dlls/jscript/json.c

   1 /*
   2  * Copyright 2016 Jacek Caban for CodeWeavers
   3  *
   4  * This library is free software; you can redistribute it and/or
   5  * modify it under the terms of the GNU Lesser General Public
   6  * License as published by the Free Software Foundation; either
   7  * version 2.1 of the License, or (at your option) any later version.
   8  *
   9  * This library is distributed in the hope that it will be useful,
  10  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  11  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  12  * Lesser General Public License for more details.
  13  *
  14  * You should have received a copy of the GNU Lesser General Public
  15  * License along with this library; if not, write to the Free Software
  16  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
  17  */
  18
  19 #include <math.h>
  20 #include <assert.h>
  21
  22 #include "jscript.h"
  23 #include "parser.h"
  24
  25 #include "wine/debug.h"
  26
  27 WINE_DEFAULT_DEBUG_CHANNEL(jscript);
  28
  29 typedef struct {
  30     const WCHAR *ptr;
  31     const WCHAR *end;
  32     script_ctx_t *ctx;
  33 } json_parse_ctx_t;
  34
  35 static BOOL is_json_space(WCHAR c)
  36 {
  37     return c == ' ' || c == '\t' || c == '\n' || c == '\r';
  38 }
  39
  40 static WCHAR skip_spaces(json_parse_ctx_t *ctx)
  41 {
  42     while(is_json_space(*ctx->ptr))
  43         ctx->ptr++;
  44     return *ctx->ptr;
  45 }
  46
  47 static BOOL is_keyword(json_parse_ctx_t *ctx, const WCHAR *keyword)
  48 {
  49     unsigned i;
  50     for(i=0; keyword[i]; i++) {
  51         if(!ctx->ptr[i] || keyword[i] != ctx->ptr[i])
  52             return FALSE;
  53     }
  54     if(is_identifier_char(ctx->ptr[i]))
  55         return FALSE;
  56     ctx->ptr += i;
  57     return TRUE;
  58 }
  59
  60 /* ECMA-262 5.1 Edition    15.12.1.1 */
  61 static HRESULT parse_json_string(json_parse_ctx_t *ctx, WCHAR **r)
  62 {
  63     const WCHAR *ptr = ++ctx->ptr;
  64     size_t len;
  65     WCHAR *buf;
  66
  67     while(*ctx->ptr && *ctx->ptr != '"') {
  68         if(*ctx->ptr++ == '\\')
  69             ctx->ptr++;
  70     }
  71     if(!*ctx->ptr) {
  72         FIXME("unterminated string\n");
  73         return E_FAIL;
  74     }
  75
  76     len = ctx->ptr-ptr;
  77     buf = heap_alloc((len+1)*sizeof(WCHAR));
  78     if(!buf)
  79         return E_OUTOFMEMORY;
  80     if(len)
  81         memcpy(buf, ptr, len*sizeof(WCHAR));
  82
  83     if(!unescape(buf, &len)) {
  84         FIXME("unescape failed\n");
  85         heap_free(buf);
  86         return E_FAIL;
  87     }
  88
  89     buf[len] = 0;
  90     ctx->ptr++;
  91     *r = buf;
  92     return S_OK;
  93 }
  94
  95 /* ECMA-262 5.1 Edition    15.12.1.2 */
  96 static HRESULT parse_json_value(json_parse_ctx_t *ctx, jsval_t *r)
  97 {
  98     HRESULT hres;
  99
 100     switch(skip_spaces(ctx)) {
 101
 102     /* JSONNullLiteral */
 103     case 'n':
 104         if(!is_keyword(ctx, L"null"))
 105             break;
 106         *r = jsval_null();
 107         return S_OK;
 108
 109     /* JSONBooleanLiteral */
 110     case 't':
 111         if(!is_keyword(ctx, L"true"))
 112             break;
 113         *r = jsval_bool(TRUE);
 114         return S_OK;
 115     case 'f':
 116         if(!is_keyword(ctx, L"false"))
 117             break;
 118         *r = jsval_bool(FALSE);
 119         return S_OK;
 120
 121     /* JSONObject */
 122     case '{': {
 123         WCHAR *prop_name;
 124         jsdisp_t *obj;
 125         jsval_t val;
 126
 127         hres = create_object(ctx->ctx, NULL, &obj);
 128         if(FAILED(hres))
