dlls/msi/custom.c

   1 /*
   2  * Custom Action processing for the Microsoft Installer (msi.dll)
   3  *
   4  * Copyright 2005 Aric Stewart for CodeWeavers
   5  *
   6  * This library is free software; you can redistribute it and/or
   7  * modify it under the terms of the GNU Lesser General Public
   8  * License as published by the Free Software Foundation; either
   9  * version 2.1 of the License, or (at your option) any later version.
  10  *
  11  * This library is distributed in the hope that it will be useful,
  12  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  13  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  14  * Lesser General Public License for more details.
  15  *
  16  * You should have received a copy of the GNU Lesser General Public
  17  * License along with this library; if not, write to the Free Software
  18  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
  19  */
  20
  21 #define COBJMACROS
  22
  23 #include <stdarg.h>
  24 #include <stdio.h>
  25
  26 #include "ntstatus.h"
  27 #define WIN32_NO_STATUS
  28 #include "windef.h"
  29 #include "winbase.h"
  30 #include "winerror.h"
  31 #include "msidefs.h"
  32 #include "winuser.h"
  33 #include "objbase.h"
  34 #include "oleauto.h"
  35
  36 #include "msipriv.h"
  37 #include "winemsi.h"
  38 #include "wine/asm.h"
  39 #include "wine/debug.h"
  40 #include "wine/exception.h"
  41
  42 WINE_DEFAULT_DEBUG_CHANNEL(msi);
  43
  44 #define CUSTOM_ACTION_TYPE_MASK 0x3F
  45
  46 typedef struct tagMSIRUNNINGACTION
  47 {
  48     struct list entry;
  49     HANDLE handle;
  50     BOOL   process;
  51     LPWSTR name;
  52 } MSIRUNNINGACTION;
  53
  54 typedef UINT (WINAPI *MsiCustomActionEntryPoint)( MSIHANDLE );
  55
  56 static CRITICAL_SECTION msi_custom_action_cs;
  57 static CRITICAL_SECTION_DEBUG msi_custom_action_cs_debug =
  58 {
  59     0, 0, &msi_custom_action_cs,
  60     { &msi_custom_action_cs_debug.ProcessLocksList,
  61       &msi_custom_action_cs_debug.ProcessLocksList },
  62       0, 0, { (DWORD_PTR)(__FILE__ ": msi_custom_action_cs") }
  63 };
  64 static CRITICAL_SECTION msi_custom_action_cs = { &msi_custom_action_cs_debug, -1, 0, 0, 0, 0 };
  65
  66 static struct list msi_pending_custom_actions = LIST_INIT( msi_pending_custom_actions );
  67
  68 void  __RPC_FAR * __RPC_USER MIDL_user_allocate(SIZE_T len)
  69 {
  70     return malloc(len);
  71 }
  72
  73 void __RPC_USER MIDL_user_free(void __RPC_FAR * ptr)
  74 {
  75     free(ptr);
  76 }
  77
  78 LONG WINAPI rpc_filter(EXCEPTION_POINTERS *eptr)
  79 {
  80     return I_RpcExceptionFilter(eptr->ExceptionRecord->ExceptionCode);
  81 }
  82
  83 UINT msi_schedule_action( MSIPACKAGE *package, UINT script, const WCHAR *action )
  84 {
  85     UINT count;
  86     WCHAR **newbuf = NULL;
  87
  88     if (script >= SCRIPT_MAX)
  89     {
  90         FIXME("Unknown script requested %u\n", script);
  91         return ERROR_FUNCTION_FAILED;
  92     }
  93     TRACE("Scheduling action %s in script %u\n", debugstr_w(action), script);
  94
  95     count = package->script_actions_count[script];
  96     package->script_actions_count[script]++;
  97     if (count != 0) newbuf = msi_realloc( package->script_actions[script],
  98                                           package->script_actions_count[script] * sizeof(WCHAR *) );
  99     else newbuf = msi_alloc( sizeof(WCHAR *) );
 100
 101     newbuf[count] = strdupW( action );
 102     package->script_actions[script] = newbuf;
 103     return ERROR_SUCCESS;
 104 }
 105
 106 UINT msi_register_unique_action( MSIPACKAGE *package, const WCHAR *action )
 107 {
 108     UINT count;
 109     WCHAR **newbuf = NULL;
 110
 111     TRACE("Registering %s as unique action\n", debugstr_w(action));
 112
 113     count = package->unique_actions_count;
 114     package->unique_actions_count++;
 115     if (count != 0) newbuf = msi_realloc( package->unique_actions,
 116                                           package->unique_actions_count * sizeof(WCHAR *) );
 117     else newbuf = msi_alloc( sizeof(WCHAR *) );
 118
 119     newbuf[count] = strdupW( action );
 120     package->unique_actions = newbuf;
 121     return ERROR_SUCCESS;
 122 }
 123
 124 BOOL msi_action_is_unique( const MSIPACKAGE *package, const WCHAR *action )
 125 {
 126     UINT i;
 127
 128     for (i = 0; i < package->unique_actions_count; i++)
 129     {
 130         if (!wcscmp( package->unique_actions[i], action )) return TRUE;
 131     }
 132     return FALSE;
 133 }
 134
 135 static BOOL check_execution_scheduling_options(MSIPACKAGE *package, LPCWSTR action, UINT options)
 136 {
 137     if ((options & msidbCustomActionTypeClientRepeat) ==
 138             msidbCustomActionTypeClientRepeat)
 139     {
 140         if (!(package->InWhatSequence & SEQUENCE_UI &&
 141             package->InWhatSequence & SEQUENCE_EXEC))
 142         {
 143             TRACE("Skipping action due to dbCustomActionTypeClientRepeat option.\n");
 144             return FALSE;
 145         }
 146     }
 147     else if (options & msidbCustomActionTypeFirstSequence)
 148     {
 149         if (package->InWhatSequence & SEQUENCE_UI &&
 150             package->InWhatSequence & SEQUENCE_EXEC )
 151         {
 152             TRACE("Skipping action due to msidbCustomActionTypeFirstSequence option.\n");
 153             return FALSE;
 154         }
 155     }
 156     else if (options & msidbCustomActionTypeOncePerProcess)
 157     {
 158         if (msi_action_is_unique(package, action))
 159         {
 160             TRACE("Skipping action due to msidbCustomActionTypeOncePerProcess option.\n");
 161             return FALSE;
 162         }
 163         else
 164             msi_register_unique_action(package, action);
 165     }
 166
 167     return TRUE;
 168 }
 169
 170 /* stores the following properties before the action:
 171  *
 172  *    [CustomActionData<=>UserSID<=>ProductCode]Action
 173  */
 174 static LPWSTR msi_get_deferred_action(LPCWSTR action, LPCWSTR actiondata,
 175                                       LPCWSTR usersid, LPCWSTR prodcode)
 176 {
 177     LPWSTR deferred;
 178     DWORD len;
 179
 180     if (!actiondata)
 181         return strdupW(action);
 182
 183     len = lstrlenW(action) + lstrlenW(actiondata) +
 184           lstrlenW(usersid) + lstrlenW(prodcode) +
 185           lstrlenW(L"[%s<=>%s<=>%s]%s") - 7;
 186     deferred = msi_alloc(len * sizeof(WCHAR));
 187
 188     swprintf(deferred, len, L"[%s<=>%s<=>%s]%s", actiondata, usersid, prodcode, action);
 189     return deferred;
 190 }
 191
 192 static void set_deferred_action_props( MSIPACKAGE *package, const WCHAR *deferred_data )
 193 {
 194     const WCHAR *end, *beg = deferred_data + 1;
 195
 196     end = wcsstr(beg, L"<=>");
 197     msi_set_property( package->db, L"CustomActionData", beg, end - beg );
 198     beg = end + 3;
 199
 200     end = wcsstr(beg, L"<=>");
 201     msi_set_property( package->db, L"UserSID", beg, end - beg );
 202     beg = end + 3;
 203
 204     end = wcschr(beg, ']');
