?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
push f2fb4b43e6a5ad960b5745b9c70e0a8fefaca935
[wine/hacks.git] / dlls / ole32 / rpc.c
blob027d0eef064833b6b894246a8521e00978b943f6
1 /*
2 * RPC Manager
3 *
4 * Copyright 2001 Ove Kåven, TransGaming Technologies
5 * Copyright 2002 Marcus Meissner
6 * Copyright 2005 Mike Hearn, Rob Shearman for CodeWeavers
7 *
8 * This library is free software; you can redistribute it and/or
9 * modify it under the terms of the GNU Lesser General Public
10 * License as published by the Free Software Foundation; either
11 * version 2.1 of the License, or (at your option) any later version.
12 *
13 * This library is distributed in the hope that it will be useful,
14 * but WITHOUT ANY WARRANTY; without even the implied warranty of
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
16 * Lesser General Public License for more details.
17 *
18 * You should have received a copy of the GNU Lesser General Public
19 * License along with this library; if not, write to the Free Software
20 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
21 */
22
23 #include "config.h"
24 #include "wine/port.h"
25
26 #include <stdarg.h>
27 #include <string.h>
28
29 #define COBJMACROS
30 #define NONAMELESSUNION
31 #define NONAMELESSSTRUCT
32
33 #include "windef.h"
34 #include "winbase.h"
35 #include "winuser.h"
36 #include "winsvc.h"
37 #include "objbase.h"
38 #include "ole2.h"
39 #include "rpc.h"
40 #include "winerror.h"
41 #include "winreg.h"
42 #include "wine/unicode.h"
43
44 #include "compobj_private.h"
45
46 #include "wine/debug.h"
47
48 WINE_DEFAULT_DEBUG_CHANNEL(ole);
49
50 static void __RPC_STUB dispatch_rpc(RPC_MESSAGE *msg);
51
52 /* we only use one function to dispatch calls for all methods - we use the
53 * RPC_IF_OLE flag to tell the RPC runtime that this is the case */
54 static RPC_DISPATCH_FUNCTION rpc_dispatch_table[1] = { dispatch_rpc }; /* (RO) */
55 static RPC_DISPATCH_TABLE rpc_dispatch = { 1, rpc_dispatch_table }; /* (RO) */
56
57 static struct list registered_interfaces = LIST_INIT(registered_interfaces); /* (CS csRegIf) */
58 static CRITICAL_SECTION csRegIf;
59 static CRITICAL_SECTION_DEBUG csRegIf_debug =
60 {
61 0, 0, &csRegIf,
62 { &csRegIf_debug.ProcessLocksList, &csRegIf_debug.ProcessLocksList },
63 0, 0, { (DWORD_PTR)(__FILE__ ": dcom registered server interfaces") }
64 };
65 static CRITICAL_SECTION csRegIf = { &csRegIf_debug, -1, 0, 0, 0, 0 };
66
67 static struct list channel_hooks = LIST_INIT(channel_hooks); /* (CS csChannelHook) */
68 static CRITICAL_SECTION csChannelHook;
69 static CRITICAL_SECTION_DEBUG csChannelHook_debug =
70 {
71 0, 0, &csChannelHook,
72 { &csChannelHook_debug.ProcessLocksList, &csChannelHook_debug.ProcessLocksList },
73 0, 0, { (DWORD_PTR)(__FILE__ ": channel hooks") }
74 };
75 static CRITICAL_SECTION csChannelHook = { &csChannelHook_debug, -1, 0, 0, 0, 0 };
76
77 static WCHAR wszRpcTransport[] = {'n','c','a','l','r','p','c',0};
78
79
80 struct registered_if
81 {
82 struct list entry;
83 DWORD refs; /* ref count */
84 RPC_SERVER_INTERFACE If; /* interface registered with the RPC runtime */
85 };
86
87 /* get the pipe endpoint specified of the specified apartment */
88 static inline void get_rpc_endpoint(LPWSTR endpoint, const OXID *oxid)
89 {
90 /* FIXME: should get endpoint from rpcss */
91 static const WCHAR wszEndpointFormat[] = {'\\','p','i','p','e','\\','O','L','E','_','%','0','8','l','x','%','0','8','l','x',0};
92 wsprintfW(endpoint, wszEndpointFormat, (DWORD)(*oxid >> 32),(DWORD)*oxid);
93 }
94
95 typedef struct
96 {
97 const IRpcChannelBufferVtbl *lpVtbl;
98 LONG refs;
99 } RpcChannelBuffer;
100
101 typedef struct
102 {
103 RpcChannelBuffer super; /* superclass */
104
105 RPC_BINDING_HANDLE bind; /* handle to the remote server */
106 OXID oxid; /* apartment in which the channel is valid */
107 DWORD server_pid; /* id of server process */
108 DWORD dest_context; /* returned from GetDestCtx */
109 LPVOID dest_context_data; /* returned from GetDestCtx */
110 HANDLE event; /* cached event handle */
111 } ClientRpcChannelBuffer;
112
113 struct dispatch_params
114 {
115 RPCOLEMESSAGE *msg; /* message */
116 IRpcStubBuffer *stub; /* stub buffer, if applicable */
117 IRpcChannelBuffer *chan; /* server channel buffer, if applicable */
118 IID iid; /* ID of interface being called */
119 IUnknown *iface; /* interface being called */
120 HANDLE handle; /* handle that will become signaled when call finishes */
121 BOOL bypass_rpcrt; /* bypass RPC runtime? */
122 RPC_STATUS status; /* status (out) */
123 HRESULT hr; /* hresult (out) */
124 };
125
126 struct message_state
127 {
128 RPC_BINDING_HANDLE binding_handle;
129 ULONG prefix_data_len;
130 SChannelHookCallInfo channel_hook_info;
131 BOOL bypass_rpcrt;
132
133 /* client only */
134 HWND target_hwnd;
135 DWORD target_tid;
136 struct dispatch_params params;
137 };
138
139 typedef struct
140 {
141 ULONG conformance; /* NDR */
142 GUID id;
143 ULONG size;
144 /* [size_is((size+7)&~7)] */ unsigned char data[1];
145 } WIRE_ORPC_EXTENT;
146
147 struct channel_hook_entry
148 {
149 struct list entry;
150 GUID id;
151 IChannelHook *hook;
152 };
153
154 struct channel_hook_buffer_data
155 {
156 GUID id;
157 ULONG extension_size;
158 };
159
160
161 static HRESULT unmarshal_ORPCTHAT(RPC_MESSAGE *msg, ORPCTHAT *orpcthat,
162 ORPC_EXTENT_ARRAY *orpc_ext_array, WIRE_ORPC_EXTENT **first_wire_orpc_extent);
163
164 /* Channel Hook Functions */
165
166 static ULONG ChannelHooks_ClientGetSize(SChannelHookCallInfo *info,
167 struct channel_hook_buffer_data **data, unsigned int *hook_count,
168 ULONG *extension_count)
169 {
170 struct channel_hook_entry *entry;
171 ULONG total_size = 0;
172 unsigned int hook_index = 0;
173
174 *hook_count = 0;
175 *extension_count = 0;
176
177 EnterCriticalSection(&csChannelHook);
178
179 LIST_FOR_EACH_ENTRY(entry, &channel_hooks, struct channel_hook_entry, entry)
180 (*hook_count)++;
181
182 if (*hook_count)
183 *data = HeapAlloc(GetProcessHeap(), 0, *hook_count * sizeof(struct channel_hook_buffer_data));
184 else
185 *data = NULL;
186
187 LIST_FOR_EACH_ENTRY(entry, &channel_hooks, struct channel_hook_entry, entry)
188 {
189 ULONG extension_size = 0;
190
191 IChannelHook_ClientGetSize(entry->hook, &entry->id, &info->iid, &extension_size);
192
193 TRACE("%s: extension_size = %u\n", debugstr_guid(&entry->id), extension_size);
194
195 extension_size = (extension_size+7)&~7;
196 (*data)[hook_index].id = entry->id;
197 (*data)[hook_index].extension_size = extension_size;
198
199 /* an extension is only put onto the wire if it has data to write */
200 if (extension_size)
201 {
202 total_size += FIELD_OFFSET(WIRE_ORPC_EXTENT, data[extension_size]);
203 (*extension_count)++;
204 }
205
206 hook_index++;
207 }
208
209 LeaveCriticalSection(&csChannelHook);
210
211 return total_size;
212 }
213
214 static unsigned char * ChannelHooks_ClientFillBuffer(SChannelHookCallInfo *info,
215 unsigned char *buffer, struct channel_hook_buffer_data *data,
216 unsigned int hook_count)
217 {
218 struct channel_hook_entry *entry;
219
220 EnterCriticalSection(&csChannelHook);
221
222 LIST_FOR_EACH_ENTRY(entry, &channel_hooks, struct channel_hook_entry, entry)
223 {
224 unsigned int i;
225 ULONG extension_size = 0;
226 WIRE_ORPC_EXTENT *wire_orpc_extent = (WIRE_ORPC_EXTENT *)buffer;
227
228 for (i = 0; i < hook_count; i++)
229 if (IsEqualGUID(&entry->id, &data[i].id))
230 extension_size = data[i].extension_size;
231
232 /* an extension is only put onto the wire if it has data to write */
233 if (!extension_size)
234 continue;
235
236 IChannelHook_ClientFillBuffer(entry->hook, &entry->id, &info->iid,
237 &extension_size, buffer + FIELD_OFFSET(WIRE_ORPC_EXTENT, data[0]));
238
239 TRACE("%s: extension_size = %u\n", debugstr_guid(&entry->id), extension_size);
240
241 /* FIXME: set unused portion of wire_orpc_extent->data to 0? */
242
243 wire_orpc_extent->conformance = (extension_size+7)&~7;
244 wire_orpc_extent->size = extension_size;
245 memcpy(&wire_orpc_extent->id, &entry->id, sizeof(wire_orpc_extent->id));
246 buffer += FIELD_OFFSET(WIRE_ORPC_EXTENT, data[wire_orpc_extent->conformance]);
247 }
248
249 LeaveCriticalSection(&csChannelHook);
250
251 return buffer;
252 }
253
254 static void ChannelHooks_ServerNotify(SChannelHookCallInfo *info,
255 DWORD lDataRep, WIRE_ORPC_EXTENT *first_wire_orpc_extent,
256 ULONG extension_count)
257 {
258 struct channel_hook_entry *entry;
259 ULONG i;
260
261 EnterCriticalSection(&csChannelHook);
262
263 LIST_FOR_EACH_ENTRY(entry, &channel_hooks, struct channel_hook_entry, entry)
264 {
265 WIRE_ORPC_EXTENT *wire_orpc_extent;
266 for (i = 0, wire_orpc_extent = first_wire_orpc_extent;
267 i < extension_count;
268 i++, wire_orpc_extent = (WIRE_ORPC_EXTENT *)&wire_orpc_extent->data[wire_orpc_extent->conformance])
269 {
270 if (IsEqualGUID(&entry->id, &wire_orpc_extent->id))
271 break;
272 }
273 if (i == extension_count) wire_orpc_extent = NULL;
274
275 IChannelHook_ServerNotify(entry->hook, &entry->id, &info->iid,
276 wire_orpc_extent ? wire_orpc_extent->size : 0,
277 wire_orpc_extent ? wire_orpc_extent->data : NULL,
278 lDataRep);
279 }
280