 129             return hres;
 130
 131         ctx->ptr++;
 132         if(skip_spaces(ctx) == '}') {
 133             ctx->ptr++;
 134             *r = jsval_obj(obj);
 135             return S_OK;
 136         }
 137
 138         while(1) {
 139             if(*ctx->ptr != '"')
 140                 break;
 141             hres = parse_json_string(ctx, &prop_name);
 142             if(FAILED(hres))
 143                 break;
 144
 145             if(skip_spaces(ctx) != ':') {
 146                 FIXME("missing ':'\n");
 147                 heap_free(prop_name);
 148                 break;
 149             }
 150
 151             ctx->ptr++;
 152             hres = parse_json_value(ctx, &val);
 153             if(SUCCEEDED(hres)) {
 154                 hres = jsdisp_propput_name(obj, prop_name, val);
 155                 jsval_release(val);
 156             }
 157             heap_free(prop_name);
 158             if(FAILED(hres))
 159                 break;
 160
 161             if(skip_spaces(ctx) == '}') {
 162                 ctx->ptr++;
 163                 *r = jsval_obj(obj);
 164                 return S_OK;
 165             }
 166
 167             if(*ctx->ptr++ != ',') {
 168                 FIXME("expected ','\n");
 169                 break;
 170             }
 171             skip_spaces(ctx);
 172         }
 173
 174         jsdisp_release(obj);
 175         break;
 176     }
 177
 178     /* JSONString */
 179     case '"': {
 180         WCHAR *string;
 181         jsstr_t *str;
 182
 183         hres = parse_json_string(ctx, &string);
 184         if(FAILED(hres))
 185             return hres;
 186
 187         /* FIXME: avoid reallocation */
 188         str = jsstr_alloc(string);
 189         heap_free(string);
 190         if(!str)
 191             return E_OUTOFMEMORY;
 192
 193         *r = jsval_string(str);
 194         return S_OK;
 195     }
 196
 197     /* JSONArray */
 198     case '[': {
 199         jsdisp_t *array;
 200         unsigned i = 0;
 201         jsval_t val;
 202
 203         hres = create_array(ctx->ctx, 0, &array);
 204         if(FAILED(hres))
 205             return hres;
 206
 207         ctx->ptr++;
 208         if(skip_spaces(ctx) == ']') {
 209             ctx->ptr++;
 210             *r = jsval_obj(array);
 211             return S_OK;
 212         }
 213
 214         while(1) {
 215             hres = parse_json_value(ctx, &val);
 216             if(FAILED(hres))
 217                 break;
 218
 219             hres = jsdisp_propput_idx(array, i, val);
 220             jsval_release(val);
 221             if(FAILED(hres))
 222                 break;
 223
 224             if(skip_spaces(ctx) == ']') {
 225                 ctx->ptr++;
 226                 *r = jsval_obj(array);
 227                 return S_OK;
 228             }
 229
 230             if(*ctx->ptr != ',') {
 231                 FIXME("expected ','\n");
 232                 break;
 233             }
 234
 235             ctx->ptr++;
 236             i++;
 237         }
 238
 239         jsdisp_release(array);
 240         break;
 241     }
 242
 243     /* JSONNumber */
 244     default: {
 245         int sign = 1;
 246         double n;
 247
 248         if(*ctx->ptr == '-') {
 249             sign = -1;
 250             ctx->ptr++;
 251             skip_spaces(ctx);
 252         }
 253
 254         if(*ctx->ptr == '0' && ctx->ptr + 1 < ctx->end && is_digit(ctx->ptr[1]))
 255             break;
 256
 257         hres = parse_decimal(&ctx->ptr, ctx->end, &n);
 258         if(FAILED(hres))
 259             break;
 260
 261         *r = jsval_number(sign*n);
 262         return S_OK;