 205     msi_set_property( package->db, L"ProductCode", beg, end - beg );
 206 }
 207
 208 WCHAR *msi_create_temp_file( MSIDATABASE *db )
 209 {
 210     WCHAR *ret;
 211
 212     if (!db->tempfolder)
 213     {
 214         WCHAR tmp[MAX_PATH];
 215         DWORD len = ARRAY_SIZE( tmp );
 216
 217         if (msi_get_property( db, L"TempFolder", tmp, &len ) ||
 218             GetFileAttributesW( tmp ) != FILE_ATTRIBUTE_DIRECTORY)
 219         {
 220             GetTempPathW( MAX_PATH, tmp );
 221         }
 222         if (!(db->tempfolder = strdupW( tmp ))) return NULL;
 223     }
 224
 225     if ((ret = msi_alloc( (lstrlenW( db->tempfolder ) + 20) * sizeof(WCHAR) )))
 226     {
 227         if (!GetTempFileNameW( db->tempfolder, L"msi", 0, ret ))
 228         {
 229             msi_free( ret );
 230             return NULL;
 231         }
 232     }
 233
 234     return ret;
 235 }
 236
 237 static MSIBINARY *create_temp_binary(MSIPACKAGE *package, LPCWSTR source)
 238 {
 239     MSIRECORD *row;
 240     MSIBINARY *binary = NULL;
 241     HANDLE file;
 242     CHAR buffer[1024];
 243     WCHAR *tmpfile;
 244     DWORD sz, write;
 245     UINT r;
 246
 247     if (!(tmpfile = msi_create_temp_file( package->db ))) return NULL;
 248
 249     if (!(row = MSI_QueryGetRecord( package->db, L"SELECT * FROM `Binary` WHERE `Name` = '%s'", source ))) goto error;
 250     if (!(binary = msi_alloc_zero( sizeof(MSIBINARY) ))) goto error;
 251
 252     file = CreateFileW( tmpfile, GENERIC_WRITE, 0, NULL, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, NULL );
 253     if (file == INVALID_HANDLE_VALUE) goto error;
 254
 255     do
 256     {
 257         sz = sizeof(buffer);
 258         r = MSI_RecordReadStream( row, 2, buffer, &sz );
 259         if (r != ERROR_SUCCESS)
 260         {
 261             ERR("Failed to get stream\n");
 262             break;
 263         }
 264         WriteFile( file, buffer, sz, &write, NULL );
 265     } while (sz == sizeof buffer);
 266
 267     CloseHandle( file );
 268     if (r != ERROR_SUCCESS) goto error;
 269
 270     binary->source = strdupW( source );
 271     binary->tmpfile = tmpfile;
 272     list_add_tail( &package->binaries, &binary->entry );
 273
 274     msiobj_release( &row->hdr );
 275     return binary;
 276
 277 error:
 278     if (row) msiobj_release( &row->hdr );
 279     DeleteFileW( tmpfile );
 280     msi_free( tmpfile );
 281     msi_free( binary );
 282     return NULL;
 283 }
 284
 285 static MSIBINARY *get_temp_binary(MSIPACKAGE *package, LPCWSTR source)
 286 {
 287     MSIBINARY *binary;
 288
 289     LIST_FOR_EACH_ENTRY( binary, &package->binaries, MSIBINARY, entry )
 290     {
 291         if (!wcscmp( binary->source, source ))
 292             return binary;
 293     }
 294
 295     return create_temp_binary(package, source);
 296 }
 297
 298 static void file_running_action(MSIPACKAGE* package, HANDLE Handle,
 299                                 BOOL process, LPCWSTR name)
 300 {
 301     MSIRUNNINGACTION *action;
 302
 303     action = msi_alloc( sizeof(MSIRUNNINGACTION) );
 304
 305     action->handle = Handle;
 306     action->process = process;
 307     action->name = strdupW(name);
 308
 309     list_add_tail( &package->RunningActions, &action->entry );
 310 }
 311
 312 static UINT custom_get_process_return( HANDLE process )
 313 {
 314     DWORD rc = 0;
 315
 316     GetExitCodeProcess( process, &rc );
 317     TRACE( "exit code is %lu\n", rc );
 318     if (rc != 0)
 319         return ERROR_FUNCTION_FAILED;
 320     return ERROR_SUCCESS;
 321 }
 322
 323 static UINT custom_get_thread_return( MSIPACKAGE *package, HANDLE thread )
 324 {
 325     DWORD rc = 0;
 326
 327     GetExitCodeThread( thread, &rc );
 328
 329     switch (rc)
 330     {
 331     case ERROR_FUNCTION_NOT_CALLED:
 332     case ERROR_SUCCESS:
 333     case ERROR_INSTALL_USEREXIT:
 334     case ERROR_INSTALL_FAILURE:
 335         return rc;
 336     case ERROR_NO_MORE_ITEMS:
 337         return ERROR_SUCCESS;
 338     case ERROR_INSTALL_SUSPEND:
 339         ACTION_ForceReboot( package );
 340         return ERROR_SUCCESS;
 341     default:
 342         ERR( "invalid Return Code %lu\n", rc );
 343         return ERROR_INSTALL_FAILURE;
 344     }
 345 }
 346
 347 static UINT wait_process_handle(MSIPACKAGE* package, UINT type,
 348                            HANDLE ProcessHandle, LPCWSTR name)
 349 {
 350     UINT rc = ERROR_SUCCESS;
 351
 352     if (!(type & msidbCustomActionTypeAsync))
 353     {
 354         TRACE("waiting for %s\n", debugstr_w(name));
 355
 356         msi_dialog_check_messages(ProcessHandle);
 357
 358         if (!(type & msidbCustomActionTypeContinue))
 359             rc = custom_get_process_return(ProcessHandle);
 360
 361         CloseHandle(ProcessHandle);
 362     }
 363     else
 364     {
 365         TRACE("%s running in background\n", debugstr_w(name));
 366
 367         if (!(type & msidbCustomActionTypeContinue))
 368             file_running_action(package, ProcessHandle, TRUE, name);
 369         else
 370             CloseHandle(ProcessHandle);
 371     }
 372
 373     return rc;
 374 }
 375
 376 typedef struct _msi_custom_action_info {
 377     struct list entry;
 378     MSIPACKAGE *package;
 379     LPWSTR source;
 380     LPWSTR target;
 381     HANDLE handle;
 382     LPWSTR action;
 383     INT type;
 384     GUID guid;
 385     DWORD arch;
 386 } msi_custom_action_info;
 387
 388 static void free_custom_action_data( msi_custom_action_info *info )
 389 {
 390     EnterCriticalSection( &msi_custom_action_cs );
 391
 392     list_remove( &info->entry );
 393     if (info->handle)
 394         CloseHandle( info->handle );
 395     msi_free( info->action );
 396     msi_free( info->source );
 397     msi_free( info->target );
 398     msiobj_release( &info->package->hdr );
 399     msi_free( info );
 400
 401     LeaveCriticalSection( &msi_custom_action_cs );
 402 }
 403
 404 static UINT wait_thread_handle( msi_custom_action_info *info )
 405 {
 406     UINT rc = ERROR_SUCCESS;
 407
 408     if (!(info->type & msidbCustomActionTypeAsync))
 409     {
 410         TRACE("waiting for %s\n", debugstr_w( info->action ));
 411
 412         msi_dialog_check_messages( info->handle );
 413
 414         if (!(info->type & msidbCustomActionTypeContinue))
 415             rc = custom_get_thread_return( info->package, info->handle );
 416
 417         free_custom_action_data( info );
 418     }
 419     else
 420     {
 421         TRACE("%s running in background\n", debugstr_w( info->action ));
 422     }
 423
 424     return rc;
 425 }
 426
 427 static msi_custom_action_info *find_action_by_guid( const GUID *guid )
 428 {
 429     msi_custom_action_info *info;
 430     BOOL found = FALSE;
 431
 432     EnterCriticalSection( &msi_custom_action_cs );
 433
 434     LIST_FOR_EACH_ENTRY( info, &msi_pending_custom_actions, msi_custom_action_info, entry )
 435     {
 436         if (IsEqualGUID( &info->guid, guid ))
 437         {
 438             found = TRUE;
 439             break;