281 LeaveCriticalSection(&csChannelHook);
282 }
283
284 static ULONG ChannelHooks_ServerGetSize(SChannelHookCallInfo *info,
285 struct channel_hook_buffer_data **data, unsigned int *hook_count,
286 ULONG *extension_count)
287 {
288 struct channel_hook_entry *entry;
289 ULONG total_size = 0;
290 unsigned int hook_index = 0;
291
292 *hook_count = 0;
293 *extension_count = 0;
294
295 EnterCriticalSection(&csChannelHook);
296
297 LIST_FOR_EACH_ENTRY(entry, &channel_hooks, struct channel_hook_entry, entry)
298 (*hook_count)++;
299
300 if (*hook_count)
301 *data = HeapAlloc(GetProcessHeap(), 0, *hook_count * sizeof(struct channel_hook_buffer_data));
302 else
303 *data = NULL;
304
305 LIST_FOR_EACH_ENTRY(entry, &channel_hooks, struct channel_hook_entry, entry)
306 {
307 ULONG extension_size = 0;
308
309 IChannelHook_ServerGetSize(entry->hook, &entry->id, &info->iid, S_OK,
310 &extension_size);
311
312 TRACE("%s: extension_size = %u\n", debugstr_guid(&entry->id), extension_size);
313
314 extension_size = (extension_size+7)&~7;
315 (*data)[hook_index].id = entry->id;
316 (*data)[hook_index].extension_size = extension_size;
317
318 /* an extension is only put onto the wire if it has data to write */
319 if (extension_size)
320 {
321 total_size += FIELD_OFFSET(WIRE_ORPC_EXTENT, data[extension_size]);
322 (*extension_count)++;
323 }
324
325 hook_index++;
326 }
327
328 LeaveCriticalSection(&csChannelHook);
329
330 return total_size;
331 }
332
333 static unsigned char * ChannelHooks_ServerFillBuffer(SChannelHookCallInfo *info,
334 unsigned char *buffer, struct channel_hook_buffer_data *data,
335 unsigned int hook_count)
336 {
337 struct channel_hook_entry *entry;
338
339 EnterCriticalSection(&csChannelHook);
340
341 LIST_FOR_EACH_ENTRY(entry, &channel_hooks, struct channel_hook_entry, entry)
342 {
343 unsigned int i;
344 ULONG extension_size = 0;
345 WIRE_ORPC_EXTENT *wire_orpc_extent = (WIRE_ORPC_EXTENT *)buffer;
346
347 for (i = 0; i < hook_count; i++)
348 if (IsEqualGUID(&entry->id, &data[i].id))
349 extension_size = data[i].extension_size;
350
351 /* an extension is only put onto the wire if it has data to write */
352 if (!extension_size)
353 continue;
354
355 IChannelHook_ServerFillBuffer(entry->hook, &entry->id, &info->iid,
356 &extension_size, buffer + FIELD_OFFSET(WIRE_ORPC_EXTENT, data[0]),
357 S_OK);
358
359 TRACE("%s: extension_size = %u\n", debugstr_guid(&entry->id), extension_size);
360
361 /* FIXME: set unused portion of wire_orpc_extent->data to 0? */
362
363 wire_orpc_extent->conformance = (extension_size+7)&~7;
364 wire_orpc_extent->size = extension_size;
365 memcpy(&wire_orpc_extent->id, &entry->id, sizeof(wire_orpc_extent->id));
366 buffer += FIELD_OFFSET(WIRE_ORPC_EXTENT, data[wire_orpc_extent->conformance]);
367 }
368
369 LeaveCriticalSection(&csChannelHook);
370
371 return buffer;
372 }
373
374 static void ChannelHooks_ClientNotify(SChannelHookCallInfo *info,
375 DWORD lDataRep, WIRE_ORPC_EXTENT *first_wire_orpc_extent,
376 ULONG extension_count, HRESULT hrFault)
377 {
378 struct channel_hook_entry *entry;
379 ULONG i;
380
381 EnterCriticalSection(&csChannelHook);
382
383 LIST_FOR_EACH_ENTRY(entry, &channel_hooks, struct channel_hook_entry, entry)
384 {
385 WIRE_ORPC_EXTENT *wire_orpc_extent;
386 for (i = 0, wire_orpc_extent = first_wire_orpc_extent;
387 i < extension_count;
388 i++, wire_orpc_extent = (WIRE_ORPC_EXTENT *)&wire_orpc_extent->data[wire_orpc_extent->conformance])
389 {
390 if (IsEqualGUID(&entry->id, &wire_orpc_extent->id))
391 break;
392 }
393 if (i == extension_count) wire_orpc_extent = NULL;
394
395 IChannelHook_ClientNotify(entry->hook, &entry->id, &info->iid,
396 wire_orpc_extent ? wire_orpc_extent->size : 0,
397 wire_orpc_extent ? wire_orpc_extent->data : NULL,
398 lDataRep, hrFault);
399 }
400
401 LeaveCriticalSection(&csChannelHook);
402 }
403
404 HRESULT RPC_RegisterChannelHook(REFGUID rguid, IChannelHook *hook)
405 {
406 struct channel_hook_entry *entry;
407
408 TRACE("(%s, %p)\n", debugstr_guid(rguid), hook);
409
410 entry = HeapAlloc(GetProcessHeap(), 0, sizeof(*entry));
411 if (!entry)
412 return E_OUTOFMEMORY;
413
414 memcpy(&entry->id, rguid, sizeof(entry->id));
415 entry->hook = hook;
416 IChannelHook_AddRef(hook);
417
418 EnterCriticalSection(&csChannelHook);
419 list_add_tail(&channel_hooks, &entry->entry);
420 LeaveCriticalSection(&csChannelHook);
421
422 return S_OK;
423 }
424
425 void RPC_UnregisterAllChannelHooks(void)
426 {
427 struct channel_hook_entry *cursor;
428 struct channel_hook_entry *cursor2;
429
430 EnterCriticalSection(&csChannelHook);
431 LIST_FOR_EACH_ENTRY_SAFE(cursor, cursor2, &channel_hooks, struct channel_hook_entry, entry)
432 HeapFree(GetProcessHeap(), 0, cursor);
433 LeaveCriticalSection(&csChannelHook);
434 }
435
436 /* RPC Channel Buffer Functions */
437
438 static HRESULT WINAPI RpcChannelBuffer_QueryInterface(LPRPCCHANNELBUFFER iface, REFIID riid, LPVOID *ppv)
439 {
440 *ppv = NULL;
441 if (IsEqualIID(riid,&IID_IRpcChannelBuffer) || IsEqualIID(riid,&IID_IUnknown))
442 {
443 *ppv = (LPVOID)iface;
444 IUnknown_AddRef(iface);
445 return S_OK;
446 }
447 return E_NOINTERFACE;
448 }
449
450 static ULONG WINAPI RpcChannelBuffer_AddRef(LPRPCCHANNELBUFFER iface)
451 {
452 RpcChannelBuffer *This = (RpcChannelBuffer *)iface;
453 return InterlockedIncrement(&This->refs);
454 }
455
456 static ULONG WINAPI ServerRpcChannelBuffer_Release(LPRPCCHANNELBUFFER iface)
457 {
458 RpcChannelBuffer *This = (RpcChannelBuffer *)iface;
459 ULONG ref;
460
461 ref = InterlockedDecrement(&This->refs);
462 if (ref)
463 return ref;
464
465 HeapFree(GetProcessHeap(), 0, This);
466 return 0;
467 }
468
469 static ULONG WINAPI ClientRpcChannelBuffer_Release(LPRPCCHANNELBUFFER iface)
470 {
471 ClientRpcChannelBuffer *This = (ClientRpcChannelBuffer *)iface;
472 ULONG ref;
473
474 ref = InterlockedDecrement(&This->super.refs);
475 if (ref)
476 return ref;
477
478 if (This->event) CloseHandle(This->event);
479 RpcBindingFree(&This->bind);
480 HeapFree(GetProcessHeap(), 0, This);
481 return 0;
482 }
483
484 static HRESULT WINAPI ServerRpcChannelBuffer_GetBuffer(LPRPCCHANNELBUFFER iface, RPCOLEMESSAGE* olemsg, REFIID riid)
485 {
486 RpcChannelBuffer *This = (RpcChannelBuffer *)iface;
487 RPC_MESSAGE *msg = (RPC_MESSAGE *)olemsg;
488 RPC_STATUS status;
489 ORPCTHAT *orpcthat;
490 struct message_state *message_state;
491 ULONG extensions_size;
492 struct channel_hook_buffer_data *channel_hook_data;
493 unsigned int channel_hook_count;
494 ULONG extension_count;
495
496 TRACE("(%p)->(%p,%s)\n", This, olemsg, debugstr_guid(riid));
497
498 message_state = (struct message_state *)msg->Handle;
499 /* restore the binding handle and the real start of data */
500 msg->Handle = message_state->binding_handle;
501 msg->Buffer = (char *)msg->Buffer - message_state->prefix_data_len;
502
503 extensions_size = ChannelHooks_ServerGetSize(&message_state->channel_hook_info,
504 &channel_hook_data, &channel_hook_count, &extension_count);
505
506 msg->BufferLength += FIELD_OFFSET(ORPCTHAT, extensions) + 4;
507 if (extensions_size)
508 {
509 msg->BufferLength += FIELD_OFFSET(ORPC_EXTENT_ARRAY, extent) + 2*sizeof(DWORD) + extensions_size;
510 if (extension_count & 1)
511 msg->BufferLength += FIELD_OFFSET(WIRE_ORPC_EXTENT, data[0]);
512 }
513
514 if (message_state->bypass_rpcrt)
515 {
516 msg->Buffer = HeapAlloc(GetProcessHeap(), 0, msg->BufferLength);
517 if (msg->Buffer)
518 status = RPC_S_OK;
519 else
520 status = ERROR_OUTOFMEMORY;
521 }
522 else
523 status = I_RpcGetBuffer(msg);
524
525 orpcthat = (ORPCTHAT *)msg->Buffer;
526 msg->Buffer = (char *)msg->Buffer + FIELD_OFFSET(ORPCTHAT, extensions);
527
528 orpcthat->flags = ORPCF_NULL /* FIXME? */;
529
530 /* NDR representation of orpcthat->extensions */
531 *(DWORD *)msg->Buffer = extensions_size ? 1 : 0;
532 msg->Buffer = (char *)msg->Buffer + sizeof(DWORD);
533
534 if (extensions_size)
535 {
536 ORPC_EXTENT_ARRAY *orpc_extent_array = msg->Buffer;
537 orpc_extent_array->size = extension_count;
538 orpc_extent_array->reserved = 0;
539 msg->Buffer = (char *)msg->Buffer + FIELD_OFFSET(ORPC_EXTENT_ARRAY, extent);
540 /* NDR representation of orpc_extent_array->extent */
541 *(DWORD *)msg->Buffer = 1;
542 msg->Buffer = (char *)msg->Buffer + sizeof(DWORD);
543 /* NDR representation of [size_is] attribute of orpc_extent_array->extent */
544 *(DWORD *)msg->Buffer = (extension_count + 1) & ~1;
545 msg->Buffer = (char *)msg->Buffer + sizeof(DWORD);
546
547 msg->Buffer = ChannelHooks_ServerFillBuffer(&message_state->channel_hook_info,
548 msg->Buffer, channel_hook_data, channel_hook_count);
549
550 /* we must add a dummy extension if there is an odd extension
551 * count to meet the contract specified by the size_is attribute */
552 if (extension_count & 1)
553 {
554 WIRE_ORPC_EXTENT *wire_orpc_extent = msg->Buffer;
555 wire_orpc_extent->conformance = 0;
556 memcpy(&wire_orpc_extent->id, &GUID_NULL, sizeof(wire_orpc_extent->id));
557 wire_orpc_extent->size = 0;
558 msg->Buffer = (char *)msg->Buffer + FIELD_OFFSET(WIRE_ORPC_EXTENT, data[0]);
559 }
560 }
561
562 HeapFree(GetProcessHeap(), 0, channel_hook_data);
563