 263     }
 264     }
 265
 266     FIXME("Syntax error at %s\n", debugstr_w(ctx->ptr));
 267     return E_FAIL;
 268 }
 269
 270 /* ECMA-262 5.1 Edition    15.12.2 */
 271 static HRESULT JSON_parse(script_ctx_t *ctx, vdisp_t *jsthis, WORD flags, unsigned argc, jsval_t *argv, jsval_t *r)
 272 {
 273     json_parse_ctx_t parse_ctx;
 274     const WCHAR *buf;
 275     jsstr_t *str;
 276     jsval_t ret;
 277     HRESULT hres;
 278
 279     if(argc != 1) {
 280         FIXME("Unsupported args\n");
 281         return E_INVALIDARG;
 282     }
 283
 284     hres = to_flat_string(ctx, argv[0], &str, &buf);
 285     if(FAILED(hres))
 286         return hres;
 287
 288     TRACE("%s\n", debugstr_w(buf));
 289
 290     parse_ctx.ptr = buf;
 291     parse_ctx.end = buf + jsstr_length(str);
 292     parse_ctx.ctx = ctx;
 293     hres = parse_json_value(&parse_ctx, &ret);
 294     if(SUCCEEDED(hres) && skip_spaces(&parse_ctx)) {
 295         FIXME("syntax error\n");
 296         hres = E_FAIL;
 297     }
 298     jsstr_release(str);
 299     if(FAILED(hres))
 300         return hres;
 301
 302     if(r)
 303         *r = ret;
 304     else
 305         jsval_release(ret);
 306     return S_OK;
 307 }
 308
 309 typedef struct {
 310     script_ctx_t *ctx;
 311
 312     WCHAR *buf;
 313     size_t buf_size;
 314     size_t buf_len;
 315
 316     jsdisp_t **stack;
 317     size_t stack_top;
 318     size_t stack_size;
 319
 320     WCHAR gap[11]; /* according to the spec, it's no longer than 10 chars */
 321
 322     jsdisp_t *replacer;
 323 } stringify_ctx_t;
 324
 325 static BOOL stringify_push_obj(stringify_ctx_t *ctx, jsdisp_t *obj)
 326 {
 327     if(!ctx->stack_size) {
 328         ctx->stack = heap_alloc(4*sizeof(*ctx->stack));
 329         if(!ctx->stack)
 330             return FALSE;
 331         ctx->stack_size = 4;
 332     }else if(ctx->stack_top == ctx->stack_size) {
 333         jsdisp_t **new_stack;
 334
 335         new_stack = heap_realloc(ctx->stack, ctx->stack_size*2*sizeof(*ctx->stack));
 336         if(!new_stack)
 337             return FALSE;
 338         ctx->stack = new_stack;
 339         ctx->stack_size *= 2;
 340     }
 341
 342     ctx->stack[ctx->stack_top++] = obj;
 343     return TRUE;
 344 }
 345
 346 static void stringify_pop_obj(stringify_ctx_t *ctx)
 347 {
 348     ctx->stack_top--;
 349 }
 350
 351 static BOOL is_on_stack(stringify_ctx_t *ctx, jsdisp_t *obj)
 352 {
 353     size_t i = ctx->stack_top;
 354     while(i--) {
 355         if(ctx->stack[i] == obj)
 356             return TRUE;
 357     }
 358     return FALSE;
 359 }
 360
 361 static BOOL append_string_len(stringify_ctx_t *ctx, const WCHAR *str, size_t len)
 362 {
 363     if(!ctx->buf_size) {
 364         ctx->buf = heap_alloc(len*2*sizeof(WCHAR));
 365         if(!ctx->buf)
 366             return FALSE;
 367         ctx->buf_size = len*2;
 368     }else if(ctx->buf_len + len > ctx->buf_size) {
 369         WCHAR *new_buf;
 370         size_t new_size;
 371
 372         new_size = ctx->buf_size * 2 + len;
 373         new_buf = heap_realloc(ctx->buf, new_size*sizeof(WCHAR));
 374         if(!new_buf)
 375             return FALSE;
 376         ctx->buf = new_buf;
 377         ctx->buf_size = new_size;
 378     }
 379
 380     if(len)
 381         memcpy(ctx->buf + ctx->buf_len, str, len*sizeof(WCHAR));
 382     ctx->buf_len += len;
 383     return TRUE;
 384 }
 385
 386 static inline BOOL append_string(stringify_ctx_t *ctx, const WCHAR *str)
 387 {
 388     return append_string_len(ctx, str, lstrlenW(str));
 389 }
 390
 391 static inline BOOL append_char(stringify_ctx_t *ctx, WCHAR c)
 392 {