 440         }
 441     }
 442
 443     LeaveCriticalSection( &msi_custom_action_cs );
 444
 445     if (!found)
 446         return NULL;
 447
 448     return info;
 449 }
 450
 451 static void handle_msi_break( const WCHAR *action )
 452 {
 453     const WCHAR fmt[] = L"To debug your custom action, attach your debugger to process %u (0x%x) and press OK";
 454     WCHAR val[MAX_PATH], msg[100];
 455
 456     if (!GetEnvironmentVariableW( L"MsiBreak", val, MAX_PATH ) || wcscmp( val, action )) return;
 457
 458     swprintf( msg, ARRAY_SIZE(msg), fmt, GetCurrentProcessId(), GetCurrentProcessId() );
 459     MessageBoxW( NULL, msg, L"Windows Installer", MB_OK );
 460     DebugBreak();
 461 }
 462
 463 #ifdef __i386__
 464 /* wrapper for apps that don't declare the thread function correctly */
 465 extern UINT custom_proc_wrapper( MsiCustomActionEntryPoint entry, MSIHANDLE hinst );
 466 __ASM_GLOBAL_FUNC(custom_proc_wrapper,
 467                   "pushl %ebp\n\t"
 468                   __ASM_CFI(".cfi_adjust_cfa_offset 4\n\t")
 469                   __ASM_CFI(".cfi_rel_offset %ebp,0\n\t")
 470                   "movl %esp,%ebp\n\t"
 471                   __ASM_CFI(".cfi_def_cfa_register %ebp\n\t")
 472                   "subl $4,%esp\n\t"
 473                   "pushl 12(%ebp)\n\t"
 474                   "call *8(%ebp)\n\t"
 475                   "leave\n\t"
 476                   __ASM_CFI(".cfi_def_cfa %esp,4\n\t")
 477                   __ASM_CFI(".cfi_same_value %ebp\n\t")
 478                   "ret" )
 479 #else
 480 static UINT custom_proc_wrapper( MsiCustomActionEntryPoint entry, MSIHANDLE hinst )
 481 {
 482     return entry(hinst);
 483 }
 484 #endif
 485
 486 UINT CDECL __wine_msi_call_dll_function(DWORD client_pid, const GUID *guid)
 487 {
 488     MsiCustomActionEntryPoint fn;
 489     MSIHANDLE remote_package = 0;
 490     RPC_WSTR binding_str;
 491     MSIHANDLE hPackage;
 492     RPC_STATUS status;
 493     WCHAR *dll = NULL, *action = NULL;
 494     LPSTR proc = NULL;
 495     HANDLE hModule;
 496     INT type;
 497     UINT r;
 498
 499     TRACE("%s\n", debugstr_guid( guid ));
 500
 501     if (!rpc_handle)
 502     {
 503         WCHAR endpoint[12];
 504
 505         swprintf(endpoint, ARRAY_SIZE(endpoint), L"msi%x", client_pid);
 506         status = RpcStringBindingComposeW(NULL, (WCHAR *)L"ncalrpc", NULL, endpoint, NULL, &binding_str);
 507         if (status != RPC_S_OK)
 508         {
 509             ERR("RpcStringBindingCompose failed: %#lx\n", status);
 510             return status;
 511         }
 512         status = RpcBindingFromStringBindingW(binding_str, &rpc_handle);
 513         if (status != RPC_S_OK)
 514         {
 515             ERR("RpcBindingFromStringBinding failed: %#lx\n", status);
 516             return status;
 517         }
 518         RpcStringFreeW(&binding_str);
 519     }
 520
 521     r = remote_GetActionInfo(guid, &action, &type, &dll, &proc, &remote_package);
 522     if (r != ERROR_SUCCESS)
 523         return r;
 524
 525     hPackage = alloc_msi_remote_handle( remote_package );
 526     if (!hPackage)
 527     {
 528         ERR( "failed to create handle for %#lx\n", remote_package );
 529         midl_user_free( action );
 530         midl_user_free( dll );
 531         midl_user_free( proc );
 532         return ERROR_INSTALL_FAILURE;
 533     }
 534
 535     hModule = LoadLibraryW( dll );
 536     if (!hModule)
 537     {
 538         ERR( "failed to load dll %s (%lu)\n", debugstr_w( dll ), GetLastError() );
 539         midl_user_free( action );
 540         midl_user_free( dll );
 541         midl_user_free( proc );
 542         MsiCloseHandle( hPackage );
 543         return ERROR_SUCCESS;
 544     }
 545
 546     fn = (MsiCustomActionEntryPoint) GetProcAddress( hModule, proc );
 547     if (!fn) WARN( "GetProcAddress(%s) failed\n", debugstr_a(proc) );
 548     else
 549     {
 550         handle_msi_break(action);
 551
 552         __TRY
 553         {
 554             r = custom_proc_wrapper( fn, hPackage );
 555         }
 556         __EXCEPT_PAGE_FAULT
 557         {
 558             ERR( "Custom action (%s:%s) caused a page fault: %#lx\n",
 559                  debugstr_w(dll), debugstr_a(proc), GetExceptionCode() );
 560             r = ERROR_SUCCESS;
 561         }
 562         __ENDTRY;
 563     }
 564
 565     FreeLibrary(hModule);
 566
 567     midl_user_free(action);
 568     midl_user_free(dll);
 569     midl_user_free(proc);
 570
 571     MsiCloseAllHandles();
 572     return r;
 573 }
 574
 575 static DWORD custom_start_server(MSIPACKAGE *package, DWORD arch)
 576 {
 577     WCHAR path[MAX_PATH], cmdline[MAX_PATH + 23];
 578     PROCESS_INFORMATION pi = {0};
 579     STARTUPINFOW si = {0};
 580     WCHAR buffer[24];
 581     void *cookie;
 582     HANDLE pipe;
 583
 584     if ((arch == SCS_32BIT_BINARY && package->custom_server_32_process) ||
 585         (arch == SCS_64BIT_BINARY && package->custom_server_64_process))
 586         return ERROR_SUCCESS;
 587
 588     swprintf(buffer, ARRAY_SIZE(buffer), L"\\\\.\\pipe\\msica_%x_%d",
 589              GetCurrentProcessId(), arch == SCS_32BIT_BINARY ? 32 : 64);
 590     pipe = CreateNamedPipeW(buffer, PIPE_ACCESS_DUPLEX, 0, 1, sizeof(DWORD64),
 591         sizeof(GUID), 0, NULL);
 592     if (pipe == INVALID_HANDLE_VALUE)
 593         ERR("failed to create custom action client pipe: %lu\n", GetLastError());
 594
 595     if ((sizeof(void *) == 8 || is_wow64) && arch == SCS_32BIT_BINARY)
 596         GetSystemWow64DirectoryW(path, MAX_PATH - ARRAY_SIZE(L"\\msiexec.exe"));
 597     else
 598         GetSystemDirectoryW(path, MAX_PATH - ARRAY_SIZE(L"\\msiexec.exe"));
 599     lstrcatW(path, L"\\msiexec.exe");
 600     swprintf(cmdline, ARRAY_SIZE(cmdline), L"%s -Embedding %d", path, GetCurrentProcessId());
 601
 602     if (is_wow64 && arch == SCS_64BIT_BINARY)
 603     {
 604         Wow64DisableWow64FsRedirection(&cookie);
 605         CreateProcessW(path, cmdline, NULL, NULL, FALSE, 0, NULL, NULL, &si, &pi);
 606         Wow64RevertWow64FsRedirection(cookie);
 607     }
 608     else
 609         CreateProcessW(path, cmdline, NULL, NULL, FALSE, 0, NULL, NULL, &si, &pi);
 610
 611     CloseHandle(pi.hThread);
 612
 613     if (arch == SCS_32BIT_BINARY)
 614     {
 615         package->custom_server_32_process = pi.hProcess;
 616         package->custom_server_32_pipe = pipe;
 617     }
 618     else
 619     {
 620         package->custom_server_64_process = pi.hProcess;
 621         package->custom_server_64_pipe = pipe;
 622     }
 623
 624     if (!ConnectNamedPipe(pipe, NULL))
 625     {
 626         ERR("failed to connect to custom action server: %lu\n", GetLastError());
 627         return GetLastError();
 628     }
 629
 630     return ERROR_SUCCESS;
 631 }
 632
 633 void custom_stop_server(HANDLE process, HANDLE pipe)
 634 {
 635     DWORD size;
 636
 637     WriteFile(pipe, &GUID_NULL, sizeof(GUID_NULL), &size, NULL);
 638     WaitForSingleObject(process, INFINITE);
 639     CloseHandle(process);