564 /* store the prefixed data length so that we can restore the real buffer
565 * later */
566 message_state->prefix_data_len = (char *)msg->Buffer - (char *)orpcthat;
567 msg->BufferLength -= message_state->prefix_data_len;
568 /* save away the message state again */
569 msg->Handle = message_state;
570
571 TRACE("-- %ld\n", status);
572
573 return HRESULT_FROM_WIN32(status);
574 }
575
576 static HANDLE ClientRpcChannelBuffer_GetEventHandle(ClientRpcChannelBuffer *This)
577 {
578 HANDLE event = InterlockedExchangePointer(&This->event, NULL);
579
580 /* Note: must be auto-reset event so we can reuse it without a call
581 * to ResetEvent */
582 if (!event) event = CreateEventW(NULL, FALSE, FALSE, NULL);
583
584 return event;
585 }
586
587 static void ClientRpcChannelBuffer_ReleaseEventHandle(ClientRpcChannelBuffer *This, HANDLE event)
588 {
589 if (InterlockedCompareExchangePointer(&This->event, event, NULL))
590 /* already a handle cached in This */
591 CloseHandle(event);
592 }
593
594 static HRESULT WINAPI ClientRpcChannelBuffer_GetBuffer(LPRPCCHANNELBUFFER iface, RPCOLEMESSAGE* olemsg, REFIID riid)
595 {
596 ClientRpcChannelBuffer *This = (ClientRpcChannelBuffer *)iface;
597 RPC_MESSAGE *msg = (RPC_MESSAGE *)olemsg;
598 RPC_CLIENT_INTERFACE *cif;
599 RPC_STATUS status;
600 ORPCTHIS *orpcthis;
601 struct message_state *message_state;
602 ULONG extensions_size;
603 struct channel_hook_buffer_data *channel_hook_data;
604 unsigned int channel_hook_count;
605 ULONG extension_count;
606 IPID ipid;
607 HRESULT hr;
608 APARTMENT *apt = NULL;
609
610 TRACE("(%p)->(%p,%s)\n", This, olemsg, debugstr_guid(riid));
611
612 cif = HeapAlloc(GetProcessHeap(), HEAP_ZERO_MEMORY, sizeof(RPC_CLIENT_INTERFACE));
613 if (!cif)
614 return E_OUTOFMEMORY;
615
616 message_state = HeapAlloc(GetProcessHeap(), 0, sizeof(*message_state));
617 if (!message_state)
618 {
619 HeapFree(GetProcessHeap(), 0, cif);
620 return E_OUTOFMEMORY;
621 }
622
623 cif->Length = sizeof(RPC_CLIENT_INTERFACE);
624 /* RPC interface ID = COM interface ID */
625 cif->InterfaceId.SyntaxGUID = *riid;
626 /* COM objects always have a version of 0.0 */
627 cif->InterfaceId.SyntaxVersion.MajorVersion = 0;
628 cif->InterfaceId.SyntaxVersion.MinorVersion = 0;
629 msg->Handle = This->bind;
630 msg->RpcInterfaceInformation = cif;
631
632 message_state->prefix_data_len = 0;
633 message_state->binding_handle = This->bind;
634
635 message_state->channel_hook_info.iid = *riid;
636 message_state->channel_hook_info.cbSize = sizeof(message_state->channel_hook_info);
637 message_state->channel_hook_info.uCausality = COM_CurrentCausalityId();
638 message_state->channel_hook_info.dwServerPid = This->server_pid;
639 message_state->channel_hook_info.iMethod = msg->ProcNum;
640 message_state->channel_hook_info.pObject = NULL; /* only present on server-side */
641 message_state->target_hwnd = NULL;
642 message_state->target_tid = 0;
643 memset(&message_state->params, 0, sizeof(message_state->params));
644
645 extensions_size = ChannelHooks_ClientGetSize(&message_state->channel_hook_info,
646 &channel_hook_data, &channel_hook_count, &extension_count);
647
648 msg->BufferLength += FIELD_OFFSET(ORPCTHIS, extensions) + 4;
649 if (extensions_size)
650 {
651 msg->BufferLength += FIELD_OFFSET(ORPC_EXTENT_ARRAY, extent) + 2*sizeof(DWORD) + extensions_size;
652 if (extension_count & 1)
653 msg->BufferLength += FIELD_OFFSET(WIRE_ORPC_EXTENT, data[0]);
654 }
655
656 RpcBindingInqObject(message_state->binding_handle, &ipid);
657 hr = ipid_get_dispatch_params(&ipid, &apt, &message_state->params.stub,
658 &message_state->params.chan,
659 &message_state->params.iid,
660 &message_state->params.iface);
661 if (hr == S_OK)
662 {
663 /* stub, chan, iface and iid are unneeded in multi-threaded case as we go
664 * via the RPC runtime */
665 if (apt->multi_threaded)
666 {
667 IRpcStubBuffer_Release(message_state->params.stub);
668 message_state->params.stub = NULL;
669 IRpcChannelBuffer_Release(message_state->params.chan);
670 message_state->params.chan = NULL;
671 message_state->params.iface = NULL;
672 }
673 else
674 {
675 message_state->params.bypass_rpcrt = TRUE;
676 message_state->target_hwnd = apartment_getwindow(apt);
677 message_state->target_tid = apt->tid;
678 /* we assume later on that this being non-NULL is the indicator that
679 * means call directly instead of going through RPC runtime */
680 if (!message_state->target_hwnd)
681 ERR("window for apartment %s is NULL\n", wine_dbgstr_longlong(apt->oxid));
682 }
683 }
684 if (apt) apartment_release(apt);
685 message_state->params.handle = ClientRpcChannelBuffer_GetEventHandle(This);
686 /* Note: message_state->params.msg is initialised in
687 * ClientRpcChannelBuffer_SendReceive */
688
689 /* shortcut the RPC runtime */
690 if (message_state->target_hwnd)
691 {
692 msg->Buffer = HeapAlloc(GetProcessHeap(), 0, msg->BufferLength);
693 if (msg->Buffer)
694 status = RPC_S_OK;
695 else
696 status = ERROR_OUTOFMEMORY;
697 }
698 else
699 status = I_RpcGetBuffer(msg);
700
701 msg->Handle = message_state;
702
703 if (status == RPC_S_OK)
704 {
705 orpcthis = (ORPCTHIS *)msg->Buffer;
706 msg->Buffer = (char *)msg->Buffer + FIELD_OFFSET(ORPCTHIS, extensions);
707
708 orpcthis->version.MajorVersion = COM_MAJOR_VERSION;
709 orpcthis->version.MinorVersion = COM_MINOR_VERSION;
710 orpcthis->flags = message_state->channel_hook_info.dwServerPid ? ORPCF_LOCAL : ORPCF_NULL;
711 orpcthis->reserved1 = 0;
712 orpcthis->cid = message_state->channel_hook_info.uCausality;
713
714 /* NDR representation of orpcthis->extensions */
715 *(DWORD *)msg->Buffer = extensions_size ? 1 : 0;
716 msg->Buffer = (char *)msg->Buffer + sizeof(DWORD);
717
718 if (extensions_size)
719 {
720 ORPC_EXTENT_ARRAY *orpc_extent_array = msg->Buffer;
721 orpc_extent_array->size = extension_count;
722 orpc_extent_array->reserved = 0;
723 msg->Buffer = (char *)msg->Buffer + FIELD_OFFSET(ORPC_EXTENT_ARRAY, extent);
724 /* NDR representation of orpc_extent_array->extent */
725 *(DWORD *)msg->Buffer = 1;
726 msg->Buffer = (char *)msg->Buffer + sizeof(DWORD);
727 /* NDR representation of [size_is] attribute of orpc_extent_array->extent */
728 *(DWORD *)msg->Buffer = (extension_count + 1) & ~1;
729 msg->Buffer = (char *)msg->Buffer + sizeof(DWORD);
730
731 msg->Buffer = ChannelHooks_ClientFillBuffer(&message_state->channel_hook_info,
732 msg->Buffer, channel_hook_data, channel_hook_count);
733
734 /* we must add a dummy extension if there is an odd extension
735 * count to meet the contract specified by the size_is attribute */
736 if (extension_count & 1)
737 {
738 WIRE_ORPC_EXTENT *wire_orpc_extent = msg->Buffer;
739 wire_orpc_extent->conformance = 0;
740 memcpy(&wire_orpc_extent->id, &GUID_NULL, sizeof(wire_orpc_extent->id));
741 wire_orpc_extent->size = 0;
742 msg->Buffer = (char *)msg->Buffer + FIELD_OFFSET(WIRE_ORPC_EXTENT, data[0]);
743 }
744 }
745
746 /* store the prefixed data length so that we can restore the real buffer
747 * pointer in ClientRpcChannelBuffer_SendReceive. */
748 message_state->prefix_data_len = (char *)msg->Buffer - (char *)orpcthis;
749 msg->BufferLength -= message_state->prefix_data_len;
750 }
751
752 HeapFree(GetProcessHeap(), 0, channel_hook_data);
753
754 TRACE("-- %ld\n", status);
755
756 return HRESULT_FROM_WIN32(status);
757 }
758
759 static HRESULT WINAPI ServerRpcChannelBuffer_SendReceive(LPRPCCHANNELBUFFER iface, RPCOLEMESSAGE *olemsg, ULONG *pstatus)
760 {
761 FIXME("stub\n");
762 return E_NOTIMPL;
763 }
764
765 /* this thread runs an outgoing RPC */
766 static DWORD WINAPI rpc_sendreceive_thread(LPVOID param)
767 {
768 struct dispatch_params *data = (struct dispatch_params *) param;
769
770 /* Note: I_RpcSendReceive doesn't raise exceptions like the higher-level
771 * RPC functions do */
772 data->status = I_RpcSendReceive((RPC_MESSAGE *)data->msg);
773
774 TRACE("completed with status 0x%lx\n", data->status);
775
776 SetEvent(data->handle);
777
778 return 0;
779 }
780
781 static inline HRESULT ClientRpcChannelBuffer_IsCorrectApartment(ClientRpcChannelBuffer *This, APARTMENT *apt)
782 {
783 OXID oxid;
784 if (!apt)
785 return S_FALSE;
786 if (apartment_getoxid(apt, &oxid) != S_OK)
787 return S_FALSE;
788 if (This->oxid != oxid)
789 return S_FALSE;
790 return S_OK;
791 }
792
793 static HRESULT WINAPI ClientRpcChannelBuffer_SendReceive(LPRPCCHANNELBUFFER iface, RPCOLEMESSAGE *olemsg, ULONG *pstatus)
794 {
795 ClientRpcChannelBuffer *This = (ClientRpcChannelBuffer *)iface;
796 HRESULT hr;
797 RPC_MESSAGE *msg = (RPC_MESSAGE *)olemsg;
798 RPC_STATUS status;
799 DWORD index;
800 struct message_state *message_state;
801 ORPCTHAT orpcthat;
802 ORPC_EXTENT_ARRAY orpc_ext_array;
803 WIRE_ORPC_EXTENT *first_wire_orpc_extent = NULL;
804 HRESULT hrFault = S_OK;
805
806 TRACE("(%p) iMethod=%d\n", olemsg, olemsg->iMethod);
807
808 hr = ClientRpcChannelBuffer_IsCorrectApartment(This, COM_CurrentApt());
809 if (hr != S_OK)
810 {
811 ERR("called from wrong apartment, should have been 0x%s\n",
812 wine_dbgstr_longlong(This->oxid));
813 return RPC_E_WRONG_THREAD;
814 }
815 /* this situation should be impossible in multi-threaded apartments,
816 * because the calling thread isn't re-entrable.