 393     return append_string_len(ctx, &c, 1);
 394 }
 395
 396 static inline BOOL append_simple_quote(stringify_ctx_t *ctx, WCHAR c)
 397 {
 398     WCHAR str[] = {'\\',c};
 399     return append_string_len(ctx, str, 2);
 400 }
 401
 402 static HRESULT maybe_to_primitive(script_ctx_t *ctx, jsval_t val, jsval_t *r)
 403 {
 404     jsdisp_t *obj;
 405     HRESULT hres;
 406
 407     if(!is_object_instance(val) || !get_object(val) || !(obj = iface_to_jsdisp(get_object(val))))
 408         return jsval_copy(val, r);
 409
 410     if(is_class(obj, JSCLASS_NUMBER)) {
 411         double n;
 412         hres = to_number(ctx, val, &n);
 413         jsdisp_release(obj);
 414         if(SUCCEEDED(hres))
 415             *r = jsval_number(n);
 416         return hres;
 417     }
 418
 419     if(is_class(obj, JSCLASS_STRING)) {
 420         jsstr_t *str;
 421         hres = to_string(ctx, val, &str);
 422         jsdisp_release(obj);
 423         if(SUCCEEDED(hres))
 424             *r = jsval_string(str);
 425         return hres;
 426     }
 427
 428     if(is_class(obj, JSCLASS_BOOLEAN)) {
 429         *r = jsval_bool(bool_obj_value(obj));
 430         jsdisp_release(obj);
 431         return S_OK;
 432     }
 433
 434     *r = jsval_obj(obj);
 435     return S_OK;
 436 }
 437
 438 /* ECMA-262 5.1 Edition    15.12.3 (abstract operation Quote) */
 439 static HRESULT json_quote(stringify_ctx_t *ctx, const WCHAR *ptr, size_t len)
 440 {
 441     if(!ptr || !append_char(ctx, '"'))
 442         return E_OUTOFMEMORY;
 443
 444     while(len--) {
 445         switch(*ptr) {
 446         case '"':
 447         case '\\':
 448             if(!append_simple_quote(ctx, *ptr))
 449                 return E_OUTOFMEMORY;
 450             break;
 451         case '\b':
 452             if(!append_simple_quote(ctx, 'b'))
 453                 return E_OUTOFMEMORY;
 454             break;
 455         case '\f':
 456             if(!append_simple_quote(ctx, 'f'))
 457                 return E_OUTOFMEMORY;
 458             break;
 459         case '\n':
 460             if(!append_simple_quote(ctx, 'n'))
 461                 return E_OUTOFMEMORY;
 462             break;
 463         case '\r':
 464             if(!append_simple_quote(ctx, 'r'))
 465                 return E_OUTOFMEMORY;
 466             break;
 467         case '\t':
 468             if(!append_simple_quote(ctx, 't'))
 469                 return E_OUTOFMEMORY;
 470             break;
 471         default:
 472             if(*ptr < ' ') {
 473                 WCHAR buf[7];
 474                 swprintf(buf, ARRAY_SIZE(buf), L"\\u%04x", *ptr);
 475                 if(!append_string(ctx, buf))
 476                     return E_OUTOFMEMORY;
 477             }else {
 478                 if(!append_char(ctx, *ptr))
 479                     return E_OUTOFMEMORY;
 480             }
 481         }
 482         ptr++;
 483     }
 484
 485     return append_char(ctx, '"') ? S_OK : E_OUTOFMEMORY;
 486 }
 487
 488 static inline BOOL is_callable(jsdisp_t *obj)
 489 {
 490     return is_class(obj, JSCLASS_FUNCTION);
 491 }
 492
 493 static HRESULT stringify(stringify_ctx_t *ctx, jsdisp_t *object, const WCHAR *name);
 494
 495 /* ECMA-262 5.1 Edition    15.12.3 (abstract operation JA) */
 496 static HRESULT stringify_array(stringify_ctx_t *ctx, jsdisp_t *obj)
 497 {
 498     unsigned length, i, j;
 499     WCHAR name[16];
 500     HRESULT hres;
 501
 502     if(is_on_stack(ctx, obj)) {
 503         FIXME("Found a cycle\n");
 504         return E_FAIL;
 505     }
 506
 507     if(!stringify_push_obj(ctx, obj))
 508         return E_OUTOFMEMORY;
 509
 510     if(!append_char(ctx, '['))