 640     CloseHandle(pipe);
 641 }
 642
 643 static DWORD WINAPI custom_client_thread(void *arg)
 644 {
 645     msi_custom_action_info *info = arg;
 646     DWORD64 thread64;
 647     HANDLE process;
 648     HANDLE thread;
 649     HANDLE pipe;
 650     DWORD size;
 651     DWORD rc;
 652
 653     CoInitializeEx(NULL, COINIT_MULTITHREADED); /* needed to marshal streams */
 654
 655     if (info->arch == SCS_32BIT_BINARY)
 656     {
 657         process = info->package->custom_server_32_process;
 658         pipe = info->package->custom_server_32_pipe;
 659     }
 660     else
 661     {
 662         process = info->package->custom_server_64_process;
 663         pipe = info->package->custom_server_64_pipe;
 664     }
 665
 666     EnterCriticalSection(&msi_custom_action_cs);
 667
 668     if (!WriteFile(pipe, &info->guid, sizeof(info->guid), &size, NULL) ||
 669         size != sizeof(info->guid))
 670     {
 671         ERR("failed to write to custom action client pipe: %lu\n", GetLastError());
 672         LeaveCriticalSection(&msi_custom_action_cs);
 673         return GetLastError();
 674     }
 675     if (!ReadFile(pipe, &thread64, sizeof(thread64), &size, NULL) || size != sizeof(thread64))
 676     {
 677         ERR("failed to read from custom action client pipe: %lu\n", GetLastError());
 678         LeaveCriticalSection(&msi_custom_action_cs);
 679         return GetLastError();
 680     }
 681
 682     LeaveCriticalSection(&msi_custom_action_cs);
 683
 684     if (DuplicateHandle(process, (HANDLE)(DWORD_PTR)thread64, GetCurrentProcess(),
 685         &thread, 0, FALSE, DUPLICATE_SAME_ACCESS | DUPLICATE_CLOSE_SOURCE))
 686     {
 687         WaitForSingleObject(thread, INFINITE);
 688         GetExitCodeThread(thread, &rc);
 689         CloseHandle(thread);
 690     }
 691     else
 692         rc = GetLastError();
 693
 694     CoUninitialize();
 695     return rc;
 696 }
 697
 698 /* based on kernel32.GetBinaryTypeW() */
 699 static BOOL get_binary_type( const WCHAR *name, DWORD *type )
 700 {
 701     HANDLE hfile, mapping;
 702     NTSTATUS status;
 703
 704     hfile = CreateFileW( name, GENERIC_READ, FILE_SHARE_READ, NULL, OPEN_EXISTING, 0, 0 );
 705     if (hfile == INVALID_HANDLE_VALUE)
 706         return FALSE;
 707
 708     status = NtCreateSection( &mapping, STANDARD_RIGHTS_REQUIRED | SECTION_QUERY, NULL, NULL, PAGE_READONLY,
 709                               SEC_IMAGE, hfile );
 710     CloseHandle( hfile );
 711
 712     switch (status)
 713     {
 714     case STATUS_SUCCESS:
 715         {
 716             SECTION_IMAGE_INFORMATION info;
 717
 718             status = NtQuerySection( mapping, SectionImageInformation, &info, sizeof(info), NULL );
 719             CloseHandle( mapping );
 720             if (status) return FALSE;
 721             switch (info.Machine)
 722             {
 723             case IMAGE_FILE_MACHINE_I386:
 724             case IMAGE_FILE_MACHINE_ARMNT:
 725                 *type = SCS_32BIT_BINARY;
 726                 return TRUE;
 727             case IMAGE_FILE_MACHINE_AMD64:
 728             case IMAGE_FILE_MACHINE_ARM64:
 729                 *type = SCS_64BIT_BINARY;
 730                 return TRUE;
 731             default:
 732                 return FALSE;
 733             }
 734         }
 735     case STATUS_INVALID_IMAGE_WIN_64:
 736         *type = SCS_64BIT_BINARY;
 737         return TRUE;
 738     default:
 739         return FALSE;
 740     }
 741 }
 742
 743 static msi_custom_action_info *do_msidbCustomActionTypeDll(
 744     MSIPACKAGE *package, INT type, LPCWSTR source, LPCWSTR target, LPCWSTR action )
 745 {
 746     msi_custom_action_info *info;
 747     RPC_STATUS status;
 748     BOOL ret;
 749
 750     info = msi_alloc( sizeof *info );
 751     if (!info)
 752         return NULL;
 753
 754     msiobj_addref( &package->hdr );
 755     info->package = package;
 756     info->type = type;
 757     info->target = strdupW( target );
 758     info->source = strdupW( source );
 759     info->action = strdupW( action );
 760     CoCreateGuid( &info->guid );
 761
 762     EnterCriticalSection( &msi_custom_action_cs );
 763     list_add_tail( &msi_pending_custom_actions, &info->entry );
 764     LeaveCriticalSection( &msi_custom_action_cs );
 765
 766     if (!package->rpc_server_started)
 767     {
 768         WCHAR endpoint[12];
 769
 770         swprintf(endpoint, ARRAY_SIZE(endpoint), L"msi%x", GetCurrentProcessId());
 771         status = RpcServerUseProtseqEpW((WCHAR *)L"ncalrpc", RPC_C_PROTSEQ_MAX_REQS_DEFAULT,
 772             endpoint, NULL);
 773         if (status != RPC_S_OK)
 774         {
 775             ERR("RpcServerUseProtseqEp failed: %#lx\n", status);
 776             return NULL;
 777         }
 778
 779         status = RpcServerRegisterIfEx(s_IWineMsiRemote_v0_0_s_ifspec, NULL, NULL,
 780             RPC_IF_AUTOLISTEN, RPC_C_LISTEN_MAX_CALLS_DEFAULT, NULL);
 781         if (status != RPC_S_OK)
 782         {
 783             ERR("RpcServerRegisterIfEx failed: %#lx\n", status);
 784             return NULL;
 785         }
 786
 787         info->package->rpc_server_started = 1;
 788     }
 789
 790     ret = get_binary_type(source, &info->arch);
 791     if (!ret)
 792         info->arch = (sizeof(void *) == 8 ? SCS_64BIT_BINARY : SCS_32BIT_BINARY);
 793
 794     if (info->arch == SCS_64BIT_BINARY && sizeof(void *) == 4 && !is_wow64)
 795     {
 796         ERR("Attempt to run a 64-bit custom action inside a 32-bit WINEPREFIX.\n");
 797         free_custom_action_data( info );
 798         return NULL;
 799     }
 800
 801     custom_start_server(package, info->arch);
 802
 803     info->handle = CreateThread(NULL, 0, custom_client_thread, info, 0, NULL);
 804     if (!info->handle)
 805     {
 806         free_custom_action_data( info );
 807         return NULL;
 808     }
 809
 810     return info;
 811 }
 812
 813 static UINT HANDLE_CustomType1( MSIPACKAGE *package, const WCHAR *source, const WCHAR *target,
 814                                 INT type, const WCHAR *action )
 815 {
 816     msi_custom_action_info *info;
 817     MSIBINARY *binary;
 818
 819     if (!(binary = get_temp_binary(package, source)))
 820         return ERROR_FUNCTION_FAILED;
 821
 822     TRACE("Calling function %s from %s\n", debugstr_w(target), debugstr_w(binary->tmpfile));
 823
 824     if (!(info = do_msidbCustomActionTypeDll( package, type, binary->tmpfile, target, action )))
 825         return ERROR_FUNCTION_FAILED;
 826     return wait_thread_handle( info );
 827 }
 828
 829 static HANDLE execute_command( const WCHAR *app, WCHAR *arg, const WCHAR *dir )
 830 {
 831     STARTUPINFOW si;
 832     PROCESS_INFORMATION info;
 833     WCHAR *exe = NULL, *cmd = NULL, *p;
 834     BOOL ret;
 835
 836     if (app)
 837     {
 838         int len_arg = 0;
 839         DWORD len_exe;
 840
 841         if (!(exe = msi_alloc( MAX_PATH * sizeof(WCHAR) ))) return INVALID_HANDLE_VALUE;
 842         len_exe = SearchPathW( NULL, app, L".exe", MAX_PATH, exe, NULL );
