     struct sc_handle *hdr;
 262     DWORD err = validate_context_handle(handle, SC_HTYPE_NOTIFY, needed_access, &hdr);
 263     if (err == ERROR_SUCCESS)
 264         *notify = (struct sc_notify_handle *)hdr;
 265     return err;
 266 }
 267
 268 DWORD __cdecl svcctl_OpenSCManagerW(
 269     MACHINE_HANDLEW MachineName, /* Note: this parameter is ignored */
 270     LPCWSTR DatabaseName,
 271     DWORD dwAccessMask,
 272     SC_RPC_HANDLE *handle)
 273 {
 274     struct sc_manager_handle *manager;
 275
 276     WINE_TRACE("(%s, %s, %lx)\n", wine_dbgstr_w(MachineName), wine_dbgstr_w(DatabaseName), dwAccessMask);
 277
 278     if (DatabaseName != NULL && DatabaseName[0])
 279     {
 280         if (lstrcmpW(DatabaseName, SERVICES_FAILED_DATABASEW) == 0)
 281             return ERROR_DATABASE_DOES_NOT_EXIST;
 282         if (lstrcmpW(DatabaseName, SERVICES_ACTIVE_DATABASEW) != 0)
 283             return ERROR_INVALID_NAME;
 284     }
 285
 286     if (!(manager = malloc(sizeof(*manager))))
 287         return ERROR_NOT_ENOUGH_SERVER_MEMORY;
 288
 289     manager->hdr.type = SC_HTYPE_MANAGER;
 290
 291     if (dwAccessMask & MAXIMUM_ALLOWED)
 292         dwAccessMask |= SC_MANAGER_ALL_ACCESS;
 293     manager->hdr.access = dwAccessMask;
 294     RtlMapGenericMask(&manager->hdr.access, &g_scm_generic);
 295     manager->db = active_database;
 296     *handle = &manager->hdr;
 297
 298     return ERROR_SUCCESS;
 299 }
 300
 301 static void SC_RPC_HANDLE_destroy(SC_RPC_HANDLE handle)
 302 {
 303     struct sc_handle *hdr = handle;
 304     switch (hdr->type)
 305     {
 306         case SC_HTYPE_MANAGER:
 307         {
 308             struct sc_manager_handle *manager = (struct sc_manager_handle *)hdr;
 309             free(manager);
 310             break;
 311         }
 312         case SC_HTYPE_SERVICE:
 313         {
 314             struct sc_service_handle *service = (struct sc_service_handle *)hdr;
 315             service_lock(service->service_entry);
 316             list_remove(&service->entry);
 317             if (service->notify)
 318             {
 319                 SetEvent(service->notify->event);
 320                 sc_notify_release(service->notify);
 321             }
 322             service_unlock(service->service_entry);
 323             release_service(service->service_entry);
 324             free(service);
 325             break;
 326         }
 327         default:
 328             WINE_ERR("invalid handle type %d\n", hdr->type);
 329             RpcRaiseException(ERROR_INVALID_HANDLE);
 330     }
 331 }
 332
 333 DWORD __cdecl svcctl_GetServiceDisplayNameW(
 334     SC_RPC_HANDLE hSCManager,
 335     LPCWSTR lpServiceName,
 336     WCHAR *lpBuffer,
 337     DWORD *cchBufSize)
 338 {
 339     struct sc_manager_handle *manager;
 340     struct service_entry *entry;
 341     DWORD err;
 342
 343     WINE_TRACE("(%s, %ld)\n", wine_dbgstr_w(lpServiceName), *cchBufSize);
 344
 345     if ((err = validate_scm_handle(hSCManager, 0, &manager)) != ERROR_SUCCESS)
 346         return err;
 347
 348     scmdatabase_lock(manager->db);
 349
 350     entry = scmdatabase_find_service(manager->db, lpServiceName);
 351     if (entry != NULL)
 352     {
 353         LPCWSTR name;
 354         int len;
 355         name = get_display_name(entry);
 356         len = lstrlenW(name);
 357         if (len <= *cchBufSize)
 358         {
 359             err = ERROR_SUCCESS;
 360             memcpy(lpBuffer, name, (len + 1)*sizeof(*name));
 361         }
 362         else
 363             err = ERROR_INSUFFICIENT_BUFFER;
 364         *cchBufSize = len;
 365     }
 366     else
 367         err = ERROR_SERVICE_DOES_NOT_EXIST;
 368
 369     scmdatabase_unlock(manager->db);
 370
 371     if (err != ERROR_SUCCESS)
 372         lpBuffer[0] = 0;
 373
 374     return err;
 375 }
 376
 377 DWORD __cdecl svcctl_GetServiceKeyNameW(
 378     SC_RPC_HANDLE hSCManager,
 379     LPCWSTR lpServiceDisplayName,
 380     WCHAR *lpBuffer,
 381     DWORD *cchBufSize)
 382 {
 383     struct service_entry *entry;
 384     struct sc_manager_handle *manager;
 385     DWORD err;
 386
 387     WINE_TRACE("(%s, %ld)\n", wine_dbgstr_w(lpServiceDisplayName), *cchBufSize);
 388
 389     if ((err = validate_scm_handle(hSCManager, 0, &manager)) != ERROR_SUCCESS)
 390         return err;
 391
 392     scmdatabase_lock(manager->db);
 393
 394     entry = scmdatabase_find_service_by_displayname(manager->db, lpServiceDisplayName);
 395     if (entry != NULL)
 396     {
 397         int len;
 398         len = lstrlenW(entry->name);
 399         if (len <= *cchBufSize)
 400         {
 401             err = ERROR_SUCCESS;
 402             memcpy(lpBuffer, entry->name, (len + 1)*sizeof(*entry->name));
 403         }
 404         else
 405             err = ERROR_INSUFFICIENT_BUFFER;
 406         *cchBufSize = len;
 407     }
 408     else
 409         err = ERROR_SERVICE_DOES_NOT_EXIST;
 410
 411     scmdatabase_unlock(manager->db);
 412
 413     if (err != ERROR_SUCCESS)
 414         lpBuffer[0] = 0;
 415
 416     return err;
 417 }
 418
 419 static DWORD create_handle_for_service(struct service_entry *entry, DWORD dwDesiredAccess, SC_RPC_HANDLE *phService)
 420 {
 421     struct sc_service_handle *service;
 422
 423     if (!(service = malloc(sizeof(*service))))
 424     {
 425         release_service(entry);
 426         return ERROR_NOT_ENOUGH_SERVER_MEMORY;
 427     }
 428
 429     if (dwDesiredAccess & MAXIMUM_ALLOWED)
 430         dwDesiredAccess |= SERVICE_ALL_ACCESS;
 431
 432     service->hdr.type = SC_HTYPE_SERVICE;
 433     service->hdr.access = dwDesiredAccess;
 434     service->notify = NULL;
 435     service->status_notified = FALSE;
 436     RtlMapGenericMask(&service->hdr.access, &g_svc_generic);
 437
 438     service_lock(entry);
 439     service->service_entry = entry;
 440     list_add_tail(&entry->handles, &service->entry);
 441     service_unlock(entry);
 442
 443     *phService = &service->hdr;
 444     return ERROR_SUCCESS;
 445 }
 446
 447 DWORD __cdecl svcctl_OpenServiceW(
 448     SC_RPC_HANDLE hSCManager,
 449     LPCWSTR lpServiceName,
 450     DWORD dwDesiredAccess,
 451     SC_RPC_HANDLE *phService)
 452 {
 453     struct sc_manager_handle *manager;
 454     struct service_entry *entry;
 455     DWORD err;
 456
 457     WINE_TRACE("(%s, 0x%lx)\n", wine_dbgstr_w(lpServiceName), dwDesiredAccess);
 458
 459     if ((err = validate_scm_handle(hSCManager, 0, &manager)) != ERROR_SUCCESS)
 460         return err;
 461     if (!validate_service_name(lpServiceName))
 462         return ERROR_INVALID_NAME;
 463
 464     scmdatabase_lock(manager->db);
 465     entry = grab_service(scmdatabase_find_service(manager->db, lpServiceName));
 466     scmdatabase_unlock(manager->db);
 467
 468     if (entry == NULL)
 469         return ERROR_SERVICE_DOES_NOT_EXIST;
 470
 471     return create_handle_for_service(entry, dwDesiredAccess, phService);
 472 }
 473
 474 static DWORD parse_dependencies(const WCHAR *dependencies, struct service_entry *entry)
 475 {
 476     WCHAR *services = NULL, *groups, *s;
 477     DWORD len, len_services = 0, len_groups = 0;
 478     const WCHAR *ptr = dependencies;
 479
 480     if (!dependencies || !dependencies[0])
 481     {
 482         entry->dependOnServices = NULL;
 483         entry->dependOnGroups = NULL;
 484         return ERROR_SUCCESS;
 485     }
 486
 487     while (*ptr)
 488     {
 489         len = lstrlenW(ptr) + 1;
 490         if (ptr[0] == '+' && ptr[1])
 491             len_groups += len - 1;
 492         else
 493             len_services += len;
 494         ptr += len;
 495     }
 496     if (!len_services) entry->dependOnServices = NULL;
 497     else
 498     {
 499         services = malloc((len_services + 1) * sizeof(WCHAR));
 500         if (!services)
 501             return ERROR_OUTOFMEMORY;
 502
 503         s = services;
 504         ptr = dependencies;
 505         while (*ptr)
 506         {
 507             len = lstrlenW(ptr) + 1;