817 * Note: doing a COM call during the processing of a sent message is
818 * only disallowed if a client call is already being waited for
819 * completion */
820 if (!COM_CurrentApt()->multi_threaded &&
821 COM_CurrentInfo()->pending_call_count_client &&
822 InSendMessage())
823 {
824 ERR("can't make an outgoing COM call in response to a sent message\n");
825 return RPC_E_CANTCALLOUT_ININPUTSYNCCALL;
826 }
827
828 message_state = (struct message_state *)msg->Handle;
829 /* restore the binding handle and the real start of data */
830 msg->Handle = message_state->binding_handle;
831 msg->Buffer = (char *)msg->Buffer - message_state->prefix_data_len;
832 msg->BufferLength += message_state->prefix_data_len;
833
834 /* Note: this is an optimization in the Microsoft OLE runtime that we need
835 * to copy, as shown by the test_no_couninitialize_client test. without
836 * short-circuiting the RPC runtime in the case below, the test will
837 * deadlock on the loader lock due to the RPC runtime needing to create
838 * a thread to process the RPC when this function is called indirectly
839 * from DllMain */
840
841 message_state->params.msg = olemsg;
842 if (message_state->params.bypass_rpcrt)
843 {
844 TRACE("Calling apartment thread 0x%08x...\n", message_state->target_tid);
845
846 msg->ProcNum &= ~RPC_FLAGS_VALID_BIT;
847
848 if (!PostMessageW(message_state->target_hwnd, DM_EXECUTERPC, 0,
849 (LPARAM)&message_state->params))
850 {
851 ERR("PostMessage failed with error %u\n", GetLastError());
852
853 /* Note: message_state->params.iface doesn't have a reference and
854 * so doesn't need to be released */
855
856 hr = HRESULT_FROM_WIN32(GetLastError());
857 }
858 }
859 else
860 {
861 /* we use a separate thread here because we need to be able to
862 * pump the message loop in the application thread: if we do not,
863 * any windows created by this thread will hang and RPCs that try
864 * and re-enter this STA from an incoming server thread will
865 * deadlock. InstallShield is an example of that.
866 */
867 if (!QueueUserWorkItem(rpc_sendreceive_thread, &message_state->params, WT_EXECUTEDEFAULT))
868 {
869 ERR("QueueUserWorkItem failed with error %u\n", GetLastError());
870 hr = E_UNEXPECTED;
871 }
872 else
873 hr = S_OK;
874 }
875
876 if (hr == S_OK)
877 {
878 if (WaitForSingleObject(message_state->params.handle, 0))
879 {
880 COM_CurrentInfo()->pending_call_count_client++;
881 hr = CoWaitForMultipleHandles(0, INFINITE, 1, &message_state->params.handle, &index);
882 COM_CurrentInfo()->pending_call_count_client--;
883 }
884 }
885 ClientRpcChannelBuffer_ReleaseEventHandle(This, message_state->params.handle);
886
887 /* for WM shortcut, faults are returned in params->hr */
888 if (hr == S_OK)
889 hrFault = message_state->params.hr;
890
891 status = message_state->params.status;
892
893 orpcthat.flags = ORPCF_NULL;
894 orpcthat.extensions = NULL;
895
896 /* for normal RPC calls, faults are returned in first 4 bytes of the
897 * buffer */
898 TRACE("RPC call status: 0x%lx\n", status);
899 if (status == RPC_S_CALL_FAILED)
900 hrFault = *(HRESULT *)olemsg->Buffer;
901 else if (status != RPC_S_OK)
902 hr = HRESULT_FROM_WIN32(status);
903
904 TRACE("hrFault = 0x%08x\n", hrFault);
905
906 /* FIXME: this condition should be
907 * "hr == S_OK && (!hrFault || msg->BufferLength > FIELD_OFFSET(ORPCTHAT, extensions) + 4)"
908 * but we don't currently reset the message length for PostMessage
909 * dispatched calls */
910 if (hr == S_OK && hrFault == S_OK)
911 {
912 HRESULT hr2;
913 char *original_buffer = msg->Buffer;
914
915 /* handle ORPCTHAT and client extensions */
916
917 hr2 = unmarshal_ORPCTHAT(msg, &orpcthat, &orpc_ext_array, &first_wire_orpc_extent);
918 if (FAILED(hr2))
919 hr = hr2;
920
921 message_state->prefix_data_len = (char *)msg->Buffer - original_buffer;
922 msg->BufferLength -= message_state->prefix_data_len;
923 }
924 else
925 message_state->prefix_data_len = 0;
926
927 if (hr == S_OK)
928 {
929 ChannelHooks_ClientNotify(&message_state->channel_hook_info,
930 msg->DataRepresentation,
931 first_wire_orpc_extent,
932 orpcthat.extensions && first_wire_orpc_extent ? orpcthat.extensions->size : 0,
933 hrFault);
934 }
935
936 /* save away the message state again */
937 msg->Handle = message_state;
938
939 if (pstatus) *pstatus = status;
940
941 if (hr == S_OK)
942 hr = hrFault;
943
944 TRACE("-- 0x%08x\n", hr);
945
946 return hr;
947 }
948
949 static HRESULT WINAPI ServerRpcChannelBuffer_FreeBuffer(LPRPCCHANNELBUFFER iface, RPCOLEMESSAGE* olemsg)
950 {
951 RPC_MESSAGE *msg = (RPC_MESSAGE *)olemsg;
952 RPC_STATUS status;
953 struct message_state *message_state;
954
955 TRACE("(%p)\n", msg);
956
957 message_state = (struct message_state *)msg->Handle;
958 /* restore the binding handle and the real start of data */
959 msg->Handle = message_state->binding_handle;
960 msg->Buffer = (char *)msg->Buffer - message_state->prefix_data_len;
961 msg->BufferLength += message_state->prefix_data_len;
962 message_state->prefix_data_len = 0;
963
964 if (message_state->bypass_rpcrt)
965 {
966 HeapFree(GetProcessHeap(), 0, msg->Buffer);
967 status = RPC_S_OK;
968 }
969 else
970 status = I_RpcFreeBuffer(msg);
971
972 msg->Handle = message_state;
973
974 TRACE("-- %ld\n", status);
975
976 return HRESULT_FROM_WIN32(status);
977 }
978
979 static HRESULT WINAPI ClientRpcChannelBuffer_FreeBuffer(LPRPCCHANNELBUFFER iface, RPCOLEMESSAGE* olemsg)
980 {
981 RPC_MESSAGE *msg = (RPC_MESSAGE *)olemsg;
982 RPC_STATUS status;
983 struct message_state *message_state;
984
985 TRACE("(%p)\n", msg);
986
987 message_state = (struct message_state *)msg->Handle;
988 /* restore the binding handle and the real start of data */
989 msg->Handle = message_state->binding_handle;
990 msg->Buffer = (char *)msg->Buffer - message_state->prefix_data_len;
991 msg->BufferLength += message_state->prefix_data_len;
992
993 if (message_state->params.bypass_rpcrt)
994 {
995 HeapFree(GetProcessHeap(), 0, msg->Buffer);
996 status = RPC_S_OK;
997 }
998 else
999 status = I_RpcFreeBuffer(msg);
1000
1001 HeapFree(GetProcessHeap(), 0, msg->RpcInterfaceInformation);
1002 msg->RpcInterfaceInformation = NULL;
1003
1004 if (message_state->params.stub)
1005 IRpcStubBuffer_Release(message_state->params.stub);
1006 if (message_state->params.chan)
1007 IRpcChannelBuffer_Release(message_state->params.chan);
1008 HeapFree(GetProcessHeap(), 0, message_state);
1009
1010 TRACE("-- %ld\n", status);
1011
1012 return HRESULT_FROM_WIN32(status);
1013 }
1014
1015 static HRESULT WINAPI ClientRpcChannelBuffer_GetDestCtx(LPRPCCHANNELBUFFER iface, DWORD* pdwDestContext, void** ppvDestContext)
1016 {
1017 ClientRpcChannelBuffer *This = (ClientRpcChannelBuffer *)iface;
1018
1019 TRACE("(%p,%p)\n", pdwDestContext, ppvDestContext);
1020
1021 *pdwDestContext = This->dest_context;
1022 *ppvDestContext = This->dest_context_data;
1023
1024 return S_OK;
1025 }
1026
1027 static HRESULT WINAPI ServerRpcChannelBuffer_GetDestCtx(LPRPCCHANNELBUFFER iface, DWORD* pdwDestContext, void** ppvDestContext)
1028 {
1029 FIXME("(%p,%p), stub!\n", pdwDestContext, ppvDestContext);
1030 return E_FAIL;
1031 }
1032
1033 static HRESULT WINAPI RpcChannelBuffer_IsConnected(LPRPCCHANNELBUFFER iface)
1034 {
1035 TRACE("()\n");
1036 /* native does nothing too */
1037 return S_OK;
1038 }
1039
1040 static const IRpcChannelBufferVtbl ClientRpcChannelBufferVtbl =
1041 {
1042 RpcChannelBuffer_QueryInterface,