 843         if (len_exe >= MAX_PATH)
 844         {
 845             msi_free( exe );
 846             if (!(exe = msi_alloc( len_exe * sizeof(WCHAR) ))) return INVALID_HANDLE_VALUE;
 847             len_exe = SearchPathW( NULL, app, L".exe", len_exe, exe, NULL );
 848         }
 849         if (!len_exe)
 850         {
 851             ERR("can't find executable %lu\n", GetLastError());
 852             msi_free( exe );
 853             return INVALID_HANDLE_VALUE;
 854         }
 855
 856         if (arg) len_arg = lstrlenW( arg );
 857         if (!(cmd = msi_alloc( (len_exe + len_arg + 4) * sizeof(WCHAR) )))
 858         {
 859             msi_free( exe );
 860             return INVALID_HANDLE_VALUE;
 861         }
 862         p = cmd;
 863         if (wcschr( exe, ' ' ))
 864         {
 865             *p++ = '\"';
 866             memcpy( p, exe, len_exe * sizeof(WCHAR) );
 867             p += len_exe;
 868             *p++ = '\"';
 869             *p = 0;
 870         }
 871         else
 872         {
 873             lstrcpyW( p, exe );
 874             p += len_exe;
 875         }
 876         if (arg)
 877         {
 878             *p++ = ' ';
 879             memcpy( p, arg, len_arg * sizeof(WCHAR) );
 880             p[len_arg] = 0;
 881         }
 882     }
 883     memset( &si, 0, sizeof(STARTUPINFOW) );
 884     ret = CreateProcessW( exe, exe ? cmd : arg, NULL, NULL, FALSE, 0, NULL, dir, &si, &info );
 885     msi_free( cmd );
 886     msi_free( exe );
 887     if (!ret)
 888     {
 889         ERR("unable to execute command %lu\n", GetLastError());
 890         return INVALID_HANDLE_VALUE;
 891     }
 892     CloseHandle( info.hThread );
 893     return info.hProcess;
 894 }
 895
 896 static UINT HANDLE_CustomType2( MSIPACKAGE *package, const WCHAR *source, const WCHAR *target,
 897                                 INT type, const WCHAR *action )
 898 {
 899     MSIBINARY *binary;
 900     HANDLE handle;
 901     WCHAR *arg;
 902
 903     if (!(binary = get_temp_binary(package, source)))
 904         return ERROR_FUNCTION_FAILED;
 905
 906     deformat_string( package, target, &arg );
 907     TRACE("exe %s arg %s\n", debugstr_w(binary->tmpfile), debugstr_w(arg));
 908
 909     handle = execute_command( binary->tmpfile, arg, L"C:\\" );
 910     msi_free( arg );
 911     if (handle == INVALID_HANDLE_VALUE) return ERROR_SUCCESS;
 912     return wait_process_handle( package, type, handle, action );
 913 }
 914
 915 static UINT HANDLE_CustomType17( MSIPACKAGE *package, const WCHAR *source, const WCHAR *target,
 916                                  INT type, const WCHAR *action )
 917 {
 918     msi_custom_action_info *info;
 919     MSIFILE *file;
 920
 921     TRACE("%s %s\n", debugstr_w(source), debugstr_w(target));
 922
 923     file = msi_get_loaded_file( package, source );
 924     if (!file)
 925     {
 926         ERR("invalid file key %s\n", debugstr_w( source ));
 927         return ERROR_FUNCTION_FAILED;
 928     }
 929
 930     if (!(info = do_msidbCustomActionTypeDll( package, type, file->TargetPath, target, action )))
 931         return ERROR_FUNCTION_FAILED;
 932     return wait_thread_handle( info );
 933 }
 934
 935 static UINT HANDLE_CustomType18( MSIPACKAGE *package, const WCHAR *source, const WCHAR *target,
 936                                  INT type, const WCHAR *action )
 937 {
 938     MSIFILE *file;
 939     HANDLE handle;
 940     WCHAR *arg;
 941
 942     if (!(file = msi_get_loaded_file( package, source ))) return ERROR_FUNCTION_FAILED;
 943
 944     deformat_string( package, target, &arg );
 945     TRACE("exe %s arg %s\n", debugstr_w(file->TargetPath), debugstr_w(arg));
 946
 947     handle = execute_command( file->TargetPath, arg, L"C:\\" );
 948     msi_free( arg );
 949     if (handle == INVALID_HANDLE_VALUE) return ERROR_SUCCESS;
 950     return wait_process_handle( package, type, handle, action );
 951 }
 952
 953 static UINT HANDLE_CustomType19( MSIPACKAGE *package, const WCHAR *source, const WCHAR *target,
 954                                  INT type, const WCHAR *action )
 955 {
 956     MSIRECORD *row = 0;
 957     LPWSTR deformated = NULL;
 958
 959     deformat_string( package, target, &deformated );
 960
 961     /* first try treat the error as a number */
 962     row = MSI_QueryGetRecord( package->db, L"SELECT `Message` FROM `Error` WHERE `Error` = '%s'", deformated );
 963     if( row )
 964     {
 965         LPCWSTR error = MSI_RecordGetString( row, 1 );
 966         if ((package->ui_level & INSTALLUILEVEL_MASK) != INSTALLUILEVEL_NONE)
 967             MessageBoxW( NULL, error, NULL, MB_OK );
 968         msiobj_release( &row->hdr );
 969     }
 970     else if ((package->ui_level & INSTALLUILEVEL_MASK) != INSTALLUILEVEL_NONE)
 971         MessageBoxW( NULL, deformated, NULL, MB_OK );
 972
 973     msi_free( deformated );
 974
 975     return ERROR_INSTALL_FAILURE;
 976 }
 977
 978 static WCHAR *build_msiexec_args( const WCHAR *filename, const WCHAR *params )
 979 {
 980     UINT len_filename = lstrlenW( filename ), len_params = lstrlenW( params );
 981     UINT len = ARRAY_SIZE(L"/qb /i ") - 1;
 982     WCHAR *ret;
 983
 984     if (!(ret = msi_alloc( (len + len_filename + len_params + 4) * sizeof(WCHAR) ))) return NULL;
 985     memcpy( ret, L"/qb /i ", sizeof(L"/qb /i ") );
 986     ret[len++] = '"';
 987     memcpy( ret + len, filename, len_filename * sizeof(WCHAR) );
 988     len += len_filename;
 989     ret[len++] = '"';
 990     ret[len++] = ' ';
 991     lstrcpyW( ret + len, params );
 992     return ret;
 993 }
 994
 995 static UINT HANDLE_CustomType23( MSIPACKAGE *package, const WCHAR *source, const WCHAR *target,
 996                                  INT type, const WCHAR *action )
 997 {
 998     WCHAR *dir, *filename, *args, *p;
 999     UINT len_dir, len_source = lstrlenW( source );
1000     HANDLE handle;
1001
1002     if (!(dir = msi_dup_property( package->db, L"OriginalDatabase" ))) return ERROR_OUTOFMEMORY;
1003     if (!(p = wcsrchr( dir, '\\' )) && !(p = wcsrchr( dir, '/' )))
1004     {
1005         msi_free( dir );
1006         return ERROR_FUNCTION_FAILED;
1007     }
1008     *p = 0;
1009     len_dir = p - dir;
1010     if (!(filename = msi_alloc( (len_dir + len_source + 2) * sizeof(WCHAR) )))
1011     {
1012         msi_free( dir );
1013         return ERROR_OUTOFMEMORY;
1014     }
1015     memcpy( filename, dir, len_dir * sizeof(WCHAR) );
1016     filename[len_dir++] = '\\';
1017     memcpy( filename + len_dir, source, len_source * sizeof(WCHAR) );
1018     filename[len_dir + len_source] = 0;
1019
1020     if (!(args = build_msiexec_args( filename, target )))
1021     {
1022         msi_free( dir );
1023         return ERROR_OUTOFMEMORY;
1024     }
1025
1026     TRACE("installing %s concurrently\n", debugstr_w(source));
1027
1028     handle = execute_command( L"msiexec", args, dir );
1029     msi_free( dir );
1030     msi_free( args );
1031     if (handle == INVALID_HANDLE_VALUE) return ERROR_SUCCESS;
1032     return wait_process_handle( package, type, handle, action );