 508             if (*ptr != '+')
 509             {
 510                 lstrcpyW(s, ptr);
 511                 s += len;
 512             }
 513             ptr += len;
 514         }
 515         *s = 0;
 516         entry->dependOnServices = services;
 517     }
 518     if (!len_groups) entry->dependOnGroups = NULL;
 519     else
 520     {
 521         groups = malloc((len_groups + 1) * sizeof(WCHAR));
 522         if (!groups)
 523         {
 524             free(services);
 525             return ERROR_OUTOFMEMORY;
 526         }
 527         s = groups;
 528         ptr = dependencies;
 529         while (*ptr)
 530         {
 531             len = lstrlenW(ptr) + 1;
 532             if (ptr[0] == '+' && ptr[1])
 533             {
 534                 lstrcpyW(s, ptr + 1);
 535                 s += len - 1;
 536             }
 537             ptr += len;
 538         }
 539         *s = 0;
 540         entry->dependOnGroups = groups;
 541     }
 542
 543     return ERROR_SUCCESS;
 544 }
 545
 546 static DWORD create_serviceW(
 547     SC_RPC_HANDLE hSCManager,
 548     LPCWSTR lpServiceName,
 549     LPCWSTR lpDisplayName,
 550     DWORD dwDesiredAccess,
 551     DWORD dwServiceType,
 552     DWORD dwStartType,
 553     DWORD dwErrorControl,
 554     LPCWSTR lpBinaryPathName,
 555     LPCWSTR lpLoadOrderGroup,
 556     DWORD *lpdwTagId,
 557     const BYTE *lpDependencies,
 558     DWORD dwDependenciesSize,
 559     LPCWSTR lpServiceStartName,
 560     const BYTE *lpPassword,
 561     DWORD dwPasswordSize,
 562     SC_RPC_HANDLE *phService,
 563     BOOL is_wow64)
 564 {
 565     struct service_entry *entry, *found;
 566     struct sc_manager_handle *manager;
 567     DWORD err;
 568
 569     WINE_TRACE("(%s, %s, 0x%lx, %s)\n", wine_dbgstr_w(lpServiceName), wine_dbgstr_w(lpDisplayName), dwDesiredAccess, wine_dbgstr_w(lpBinaryPathName));
 570
 571     if ((err = validate_scm_handle(hSCManager, SC_MANAGER_CREATE_SERVICE, &manager)) != ERROR_SUCCESS)
 572         return err;
 573
 574     if (!validate_service_name(lpServiceName))
 575         return ERROR_INVALID_NAME;
 576     if (!check_multisz((LPCWSTR)lpDependencies, dwDependenciesSize) || !lpServiceName[0] || !lpBinaryPathName[0])
 577         return ERROR_INVALID_PARAMETER;
 578
 579     if (lpPassword)
 580         WINE_FIXME("Don't know how to add a password\n");   /* I always get ERROR_GEN_FAILURE */
 581
 582     err = service_create(lpServiceName, &entry);
 583     if (err != ERROR_SUCCESS)
 584         return err;
 585
 586     err = parse_dependencies((LPCWSTR)lpDependencies, entry);
 587     if (err != ERROR_SUCCESS) {
 588         free_service_entry(entry);
 589         return err;
 590     }
 591
 592     entry->is_wow64 = is_wow64;
 593     entry->config.dwServiceType = entry->status.dwServiceType = dwServiceType;
 594     entry->config.dwStartType = dwStartType;
 595     entry->config.dwErrorControl = dwErrorControl;
 596     entry->config.lpBinaryPathName = wcsdup(lpBinaryPathName);
 597     entry->config.lpLoadOrderGroup = wcsdup(lpLoadOrderGroup);
 598     entry->config.lpServiceStartName = wcsdup(lpServiceStartName);
 599     entry->config.lpDisplayName = wcsdup(lpDisplayName);
 600
 601     if (lpdwTagId)      /* TODO: In most situations a non-NULL TagId will generate an ERROR_INVALID_PARAMETER. */
 602         entry->config.dwTagId = *lpdwTagId;
 603     else
 604         entry->config.dwTagId = 0;
 605
 606     /* other fields NULL*/
 607
 608     if (!validate_service_config(entry))
 609     {
 610         WINE_ERR("Invalid data while trying to create service\n");
 611         free_service_entry(entry);
 612         return ERROR_INVALID_PARAMETER;
 613     }
 614
 615     scmdatabase_lock(manager->db);
 616
 617     if ((found = scmdatabase_find_service(manager->db, lpServiceName)))
 618     {
 619         err = is_marked_for_delete(found) ? ERROR_SERVICE_MARKED_FOR_DELETE : ERROR_SERVICE_EXISTS;
 620         scmdatabase_unlock(manager->db);
 621         free_service_entry(entry);
 622         return err;
 623     }
 624
 625     if (scmdatabase_find_service_by_displayname(manager->db, get_display_name(entry)))
 626     {
 627         scmdatabase_unlock(manager->db);
 628         free_service_entry(entry);
 629         return ERROR_DUPLICATE_SERVICE_NAME;
 630     }
 631
 632     err = scmdatabase_add_service(manager->db, entry);
 633     if (err != ERROR_SUCCESS)
 634     {
 635         scmdatabase_unlock(manager->db);
 636         free_service_entry(entry);
 637         return err;
 638     }
 639     scmdatabase_unlock(manager->db);
 640
 641     return create_handle_for_service(entry, dwDesiredAccess, phService);
 642 }
 643
 644 DWORD __cdecl svcctl_CreateServiceW(
 645     SC_RPC_HANDLE hSCManager,
 646     LPCWSTR lpServiceName,
 647     LPCWSTR lpDisplayName,
 648     DWORD dwDesiredAccess,
 649     DWORD dwServiceType,
 650     DWORD dwStartType,
 651     DWORD dwErrorControl,
 652     LPCWSTR lpBinaryPathName,
 653     LPCWSTR lpLoadOrderGroup,
 654     DWORD *lpdwTagId,
 655     const BYTE *lpDependencies,
 656     DWORD dwDependenciesSize,
 657     LPCWSTR lpServiceStartName,
 658     const BYTE *lpPassword,
 659     DWORD dwPasswordSize,
 660     SC_RPC_HANDLE *phService)
 661 {
 662     WINE_TRACE("(%s, %s, 0x%lx, %s)\n", wine_dbgstr_w(lpServiceName), wine_dbgstr_w(lpDisplayName), dwDesiredAccess, wine_dbgstr_w(lpBinaryPathName));
 663     return create_serviceW(hSCManager, lpServiceName, lpDisplayName, dwDesiredAccess, dwServiceType, dwStartType,
 664         dwErrorControl, lpBinaryPathName, lpLoadOrderGroup, lpdwTagId, lpDependencies, dwDependenciesSize, lpServiceStartName,
 665         lpPassword, dwPasswordSize, phService, FALSE);
 666 }
 667
 668 DWORD __cdecl svcctl_DeleteService(
 669     SC_RPC_HANDLE hService)
 670 {
 671     struct sc_service_handle *service;
 672     DWORD err;
 673
 674     if ((err = validate_service_handle(hService, DELETE, &service)) != ERROR_SUCCESS)
 675         return err;
 676
 677     service_lock(service->service_entry);
 678
 679     if (!is_marked_for_delete(service->service_entry))
 680         err = mark_for_delete(service->service_entry);
 681     else
 682         err = ERROR_SERVICE_MARKED_FOR_DELETE;
 683
 684     service_unlock(service->service_entry);
 685
 686     return err;
 687 }
 688
 689 DWORD __cdecl svcctl_QueryServiceConfigW(
 690         SC_RPC_HANDLE hService,
 691         QUERY_SERVICE_CONFIGW *config,
 692         DWORD buf_size,
 693         DWORD *needed_size)
 694 {
 695     struct sc_service_handle *service;
 696     DWORD err;
 697
 698     WINE_TRACE("(%p)\n", config);
 699
 700     if ((err = validate_service_handle(hService, SERVICE_QUERY_CONFIG, &service)) != 0)
 701         return err;
 702
 703     service_lock(service->service_entry);
 704     config->dwServiceType = service->service_entry->config.dwServiceType;
 705     config->dwStartType = service->service_entry->config.dwStartType;
 706     config->dwErrorControl = service->service_entry->config.dwErrorControl;
 707     config->lpBinaryPathName = wcsdup(service->service_entry->config.lpBinaryPathName);
 708     config->lpLoadOrderGroup = wcsdup(service->service_entry->config.lpLoadOrderGroup);
 709     config->dwTagId = service->service_entry->config.dwTagId;
 710     config->lpDependencies = NULL; /* TODO */
 711     config->lpServiceStartName = wcsdup(service->service_entry->config.lpServiceStartName);
 712     config->lpDisplayName = wcsdup(service->service_entry->config.lpDisplayName);
 713     service_unlock(service->service_entry);
 714
 715     return ERROR_SUCCESS;
 716 }
 717
 718 DWORD __cdecl svcctl_ChangeServiceConfigW(
 719         SC_RPC_HANDLE hService,
 720         DWORD dwServiceType,
 721         DWORD dwStartType,
 722         DWORD dwErrorControl,
 723         LPCWSTR lpBinaryPathName,
 724         LPCWSTR lpLoadOrderGroup,
 725         DWORD *lpdwTagId,
 726         const BYTE *lpDependencies,