1043 RpcChannelBuffer_AddRef,
1044 ClientRpcChannelBuffer_Release,
1045 ClientRpcChannelBuffer_GetBuffer,
1046 ClientRpcChannelBuffer_SendReceive,
1047 ClientRpcChannelBuffer_FreeBuffer,
1048 ClientRpcChannelBuffer_GetDestCtx,
1049 RpcChannelBuffer_IsConnected
1050 };
1051
1052 static const IRpcChannelBufferVtbl ServerRpcChannelBufferVtbl =
1053 {
1054 RpcChannelBuffer_QueryInterface,
1055 RpcChannelBuffer_AddRef,
1056 ServerRpcChannelBuffer_Release,
1057 ServerRpcChannelBuffer_GetBuffer,
1058 ServerRpcChannelBuffer_SendReceive,
1059 ServerRpcChannelBuffer_FreeBuffer,
1060 ServerRpcChannelBuffer_GetDestCtx,
1061 RpcChannelBuffer_IsConnected
1062 };
1063
1064 /* returns a channel buffer for proxies */
1065 HRESULT RPC_CreateClientChannel(const OXID *oxid, const IPID *ipid,
1066 const OXID_INFO *oxid_info,
1067 DWORD dest_context, void *dest_context_data,
1068 IRpcChannelBuffer **chan)
1069 {
1070 ClientRpcChannelBuffer *This;
1071 WCHAR endpoint[200];
1072 RPC_BINDING_HANDLE bind;
1073 RPC_STATUS status;
1074 LPWSTR string_binding;
1075
1076 /* FIXME: get the endpoint from oxid_info->psa instead */
1077 get_rpc_endpoint(endpoint, oxid);
1078
1079 TRACE("proxy pipe: connecting to endpoint: %s\n", debugstr_w(endpoint));
1080
1081 status = RpcStringBindingComposeW(
1082 NULL,
1083 wszRpcTransport,
1084 NULL,
1085 endpoint,
1086 NULL,
1087 &string_binding);
1088
1089 if (status == RPC_S_OK)
1090 {
1091 status = RpcBindingFromStringBindingW(string_binding, &bind);
1092
1093 if (status == RPC_S_OK)
1094 {
1095 IPID ipid2 = *ipid; /* why can't RpcBindingSetObject take a const? */
1096 status = RpcBindingSetObject(bind, &ipid2);
1097 if (status != RPC_S_OK)
1098 RpcBindingFree(&bind);
1099 }
1100
1101 RpcStringFreeW(&string_binding);
1102 }
1103
1104 if (status != RPC_S_OK)
1105 {
1106 ERR("Couldn't get binding for endpoint %s, status = %ld\n", debugstr_w(endpoint), status);
1107 return HRESULT_FROM_WIN32(status);
1108 }
1109
1110 This = HeapAlloc(GetProcessHeap(), 0, sizeof(*This));
1111 if (!This)
1112 {
1113 RpcBindingFree(&bind);
1114 return E_OUTOFMEMORY;
1115 }
1116
1117 This->super.lpVtbl = &ClientRpcChannelBufferVtbl;
1118 This->super.refs = 1;
1119 This->bind = bind;
1120 apartment_getoxid(COM_CurrentApt(), &This->oxid);
1121 This->server_pid = oxid_info->dwPid;
1122 This->dest_context = dest_context;
1123 This->dest_context_data = dest_context_data;
1124 This->event = NULL;
1125
1126 *chan = (IRpcChannelBuffer*)This;
1127
1128 return S_OK;
1129 }
1130
1131 HRESULT RPC_CreateServerChannel(IRpcChannelBuffer **chan)
1132 {
1133 RpcChannelBuffer *This = HeapAlloc(GetProcessHeap(), 0, sizeof(*This));
1134 if (!This)
1135 return E_OUTOFMEMORY;
1136
1137 This->lpVtbl = &ServerRpcChannelBufferVtbl;
1138 This->refs = 1;
1139
1140 *chan = (IRpcChannelBuffer*)This;
1141
1142 return S_OK;
1143 }
1144
1145 /* unmarshals ORPC_EXTENT_ARRAY according to NDR rules, but doesn't allocate
1146 * any memory */
1147 static HRESULT unmarshal_ORPC_EXTENT_ARRAY(RPC_MESSAGE *msg, const char *end,
1148 ORPC_EXTENT_ARRAY *extensions,
1149 WIRE_ORPC_EXTENT **first_wire_orpc_extent)
1150 {
1151 DWORD pointer_id;
1152 DWORD i;
1153
1154 memcpy(extensions, msg->Buffer, FIELD_OFFSET(ORPC_EXTENT_ARRAY, extent));
1155 msg->Buffer = (char *)msg->Buffer + FIELD_OFFSET(ORPC_EXTENT_ARRAY, extent);
1156
1157 if ((const char *)msg->Buffer + 2 * sizeof(DWORD) > end)
1158 return RPC_E_INVALID_HEADER;
1159
1160 pointer_id = *(DWORD *)msg->Buffer;
1161 msg->Buffer = (char *)msg->Buffer + sizeof(DWORD);
1162 extensions->extent = NULL;
1163
1164 if (pointer_id)
1165 {
1166 WIRE_ORPC_EXTENT *wire_orpc_extent;
1167
1168 /* conformance */
1169 if (*(DWORD *)msg->Buffer != ((extensions->size+1)&~1))
1170 return RPC_S_INVALID_BOUND;
1171
1172 msg->Buffer = (char *)msg->Buffer + sizeof(DWORD);
1173
1174 /* arbritary limit for security (don't know what native does) */
1175 if (extensions->size > 256)
1176 {
1177 ERR("too many extensions: %ld\n", extensions->size);
1178 return RPC_S_INVALID_BOUND;
1179 }
1180
1181 *first_wire_orpc_extent = wire_orpc_extent = (WIRE_ORPC_EXTENT *)msg->Buffer;
1182 for (i = 0; i < ((extensions->size+1)&~1); i++)
1183 {
1184 if ((const char *)&wire_orpc_extent->data[0] > end)
1185 return RPC_S_INVALID_BOUND;
1186 if (wire_orpc_extent->conformance != ((wire_orpc_extent->size+7)&~7))
1187 return RPC_S_INVALID_BOUND;
1188 if ((const char *)&wire_orpc_extent->data[wire_orpc_extent->conformance] > end)
1189 return RPC_S_INVALID_BOUND;
1190 TRACE("size %u, guid %s\n", wire_orpc_extent->size, debugstr_guid(&wire_orpc_extent->id));
1191 wire_orpc_extent = (WIRE_ORPC_EXTENT *)&wire_orpc_extent->data[wire_orpc_extent->conformance];
1192 }
1193 msg->Buffer = wire_orpc_extent;
1194 }
1195
1196 return S_OK;
1197 }
1198
1199 /* unmarshals ORPCTHIS according to NDR rules, but doesn't allocate any memory */
1200 static HRESULT unmarshal_ORPCTHIS(RPC_MESSAGE *msg, ORPCTHIS *orpcthis,
1201 ORPC_EXTENT_ARRAY *orpc_ext_array, WIRE_ORPC_EXTENT **first_wire_orpc_extent)
1202 {
1203 const char *end = (char *)msg->Buffer + msg->BufferLength;
1204
1205 *first_wire_orpc_extent = NULL;
1206
1207 if (msg->BufferLength < FIELD_OFFSET(ORPCTHIS, extensions) + 4)
1208 {
1209 ERR("invalid buffer length\n");
1210 return RPC_E_INVALID_HEADER;
1211 }
1212
1213 memcpy(orpcthis, msg->Buffer, FIELD_OFFSET(ORPCTHIS, extensions));
1214 msg->Buffer = (char *)msg->Buffer + FIELD_OFFSET(ORPCTHIS, extensions);
1215
1216 if ((const char *)msg->Buffer + sizeof(DWORD) > end)
1217 return RPC_E_INVALID_HEADER;
1218
1219 if (*(DWORD *)msg->Buffer)
1220 orpcthis->extensions = orpc_ext_array;
1221 else
1222 orpcthis->extensions = NULL;
1223
1224 msg->Buffer = (char *)msg->Buffer + sizeof(DWORD);
1225
1226 if (orpcthis->extensions)
1227 {
1228 HRESULT hr = unmarshal_ORPC_EXTENT_ARRAY(msg, end, orpc_ext_array,
1229 first_wire_orpc_extent);
1230 if (FAILED(hr))
1231 return hr;
1232 }
1233
1234 if ((orpcthis->version.MajorVersion != COM_MAJOR_VERSION) ||
1235 (orpcthis->version.MinorVersion > COM_MINOR_VERSION))
1236 {
1237 ERR("COM version {%d, %d} not supported\n",
1238 orpcthis->version.MajorVersion, orpcthis->version.MinorVersion);
1239 return RPC_E_VERSION_MISMATCH;
1240 }
1241
1242 if (orpcthis->flags & ~(ORPCF_LOCAL|ORPCF_RESERVED1|ORPCF_RESERVED2|ORPCF_RESERVED3|ORPCF_RESERVED4))
1243 {
1244 ERR("invalid flags 0x%lx\n", orpcthis->flags & ~(ORPCF_LOCAL|ORPCF_RESERVED1|ORPCF_RESERVED2|ORPCF_RESERVED3|ORPCF_RESERVED4));
1245 return RPC_E_INVALID_HEADER;
1246 }
1247
1248 return S_OK;
1249 }
1250
1251 static HRESULT unmarshal_ORPCTHAT(RPC_MESSAGE *msg, ORPCTHAT *orpcthat,
1252 ORPC_EXTENT_ARRAY *orpc_ext_array, WIRE_ORPC_EXTENT **first_wire_orpc_extent)
1253 {
1254 const char *end = (char *)msg->Buffer + msg->BufferLength;
1255
1256 *first_wire_orpc_extent = NULL;
1257
1258 if (msg->BufferLength < FIELD_OFFSET(ORPCTHAT, extensions) + 4)
1259 {
1260 ERR("invalid buffer length\n");
1261 return RPC_E_INVALID_HEADER;
1262 }
1263
1264 memcpy(orpcthat, msg->Buffer, FIELD_OFFSET(ORPCTHAT, extensions));
1265 msg->Buffer = (char *)msg->Buffer + FIELD_OFFSET(ORPCTHAT, extensions);
1266
1267 if ((const char *)msg->Buffer + sizeof(DWORD) > end)
1268 return RPC_E_INVALID_HEADER;
1269
1270 if (*(DWORD *)msg->Buffer)
1271 orpcthat->extensions = orpc_ext_array;
1272 else
1273 orpcthat->extensions = NULL;
1274
1275 msg->Buffer = (char *)msg->Buffer + sizeof(DWORD);