1033 }
1034
1035 static UINT write_substorage_to_file( MSIPACKAGE *package, const WCHAR *source, const WCHAR *filename )
1036 {
1037     IStorage *src = NULL, *dst = NULL;
1038     UINT r = ERROR_FUNCTION_FAILED;
1039     HRESULT hr;
1040
1041     hr = StgCreateDocfile( filename, STGM_CREATE|STGM_TRANSACTED|STGM_WRITE|STGM_SHARE_EXCLUSIVE, 0, &dst );
1042     if (FAILED( hr ))
1043     {
1044         WARN( "can't open destination storage %s (%#lx)\n", debugstr_w(filename), hr );
1045         goto done;
1046     }
1047
1048     hr = IStorage_OpenStorage( package->db->storage, source, NULL, STGM_SHARE_EXCLUSIVE, NULL, 0, &src );
1049     if (FAILED( hr ))
1050     {
1051         WARN( "can't open source storage %s (%#lx)\n", debugstr_w(source), hr );
1052         goto done;
1053     }
1054
1055     hr = IStorage_CopyTo( src, 0, NULL, NULL, dst );
1056     if (FAILED( hr ))
1057     {
1058         ERR( "failed to copy storage %s (%#lx)\n", debugstr_w(source), hr );
1059         goto done;
1060     }
1061
1062     hr = IStorage_Commit( dst, 0 );
1063     if (FAILED( hr ))
1064         ERR( "failed to commit storage (%#lx)\n", hr );
1065     else
1066         r = ERROR_SUCCESS;
1067
1068 done:
1069     if (src) IStorage_Release( src );
1070     if (dst) IStorage_Release( dst );
1071     return r;
1072 }
1073
1074 static UINT HANDLE_CustomType7( MSIPACKAGE *package, const WCHAR *source, const WCHAR *target,
1075                                 INT type, const WCHAR *action )
1076 {
1077     WCHAR *tmpfile, *args;
1078     MSIBINARY *binary = NULL;
1079     HANDLE handle;
1080     UINT r;
1081
1082     if (!(tmpfile = msi_create_temp_file( package->db ))) return ERROR_FUNCTION_FAILED;
1083
1084     r = write_substorage_to_file( package, source, tmpfile );
1085     if (r != ERROR_SUCCESS)
1086         goto error;
1087
1088     if (!(binary = msi_alloc( sizeof(*binary) ))) goto error;
1089     binary->source  = NULL;
1090     binary->tmpfile = tmpfile;
1091     list_add_tail( &package->binaries, &binary->entry );
1092
1093     if (!(args = build_msiexec_args( tmpfile, target ))) return ERROR_OUTOFMEMORY;
1094
1095     TRACE("installing %s concurrently\n", debugstr_w(source));
1096
1097     handle = execute_command( L"msiexec", args, L"C:\\" );
1098     msi_free( args );
1099     if (handle == INVALID_HANDLE_VALUE) return ERROR_SUCCESS;
1100     return wait_process_handle( package, type, handle, action );
1101
1102 error:
1103     DeleteFileW( tmpfile );
1104     msi_free( tmpfile );
1105     return ERROR_FUNCTION_FAILED;
1106 }
1107
1108 static UINT HANDLE_CustomType50( MSIPACKAGE *package, const WCHAR *source, const WCHAR *target,
1109                                  INT type, const WCHAR *action )
1110 {
1111     WCHAR *exe, *arg;
1112     HANDLE handle;
1113
1114     if (!(exe = msi_dup_property( package->db, source ))) return ERROR_SUCCESS;
1115
1116     deformat_string( package, target, &arg );
1117     TRACE("exe %s arg %s\n", debugstr_w(exe), debugstr_w(arg));
1118
1119     handle = execute_command( exe, arg, L"C:\\" );
1120     msi_free( exe );
1121     msi_free( arg );
1122     if (handle == INVALID_HANDLE_VALUE) return ERROR_SUCCESS;
1123     return wait_process_handle( package, type, handle, action );
1124 }
1125
1126 static UINT HANDLE_CustomType34( MSIPACKAGE *package, const WCHAR *source, const WCHAR *target,
1127                                  INT type, const WCHAR *action )
1128 {
1129     const WCHAR *workingdir = NULL;
1130     HANDLE handle;
1131     WCHAR *cmd;
1132
1133     if (source)
1134     {
1135         workingdir = msi_get_target_folder( package, source );
1136         if (!workingdir) return ERROR_FUNCTION_FAILED;
1137     }
1138     deformat_string( package, target, &cmd );
1139     if (!cmd) return ERROR_FUNCTION_FAILED;
1140
1141     TRACE("cmd %s dir %s\n", debugstr_w(cmd), debugstr_w(workingdir));
1142
1143     handle = execute_command( NULL, cmd, workingdir );
1144     msi_free( cmd );
1145     if (handle == INVALID_HANDLE_VALUE) return ERROR_SUCCESS;
1146     return wait_process_handle( package, type, handle, action );
1147 }
1148
1149 static DWORD ACTION_CallScript( const GUID *guid )
1150 {
1151     msi_custom_action_info *info;
1152     MSIHANDLE hPackage;
1153     UINT r = ERROR_FUNCTION_FAILED;
1154
1155     info = find_action_by_guid( guid );
1156     if (!info)
1157     {
1158         ERR("failed to find action %s\n", debugstr_guid( guid) );
1159         return ERROR_FUNCTION_FAILED;
1160     }
1161
1162     TRACE("function %s, script %s\n", debugstr_w( info->target ), debugstr_w( info->source ) );
1163
1164     hPackage = alloc_msihandle( &info->package->hdr );
1165     if (hPackage)
1166     {
1167         r = call_script( hPackage, info->type, info->source, info->target, info->action );
1168         TRACE("script returned %u\n", r);
1169         MsiCloseHandle( hPackage );
1170     }
1171     else
1172         ERR("failed to create handle for %p\n", info->package );
1173
1174     return r;
1175 }
1176
1177 static DWORD WINAPI ScriptThread( LPVOID arg )
1178 {
1179     LPGUID guid = arg;
1180     DWORD rc;
1181
1182     TRACE("custom action (%#lx) started\n", GetCurrentThreadId() );
1183
1184     rc = ACTION_CallScript( guid );
1185
1186     TRACE("custom action (%#lx) returned %lu\n", GetCurrentThreadId(), rc );
1187
1188     MsiCloseAllHandles();
1189     return rc;
1190 }
1191
1192 static msi_custom_action_info *do_msidbCustomActionTypeScript(
1193     MSIPACKAGE *package, INT type, LPCWSTR script, LPCWSTR function, LPCWSTR action )
1194 {
1195     msi_custom_action_info *info;
1196
1197     info = msi_alloc( sizeof *info );
1198     if (!info)
1199         return NULL;
1200
1201     msiobj_addref( &package->hdr );
1202     info->package = package;
1203     info->type = type;
1204     info->target = strdupW( function );
1205     info->source = strdupW( script );
1206     info->action = strdupW( action );
1207     CoCreateGuid( &info->guid );
1208
1209     EnterCriticalSection( &msi_custom_action_cs );
1210     list_add_tail( &msi_pending_custom_actions, &info->entry );
1211     LeaveCriticalSection( &msi_custom_action_cs );
1212
1213     info->handle = CreateThread( NULL, 0, ScriptThread, &info->guid, 0, NULL );
1214     if (!info->handle)
1215     {
1216         free_custom_action_data( info );
1217         return NULL;
1218     }
1219
1220     return info;
1221 }
1222
1223 static UINT HANDLE_CustomType37_38( MSIPACKAGE *package, const WCHAR *source, const WCHAR *target,
1224                                     INT type, const WCHAR *action )
1225 {
1226     msi_custom_action_info *info;
1227
1228     TRACE("%s %s\n", debugstr_w(source), debugstr_w(target));
1229
1230     info = do_msidbCustomActionTypeScript( package, type, target, NULL, action );
1231     return wait_thread_handle( info );
1232 }
1233
1234 static UINT HANDLE_CustomType5_6( MSIPACKAGE *package, const WCHAR *source, const WCHAR *target,
1235                                   INT type, const WCHAR *action )
1236 {