 727         DWORD dwDependenciesSize,
 728         LPCWSTR lpServiceStartName,
 729         const BYTE *lpPassword,
 730         DWORD dwPasswordSize,
 731         LPCWSTR lpDisplayName)
 732 {
 733     struct service_entry new_entry, *entry;
 734     struct sc_service_handle *service;
 735     DWORD err;
 736
 737     WINE_TRACE("\n");
 738
 739     if ((err = validate_service_handle(hService, SERVICE_CHANGE_CONFIG, &service)) != 0)
 740         return err;
 741
 742     if (!check_multisz((LPCWSTR)lpDependencies, dwDependenciesSize))
 743         return ERROR_INVALID_PARAMETER;
 744
 745     /* first check if the new configuration is correct */
 746     service_lock(service->service_entry);
 747
 748     if (is_marked_for_delete(service->service_entry))
 749     {
 750         service_unlock(service->service_entry);
 751         return ERROR_SERVICE_MARKED_FOR_DELETE;
 752     }
 753
 754     if (lpDisplayName != NULL &&
 755         (entry = scmdatabase_find_service_by_displayname(service->service_entry->db, lpDisplayName)) &&
 756         (entry != service->service_entry))
 757     {
 758         service_unlock(service->service_entry);
 759         return ERROR_DUPLICATE_SERVICE_NAME;
 760     }
 761
 762     new_entry = *service->service_entry;
 763
 764     if (dwServiceType != SERVICE_NO_CHANGE)
 765         new_entry.config.dwServiceType = dwServiceType;
 766
 767     if (dwStartType != SERVICE_NO_CHANGE)
 768         new_entry.config.dwStartType = dwStartType;
 769
 770     if (dwErrorControl != SERVICE_NO_CHANGE)
 771         new_entry.config.dwErrorControl = dwErrorControl;
 772
 773     if (lpBinaryPathName != NULL)
 774         new_entry.config.lpBinaryPathName = (LPWSTR)lpBinaryPathName;
 775
 776     if (lpLoadOrderGroup != NULL)
 777         new_entry.config.lpLoadOrderGroup = (LPWSTR)lpLoadOrderGroup;
 778
 779     if (lpdwTagId != NULL)
 780         WINE_FIXME("Changing tag id not supported\n");
 781
 782     if (lpServiceStartName != NULL)
 783         new_entry.config.lpServiceStartName = (LPWSTR)lpServiceStartName;
 784
 785     if (lpPassword != NULL)
 786         WINE_FIXME("Setting password not supported\n");
 787
 788     if (lpDisplayName != NULL)
 789         new_entry.config.lpDisplayName = (LPWSTR)lpDisplayName;
 790
 791     err = parse_dependencies((LPCWSTR)lpDependencies, &new_entry);
 792     if (err != ERROR_SUCCESS)
 793     {
 794         service_unlock(service->service_entry);
 795         return err;
 796     }
 797
 798     if (!validate_service_config(&new_entry))
 799     {
 800         WINE_ERR("The configuration after the change wouldn't be valid\n");
 801         service_unlock(service->service_entry);
 802         return ERROR_INVALID_PARAMETER;
 803     }
 804
 805     /* configuration OK. The strings needs to be duplicated */
 806     if (lpBinaryPathName != NULL)
 807         new_entry.config.lpBinaryPathName = wcsdup(lpBinaryPathName);
 808
 809     if (lpLoadOrderGroup != NULL)
 810         new_entry.config.lpLoadOrderGroup = wcsdup(lpLoadOrderGroup);
 811
 812     if (lpServiceStartName != NULL)
 813         new_entry.config.lpServiceStartName = wcsdup(lpServiceStartName);
 814
 815     if (lpDisplayName != NULL)
 816         new_entry.config.lpDisplayName = wcsdup(lpDisplayName);
 817
 818     /* try to save to Registry, commit or rollback depending on success */
 819     err = save_service_config(&new_entry);
 820     if (ERROR_SUCCESS == err)
 821     {
 822         free_service_strings(service->service_entry, &new_entry);
 823         *service->service_entry = new_entry;
 824     }
 825     else free_service_strings(&new_entry, service->service_entry);
 826     service_unlock(service->service_entry);
 827
 828     return err;
 829 }
 830
 831 static void fill_status_process(SERVICE_STATUS_PROCESS *status, struct service_entry *service)
 832 {
 833     struct process_entry *process = service->process;
 834     memcpy(status, &service->status, sizeof(service->status));
 835     status->dwProcessId = 0;
 836     if (process && !(service->status.dwServiceType & SERVICE_DRIVER))
 837         status->dwProcessId = process->process_id;
 838     status->dwServiceFlags  = 0;
 839 }
 840
 841 static void fill_notify(struct sc_notify_handle *notify, struct service_entry *service)
 842 {
 843     SC_RPC_NOTIFY_PARAMS_LIST *list;
 844     SERVICE_NOTIFY_STATUS_CHANGE_PARAMS_2 *cparams;
 845
 846     list = calloc(1, sizeof(SC_RPC_NOTIFY_PARAMS_LIST));
 847     if (!list)
 848         return;
 849     if (!(cparams = calloc(1, sizeof(SERVICE_NOTIFY_STATUS_CHANGE_PARAMS_2))))
 850     {
 851         free(list);
 852         return;
 853     }
 854
 855     cparams->dwNotifyMask = notify->notify_mask;
 856     fill_status_process(&cparams->ServiceStatus, service);
 857     cparams->dwNotificationStatus = ERROR_SUCCESS;
 858     cparams->dwNotificationTriggered = 1 << (cparams->ServiceStatus.dwCurrentState - SERVICE_STOPPED);
 859     cparams->pszServiceNames = NULL;
 860
 861     list->cElements = 1;
 862
 863     list->NotifyParamsArray[0].dwInfoLevel = 2;
 864     list->NotifyParamsArray[0].params = cparams;
 865
 866     InterlockedExchangePointer((void**)&notify->params_list, list);
 867
 868     SetEvent(notify->event);
 869 }
 870
 871 void notify_service_state(struct service_entry *service)
 872 {
 873     struct sc_service_handle *service_handle;
 874     DWORD mask;
 875
 876     mask = 1 << (service->status.dwCurrentState - SERVICE_STOPPED);
 877     LIST_FOR_EACH_ENTRY(service_handle, &service->handles, struct sc_service_handle, entry)
 878     {
 879         struct sc_notify_handle *notify = service_handle->notify;
 880         if (notify && (notify->notify_mask & mask))
 881         {
 882             fill_notify(notify, service);
 883             sc_notify_release(notify);
 884             service_handle->notify = NULL;
 885             service_handle->status_notified = TRUE;
 886         }
 887         else
 888             service_handle->status_notified = FALSE;
 889     }
 890 }
 891
 892 DWORD __cdecl svcctl_SetServiceStatus(SC_RPC_HANDLE handle, SERVICE_STATUS *status)
 893 {
 894     struct sc_service_handle *service;
 895     struct process_entry *process;
 896     DWORD err;
 897
 898     WINE_TRACE("(%p, %p)\n", handle, status);
 899
 900     if ((err = validate_service_handle(handle, SERVICE_SET_STATUS, &service)) != 0)
 901         return err;
 902
 903     service_lock(service->service_entry);
 904
 905     /* FIXME: be a bit more discriminant about what parts of the status we set
 906      * and check that fields are valid */
 907     service->service_entry->status.dwCurrentState = status->dwCurrentState;
 908     service->service_entry->status.dwControlsAccepted = status->dwControlsAccepted;
 909     service->service_entry->status.dwWin32ExitCode = status->dwWin32ExitCode;
 910     service->service_entry->status.dwServiceSpecificExitCode = status->dwServiceSpecificExitCode;
 911     service->service_entry->status.dwCheckPoint = status->dwCheckPoint;
 912     service->service_entry->status.dwWaitHint = status->dwWaitHint;
 913     SetEvent(service->service_entry->status_changed_event);
 914
 915     if ((process = service->service_entry->process) &&
 916         status->dwCurrentState == SERVICE_STOPPED)
 917     {
 918         service->service_entry->process = NULL;
 919         if (!--process->use_count)
 920             terminate_after_timeout(process, service_kill_timeout);
 921         if (service->service_entry->shared_process && process->use_count <= 1)
 922             shutdown_shared_process(process);
 923         release_process(process);
 924     }
 925
 926     notify_service_state(service->service_entry);
 927     service_unlock(service->service_entry);
 928
 929     return ERROR_SUCCESS;
 930 }
 931
 932 DWORD __cdecl svcctl_ChangeServiceConfig2W( SC_RPC_HANDLE hService, SC_RPC_CONFIG_INFOW config )
 933 {
 934     struct sc_service_handle *service;
 935     DWORD err;
 936