1276
1277 if (orpcthat->extensions)
1278 {
1279 HRESULT hr = unmarshal_ORPC_EXTENT_ARRAY(msg, end, orpc_ext_array,
1280 first_wire_orpc_extent);
1281 if (FAILED(hr))
1282 return hr;
1283 }
1284
1285 if (orpcthat->flags & ~(ORPCF_LOCAL|ORPCF_RESERVED1|ORPCF_RESERVED2|ORPCF_RESERVED3|ORPCF_RESERVED4))
1286 {
1287 ERR("invalid flags 0x%lx\n", orpcthat->flags & ~(ORPCF_LOCAL|ORPCF_RESERVED1|ORPCF_RESERVED2|ORPCF_RESERVED3|ORPCF_RESERVED4));
1288 return RPC_E_INVALID_HEADER;
1289 }
1290
1291 return S_OK;
1292 }
1293
1294 void RPC_ExecuteCall(struct dispatch_params *params)
1295 {
1296 struct message_state *message_state = NULL;
1297 RPC_MESSAGE *msg = (RPC_MESSAGE *)params->msg;
1298 char *original_buffer = msg->Buffer;
1299 ORPCTHIS orpcthis;
1300 ORPC_EXTENT_ARRAY orpc_ext_array;
1301 WIRE_ORPC_EXTENT *first_wire_orpc_extent;
1302 GUID old_causality_id;
1303
1304 /* handle ORPCTHIS and server extensions */
1305
1306 params->hr = unmarshal_ORPCTHIS(msg, &orpcthis, &orpc_ext_array, &first_wire_orpc_extent);
1307 if (params->hr != S_OK)
1308 {
1309 msg->Buffer = original_buffer;
1310 goto exit;
1311 }
1312
1313 message_state = HeapAlloc(GetProcessHeap(), 0, sizeof(*message_state));
1314 if (!message_state)
1315 {
1316 params->hr = E_OUTOFMEMORY;
1317 msg->Buffer = original_buffer;
1318 goto exit;
1319 }
1320
1321 message_state->prefix_data_len = (char *)msg->Buffer - original_buffer;
1322 message_state->binding_handle = msg->Handle;
1323 message_state->bypass_rpcrt = params->bypass_rpcrt;
1324
1325 message_state->channel_hook_info.iid = params->iid;
1326 message_state->channel_hook_info.cbSize = sizeof(message_state->channel_hook_info);
1327 message_state->channel_hook_info.uCausality = orpcthis.cid;
1328 message_state->channel_hook_info.dwServerPid = GetCurrentProcessId();
1329 message_state->channel_hook_info.iMethod = msg->ProcNum;
1330 message_state->channel_hook_info.pObject = params->iface;
1331
1332 if (orpcthis.extensions && first_wire_orpc_extent &&
1333 orpcthis.extensions->size)
1334 ChannelHooks_ServerNotify(&message_state->channel_hook_info, msg->DataRepresentation, first_wire_orpc_extent, orpcthis.extensions->size);
1335
1336 msg->Handle = message_state;
1337 msg->BufferLength -= message_state->prefix_data_len;
1338
1339 /* call message filter */
1340
1341 if (COM_CurrentApt()->filter)
1342 {
1343 DWORD handlecall;
1344 INTERFACEINFO interface_info;
1345 CALLTYPE calltype;
1346
1347 interface_info.pUnk = params->iface;
1348 interface_info.iid = params->iid;
1349 interface_info.wMethod = msg->ProcNum;
1350
1351 if (IsEqualGUID(&orpcthis.cid, &COM_CurrentInfo()->causality_id))
1352 calltype = CALLTYPE_NESTED;
1353 else if (COM_CurrentInfo()->pending_call_count_server == 0)
1354 calltype = CALLTYPE_TOPLEVEL;
1355 else
1356 calltype = CALLTYPE_TOPLEVEL_CALLPENDING;
1357
1358 handlecall = IMessageFilter_HandleInComingCall(COM_CurrentApt()->filter,
1359 calltype,
1360 (HTASK)GetCurrentProcessId(),
1361 0 /* FIXME */,
1362 &interface_info);
1363 TRACE("IMessageFilter_HandleInComingCall returned %d\n", handlecall);
1364 switch (handlecall)
1365 {
1366 case SERVERCALL_REJECTED:
1367 params->hr = RPC_E_CALL_REJECTED;
1368 goto exit_reset_state;
1369 case SERVERCALL_RETRYLATER:
1370 #if 0 /* FIXME: handle retries on the client side before enabling this code */
1371 params->hr = RPC_E_RETRY;
1372 goto exit_reset_state;
1373 #else
1374 FIXME("retry call later not implemented\n");
1375 break;
1376 #endif
1377 case SERVERCALL_ISHANDLED:
1378 default:
1379 break;
1380 }
1381 }
1382
1383 /* invoke the method */
1384
1385 /* save the old causality ID - note: any calls executed while processing
1386 * messages received during the SendReceive will appear to originate from
1387 * this call - this should be checked with what Windows does */
1388 old_causality_id = COM_CurrentInfo()->causality_id;
1389 COM_CurrentInfo()->causality_id = orpcthis.cid;
1390 COM_CurrentInfo()->pending_call_count_server++;
1391 params->hr = IRpcStubBuffer_Invoke(params->stub, params->msg, params->chan);
1392 COM_CurrentInfo()->pending_call_count_server--;
1393 COM_CurrentInfo()->causality_id = old_causality_id;
1394
1395 /* the invoke allocated a new buffer, so free the old one */
1396 if (message_state->bypass_rpcrt && original_buffer != msg->Buffer)
1397 HeapFree(GetProcessHeap(), 0, original_buffer);
1398
1399 exit_reset_state:
1400 message_state = (struct message_state *)msg->Handle;
1401 msg->Handle = message_state->binding_handle;
1402 msg->Buffer = (char *)msg->Buffer - message_state->prefix_data_len;
1403 msg->BufferLength += message_state->prefix_data_len;
1404
1405 exit:
1406 HeapFree(GetProcessHeap(), 0, message_state);
1407 if (params->handle) SetEvent(params->handle);
1408 }
1409
1410 static void __RPC_STUB dispatch_rpc(RPC_MESSAGE *msg)
1411 {
1412 struct dispatch_params *params;
1413 APARTMENT *apt;
1414 IPID ipid;
1415 HRESULT hr;
1416
1417 RpcBindingInqObject(msg->Handle, &ipid);
1418
1419 TRACE("ipid = %s, iMethod = %d\n", debugstr_guid(&ipid), msg->ProcNum);
1420
1421 params = HeapAlloc(GetProcessHeap(), 0, sizeof(*params));
1422 if (!params)
1423 {
1424 RpcRaiseException(E_OUTOFMEMORY);
1425 return;
1426 }
1427
1428 hr = ipid_get_dispatch_params(&ipid, &apt, &params->stub, &params->chan,
1429 &params->iid, &params->iface);
1430 if (hr != S_OK)
1431 {
1432 ERR("no apartment found for ipid %s\n", debugstr_guid(&ipid));
1433 HeapFree(GetProcessHeap(), 0, params);
1434 RpcRaiseException(hr);
1435 return;
1436 }
1437
1438 params->msg = (RPCOLEMESSAGE *)msg;
1439 params->status = RPC_S_OK;
1440 params->hr = S_OK;
1441 params->handle = NULL;
1442 params->bypass_rpcrt = FALSE;
1443
1444 /* Note: this is the important difference between STAs and MTAs - we
1445 * always execute RPCs to STAs in the thread that originally created the
1446 * apartment (i.e. the one that pumps messages to the window) */
1447 if (!apt->multi_threaded)
1448 {
1449 params->handle = CreateEventW(NULL, FALSE, FALSE, NULL);
1450
1451 TRACE("Calling apartment thread 0x%08x...\n", apt->tid);
1452
1453 if (PostMessageW(apartment_getwindow(apt), DM_EXECUTERPC, 0, (LPARAM)params))
1454 WaitForSingleObject(params->handle, INFINITE);
1455 else
1456 {
1457 ERR("PostMessage failed with error %u\n", GetLastError());
1458 IRpcChannelBuffer_Release(params->chan);
1459 IRpcStubBuffer_Release(params->stub);
1460 }
1461 CloseHandle(params->handle);
1462 }
1463 else
1464 {
1465 BOOL joined = FALSE;
1466 if (!COM_CurrentInfo()->apt)
1467 {
1468 apartment_joinmta();
1469 joined = TRUE;
1470 }
1471 RPC_ExecuteCall(params);
1472 if (joined)
1473 {
1474 apartment_release(COM_CurrentInfo()->apt);
1475 COM_CurrentInfo()->apt = NULL;
1476 }
1477 }
1478
1479 hr = params->hr;
1480 if (params->chan)
1481 IRpcChannelBuffer_Release(params->chan);
1482 if (params->stub)
1483 IRpcStubBuffer_Release(params->stub);
1484 HeapFree(GetProcessHeap(), 0, params);
1485
1486 apartment_release(apt);
1487
1488 /* if IRpcStubBuffer_Invoke fails, we should raise an exception to tell
1489 * the RPC runtime that the call failed */
1490 if (hr) RpcRaiseException(hr);
1491 }
1492
1493 /* stub registration */
1494 HRESULT RPC_RegisterInterface(REFIID riid)
1495 {
1496 struct registered_if *rif;
1497 BOOL found = FALSE;
1498 HRESULT hr = S_OK;
1499
1500 TRACE("(%s)\n", debugstr_guid(riid));
1501
1502 EnterCriticalSection(&csRegIf);