1237     MSIRECORD *row = NULL;
1238     msi_custom_action_info *info;
1239     CHAR *buffer = NULL;
1240     WCHAR *bufferw = NULL;
1241     DWORD sz = 0;
1242     UINT r;
1243
1244     TRACE("%s %s\n", debugstr_w(source), debugstr_w(target));
1245
1246     row = MSI_QueryGetRecord(package->db, L"SELECT * FROM `Binary` WHERE `Name` = '%s'", source);
1247     if (!row)
1248         return ERROR_FUNCTION_FAILED;
1249
1250     r = MSI_RecordReadStream(row, 2, NULL, &sz);
1251     if (r != ERROR_SUCCESS) goto done;
1252
1253     buffer = msi_alloc( sz + 1 );
1254     if (!buffer)
1255     {
1256        r = ERROR_FUNCTION_FAILED;
1257        goto done;
1258     }
1259
1260     r = MSI_RecordReadStream(row, 2, buffer, &sz);
1261     if (r != ERROR_SUCCESS)
1262         goto done;
1263
1264     buffer[sz] = 0;
1265     bufferw = strdupAtoW(buffer);
1266     if (!bufferw)
1267     {
1268         r = ERROR_FUNCTION_FAILED;
1269         goto done;
1270     }
1271
1272     info = do_msidbCustomActionTypeScript( package, type, bufferw, target, action );
1273     r = wait_thread_handle( info );
1274
1275 done:
1276     msi_free(bufferw);
1277     msi_free(buffer);
1278     msiobj_release(&row->hdr);
1279     return r;
1280 }
1281
1282 static UINT HANDLE_CustomType21_22( MSIPACKAGE *package, const WCHAR *source, const WCHAR *target,
1283                                     INT type, const WCHAR *action )
1284 {
1285     msi_custom_action_info *info;
1286     MSIFILE *file;
1287     HANDLE hFile;
1288     DWORD sz, szHighWord = 0, read;
1289     CHAR *buffer=NULL;
1290     WCHAR *bufferw=NULL;
1291     BOOL bRet;
1292     UINT r;
1293
1294     TRACE("%s %s\n", debugstr_w(source), debugstr_w(target));
1295
1296     file = msi_get_loaded_file(package, source);
1297     if (!file)
1298     {
1299         ERR("invalid file key %s\n", debugstr_w(source));
1300         return ERROR_FUNCTION_FAILED;
1301     }
1302
1303     hFile = msi_create_file( package, file->TargetPath, GENERIC_READ, FILE_SHARE_READ, OPEN_EXISTING, 0 );
1304     if (hFile == INVALID_HANDLE_VALUE) return ERROR_FUNCTION_FAILED;
1305
1306     sz = GetFileSize(hFile, &szHighWord);
1307     if (sz == INVALID_FILE_SIZE || szHighWord != 0)
1308     {
1309         CloseHandle(hFile);
1310         return ERROR_FUNCTION_FAILED;
1311     }
1312     buffer = msi_alloc( sz + 1 );
1313     if (!buffer)
1314     {
1315         CloseHandle(hFile);
1316         return ERROR_FUNCTION_FAILED;
1317     }
1318     bRet = ReadFile(hFile, buffer, sz, &read, NULL);
1319     CloseHandle(hFile);
1320     if (!bRet)
1321     {
1322         r = ERROR_FUNCTION_FAILED;
1323         goto done;
1324     }
1325     buffer[read] = 0;
1326     bufferw = strdupAtoW(buffer);
1327     if (!bufferw)
1328     {
1329         r = ERROR_FUNCTION_FAILED;
1330         goto done;
1331     }
1332     info = do_msidbCustomActionTypeScript( package, type, bufferw, target, action );
1333     r = wait_thread_handle( info );
1334
1335 done:
1336     msi_free(bufferw);
1337     msi_free(buffer);
1338     return r;
1339 }
1340
1341 static UINT HANDLE_CustomType53_54( MSIPACKAGE *package, const WCHAR *source, const WCHAR *target,
1342                                     INT type, const WCHAR *action )
1343 {
1344     msi_custom_action_info *info;
1345     WCHAR *prop;
1346
1347     TRACE("%s %s\n", debugstr_w(source), debugstr_w(target));
1348
1349     prop = msi_dup_property( package->db, source );
1350     if (!prop) return ERROR_SUCCESS;
1351
1352     info = do_msidbCustomActionTypeScript( package, type, prop, NULL, action );
1353     msi_free(prop);
1354     return wait_thread_handle( info );
1355 }
1356
1357 static BOOL action_type_matches_script( UINT type, UINT script )
1358 {
1359     switch (script)
1360     {
1361     case SCRIPT_NONE:
1362         return FALSE;
1363     case SCRIPT_INSTALL:
1364         return !(type & msidbCustomActionTypeCommit) && !(type & msidbCustomActionTypeRollback);
1365     case SCRIPT_COMMIT:
1366         return (type & msidbCustomActionTypeCommit);
1367     case SCRIPT_ROLLBACK:
1368         return (type & msidbCustomActionTypeRollback);
1369     default:
1370         ERR("unhandled script %u\n", script);
1371     }
1372     return FALSE;
1373 }
1374
1375 static UINT defer_custom_action( MSIPACKAGE *package, const WCHAR *action, UINT type )
1376 {
1377     WCHAR *actiondata = msi_dup_property( package->db, action );
1378     WCHAR *usersid = msi_dup_property( package->db, L"UserSID" );
1379     WCHAR *prodcode = msi_dup_property( package->db, L"ProductCode" );
1380     WCHAR *deferred = msi_get_deferred_action( action, actiondata, usersid, prodcode );
1381
1382     if (!deferred)
1383     {
1384         msi_free( actiondata );
1385         msi_free( usersid );
1386         msi_free( prodcode );
1387         return ERROR_OUTOFMEMORY;
1388     }
1389     if (type & msidbCustomActionTypeCommit)
1390     {
1391         TRACE("deferring commit action\n");
1392         msi_schedule_action( package, SCRIPT_COMMIT, deferred );
1393     }
1394     else if (type & msidbCustomActionTypeRollback)
1395     {
1396         TRACE("deferring rollback action\n");
1397         msi_schedule_action( package, SCRIPT_ROLLBACK, deferred );
1398     }
1399     else
1400     {
1401         TRACE("deferring install action\n");
1402         msi_schedule_action( package, SCRIPT_INSTALL, deferred );
1403     }
1404
1405     msi_free( actiondata );
1406     msi_free( usersid );
1407     msi_free( prodcode );
1408     msi_free( deferred );
1409     return ERROR_SUCCESS;
1410 }
1411
1412 UINT ACTION_CustomAction(MSIPACKAGE *package, const WCHAR *action)
1413 {
1414     UINT rc = ERROR_SUCCESS;
1415     MSIRECORD *row;
1416     UINT type;
1417     const WCHAR *source, *target, *ptr, *deferred_data = NULL;
1418     WCHAR *deformated = NULL;
1419     int len;
1420
1421     /* deferred action: [properties]Action */
1422     if ((ptr = wcsrchr(action, ']')))
1423     {
1424         deferred_data = action;
1425         action = ptr + 1;
1426     }
1427
1428     row = MSI_QueryGetRecord( package->db, L"SELECT * FROM `CustomAction` WHERE `Action` = '%s'", action );
1429     if (!row)
1430         return ERROR_FUNCTION_NOT_CALLED;
1431
1432     type = MSI_RecordGetInteger(row,2);
1433     source = MSI_RecordGetString(row,3);
1434     target = MSI_RecordGetString(row,4);
1435
1436     TRACE("Handling custom action %s (%x %s %s)\n",debugstr_w(action),type,
1437           debugstr_w(source), debugstr_w(target));
1438
1439     /* handle some of the deferred actions */
1440     if (type & msidbCustomActionTypeTSAware)
1441         FIXME("msidbCustomActionTypeTSAware not handled\n");
1442
1443     if (type & msidbCustomActionTypeInScript)
1444     {
1445         if (type & msidbCustomActionTypeNoImpersonate)
1446             WARN("msidbCustomActionTypeNoImpersonate not handled\n");
1447
1448         if (!action_type_matches_script(type, package->script))
1449         {
1450             rc = defer_custom_action( package, action, type );