 937     if ((err = validate_service_handle(hService, SERVICE_CHANGE_CONFIG, &service)) != 0)
 938         return err;
 939
 940     switch (config.dwInfoLevel)
 941     {
 942     case SERVICE_CONFIG_DESCRIPTION:
 943         {
 944             WCHAR *descr = NULL;
 945
 946             if (!config.descr->lpDescription)
 947                 break;
 948
 949             if (config.descr->lpDescription[0])
 950             {
 951                 if (!(descr = wcsdup( config.descr->lpDescription )))
 952                     return ERROR_NOT_ENOUGH_MEMORY;
 953             }
 954
 955             WINE_TRACE( "changing service %p descr to %s\n", service, wine_dbgstr_w(descr) );
 956             service_lock( service->service_entry );
 957             free( service->service_entry->description );
 958             service->service_entry->description = descr;
 959             save_service_config( service->service_entry );
 960             service_unlock( service->service_entry );
 961         }
 962         break;
 963     case SERVICE_CONFIG_FAILURE_ACTIONS:
 964         WINE_FIXME( "SERVICE_CONFIG_FAILURE_ACTIONS not implemented: period %lu msg %s cmd %s\n",
 965                     config.actions->dwResetPeriod,
 966                     wine_dbgstr_w(config.actions->lpRebootMsg),
 967                     wine_dbgstr_w(config.actions->lpCommand) );
 968         break;
 969     case SERVICE_CONFIG_PRESHUTDOWN_INFO:
 970         WINE_TRACE( "changing service %p preshutdown timeout to %ld\n",
 971                 service, config.preshutdown->dwPreshutdownTimeout );
 972         service_lock( service->service_entry );
 973         service->service_entry->preshutdown_timeout = config.preshutdown->dwPreshutdownTimeout;
 974         save_service_config( service->service_entry );
 975         service_unlock( service->service_entry );
 976         break;
 977     default:
 978         WINE_FIXME("level %lu not implemented\n", config.dwInfoLevel);
 979         err = ERROR_INVALID_LEVEL;
 980         break;
 981     }
 982     return err;
 983 }
 984
 985 DWORD __cdecl svcctl_QueryServiceConfig2W( SC_RPC_HANDLE hService, DWORD level,
 986                                            BYTE *buffer, DWORD size, LPDWORD needed )
 987 {
 988     struct sc_service_handle *service;
 989     DWORD err;
 990
 991     memset(buffer, 0, size);
 992
 993     if ((err = validate_service_handle(hService, SERVICE_QUERY_CONFIG, &service)) != 0)
 994         return err;
 995
 996     switch (level)
 997     {
 998     case SERVICE_CONFIG_DESCRIPTION:
 999     {
1000         struct service_description *desc = (struct service_description *)buffer;
1001         DWORD total_size = sizeof(*desc);
1002
1003         service_lock(service->service_entry);
1004         if (service->service_entry->description)
1005             total_size += lstrlenW(service->service_entry->description) * sizeof(WCHAR);
1006
1007         *needed = total_size;
1008         if (size >= total_size)
1009         {
1010             if (service->service_entry->description)
1011             {
1012                 lstrcpyW( desc->description, service->service_entry->description );
1013                 desc->size = total_size - FIELD_OFFSET(struct service_description, description);
1014             }
1015             else
1016             {
1017                 desc->description[0] = 0;
1018                 desc->size           = 0;
1019             }
1020         }
1021         else err = ERROR_INSUFFICIENT_BUFFER;
1022         service_unlock(service->service_entry);
1023     }
1024     break;
1025
1026     case SERVICE_CONFIG_PRESHUTDOWN_INFO:
1027         service_lock(service->service_entry);
1028
1029         *needed = sizeof(SERVICE_PRESHUTDOWN_INFO);
1030         if (size >= *needed)
1031             ((LPSERVICE_PRESHUTDOWN_INFO)buffer)->dwPreshutdownTimeout =
1032                 service->service_entry->preshutdown_timeout;
1033         else err = ERROR_INSUFFICIENT_BUFFER;
1034
1035         service_unlock(service->service_entry);
1036         break;
1037
1038     default:
1039         WINE_FIXME("level %lu not implemented\n", level);
1040         err = ERROR_INVALID_LEVEL;
1041         break;
1042     }
1043     return err;
1044 }
1045
1046 DWORD __cdecl svcctl_QueryServiceStatusEx(
1047     SC_RPC_HANDLE hService,
1048     SC_STATUS_TYPE InfoLevel,
1049     BYTE *lpBuffer,
1050     DWORD cbBufSize,
1051     LPDWORD pcbBytesNeeded)
1052 {
1053     struct sc_service_handle *service;
1054     DWORD err;
1055     LPSERVICE_STATUS_PROCESS pSvcStatusData;
1056
1057     memset(lpBuffer, 0, cbBufSize);
1058
1059     if ((err = validate_service_handle(hService, SERVICE_QUERY_STATUS, &service)) != 0)
1060         return err;
1061
1062     if (InfoLevel != SC_STATUS_PROCESS_INFO)
1063         return ERROR_INVALID_LEVEL;
1064
1065     pSvcStatusData = (LPSERVICE_STATUS_PROCESS) lpBuffer;
1066     if (pSvcStatusData == NULL)
1067         return ERROR_INVALID_PARAMETER;
1068
1069     if (cbBufSize < sizeof(SERVICE_STATUS_PROCESS))
1070     {
1071         if( pcbBytesNeeded != NULL)
1072             *pcbBytesNeeded = sizeof(SERVICE_STATUS_PROCESS);
1073
1074         return ERROR_INSUFFICIENT_BUFFER;
1075     }
1076
1077     service_lock(service->service_entry);
1078     fill_status_process(pSvcStatusData, service->service_entry);
1079     service_unlock(service->service_entry);
1080
1081     return ERROR_SUCCESS;
1082 }
1083
1084 /******************************************************************************
1085  * service_accepts_control
1086  */
1087 static BOOL service_accepts_control(const struct service_entry *service, DWORD dwControl)
1088 {
1089     DWORD a = service->status.dwControlsAccepted;
1090
1091     if (dwControl >= 128 && dwControl <= 255)
1092         return TRUE;
1093
1094     switch (dwControl)
1095     {
1096     case SERVICE_CONTROL_INTERROGATE:
1097         return TRUE;
1098     case SERVICE_CONTROL_STOP:
1099         if (a&SERVICE_ACCEPT_STOP)
1100             return TRUE;
1101         break;
1102     case SERVICE_CONTROL_SHUTDOWN:
1103         if (a&SERVICE_ACCEPT_SHUTDOWN)
1104             return TRUE;
1105         break;
1106     case SERVICE_CONTROL_PAUSE:
1107     case SERVICE_CONTROL_CONTINUE:
1108         if (a&SERVICE_ACCEPT_PAUSE_CONTINUE)
1109             return TRUE;
1110         break;
1111     case SERVICE_CONTROL_PARAMCHANGE:
1112         if (a&SERVICE_ACCEPT_PARAMCHANGE)
1113             return TRUE;
1114         break;
1115     case SERVICE_CONTROL_NETBINDADD:
1116     case SERVICE_CONTROL_NETBINDREMOVE:
1117     case SERVICE_CONTROL_NETBINDENABLE:
1118     case SERVICE_CONTROL_NETBINDDISABLE:
1119         if (a&SERVICE_ACCEPT_NETBINDCHANGE)
1120             return TRUE;
1121     case SERVICE_CONTROL_HARDWAREPROFILECHANGE:
1122         if (a&SERVICE_ACCEPT_HARDWAREPROFILECHANGE)
1123             return TRUE;
1124         break;
1125     case SERVICE_CONTROL_POWEREVENT:
1126         if (a&SERVICE_ACCEPT_POWEREVENT)
1127             return TRUE;
1128         break;
1129     case SERVICE_CONTROL_SESSIONCHANGE:
1130         if (a&SERVICE_ACCEPT_SESSIONCHANGE)
1131             return TRUE;
1132         break;
1133     }
1134     return FALSE;
1135 }
1136
1137 /******************************************************************************
1138  * process_send_command
1139  */
1140 static BOOL process_send_command(struct process_entry *process, const void *data, DWORD size, DWORD *result)
1141 {
1142     OVERLAPPED overlapped;
1143     DWORD count, ret;
1144     BOOL r;
1145
1146     overlapped.u.s.Offset = 0;
1147     overlapped.u.s.OffsetHigh = 0;
1148     overlapped.hEvent = process->overlapped_event;
1149     r = WriteFile(process->control_pipe, data, size, &count, &overlapped);
1150     if (!r && GetLastError() == ERROR_IO_PENDING)
1151     {
1152         ret = WaitForSingleObject(process->overlapped_event, service_pipe_timeout);
1153         if (ret == WAIT_TIMEOUT)
1154         {