1503 LIST_FOR_EACH_ENTRY(rif, &registered_interfaces, struct registered_if, entry)
1504 {
1505 if (IsEqualGUID(&rif->If.InterfaceId.SyntaxGUID, riid))
1506 {
1507 rif->refs++;
1508 found = TRUE;
1509 break;
1510 }
1511 }
1512 if (!found)
1513 {
1514 TRACE("Creating new interface\n");
1515
1516 rif = HeapAlloc(GetProcessHeap(), HEAP_ZERO_MEMORY, sizeof(*rif));
1517 if (rif)
1518 {
1519 RPC_STATUS status;
1520
1521 rif->refs = 1;
1522 rif->If.Length = sizeof(RPC_SERVER_INTERFACE);
1523 /* RPC interface ID = COM interface ID */
1524 rif->If.InterfaceId.SyntaxGUID = *riid;
1525 rif->If.DispatchTable = &rpc_dispatch;
1526 /* all other fields are 0, including the version asCOM objects
1527 * always have a version of 0.0 */
1528 status = RpcServerRegisterIfEx(
1529 (RPC_IF_HANDLE)&rif->If,
1530 NULL, NULL,
1531 RPC_IF_OLE | RPC_IF_AUTOLISTEN,
1532 RPC_C_LISTEN_MAX_CALLS_DEFAULT,
1533 NULL);
1534 if (status == RPC_S_OK)
1535 list_add_tail(&registered_interfaces, &rif->entry);
1536 else
1537 {
1538 ERR("RpcServerRegisterIfEx failed with error %ld\n", status);
1539 HeapFree(GetProcessHeap(), 0, rif);
1540 hr = HRESULT_FROM_WIN32(status);
1541 }
1542 }
1543 else
1544 hr = E_OUTOFMEMORY;
1545 }
1546 LeaveCriticalSection(&csRegIf);
1547 return hr;
1548 }
1549
1550 /* stub unregistration */
1551 void RPC_UnregisterInterface(REFIID riid)
1552 {
1553 struct registered_if *rif;
1554 EnterCriticalSection(&csRegIf);
1555 LIST_FOR_EACH_ENTRY(rif, &registered_interfaces, struct registered_if, entry)
1556 {
1557 if (IsEqualGUID(&rif->If.InterfaceId.SyntaxGUID, riid))
1558 {
1559 if (!--rif->refs)
1560 {
1561 RpcServerUnregisterIf((RPC_IF_HANDLE)&rif->If, NULL, TRUE);
1562 list_remove(&rif->entry);
1563 HeapFree(GetProcessHeap(), 0, rif);
1564 }
1565 break;
1566 }
1567 }
1568 LeaveCriticalSection(&csRegIf);
1569 }
1570
1571 /* get the info for an OXID, including the IPID for the rem unknown interface
1572 * and the string binding */
1573 HRESULT RPC_ResolveOxid(OXID oxid, OXID_INFO *oxid_info)
1574 {
1575 TRACE("%s\n", wine_dbgstr_longlong(oxid));
1576
1577 oxid_info->dwTid = 0;
1578 oxid_info->dwPid = 0;
1579 oxid_info->dwAuthnHint = RPC_C_AUTHN_LEVEL_NONE;
1580 /* FIXME: this is a hack around not having an OXID resolver yet -
1581 * this function should contact the machine's OXID resolver and then it
1582 * should give us the IPID of the IRemUnknown interface */
1583 oxid_info->ipidRemUnknown.Data1 = 0xffffffff;
1584 oxid_info->ipidRemUnknown.Data2 = 0xffff;
1585 oxid_info->ipidRemUnknown.Data3 = 0xffff;
1586 memcpy(&oxid_info->ipidRemUnknown.Data4, &oxid, sizeof(OXID));
1587 oxid_info->psa = NULL /* FIXME */;
1588
1589 return S_OK;
1590 }
1591
1592 /* make the apartment reachable by other threads and processes and create the
1593 * IRemUnknown object */
1594 void RPC_StartRemoting(struct apartment *apt)
1595 {
1596 if (!InterlockedExchange(&apt->remoting_started, TRUE))
1597 {
1598 WCHAR endpoint[200];
1599 RPC_STATUS status;
1600
1601 get_rpc_endpoint(endpoint, &apt->oxid);
1602
1603 status = RpcServerUseProtseqEpW(
1604 wszRpcTransport,
1605 RPC_C_PROTSEQ_MAX_REQS_DEFAULT,
1606 endpoint,
1607 NULL);
1608 if (status != RPC_S_OK)
1609 ERR("Couldn't register endpoint %s\n", debugstr_w(endpoint));
1610
1611 /* FIXME: move remote unknown exporting into this function */
1612 }
1613 start_apartment_remote_unknown();
1614 }
1615
1616
1617 static HRESULT create_server(REFCLSID rclsid)
1618 {
1619 static const WCHAR wszLocalServer32[] = { 'L','o','c','a','l','S','e','r','v','e','r','3','2',0 };
1620 static const WCHAR embedding[] = { ' ', '-','E','m','b','e','d','d','i','n','g',0 };
1621 HKEY key;
1622 HRESULT hres;
1623 WCHAR command[MAX_PATH+sizeof(embedding)/sizeof(WCHAR)];
1624 DWORD size = (MAX_PATH+1) * sizeof(WCHAR);
1625 STARTUPINFOW sinfo;
1626 PROCESS_INFORMATION pinfo;
1627
1628 hres = COM_OpenKeyForCLSID(rclsid, wszLocalServer32, KEY_READ, &key);
1629 if (FAILED(hres)) {
1630 ERR("class %s not registered\n", debugstr_guid(rclsid));
1631 return hres;
1632 }
1633
1634 hres = RegQueryValueExW(key, NULL, NULL, NULL, (LPBYTE)command, &size);
1635 RegCloseKey(key);
1636 if (hres) {
1637 WARN("No default value for LocalServer32 key\n");
1638 return REGDB_E_CLASSNOTREG; /* FIXME: check retval */
1639 }
1640
1641 memset(&sinfo,0,sizeof(sinfo));
1642 sinfo.cb = sizeof(sinfo);
1643
1644 /* EXE servers are started with the -Embedding switch. */
1645
1646 strcatW(command, embedding);
1647
1648 TRACE("activating local server %s for %s\n", debugstr_w(command), debugstr_guid(rclsid));
1649
1650 /* FIXME: Win2003 supports a ServerExecutable value that is passed into
1651 * CreateProcess */
1652 if (!CreateProcessW(NULL, command, NULL, NULL, FALSE, 0, NULL, NULL, &sinfo, &pinfo)) {
1653 WARN("failed to run local server %s\n", debugstr_w(command));
1654 return HRESULT_FROM_WIN32(GetLastError());
1655 }
1656 CloseHandle(pinfo.hProcess);
1657 CloseHandle(pinfo.hThread);
1658
1659 return S_OK;
1660 }
1661
1662 /*
1663 * start_local_service() - start a service given its name and parameters
1664 */
1665 static DWORD start_local_service(LPCWSTR name, DWORD num, LPCWSTR *params)
1666 {
1667 SC_HANDLE handle, hsvc;
1668 DWORD r = ERROR_FUNCTION_FAILED;
1669
1670 TRACE("Starting service %s %d params\n", debugstr_w(name), num);
1671
1672 handle = OpenSCManagerW(NULL, NULL, SC_MANAGER_CONNECT);
1673 if (!handle)
1674 return r;
1675 hsvc = OpenServiceW(handle, name, SERVICE_START);
1676 if (hsvc)
1677 {
1678 if(StartServiceW(hsvc, num, params))
1679 r = ERROR_SUCCESS;
1680 else
1681 r = GetLastError();
1682 if (r == ERROR_SERVICE_ALREADY_RUNNING)
1683 r = ERROR_SUCCESS;
1684 CloseServiceHandle(hsvc);
1685 }
1686 else
1687 r = GetLastError();
1688 CloseServiceHandle(handle);
1689
1690 TRACE("StartService returned error %u (%s)\n", r, (r == ERROR_SUCCESS) ? "ok":"failed");
1691
1692 return r;
1693 }
1694
1695 /*
1696 * create_local_service() - start a COM server in a service
1697 *
1698 * To start a Local Service, we read the AppID value under
1699 * the class's CLSID key, then open the HKCR\\AppId key specified
1700 * there and check for a LocalService value.
1701 *
1702 * Note: Local Services are not supported under Windows 9x
1703 */
1704 static HRESULT create_local_service(REFCLSID rclsid)
1705 {
1706 HRESULT hres;
1707 WCHAR buf[CHARS_IN_GUID];
1708 static const WCHAR szLocalService[] = { 'L','o','c','a','l','S','e','r','v','i','c','e',0 };
1709 static const WCHAR szServiceParams[] = {'S','e','r','v','i','c','e','P','a','r','a','m','s',0};
1710 HKEY hkey;
1711 LONG r;
1712 DWORD type, sz;
1713
1714 TRACE("Attempting to start Local service for %s\n", debugstr_guid(rclsid));
1715
1716 hres = COM_OpenKeyForAppIdFromCLSID(rclsid, KEY_READ, &hkey);
1717 if (FAILED(hres))
1718 return hres;
1719
1720 /* read the LocalService and ServiceParameters values from the AppID key */
1721 sz = sizeof buf;
1722 r = RegQueryValueExW(hkey, szLocalService, NULL, &type, (LPBYTE)buf, &sz);
1723 if (r==ERROR_SUCCESS && type==REG_SZ)
1724 {
1725 DWORD num_args = 0;
1726 LPWSTR args[1] = { NULL };
1727
1728 /*
1729 * FIXME: I'm not really sure how to deal with the service parameters.
1730 * I suspect that the string returned from RegQueryValueExW
1731 * should be split into a number of arguments by spaces.
1732 * It would make more sense if ServiceParams contained a
1733 * REG_MULTI_SZ here, but it's a REG_SZ for the services
1734 * that I'm interested in for the moment.