 511         return E_OUTOFMEMORY;
 512
 513     length = array_get_length(obj);
 514
 515     for(i=0; i < length; i++) {
 516         if(i && !append_char(ctx, ','))
 517             return E_OUTOFMEMORY;
 518
 519         if(*ctx->gap) {
 520             if(!append_char(ctx, '\n'))
 521                 return E_OUTOFMEMORY;
 522
 523             for(j=0; j < ctx->stack_top; j++) {
 524                 if(!append_string(ctx, ctx->gap))
 525                     return E_OUTOFMEMORY;
 526             }
 527         }
 528
 529         _itow(i, name, ARRAY_SIZE(name));
 530         hres = stringify(ctx, obj, name);
 531         if(FAILED(hres))
 532             return hres;
 533         if(hres == S_FALSE && !append_string(ctx, L"null"))
 534             return E_OUTOFMEMORY;
 535     }
 536
 537     if((length && *ctx->gap && !append_char(ctx, '\n')) || !append_char(ctx, ']'))
 538         return E_OUTOFMEMORY;
 539
 540     stringify_pop_obj(ctx);
 541     return S_OK;
 542 }
 543
 544 /* ECMA-262 5.1 Edition    15.12.3 (abstract operation JO) */
 545 static HRESULT stringify_object(stringify_ctx_t *ctx, jsdisp_t *obj)
 546 {
 547     DISPID dispid = DISPID_STARTENUM;
 548     unsigned prop_cnt = 0, i;
 549     size_t stepback;
 550     BSTR prop_name;
 551     HRESULT hres;
 552
 553     if(is_on_stack(ctx, obj)) {
 554         FIXME("Found a cycle\n");
 555         return E_FAIL;
 556     }
 557
 558     if(!stringify_push_obj(ctx, obj))
 559         return E_OUTOFMEMORY;
 560
 561     if(!append_char(ctx, '{'))
 562         return E_OUTOFMEMORY;
 563
 564     while((hres = IDispatchEx_GetNextDispID(&obj->IDispatchEx_iface, fdexEnumDefault, dispid, &dispid)) == S_OK) {
 565         stepback = ctx->buf_len;
 566
 567         if(prop_cnt && !append_char(ctx, ',')) {
 568             hres = E_OUTOFMEMORY;
 569             break;
 570         }
 571
 572         if(*ctx->gap) {
 573             if(!append_char(ctx, '\n')) {
 574                 hres = E_OUTOFMEMORY;
 575                 break;
 576             }
 577
 578             for(i=0; i < ctx->stack_top; i++) {
 579                 if(!append_string(ctx, ctx->gap)) {
 580                     hres = E_OUTOFMEMORY;
 581                     break;
 582                 }
 583             }
 584         }
 585
 586         hres = IDispatchEx_GetMemberName(&obj->IDispatchEx_iface, dispid, &prop_name);
 587         if(FAILED(hres))
 588             return hres;
 589
 590         hres = json_quote(ctx, prop_name, SysStringLen(prop_name));
 591         if(FAILED(hres)) {
 592             SysFreeString(prop_name);
 593             return hres;
 594         }
 595
 596         if(!append_char(ctx, ':') || (*ctx->gap && !append_char(ctx, ' '))) {
 597             SysFreeString(prop_name);
 598             return E_OUTOFMEMORY;
 599         }
 600
 601         hres = stringify(ctx, obj, prop_name);
 602         SysFreeString(prop_name);
 603         if(FAILED(hres))
 604             return hres;
 605
 606         if(hres == S_FALSE) {
 607             ctx->buf_len = stepback;
 608             continue;
 609         }
 610
 611         prop_cnt++;
 612     }
 613
 614     if(prop_cnt && *ctx->gap) {
 615         if(!append_char(ctx, '\n'))
 616             return E_OUTOFMEMORY;
 617
 618         for(i=1; i < ctx->stack_top; i++) {
 619             if(!append_string(ctx, ctx->gap)) {
 620                 hres = E_OUTOFMEMORY;
 621                 break;
 622             }
 623         }
 624     }
 625
 626     if(!append_char(ctx, '}'))
 627         return E_OUTOFMEMORY;
 628
 629     stringify_pop_obj(ctx);
 630     return S_OK;
 631 }
 632