1155             WINE_ERR("sending command timed out\n");
1156             *result = ERROR_SERVICE_REQUEST_TIMEOUT;
1157             return FALSE;
1158         }
1159         r = GetOverlappedResult(process->control_pipe, &overlapped, &count, FALSE);
1160     }
1161     if (!r || count != size)
1162     {
1163         WINE_ERR("service protocol error - failed to write pipe!\n");
1164         *result  = (!r ? GetLastError() : ERROR_WRITE_FAULT);
1165         return FALSE;
1166     }
1167     r = ReadFile(process->control_pipe, result, sizeof *result, &count, &overlapped);
1168     if (!r && GetLastError() == ERROR_IO_PENDING)
1169     {
1170         ret = WaitForSingleObject(process->overlapped_event, service_pipe_timeout);
1171         if (ret == WAIT_TIMEOUT)
1172         {
1173             WINE_ERR("receiving command result timed out\n");
1174             *result = ERROR_SERVICE_REQUEST_TIMEOUT;
1175             return FALSE;
1176         }
1177         r = GetOverlappedResult(process->control_pipe, &overlapped, &count, FALSE);
1178     }
1179     if (!r || count != sizeof *result)
1180     {
1181         WINE_ERR("service protocol error - failed to read pipe "
1182             "r = %d  count = %ld!\n", r, count);
1183         *result = (!r ? GetLastError() : ERROR_READ_FAULT);
1184         return FALSE;
1185     }
1186
1187     return TRUE;
1188 }
1189
1190 /******************************************************************************
1191  * process_send_control
1192  */
1193 BOOL process_send_control(struct process_entry *process, BOOL shared_process, const WCHAR *name,
1194                           DWORD control, const BYTE *data, DWORD data_size, DWORD *result)
1195 {
1196     service_start_info *ssi;
1197     DWORD len;
1198     BOOL r;
1199
1200     if (shared_process)
1201     {
1202         control |= SERVICE_CONTROL_FORWARD_FLAG;
1203         data = (BYTE *)name;
1204         data_size = (lstrlenW(name) + 1) * sizeof(WCHAR);
1205         name = emptyW;
1206     }
1207
1208     /* calculate how much space we need to send the startup info */
1209     len = (lstrlenW(name) + 1) * sizeof(WCHAR) + data_size;
1210
1211     ssi = malloc(FIELD_OFFSET(service_start_info, data[len]));
1212     ssi->magic = SERVICE_PROTOCOL_MAGIC;
1213     ssi->control = control;
1214     ssi->total_size = FIELD_OFFSET(service_start_info, data[len]);
1215     ssi->name_size = lstrlenW(name) + 1;
1216     lstrcpyW((WCHAR *)ssi->data, name);
1217     if (data_size) memcpy(&ssi->data[ssi->name_size * sizeof(WCHAR)], data, data_size);
1218
1219     r = process_send_command(process, ssi, ssi->total_size, result);
1220     free(ssi);
1221     return r;
1222 }
1223
1224 DWORD __cdecl svcctl_StartServiceW(
1225     SC_RPC_HANDLE hService,
1226     DWORD dwNumServiceArgs,
1227     LPCWSTR *lpServiceArgVectors)
1228 {
1229     struct sc_service_handle *service;
1230     DWORD err;
1231
1232     WINE_TRACE("(%p, %ld, %p)\n", hService, dwNumServiceArgs, lpServiceArgVectors);
1233
1234     if ((err = validate_service_handle(hService, SERVICE_START, &service)) != 0)
1235         return err;
1236
1237     if (service->service_entry->config.dwStartType == SERVICE_DISABLED)
1238         return ERROR_SERVICE_DISABLED;
1239
1240     if (!scmdatabase_lock_startup(service->service_entry->db, 3000))
1241         return ERROR_SERVICE_DATABASE_LOCKED;
1242
1243     err = service_start(service->service_entry, dwNumServiceArgs, lpServiceArgVectors);
1244
1245     scmdatabase_unlock_startup(service->service_entry->db);
1246     return err;
1247 }
1248
1249 DWORD __cdecl svcctl_ControlService(
1250     SC_RPC_HANDLE hService,
1251     DWORD dwControl,
1252     SERVICE_STATUS *lpServiceStatus)
1253 {
1254     DWORD access_required;
1255     struct sc_service_handle *service;
1256     struct process_entry *process;
1257     BOOL shared_process;
1258     DWORD result;
1259
1260     WINE_TRACE("(%p, %ld, %p)\n", hService, dwControl, lpServiceStatus);
1261
1262     switch (dwControl)
1263     {
1264     case SERVICE_CONTROL_CONTINUE:
1265     case SERVICE_CONTROL_NETBINDADD:
1266     case SERVICE_CONTROL_NETBINDDISABLE:
1267     case SERVICE_CONTROL_NETBINDENABLE:
1268     case SERVICE_CONTROL_NETBINDREMOVE:
1269     case SERVICE_CONTROL_PARAMCHANGE:
1270     case SERVICE_CONTROL_PAUSE:
1271         access_required = SERVICE_PAUSE_CONTINUE;
1272         break;
1273     case SERVICE_CONTROL_INTERROGATE:
1274         access_required = SERVICE_INTERROGATE;
1275         break;
1276     case SERVICE_CONTROL_STOP:
1277         access_required = SERVICE_STOP;
1278         break;
1279     default:
1280         if (dwControl >= 128 && dwControl <= 255)
1281             access_required = SERVICE_USER_DEFINED_CONTROL;
1282         else
1283             return ERROR_INVALID_PARAMETER;
1284     }
1285
1286     if ((result = validate_service_handle(hService, access_required, &service)) != 0)
1287         return result;
1288
1289     service_lock(service->service_entry);
1290
1291     result = ERROR_SUCCESS;
1292     switch (service->service_entry->status.dwCurrentState)
1293     {
1294     case SERVICE_STOPPED:
1295         result = ERROR_SERVICE_NOT_ACTIVE;
1296         break;
1297     case SERVICE_START_PENDING:
1298         if (dwControl==SERVICE_CONTROL_STOP)
1299             break;
1300         /* fall through */
1301     case SERVICE_STOP_PENDING:
1302         result = ERROR_SERVICE_CANNOT_ACCEPT_CTRL;
1303         break;
1304     }
1305
1306     if (result == ERROR_SUCCESS && service->service_entry->force_shutdown)
1307     {
1308         result = ERROR_SERVICE_CANNOT_ACCEPT_CTRL;
1309         if ((process = service->service_entry->process))
1310         {
1311             service->service_entry->process = NULL;
1312             if (!--process->use_count) process_terminate(process);
1313             release_process(process);
1314         }
1315     }
1316
1317     if (result != ERROR_SUCCESS)
1318     {
1319         if (lpServiceStatus) *lpServiceStatus = service->service_entry->status;
1320         service_unlock(service->service_entry);
1321         return result;
1322     }
1323
1324     if (!service_accepts_control(service->service_entry, dwControl))
1325     {
1326         service_unlock(service->service_entry);
1327         return ERROR_INVALID_SERVICE_CONTROL;
1328     }
1329
1330     /* Remember that we tried to shutdown this service. When the service is
1331      * still running on the second invocation, it will be forcefully killed. */
1332     if (dwControl == SERVICE_CONTROL_STOP)
1333         service->service_entry->force_shutdown = TRUE;
1334
1335     /* Hold a reference to the process while sending the command. */
1336     process = grab_process(service->service_entry->process);
1337     shared_process = service->service_entry->shared_process;
1338     service_unlock(service->service_entry);
1339
1340     if (!process)
1341         return ERROR_SERVICE_CANNOT_ACCEPT_CTRL;
1342
1343     result = WaitForSingleObject(process->control_mutex, 30000);
1344     if (result != WAIT_OBJECT_0)
1345     {
1346         release_process(process);
1347         return ERROR_SERVICE_REQUEST_TIMEOUT;
1348     }
1349
1350     if (process_send_control(process, shared_process, service->service_entry->name,
1351                              dwControl, NULL, 0, &result))
1352         result = ERROR_SUCCESS;
1353
1354     if (lpServiceStatus)
1355     {
1356         service_lock(service->service_entry);
1357         *lpServiceStatus = service->service_entry->status;
1358         service_unlock(service->service_entry);
1359     }
1360
1361     ReleaseMutex(process->control_mutex);
1362     release_process(process);
1363     return result;
1364 }
1365
1366 DWORD __cdecl svcctl_CloseServiceHandle(
1367     SC_RPC_HANDLE *handle)
1368 {
1369     WINE_TRACE("(&%p)\n", *handle);
1370
1371     SC_RPC_HANDLE_destroy(*handle);
1372     *handle = NULL;
1373
1374     return ERROR_SUCCESS;
1375 }
1376
1377 void __RPC_USER SC_RPC_LOCK_rundown(SC_RPC_LOCK hLock)