1735 */
1736 r = RegQueryValueExW(hkey, szServiceParams, NULL, &type, NULL, &sz);
1737 if (r == ERROR_SUCCESS && type == REG_SZ && sz)
1738 {
1739 args[0] = HeapAlloc(GetProcessHeap(),HEAP_ZERO_MEMORY,sz);
1740 num_args++;
1741 RegQueryValueExW(hkey, szServiceParams, NULL, &type, (LPBYTE)args[0], &sz);
1742 }
1743 r = start_local_service(buf, num_args, (LPCWSTR *)args);
1744 if (r != ERROR_SUCCESS)
1745 hres = REGDB_E_CLASSNOTREG; /* FIXME: check retval */
1746 HeapFree(GetProcessHeap(),0,args[0]);
1747 }
1748 else
1749 {
1750 WARN("No LocalService value\n");
1751 hres = REGDB_E_CLASSNOTREG; /* FIXME: check retval */
1752 }
1753 RegCloseKey(hkey);
1754
1755 return hres;
1756 }
1757
1758
1759 static void get_localserver_pipe_name(WCHAR *pipefn, REFCLSID rclsid)
1760 {
1761 static const WCHAR wszPipeRef[] = {'\\','\\','.','\\','p','i','p','e','\\',0};
1762 strcpyW(pipefn, wszPipeRef);
1763 StringFromGUID2(rclsid, pipefn + sizeof(wszPipeRef)/sizeof(wszPipeRef[0]) - 1, CHARS_IN_GUID);
1764 }
1765
1766 /* FIXME: should call to rpcss instead */
1767 HRESULT RPC_GetLocalClassObject(REFCLSID rclsid, REFIID iid, LPVOID *ppv)
1768 {
1769 HRESULT hres;
1770 HANDLE hPipe;
1771 WCHAR pipefn[100];
1772 DWORD res, bufferlen;
1773 char marshalbuffer[200];
1774 IStream *pStm;
1775 LARGE_INTEGER seekto;
1776 ULARGE_INTEGER newpos;
1777 int tries = 0;
1778
1779 static const int MAXTRIES = 30; /* 30 seconds */
1780
1781 TRACE("rclsid=%s, iid=%s\n", debugstr_guid(rclsid), debugstr_guid(iid));
1782
1783 get_localserver_pipe_name(pipefn, rclsid);
1784
1785 while (tries++ < MAXTRIES) {
1786 TRACE("waiting for %s\n", debugstr_w(pipefn));
1787
1788 WaitNamedPipeW( pipefn, NMPWAIT_WAIT_FOREVER );
1789 hPipe = CreateFileW(pipefn, GENERIC_READ | GENERIC_WRITE, 0, NULL, OPEN_EXISTING, 0, 0);
1790 if (hPipe == INVALID_HANDLE_VALUE) {
1791 DWORD index;
1792 DWORD start_ticks;
1793 if (tries == 1) {
1794 if ( (hres = create_local_service(rclsid)) &&
1795 (hres = create_server(rclsid)) )
1796 return hres;
1797 } else {
1798 WARN("Connecting to %s, no response yet, retrying: le is %u\n", debugstr_w(pipefn), GetLastError());
1799 }
1800 /* wait for one second, even if messages arrive */
1801 start_ticks = GetTickCount();
1802 do {
1803 CoWaitForMultipleHandles(0, 1000, 0, NULL, &index);
1804 } while (GetTickCount() - start_ticks < 1000);
1805 continue;
1806 }
1807 bufferlen = 0;
1808 if (!ReadFile(hPipe,marshalbuffer,sizeof(marshalbuffer),&bufferlen,NULL)) {
1809 FIXME("Failed to read marshal id from classfactory of %s.\n",debugstr_guid(rclsid));
1810 Sleep(1000);
1811 continue;
1812 }
1813 TRACE("read marshal id from pipe\n");
1814 CloseHandle(hPipe);
1815 break;
1816 }
1817
1818 if (tries >= MAXTRIES)
1819 return E_NOINTERFACE;
1820
1821 hres = CreateStreamOnHGlobal(0,TRUE,&pStm);
1822 if (hres) return hres;
1823 hres = IStream_Write(pStm,marshalbuffer,bufferlen,&res);
1824 if (hres) goto out;
1825 seekto.u.LowPart = 0;seekto.u.HighPart = 0;
1826 hres = IStream_Seek(pStm,seekto,STREAM_SEEK_SET,&newpos);
1827
1828 TRACE("unmarshalling classfactory\n");
1829 hres = CoUnmarshalInterface(pStm,&IID_IClassFactory,ppv);
1830 out:
1831 IStream_Release(pStm);
1832 return hres;
1833 }
1834
1835
1836 struct local_server_params
1837 {
1838 CLSID clsid;
1839 IStream *stream;
1840 HANDLE ready_event;
1841 HANDLE stop_event;
1842 HANDLE thread;
1843 BOOL multi_use;
1844 };
1845
1846 /* FIXME: should call to rpcss instead */
1847 static DWORD WINAPI local_server_thread(LPVOID param)
1848 {
1849 struct local_server_params * lsp = (struct local_server_params *)param;
1850 HANDLE hPipe;
1851 WCHAR pipefn[100];
1852 HRESULT hres;
1853 IStream *pStm = lsp->stream;
1854 STATSTG ststg;
1855 unsigned char *buffer;
1856 int buflen;
1857 LARGE_INTEGER seekto;
1858 ULARGE_INTEGER newpos;
1859 ULONG res;
1860 BOOL multi_use = lsp->multi_use;
1861 OVERLAPPED ovl;
1862 HANDLE pipe_event;
1863
1864 TRACE("Starting threader for %s.\n",debugstr_guid(&lsp->clsid));
1865
1866 memset(&ovl, 0, sizeof(ovl));
1867 get_localserver_pipe_name(pipefn, &lsp->clsid);
1868
1869 hPipe = CreateNamedPipeW( pipefn, PIPE_ACCESS_DUPLEX | FILE_FLAG_OVERLAPPED,
1870 PIPE_TYPE_BYTE|PIPE_WAIT, PIPE_UNLIMITED_INSTANCES,
1871 4096, 4096, 500 /* 0.5 second timeout */, NULL );
1872
1873 SetEvent(lsp->ready_event);
1874
1875 if (hPipe == INVALID_HANDLE_VALUE)
1876 {
1877 FIXME("pipe creation failed for %s, le is %u\n", debugstr_w(pipefn), GetLastError());
1878 return 1;
1879 }
1880
1881 ovl.hEvent = pipe_event = CreateEventW(NULL, FALSE, FALSE, NULL);
1882
1883 while (1) {
1884 if (!ConnectNamedPipe(hPipe, &ovl))
1885 {
1886 DWORD error = GetLastError();
1887 if (error == ERROR_IO_PENDING)
1888 {
1889 HANDLE handles[2] = { pipe_event, lsp->stop_event };
1890 DWORD ret;
1891 ret = WaitForMultipleObjects(2, handles, FALSE, INFINITE);
1892 if (ret != WAIT_OBJECT_0)
1893 break;
1894 }
1895 /* client already connected isn't an error */
1896 else if (error != ERROR_PIPE_CONNECTED)
1897 {
1898 ERR("ConnectNamedPipe failed with error %d\n", GetLastError());
1899 break;
1900 }
1901 }
1902
1903 TRACE("marshalling IClassFactory to client\n");
1904
1905 hres = IStream_Stat(pStm,&ststg,0);
1906 if (hres) return hres;
1907
1908 seekto.u.LowPart = 0;
1909 seekto.u.HighPart = 0;
1910 hres = IStream_Seek(pStm,seekto,STREAM_SEEK_SET,&newpos);
1911 if (hres) {
1912 FIXME("IStream_Seek failed, %x\n",hres);
1913 CloseHandle(hPipe);
1914 CloseHandle(pipe_event);
1915 return hres;
1916 }
1917
1918 buflen = ststg.cbSize.u.LowPart;
1919 buffer = HeapAlloc(GetProcessHeap(),0,buflen);
1920
1921 hres = IStream_Read(pStm,buffer,buflen,&res);
1922 if (hres) {
1923 FIXME("Stream Read failed, %x\n",hres);
1924 CloseHandle(hPipe);
1925 CloseHandle(pipe_event);
1926 HeapFree(GetProcessHeap(),0,buffer);
1927 return hres;
1928 }
1929
1930 WriteFile(hPipe,buffer,buflen,&res,&ovl);
1931 GetOverlappedResult(hPipe, &ovl, NULL, TRUE);
1932 HeapFree(GetProcessHeap(),0,buffer);
1933
1934 FlushFileBuffers(hPipe);
1935 DisconnectNamedPipe(hPipe);
1936
1937 TRACE("done marshalling IClassFactory\n");
1938
1939 if (!multi_use)
1940 {
1941 TRACE("single use object, shutting down pipe %s\n", debugstr_w(pipefn));
1942 break;
1943 }
1944 }
1945 CloseHandle(hPipe);
1946 CloseHandle(pipe_event);
1947 return 0;
1948 }
1949
1950 /* starts listening for a local server */
1951 HRESULT RPC_StartLocalServer(REFCLSID clsid, IStream *stream, BOOL multi_use, void **registration)
1952 {
1953 DWORD tid;
1954 struct local_server_params *lsp;
1955
1956 lsp = HeapAlloc(GetProcessHeap(), 0, sizeof(*lsp));
1957 if (!lsp)
1958 return E_OUTOFMEMORY;
1959
1960 lsp->clsid = *clsid;
1961 lsp->stream = stream;
1962 IStream_AddRef(stream);
1963 lsp->ready_event = CreateEventW(NULL, FALSE, FALSE, NULL);
1964 if (!lsp->ready_event)
1965 {
1966 HeapFree(GetProcessHeap(), 0, lsp);
1967 return HRESULT_FROM_WIN32(GetLastError());
1968 }
1969 lsp->stop_event = CreateEventW(NULL, FALSE, FALSE, NULL);
1970 if (!lsp->stop_event)
1971 {
1972 CloseHandle(lsp->ready_event);
1973 HeapFree(GetProcessHeap(), 0, lsp);
1974 return HRESULT_FROM_WIN32(GetLastError());
1975 }
1976 lsp->multi_use = multi_use;
1977
1978 lsp->thread = CreateThread(NULL, 0, local_server_thread, lsp, 0, &tid);
1979 if (!lsp->thread)
1980 {
1981 CloseHandle(lsp->ready_event);
1982 CloseHandle(lsp->stop_event);
1983 HeapFree(GetProcessHeap(), 0, lsp);
1984 return HRESULT_FROM_WIN32(GetLastError());
1985 }
1986
1987 WaitForSingleObject(lsp->ready_event, INFINITE);
1988 CloseHandle(lsp->ready_event);
1989 lsp->ready_event = NULL;
1990
1991 *registration = lsp;
1992 return S_OK;
1993 }
1994
1995 /* stops listening for a local server */
1996 void RPC_StopLocalServer(void *registration)
1997 {
1998 struct local_server_params *lsp = registration;
1999
2000 /* signal local_server_thread to stop */
2001 SetEvent(lsp->stop_event);
2002 /* wait for it to exit */
2003 WaitForSingleObject(lsp->thread, INFINITE);
2004
2005 IStream_Release(lsp->stream);
2006 CloseHandle(lsp->stop_event);
2007 CloseHandle(lsp->thread);
2008 HeapFree(GetProcessHeap(), 0, lsp);
2009 }
useful hacks and other patches not (yet) suitable for mainline