1451             goto end;
1452         }
1453         else
1454         {
1455             LPWSTR actiondata = msi_dup_property( package->db, action );
1456
1457             if (type & msidbCustomActionTypeInScript)
1458                 package->scheduled_action_running = TRUE;
1459
1460             if (type & msidbCustomActionTypeCommit)
1461                 package->commit_action_running = TRUE;
1462
1463             if (type & msidbCustomActionTypeRollback)
1464                 package->rollback_action_running = TRUE;
1465
1466             if (deferred_data)
1467                 set_deferred_action_props(package, deferred_data);
1468             else if (actiondata)
1469                 msi_set_property( package->db, L"CustomActionData", actiondata, -1 );
1470             else
1471                 msi_set_property( package->db, L"CustomActionData", L"", -1 );
1472
1473             msi_free(actiondata);
1474         }
1475     }
1476     else if (!check_execution_scheduling_options(package,action,type))
1477     {
1478         rc = ERROR_SUCCESS;
1479         goto end;
1480     }
1481
1482     switch (type & CUSTOM_ACTION_TYPE_MASK)
1483     {
1484     case 1: /* DLL file stored in a Binary table stream */
1485         rc = HANDLE_CustomType1( package, source, target, type, action );
1486         break;
1487     case 2: /* EXE file stored in a Binary table stream */
1488         rc = HANDLE_CustomType2( package, source, target, type, action );
1489         break;
1490     case 5:
1491     case 6: /* JScript/VBScript file stored in a Binary table stream */
1492         rc = HANDLE_CustomType5_6( package, source, target, type, action );
1493         break;
1494     case 7: /* Concurrent install from substorage */
1495         deformat_string( package, target, &deformated );
1496         rc = HANDLE_CustomType7( package, source, target, type, action );
1497         msi_free( deformated );
1498         break;
1499     case 17:
1500         rc = HANDLE_CustomType17( package, source, target, type, action );
1501         break;
1502     case 18: /* EXE file installed with package */
1503         rc = HANDLE_CustomType18( package, source, target, type, action );
1504         break;
1505     case 19: /* Error that halts install */
1506         rc = HANDLE_CustomType19( package, source, target, type, action );
1507         break;
1508     case 21: /* JScript/VBScript file installed with the product */
1509     case 22:
1510         rc = HANDLE_CustomType21_22( package, source, target, type, action );
1511         break;
1512     case 23: /* Installs another package in the source tree */
1513         deformat_string( package, target, &deformated );
1514         rc = HANDLE_CustomType23( package, source, deformated, type, action );
1515         msi_free( deformated );
1516         break;
1517     case 34: /* EXE to be run in specified directory */
1518         rc = HANDLE_CustomType34( package, source, target, type, action );
1519         break;
1520     case 35: /* Directory set with formatted text */
1521         deformat_string( package, target, &deformated );
1522         MSI_SetTargetPathW( package, source, deformated );
1523         msi_free( deformated );
1524         break;
1525     case 37: /* JScript/VBScript text stored in target column */
1526     case 38:
1527         rc = HANDLE_CustomType37_38( package, source, target, type, action );
1528         break;
1529     case 50: /* EXE file specified by a property value */
1530         rc = HANDLE_CustomType50( package, source, target, type, action );
1531         break;
1532     case 51: /* Property set with formatted text */
1533         if (!source) break;
1534         len = deformat_string( package, target, &deformated );
1535         rc = msi_set_property( package->db, source, deformated, len );
1536         if (rc == ERROR_SUCCESS && !wcscmp( source, L"SourceDir" )) msi_reset_source_folders( package );
1537         msi_free( deformated );
1538         break;
1539     case 53: /* JScript/VBScript text specified by a property value */
1540     case 54:
1541         rc = HANDLE_CustomType53_54( package, source, target, type, action );
1542         break;
1543     default:
1544         FIXME( "unhandled action type %u (%s %s)\n", type & CUSTOM_ACTION_TYPE_MASK, debugstr_w(source),
1545                debugstr_w(target) );
1546     }
1547
1548 end:
1549     package->scheduled_action_running = FALSE;
1550     package->commit_action_running = FALSE;
1551     package->rollback_action_running = FALSE;
1552     msiobj_release(&row->hdr);
1553     return rc;
1554 }
1555
1556 void ACTION_FinishCustomActions(const MSIPACKAGE* package)
1557 {
1558     struct list *item;
1559     HANDLE *wait_handles;
1560     unsigned int handle_count, i;
1561     msi_custom_action_info *info, *cursor;
1562
1563     while ((item = list_head( &package->RunningActions )))
1564     {
1565         MSIRUNNINGACTION *action = LIST_ENTRY( item, MSIRUNNINGACTION, entry );
1566
1567         list_remove( &action->entry );
1568
1569         TRACE("waiting for %s\n", debugstr_w( action->name ) );
1570         msi_dialog_check_messages( action->handle );
1571
1572         CloseHandle( action->handle );
1573         msi_free( action->name );
1574         msi_free( action );
1575     }
1576
1577     EnterCriticalSection( &msi_custom_action_cs );
1578
1579     handle_count = list_count( &msi_pending_custom_actions );
1580     wait_handles = msi_alloc( handle_count * sizeof(HANDLE) );
1581
1582     handle_count = 0;
1583     LIST_FOR_EACH_ENTRY_SAFE( info, cursor, &msi_pending_custom_actions, msi_custom_action_info, entry )
1584     {
1585         if (info->package == package )
1586         {
1587             if (DuplicateHandle(GetCurrentProcess(), info->handle, GetCurrentProcess(), &wait_handles[handle_count], SYNCHRONIZE, FALSE, 0))
1588                 handle_count++;
1589         }
1590     }
1591
1592     LeaveCriticalSection( &msi_custom_action_cs );
1593
1594     for (i = 0; i < handle_count; i++)
1595     {
1596         msi_dialog_check_messages( wait_handles[i] );
1597         CloseHandle( wait_handles[i] );
1598     }
1599     msi_free( wait_handles );
1600
1601     EnterCriticalSection( &msi_custom_action_cs );
1602     LIST_FOR_EACH_ENTRY_SAFE( info, cursor, &msi_pending_custom_actions, msi_custom_action_info, entry )
1603     {
1604         if (info->package == package)
1605             free_custom_action_data( info );
1606     }
1607     LeaveCriticalSection( &msi_custom_action_cs );
1608 }
1609
1610 UINT __cdecl s_remote_GetActionInfo(const GUID *guid, WCHAR **name, int *type, WCHAR **dll, char **func, MSIHANDLE *hinst)
1611 {
1612     msi_custom_action_info *info;
1613
1614     info = find_action_by_guid(guid);
1615     if (!info)
1616         return ERROR_INVALID_DATA;
1617
1618     *name = strdupW(info->action);
1619     *type = info->type;
1620     *hinst = alloc_msihandle(&info->package->hdr);
1621     *dll = strdupW(info->source);
1622     *func = strdupWtoA(info->target);
1623
1624     return ERROR_SUCCESS;
1625 }