1378 {
1379 }
1380
1381 DWORD __cdecl svcctl_LockServiceDatabase(SC_RPC_HANDLE manager, SC_RPC_LOCK *lock)
1382 {
1383     TRACE("(%p, %p)\n", manager, lock);
1384
1385     *lock = (SC_RPC_LOCK)0xdeadbeef;
1386     return ERROR_SUCCESS;
1387 }
1388
1389 DWORD __cdecl svcctl_UnlockServiceDatabase(SC_RPC_LOCK *lock)
1390 {
1391     TRACE("(&%p)\n", *lock);
1392
1393     *lock = NULL;
1394     return ERROR_SUCCESS;
1395 }
1396
1397 static BOOL map_state(DWORD state, DWORD mask)
1398 {
1399     switch (state)
1400     {
1401     case SERVICE_START_PENDING:
1402     case SERVICE_STOP_PENDING:
1403     case SERVICE_RUNNING:
1404     case SERVICE_CONTINUE_PENDING:
1405     case SERVICE_PAUSE_PENDING:
1406     case SERVICE_PAUSED:
1407         if (SERVICE_ACTIVE & mask) return TRUE;
1408         break;
1409     case SERVICE_STOPPED:
1410         if (SERVICE_INACTIVE & mask) return TRUE;
1411         break;
1412     default:
1413         WINE_ERR("unknown state %lu\n", state);
1414         break;
1415     }
1416     return FALSE;
1417 }
1418
1419 DWORD __cdecl svcctl_EnumServicesStatusW(
1420     SC_RPC_HANDLE hmngr,
1421     DWORD type,
1422     DWORD state,
1423     BYTE *buffer,
1424     DWORD size,
1425     LPDWORD needed,
1426     LPDWORD returned,
1427     LPDWORD resume)
1428 {
1429     DWORD err, sz, total_size, num_services, offset;
1430     struct sc_manager_handle *manager;
1431     struct service_entry *service;
1432     struct enum_service_status *s;
1433
1434     WINE_TRACE("(%p, 0x%lx, 0x%lx, %p, %lu, %p, %p, %p)\n", hmngr, type, state, buffer, size, needed, returned, resume);
1435
1436     if (!type || !state)
1437         return ERROR_INVALID_PARAMETER;
1438
1439     if ((err = validate_scm_handle(hmngr, SC_MANAGER_ENUMERATE_SERVICE, &manager)) != ERROR_SUCCESS)
1440         return err;
1441
1442     if (resume)
1443         WINE_FIXME("resume index not supported\n");
1444
1445     scmdatabase_lock(manager->db);
1446
1447     total_size = num_services = 0;
1448     LIST_FOR_EACH_ENTRY(service, &manager->db->services, struct service_entry, entry)
1449     {
1450         if ((service->status.dwServiceType & type) && map_state(service->status.dwCurrentState, state))
1451         {
1452             total_size += sizeof(*s);
1453             total_size += (lstrlenW(service->name) + 1) * sizeof(WCHAR);
1454             if (service->config.lpDisplayName)
1455             {
1456                 total_size += (lstrlenW(service->config.lpDisplayName) + 1) * sizeof(WCHAR);
1457             }
1458             num_services++;
1459         }
1460     }
1461     *returned = 0;
1462     *needed = total_size;
1463     if (total_size > size)
1464     {
1465         scmdatabase_unlock(manager->db);
1466         return ERROR_MORE_DATA;
1467     }
1468     s = (struct enum_service_status *)buffer;
1469     offset = num_services * sizeof(struct enum_service_status);
1470     LIST_FOR_EACH_ENTRY(service, &manager->db->services, struct service_entry, entry)
1471     {
1472         if ((service->status.dwServiceType & type) && map_state(service->status.dwCurrentState, state))
1473         {
1474             sz = (lstrlenW(service->name) + 1) * sizeof(WCHAR);
1475             memcpy(buffer + offset, service->name, sz);
1476             s->service_name = offset;
1477             offset += sz;
1478
1479             if (!service->config.lpDisplayName) s->display_name = 0;
1480             else
1481             {
1482                 sz = (lstrlenW(service->config.lpDisplayName) + 1) * sizeof(WCHAR);
1483                 memcpy(buffer + offset, service->config.lpDisplayName, sz);
1484                 s->display_name = offset;
1485                 offset += sz;
1486             }
1487             s->service_status = service->status;
1488             s++;
1489         }
1490     }
1491     *returned = num_services;
1492     *needed = 0;
1493     scmdatabase_unlock(manager->db);
1494     return ERROR_SUCCESS;
1495 }
1496
1497 static struct service_entry *find_service_by_group(struct scmdatabase *db, const WCHAR *group)
1498 {
1499     struct service_entry *service;
1500     LIST_FOR_EACH_ENTRY(service, &db->services, struct service_entry, entry)
1501     {
1502         if (service->config.lpLoadOrderGroup && !wcsicmp(group, service->config.lpLoadOrderGroup))
1503             return service;
1504     }
1505     return NULL;
1506 }
1507
1508 static BOOL match_group(const WCHAR *g1, const WCHAR *g2)
1509 {
1510     if (!g2) return TRUE;
1511     if (!g2[0] && (!g1 || !g1[0])) return TRUE;
1512     if (g1 && !lstrcmpW(g1, g2)) return TRUE;
1513     return FALSE;
1514 }
1515
1516 DWORD __cdecl svcctl_EnumServicesStatusExA(
1517     SC_RPC_HANDLE scmanager,
1518     SC_ENUM_TYPE info_level,
1519     DWORD service_type,
1520     DWORD service_state,
1521     BYTE *buffer,
1522     DWORD buf_size,
1523     DWORD *needed_size,
1524     DWORD *services_count,
1525     DWORD *resume_index,
1526     LPCSTR groupname)
1527 {
1528     WINE_FIXME("\n");
1529     return ERROR_CALL_NOT_IMPLEMENTED;
1530 }
1531
1532 DWORD __cdecl svcctl_EnumServicesStatusExW(
1533     SC_RPC_HANDLE hmngr,
1534     SC_ENUM_TYPE info_level,
1535     DWORD type,
1536     DWORD state,
1537     BYTE *buffer,
1538     DWORD size,
1539     LPDWORD needed,
1540     LPDWORD returned,
1541     DWORD *resume_handle,
1542     LPCWSTR group)
1543 {
1544     DWORD err, sz, total_size, num_services;
1545     DWORD_PTR offset;
1546     struct sc_manager_handle *manager;
1547     struct service_entry *service;
1548     struct enum_service_status_process *s;
1549
1550     WINE_TRACE("(%p, 0x%lx, 0x%lx, %p, %lu, %p, %p, %s)\n", hmngr, type, state, buffer, size,
1551                needed, returned, wine_dbgstr_w(group));
1552
1553     if (resume_handle)
1554         FIXME("resume handle not supported\n");
1555
1556     if (!type || !state)
1557         return ERROR_INVALID_PARAMETER;
1558
1559     if ((err = validate_scm_handle(hmngr, SC_MANAGER_ENUMERATE_SERVICE, &manager)) != ERROR_SUCCESS)
1560         return err;
1561
1562     scmdatabase_lock(manager->db);
1563
1564     if (group && !find_service_by_group(manager->db, group))
1565     {
1566         scmdatabase_unlock(manager->db);
1567         return ERROR_SERVICE_DOES_NOT_EXIST;
1568     }
1569
1570     total_size = num_services = 0;
1571     LIST_FOR_EACH_ENTRY(service, &manager->db->services, struct service_entry, entry)
1572     {
1573         if ((service->status.dwServiceType & type) && map_state(service->status.dwCurrentState, state)
1574             && match_group(service->config.lpLoadOrderGroup, group))
1575         {
1576             total_size += sizeof(*s);
1577             total_size += (lstrlenW(service->name) + 1) * sizeof(WCHAR);
1578             if (service->config.lpDisplayName)
1579             {
1580                 total_size += (lstrlenW(service->config.lpDisplayName) + 1) * sizeof(WCHAR);
1581             }
1582             num_services++;
1583         }
1584     }
1585     *returned = 0;
1586     *needed = total_size;
1587     if (total_size > size)
1588     {
1589         scmdatabase_unlock(manager->db);
1590         return ERROR_MORE_DATA;
1591     }
1592     s = (struct enum_service_status_process *)buffer;
1593     offset = num_services * sizeof(*s);
1594     LIST_FOR_EACH_ENTRY(service, &manager->db->services, struct service_entry, entry)
1595     {
1596         if ((service->status.dwServiceType & type) && map_state(service->status.dwCurrentState, state)
1597             && match_group(service->config.lpLoadOrderGroup, group))
1598         {
1599             sz = (lstrlenW(service->name) + 1) * sizeof(WCHAR);
1600             memcpy(buffer + offset, service->name, sz);
1601             s->service_name = offset;
1602             offset += sz;
1603
1604             if (!service->config.lpDisplayName) s->display_name = 0;
1605             else
1606             {
1607                 sz = (lstrlenW(service->config.lpDisplayName) + 1) * sizeof(WCHAR);