 633 /* ECMA-262 5.1 Edition    15.12.3 (abstract operation Str) */
 634 static HRESULT stringify(stringify_ctx_t *ctx, jsdisp_t *object, const WCHAR *name)
 635 {
 636     jsval_t value, v;
 637     HRESULT hres;
 638
 639     hres = jsdisp_propget_name(object, name, &value);
 640     if(FAILED(hres))
 641         return hres == DISP_E_UNKNOWNNAME ? S_FALSE : hres;
 642
 643     if(is_object_instance(value) && get_object(value)) {
 644         jsdisp_t *obj;
 645         DISPID id;
 646
 647         obj = iface_to_jsdisp(get_object(value));
 648         if(!obj) {
 649             jsval_release(value);
 650             return S_FALSE;
 651         }
 652
 653         hres = jsdisp_get_id(obj, L"toJSON", 0, &id);
 654         jsdisp_release(obj);
 655         if(hres == S_OK)
 656             FIXME("Use toJSON.\n");
 657     }
 658
 659     if(ctx->replacer) {
 660         jsstr_t *name_str;
 661         jsval_t args[2];
 662         if(!(name_str = jsstr_alloc(name))) {
 663             jsval_release(value);
 664             return E_OUTOFMEMORY;
 665         }
 666         args[0] = jsval_string(name_str);
 667         args[1] = value;
 668         hres = jsdisp_call_value(ctx->replacer, to_disp(object), DISPATCH_METHOD, ARRAY_SIZE(args), args, &v);
 669         jsstr_release(name_str);
 670         jsval_release(value);
 671         if(FAILED(hres))
 672             return hres;
 673         value = v;
 674     }
 675
 676     v = value;
 677     hres = maybe_to_primitive(ctx->ctx, v, &value);
 678     jsval_release(v);
 679     if(FAILED(hres))
 680         return hres;
 681
 682     switch(jsval_type(value)) {
 683     case JSV_NULL:
 684         if(!append_string(ctx, L"null"))
 685             hres = E_OUTOFMEMORY;
 686         break;
 687     case JSV_BOOL:
 688         if(!append_string(ctx, get_bool(value) ? L"true" : L"false"))
 689             hres = E_OUTOFMEMORY;
 690         break;
 691     case JSV_STRING: {
 692         jsstr_t *str = get_string(value);
 693         const WCHAR *ptr = jsstr_flatten(str);
 694         if(ptr)
 695             hres = json_quote(ctx, ptr, jsstr_length(str));
 696         else
 697             hres = E_OUTOFMEMORY;
 698         break;
 699     }
 700     case JSV_NUMBER: {
 701         double n = get_number(value);
 702         if(isfinite(n)) {
 703             const WCHAR *ptr;
 704             jsstr_t *str;
 705
 706             /* FIXME: Optimize. There is no need for jsstr_t here. */
 707             hres = double_to_string(n, &str);
 708             if(FAILED(hres))
 709                 break;
 710
 711             ptr = jsstr_flatten(str);
 712             assert(ptr != NULL);
 713             hres = ptr && !append_string_len(ctx, ptr, jsstr_length(str)) ? E_OUTOFMEMORY : S_OK;
 714             jsstr_release(str);
 715         }else {
 716             if(!append_string(ctx, L"null"))
 717                 hres = E_OUTOFMEMORY;
 718         }
 719         break;
 720     }
 721     case JSV_OBJECT: {
 722         jsdisp_t *obj;
 723
 724         obj = iface_to_jsdisp(get_object(value));
 725         if(!obj) {
 726             hres = S_FALSE;
 727             break;
 728         }
 729
 730         if(!is_callable(obj))
 731             hres = is_class(obj, JSCLASS_ARRAY) ? stringify_array(ctx, obj) : stringify_object(ctx, obj);
 732         else
 733             hres = S_FALSE;
 734
 735         jsdisp_release(obj);
 736         break;
 737     }
 738     case JSV_UNDEFINED:
 739         hres = S_FALSE;
 740         break;
 741     case JSV_VARIANT:
 742         FIXME("VARIANT\n");
 743         hres = E_NOTIMPL;
 744         break;
 745     }
 746
 747     jsval_release(value);