1608                 memcpy(buffer + offset, service->config.lpDisplayName, sz);
1609                 s->display_name = offset;
1610                 offset += sz;
1611             }
1612             fill_status_process(&s->service_status_process, service);
1613             s++;
1614         }
1615     }
1616     *returned = num_services;
1617     *needed = 0;
1618     scmdatabase_unlock(manager->db);
1619     return ERROR_SUCCESS;
1620 }
1621
1622 DWORD __cdecl svcctl_unknown43(void)
1623 {
1624     WINE_FIXME("\n");
1625     return ERROR_CALL_NOT_IMPLEMENTED;
1626 }
1627
1628 DWORD __cdecl svcctl_CreateServiceWOW64A(
1629     SC_RPC_HANDLE scmanager,
1630     LPCSTR servicename,
1631     LPCSTR displayname,
1632     DWORD accessmask,
1633     DWORD service_type,
1634     DWORD start_type,
1635     DWORD error_control,
1636     LPCSTR imagepath,
1637     LPCSTR loadordergroup,
1638     DWORD *tagid,
1639     const BYTE *dependencies,
1640     DWORD depend_size,
1641     LPCSTR start_name,
1642     const BYTE *password,
1643     DWORD password_size,
1644     SC_RPC_HANDLE *service)
1645 {
1646     WINE_FIXME("\n");
1647     return ERROR_CALL_NOT_IMPLEMENTED;
1648 }
1649
1650 DWORD __cdecl svcctl_CreateServiceWOW64W(
1651     SC_RPC_HANDLE scmanager,
1652     LPCWSTR servicename,
1653     LPCWSTR displayname,
1654     DWORD accessmask,
1655     DWORD service_type,
1656     DWORD start_type,
1657     DWORD error_control,
1658     LPCWSTR imagepath,
1659     LPCWSTR loadordergroup,
1660     DWORD *tagid,
1661     const BYTE *dependencies,
1662     DWORD depend_size,
1663     LPCWSTR start_name,
1664     const BYTE *password,
1665     DWORD password_size,
1666     SC_RPC_HANDLE *service)
1667 {
1668     WINE_TRACE("(%s, %s, 0x%lx, %s)\n", wine_dbgstr_w(servicename), wine_dbgstr_w(displayname), accessmask, wine_dbgstr_w(imagepath));
1669     return create_serviceW(scmanager, servicename, displayname, accessmask, service_type, start_type, error_control, imagepath,
1670         loadordergroup, tagid, dependencies, depend_size, start_name, password, password_size, service, TRUE);
1671 }
1672
1673 DWORD __cdecl svcctl_unknown46(void)
1674 {
1675     WINE_FIXME("\n");
1676     return ERROR_CALL_NOT_IMPLEMENTED;
1677 }
1678
1679 DWORD __cdecl svcctl_NotifyServiceStatusChange(
1680     SC_RPC_HANDLE handle,
1681     SC_RPC_NOTIFY_PARAMS params,
1682     GUID *clientprocessguid,
1683     GUID *scmprocessguid,
1684     BOOL *createremotequeue,
1685     SC_NOTIFY_RPC_HANDLE *hNotify)
1686 {
1687     DWORD err, mask;
1688     struct sc_manager_handle *manager = NULL;
1689     struct sc_service_handle *service = NULL;
1690     struct sc_notify_handle *notify;
1691     struct sc_handle *hdr = handle;
1692
1693     WINE_TRACE("(%p, NotifyMask: 0x%lx, %p, %p, %p, %p)\n", handle,
1694             params.params->dwNotifyMask, clientprocessguid, scmprocessguid,
1695             createremotequeue, hNotify);
1696
1697     switch (hdr->type)
1698     {
1699     case SC_HTYPE_SERVICE:
1700         err = validate_service_handle(handle, SERVICE_QUERY_STATUS, &service);
1701         break;
1702     case SC_HTYPE_MANAGER:
1703         err = validate_scm_handle(handle, SC_MANAGER_ENUMERATE_SERVICE, &manager);
1704         break;
1705     default:
1706         err = ERROR_INVALID_HANDLE;
1707         break;
1708     }
1709
1710     if (err != ERROR_SUCCESS)
1711         return err;
1712
1713     if (manager)
1714     {
1715         WARN("Need support for service creation/deletion notifications\n");
1716         return ERROR_CALL_NOT_IMPLEMENTED;
1717     }
1718
1719     notify = calloc(1, sizeof(*notify));
1720     if (!notify)
1721         return ERROR_NOT_ENOUGH_SERVER_MEMORY;
1722
1723     notify->hdr.type = SC_HTYPE_NOTIFY;
1724     notify->hdr.access = 0;
1725
1726     notify->event = CreateEventW(NULL, TRUE, FALSE, NULL);
1727
1728     notify->notify_mask = params.params->dwNotifyMask;
1729
1730     service_lock(service->service_entry);
1731
1732     if (service->notify)
1733     {
1734         service_unlock(service->service_entry);
1735         sc_notify_release(notify);
1736         return ERROR_ALREADY_REGISTERED;
1737     }
1738
1739     mask = 1 << (service->service_entry->status.dwCurrentState - SERVICE_STOPPED);
1740     if (!service->status_notified && (notify->notify_mask & mask))
1741     {
1742         fill_notify(notify, service->service_entry);
1743         service->status_notified = TRUE;
1744     }
1745     else
1746     {
1747         sc_notify_retain(notify);
1748         service->notify = notify;
1749     }
1750
1751     sc_notify_retain(notify);
1752     *hNotify = &notify->hdr;
1753
1754     service_unlock(service->service_entry);
1755
1756     return ERROR_SUCCESS;
1757 }
1758
1759 DWORD __cdecl svcctl_GetNotifyResults(
1760     SC_NOTIFY_RPC_HANDLE hNotify,
1761     SC_RPC_NOTIFY_PARAMS_LIST **pList)
1762 {
1763     DWORD err;
1764     struct sc_notify_handle *notify;
1765
1766     WINE_TRACE("(%p, %p)\n", hNotify, pList);
1767
1768     if (!pList)
1769         return ERROR_INVALID_PARAMETER;
1770
1771     *pList = NULL;
1772
1773     if ((err = validate_notify_handle(hNotify, 0, &notify)) != 0)
1774         return err;
1775
1776     sc_notify_retain(notify);
1777     /* block until there is a result */
1778     err = WaitForSingleObject(notify->event, INFINITE);
1779
1780     if (err != WAIT_OBJECT_0)
1781     {
1782         sc_notify_release(notify);
1783         return err;
1784     }
1785
1786     *pList = InterlockedExchangePointer((void**)&notify->params_list, NULL);
1787     if (!*pList)
1788     {
1789         sc_notify_release(notify);
1790         return ERROR_REQUEST_ABORTED;
1791     }
1792
1793     sc_notify_release(notify);
1794
1795     return ERROR_SUCCESS;
1796 }
1797
1798 DWORD __cdecl svcctl_CloseNotifyHandle(
1799     SC_NOTIFY_RPC_HANDLE *hNotify,
1800     BOOL *apc_fired)
1801 {
1802     struct sc_notify_handle *notify;
1803     DWORD err;
1804
1805     WINE_TRACE("(%p, %p)\n", hNotify, apc_fired);
1806
1807     if ((err = validate_notify_handle(*hNotify, 0, &notify)) != 0)
1808         return err;
1809
1810     sc_notify_release(notify);
1811
1812     return ERROR_SUCCESS;
1813 }
1814
1815 DWORD __cdecl svcctl_ControlServiceExA(
1816     SC_RPC_HANDLE service,
1817     DWORD control,
1818     DWORD info_level,
1819     SC_RPC_SERVICE_CONTROL_IN_PARAMSA *in_params,
1820     SC_RPC_SERVICE_CONTROL_OUT_PARAMSA *out_params)
1821 {
1822     WINE_FIXME("\n");
1823     return ERROR_CALL_NOT_IMPLEMENTED;
1824 }
1825
1826 DWORD __cdecl svcctl_ControlServiceExW(
1827     SC_RPC_HANDLE service,
1828     DWORD control,
1829     DWORD info_level,
1830     SC_RPC_SERVICE_CONTROL_IN_PARAMSW *in_params,
1831     SC_RPC_SERVICE_CONTROL_OUT_PARAMSW *out_params)
1832 {
1833     WINE_FIXME("\n");
1834     return ERROR_CALL_NOT_IMPLEMENTED;
1835 }
1836
1837 DWORD __cdecl svcctl_unknown52(void)
1838 {
1839     WINE_FIXME("\n");
1840     return ERROR_CALL_NOT_IMPLEMENTED;
1841 }
1842
1843 DWORD __cdecl svcctl_unknown53(void)
1844 {
1845     WINE_FIXME("\n");
1846     return ERROR_CALL_NOT_IMPLEMENTED;
1847 }
1848
1849 DWORD __cdecl svcctl_unknown54(void)
1850 {
1851     WINE_FIXME("\n");
1852     return ERROR_CALL_NOT_IMPLEMENTED;
1853 }
1854
1855 DWORD __cdecl svcctl_unknown55(void)
1856 {
1857     WINE_FIXME("\n");
1858     return ERROR_CALL_NOT_IMPLEMENTED;
1859 }
1860
1861 DWORD __cdecl svcctl_QueryServiceConfigEx(
1862     SC_RPC_HANDLE service,
1863     DWORD info_level,
1864     SC_RPC_CONFIG_INFOW *info)
1865 {
1866     WINE_FIXME("\n");
1867     return ERROR_CALL_NOT_IMPLEMENTED;
1868 }
1869
1870 DWORD __cdecl svcctl_QueryServiceObjectSecurity(
1871     SC_RPC_HANDLE service,
1872     SECURITY_INFORMATION info,
1873     BYTE *descriptor,
1874     DWORD buf_size,
1875     DWORD *needed_size)
1876 {
1877     WINE_FIXME("\n");
1878     return ERROR_CALL_NOT_IMPLEMENTED;
1879 }
1880
1881 DWORD __cdecl svcctl_SetServiceObjectSecurity(
1882     SC_RPC_HANDLE service,
1883     SECURITY_INFORMATION info,
1884     BYTE *descriptor,
1885     DWORD buf_size)
1886 {
1887     WINE_FIXME("\n");
1888     return ERROR_CALL_NOT_IMPLEMENTED;
1889 }
1890
1891 DWORD __cdecl svcctl_QueryServiceStatus(
1892     SC_RPC_HANDLE service,
1893     SERVICE_STATUS *status)
1894 {
1895     WINE_FIXME("\n");
1896     return ERROR_CALL_NOT_IMPLEMENTED;
1897 }
1898
1899 DWORD __cdecl svcctl_NotifyBootConfigStatus(
1900     SVCCTL_HANDLEW machinename,
1901     DWORD boot_acceptable)
1902 {
1903     WINE_FIXME("\n");
1904     return ERROR_CALL_NOT_IMPLEMENTED;
1905 }
1906
1907 DWORD __cdecl svcctl_SCSetServiceBitsW(void)
1908 {
1909     WINE_FIXME("\n");
1910     return ERROR_CALL_NOT_IMPLEMENTED;
1911 }
1912
1913 DWORD __cdecl svcctl_EnumDependentServicesW(
1914     SC_RPC_HANDLE service,
1915     DWORD state,
1916     BYTE *services,
1917     DWORD buf_size,
1918     DWORD *needed_size,
1919     DWORD *services_ret)
1920 {
1921     WINE_FIXME("\n");
1922     return ERROR_CALL_NOT_IMPLEMENTED;
1923 }
1924
1925 DWORD __cdecl svcctl_QueryServiceLockStatusW(
1926     SC_RPC_HANDLE scmanager,
1927     QUERY_SERVICE_LOCK_STATUSW *status,
1928     DWORD buf_size,
1929     DWORD *needed_size)
1930 {
1931     WINE_FIXME("\n");
1932     return ERROR_CALL_NOT_IMPLEMENTED;
1933 }
1934
1935 DWORD __cdecl svcctl_SCSetServiceBitsA(void)
1936 {
1937     WINE_FIXME("\n");
1938     return ERROR_CALL_NOT_IMPLEMENTED;
1939 }
1940
1941 DWORD __cdecl svcctl_ChangeServiceConfigA(
1942     SC_RPC_HANDLE service,
1943     DWORD service_type,
1944     DWORD start_type,
1945     DWORD error_control,
1946     LPSTR binarypath,
1947     LPSTR loadordergroup,
1948     DWORD *tagid,
1949     BYTE *dependencies,
1950     DWORD depend_size,
1951     LPSTR startname,
1952     BYTE *password,
1953     DWORD password_size,
1954     LPSTR displayname)
1955 {
1956     WINE_FIXME("\n");
1957     return ERROR_CALL_NOT_IMPLEMENTED;
1958 }
1959
1960 DWORD __cdecl svcctl_CreateServiceA(
1961     SC_RPC_HANDLE scmanager,
1962     LPCSTR servicename,
1963     LPCSTR displayname,
1964     DWORD desiredaccess,
1965     DWORD service_type,
1966     DWORD start_type,
1967     DWORD error_control,
1968     LPCSTR binarypath,
1969     LPCSTR loadordergroup,
1970     DWORD *tagid,
1971     const BYTE *dependencies,
1972     DWORD depend_size,
1973     LPCSTR startname,
1974     const BYTE *password,
1975     DWORD password_size,
1976     SC_RPC_HANDLE *service)
1977 {
1978     WINE_FIXME("\n");
1979     return ERROR_CALL_NOT_IMPLEMENTED;
1980 }
1981
1982 DWORD __cdecl svcctl_EnumDependentServicesA(
1983     SC_RPC_HANDLE service,
1984     DWORD state,
1985     BYTE *services,
1986     DWORD buf_size,
1987     DWORD *needed_size,
1988     DWORD *services_ret)
1989 {
1990     WINE_FIXME("\n");
1991     return ERROR_CALL_NOT_IMPLEMENTED;
1992 }
1993
1994 DWORD __cdecl svcctl_EnumServicesStatusA(
1995     SC_RPC_HANDLE hmngr,
1996     DWORD type,
1997     DWORD state,
1998     BYTE *buffer,
1999     DWORD size,
2000     DWORD *needed,
2001     DWORD *returned,
2002     DWORD *resume)
2003 {
2004     WINE_FIXME("\n");
2005     return ERROR_CALL_NOT_IMPLEMENTED;
2006 }
2007
2008 DWORD __cdecl svcctl_OpenSCManagerA(
2009     MACHINE_HANDLEA MachineName,
2010     LPCSTR DatabaseName,
2011     DWORD dwAccessMask,
2012     SC_RPC_HANDLE *handle)
2013 {
2014     WINE_FIXME("\n");
2015     return ERROR_CALL_NOT_IMPLEMENTED;
2016 }
2017
2018 DWORD __cdecl svcctl_OpenServiceA(
2019     SC_RPC_HANDLE hSCManager,
2020     LPCSTR lpServiceName,
2021     DWORD dwDesiredAccess,
2022     SC_RPC_HANDLE *phService)
2023 {
2024     WINE_FIXME("\n");
2025     return ERROR_CALL_NOT_IMPLEMENTED;
2026 }
2027
2028 DWORD __cdecl svcctl_QueryServiceConfigA(
2029     SC_RPC_HANDLE hService,
2030     QUERY_SERVICE_CONFIGA *config,
2031     DWORD buf_size,
2032     DWORD *needed_size)
2033 {
2034     WINE_FIXME("\n");
2035     return ERROR_CALL_NOT_IMPLEMENTED;
2036 }
2037
2038 DWORD __cdecl svcctl_QueryServiceLockStatusA(
2039     SC_RPC_HANDLE scmanager,
2040     QUERY_SERVICE_LOCK_STATUSA *status,
2041     DWORD buf_size,
2042     DWORD *needed_size)
2043 {
2044     WINE_FIXME("\n");
2045     return ERROR_CALL_NOT_IMPLEMENTED;
2046 }
2047
2048 DWORD __cdecl svcctl_StartServiceA(
2049     SC_RPC_HANDLE service,
2050     DWORD argc,
2051     LPCSTR *args)
2052 {
2053     WINE_FIXME("\n");
2054     return ERROR_CALL_NOT_IMPLEMENTED;
2055 }
2056
2057 DWORD __cdecl svcctl_GetServiceDisplayNameA(
2058     SC_RPC_HANDLE hSCManager,
2059     LPCSTR servicename,
2060     CHAR buffer[],
2061     DWORD *buf_size)
2062 {
2063     WINE_FIXME("\n");
2064     return ERROR_CALL_NOT_IMPLEMENTED;
2065 }
2066
2067 DWORD __cdecl svcctl_GetServiceKeyNameA(
2068     SC_RPC_HANDLE hSCManager,
2069     LPCSTR servicename,
2070     CHAR buffer[],
2071     DWORD *buf_size)
2072 {
2073     WINE_FIXME("\n");
2074     return ERROR_CALL_NOT_IMPLEMENTED;
2075 }
2076
2077 DWORD __cdecl svcctl_GetCurrentGroupStateW(void)
2078 {
2079     WINE_FIXME("\n");
2080     return ERROR_CALL_NOT_IMPLEMENTED;
2081 }
2082
2083 DWORD __cdecl svcctl_EnumServiceGroupW(
2084     SC_RPC_HANDLE scmanager,
2085     DWORD service_type,
2086     DWORD service_state,
2087     BYTE *buffer,
2088     DWORD buf_size,
2089     DWORD *needed_size,
2090     DWORD *returned_size,
2091     DWORD *resume_index,
2092     LPCWSTR groupname)
2093 {
2094     WINE_FIXME("\n");
2095     return ERROR_CALL_NOT_IMPLEMENTED;
2096 }
2097
2098 DWORD __cdecl svcctl_ChangeServiceConfig2A(
2099     SC_RPC_HANDLE service,
2100     SC_RPC_CONFIG_INFOA info)
2101 {
2102     WINE_FIXME("\n");
2103     return ERROR_CALL_NOT_IMPLEMENTED;
2104 }
2105
2106 DWORD __cdecl svcctl_QueryServiceConfig2A(
2107     SC_RPC_HANDLE service,
2108     DWORD info_level,
2109     BYTE *buffer,
2110     DWORD buf_size,
2111     DWORD *needed_size)
2112 {
2113     WINE_FIXME("\n");
2114     return ERROR_CALL_NOT_IMPLEMENTED;
2115 }
2116
2117 DWORD RPC_Init(void)
2118 {
2119     WCHAR transport[] = SVCCTL_TRANSPORT;
2120     WCHAR endpoint[] = SVCCTL_ENDPOINT;
2121     DWORD err;
2122
2123     if (!(cleanup_group = CreateThreadpoolCleanupGroup()))
2124     {
2125         WINE_ERR("CreateThreadpoolCleanupGroup failed with error %lu\n", GetLastError());
2126         return GetLastError();
2127     }
2128
2129     if ((err = RpcServerUseProtseqEpW(transport, 0, endpoint, NULL)) != ERROR_SUCCESS)
2130     {
2131         WINE_ERR("RpcServerUseProtseq failed with error %lu\n", err);
2132         return err;
2133     }
2134
2135     if ((err = RpcServerRegisterIf(svcctl_v2_0_s_ifspec, 0, 0)) != ERROR_SUCCESS)
2136     {
2137         WINE_ERR("RpcServerRegisterIf failed with error %lu\n", err);
2138         return err;
2139     }
2140
2141     if ((err = RpcServerListen(1, RPC_C_LISTEN_MAX_CALLS_DEFAULT, TRUE)) != ERROR_SUCCESS)
2142     {
2143         WINE_ERR("RpcServerListen failed with error %lu\n", err);
2144         return err;
2145     }
2146
2147     NtSetInformationProcess( GetCurrentProcess(), ProcessWineMakeProcessSystem,
2148                              &exit_event, sizeof(HANDLE *) );
2149     return ERROR_SUCCESS;
2150 }
2151
2152 void RPC_Stop(void)
2153 {
2154     RpcMgmtStopServerListening(NULL);
2155     RpcServerUnregisterIf(svcctl_v2_0_s_ifspec, NULL, TRUE);
2156     RpcMgmtWaitServerListen();
2157
2158     CloseThreadpoolCleanupGroupMembers(cleanup_group, TRUE, NULL);
2159     CloseThreadpoolCleanupGroup(cleanup_group);
2160     CloseHandle(exit_event);
2161 }
2162
2163 void __RPC_USER SC_RPC_HANDLE_rundown(SC_RPC_HANDLE handle)
2164 {
2165     SC_RPC_HANDLE_destroy(handle);
2166 }
2167
2168 void __RPC_USER SC_NOTIFY_RPC_HANDLE_rundown(SC_NOTIFY_RPC_HANDLE handle)
2169 {
2170 }
2171
2172 void  __RPC_FAR * __RPC_USER MIDL_user_allocate(SIZE_T len)
2173 {
2174     return malloc(len);
2175 }
2176
2177 void __RPC_USER MIDL_user_free(void __RPC_FAR * ptr)
2178 {
2179     free(ptr);
2180 }