 748     return hres;
 749 }
 750
 751 /* ECMA-262 5.1 Edition    15.12.3 */
 752 static HRESULT JSON_stringify(script_ctx_t *ctx, vdisp_t *jsthis, WORD flags, unsigned argc, jsval_t *argv, jsval_t *r)
 753 {
 754     stringify_ctx_t stringify_ctx = { ctx };
 755     jsdisp_t *obj = NULL, *replacer;
 756     HRESULT hres;
 757
 758     TRACE("\n");
 759
 760     if(!argc) {
 761         if(r)
 762             *r = jsval_undefined();
 763         return S_OK;
 764     }
 765
 766     if(argc >= 2 && is_object_instance(argv[1]) && get_object(argv[1]) &&
 767        (replacer = to_jsdisp(get_object(argv[1])))) {
 768         if(is_callable(replacer)) {
 769             stringify_ctx.replacer = jsdisp_addref(replacer);
 770         }else if(is_class(replacer, JSCLASS_ARRAY)) {
 771             FIXME("Array replacer not yet supported\n");
 772             return E_NOTIMPL;
 773         }
 774     }
 775
 776     if(argc >= 3) {
 777         jsval_t space_val;
 778
 779         hres = maybe_to_primitive(ctx, argv[2], &space_val);
 780         if(FAILED(hres))
 781             goto fail;
 782
 783         if(is_number(space_val)) {
 784             double n = get_number(space_val);
 785             if(n >= 1) {
 786                 int i, len;
 787                 if(n > 10)
 788                     n = 10;
 789                 len = floor(n);
 790                 for(i=0; i < len; i++)
 791                     stringify_ctx.gap[i] = ' ';
 792                 stringify_ctx.gap[len] = 0;
 793             }
 794         }else if(is_string(space_val)) {
 795             jsstr_t *space_str = get_string(space_val);
 796             size_t len = jsstr_length(space_str);
 797             if(len > 10)
 798                 len = 10;
 799             jsstr_extract(space_str, 0, len, stringify_ctx.gap);
 800         }
 801
 802         jsval_release(space_val);
 803     }
 804
 805     if(FAILED(hres = create_object(ctx, NULL, &obj)))
 806         goto fail;
 807     if(FAILED(hres = jsdisp_propput_name(obj, L"", argv[0])))
 808         goto fail;
 809
 810     hres = stringify(&stringify_ctx, obj, L"");
 811     if(SUCCEEDED(hres) && r) {
 812         assert(!stringify_ctx.stack_top);
 813
 814         if(hres == S_OK) {
 815             jsstr_t *ret = jsstr_alloc_len(stringify_ctx.buf, stringify_ctx.buf_len);
 816             if(ret)
 817                 *r = jsval_string(ret);
 818             else
 819                 hres = E_OUTOFMEMORY;
 820         }else {
 821             *r = jsval_undefined();
 822         }
 823     }
 824
 825 fail:
 826     if(obj)
 827         jsdisp_release(obj);
 828     if(stringify_ctx.replacer)
 829         jsdisp_release(stringify_ctx.replacer);
 830     heap_free(stringify_ctx.buf);
 831     heap_free(stringify_ctx.stack);
 832     return hres;
 833 }
 834
 835 static const builtin_prop_t JSON_props[] = {
 836     {L"parse",     JSON_parse,     PROPF_METHOD|2},
 837     {L"stringify", JSON_stringify, PROPF_METHOD|3}
 838 };
 839
 840 static const builtin_info_t JSON_info = {
 841     JSCLASS_JSON,
 842     {NULL, NULL, 0},
 843     ARRAY_SIZE(JSON_props),
 844     JSON_props,
 845     NULL,
 846     NULL
 847 };
 848
 849 HRESULT create_json(script_ctx_t *ctx, jsdisp_t **ret)
 850 {
 851     jsdisp_t *json;
 852     HRESULT hres;
 853
 854     json = heap_alloc_zero(sizeof(*json));
 855     if(!json)
 856         return E_OUTOFMEMORY;
 857
 858     hres = init_dispex_from_constr(json, ctx, &JSON_info, ctx->object_constr);
 859     if(FAILED(hres)) {
 860         heap_free(json);
 861         return hres;
 862     }
 863
 864     *ret = json;
 865     return S_OK;
 866 }