dlls/mshtml/dispex.c

   1 /*
   2  * Copyright 2008-2009 Jacek Caban for CodeWeavers
   3  *
   4  * This library is free software; you can redistribute it and/or
   5  * modify it under the terms of the GNU Lesser General Public
   6  * License as published by the Free Software Foundation; either
   7  * version 2.1 of the License, or (at your option) any later version.
   8  *
   9  * This library is distributed in the hope that it will be useful,
  10  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  11  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  12  * Lesser General Public License for more details.
  13  *
  14  * You should have received a copy of the GNU Lesser General Public
  15  * License along with this library; if not, write to the Free Software
  16  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
  17  */
  18
  19 #include <stdarg.h>
  20 #include <assert.h>
  21
  22 #define COBJMACROS
  23
  24 #include "windef.h"
  25 #include "winbase.h"
  26 #include "winuser.h"
  27 #include "ole2.h"
  28
  29 #include "wine/debug.h"
  30
  31 #include "mshtml_private.h"
  32
  33 WINE_DEFAULT_DEBUG_CHANNEL(mshtml);
  34
  35 static CRITICAL_SECTION cs_dispex_static_data;
  36 static CRITICAL_SECTION_DEBUG cs_dispex_static_data_dbg =
  37 {
  38     0, 0, &cs_dispex_static_data,
  39     { &cs_dispex_static_data_dbg.ProcessLocksList, &cs_dispex_static_data_dbg.ProcessLocksList },
  40       0, 0, { (DWORD_PTR)(__FILE__ ": dispex_static_data") }
  41 };
  42 static CRITICAL_SECTION cs_dispex_static_data = { &cs_dispex_static_data_dbg, -1, 0, 0, 0, 0 };
  43
  44
  45 static const WCHAR objectW[] = {'[','o','b','j','e','c','t',']',0};
  46
  47 typedef struct {
  48     DISPID id;
  49     BSTR name;
  50     tid_t tid;
  51     SHORT put_vtbl_off;
  52     SHORT get_vtbl_off;
  53     SHORT func_disp_idx;
  54     VARTYPE prop_vt;
  55 } func_info_t;
  56
  57 struct dispex_data_t {
  58     DWORD func_cnt;
  59     func_info_t *funcs;
  60     func_info_t **name_table;
  61     DWORD func_disp_cnt;
  62
  63     struct list entry;
  64 };
  65
  66 typedef struct {
  67     VARIANT var;
  68     LPWSTR name;
  69     DWORD flags;
  70 } dynamic_prop_t;
  71
  72 #define DYNPROP_DELETED    0x01
  73
  74 typedef struct {
  75     DispatchEx dispex;
  76     IUnknown IUnknown_iface;
  77     DispatchEx *obj;
  78     func_info_t *info;
  79 } func_disp_t;
  80
  81 struct dispex_dynamic_data_t {
  82     DWORD buf_size;
  83     DWORD prop_cnt;
  84     dynamic_prop_t *props;
  85     func_disp_t **func_disps;
  86 };
  87
  88 #define DISPID_DYNPROP_0    0x50000000
  89 #define DISPID_DYNPROP_MAX  0x5fffffff
  90
  91 #define FDEX_VERSION_MASK 0xf0000000
  92
  93 static ITypeLib *typelib;
  94 static ITypeInfo *typeinfos[LAST_tid];
  95 static struct list dispex_data_list = LIST_INIT(dispex_data_list);
  96
  97 static REFIID tid_ids[] = {
  98 #define XIID(iface) &IID_ ## iface,
  99 #define XDIID(iface) &DIID_ ## iface,
 100 TID_LIST
 101 #undef XIID
 102 #undef XDIID
 103 };
 104
 105 static HRESULT load_typelib(void)
 106 {
 107     HRESULT hres;
 108     ITypeLib *tl;
 109
 110     hres = LoadRegTypeLib(&LIBID_MSHTML, 4, 0, LOCALE_SYSTEM_DEFAULT, &tl);
 111     if(FAILED(hres)) {
 112         ERR("LoadRegTypeLib failed: %08x\n", hres);
 113         return hres;
 114     }
 115
 116     if(InterlockedCompareExchangePointer((void**)&typelib, tl, NULL))
 117         ITypeLib_Release(tl);
 118     return hres;
 119 }
 120
 121 static HRESULT get_typeinfo(tid_t tid, ITypeInfo **typeinfo)
 122 {
 123     HRESULT hres;
 124
 125     if (!typelib)
 126         hres = load_typelib();
 127     if (!typelib)
 128         return hres;
 129
 130     if(!typeinfos[tid]) {
 131         ITypeInfo *ti;
 132
 133         hres = ITypeLib_GetTypeInfoOfGuid(typelib, tid_ids[tid], &ti);
 134         if(FAILED(hres)) {
 135             ERR("GetTypeInfoOfGuid(%s) failed: %08x\n", debugstr_guid(tid_ids[tid]), hres);
 136             return hres;
 137         }
 138
 139         if(InterlockedCompareExchangePointer((void**)(typeinfos+tid), ti, NULL))
 140             ITypeInfo_Release(ti);
 141     }
 142
 143     *typeinfo = typeinfos[tid];
 144     return S_OK;
 145 }
 146
 147 void release_typelib(void)
 148 {
 149     dispex_data_t *iter;
 150     unsigned i;
 151
 152     while(!list_empty(&dispex_data_list)) {
 153         iter = LIST_ENTRY(list_head(&dispex_data_list), dispex_data_t, entry);
 154         list_remove(&iter->entry);
 155
 156         for(i=0; i < iter->func_cnt; i++)
 157             SysFreeString(iter->funcs[i].name);
 158
 159         heap_free(iter->funcs);
 160         heap_free(iter->name_table);
 161         heap_free(iter);
 162     }
 163
 164     if(!typelib)
 165         return;
 166
 167     for(i=0; i < sizeof(typeinfos)/sizeof(*typeinfos); i++)
 168         if(typeinfos[i])
 169             ITypeInfo_Release(typeinfos[i]);
 170
 171     ITypeLib_Release(typelib);
 172     DeleteCriticalSection(&cs_dispex_static_data);
 173 }
 174
 175 HRESULT get_htmldoc_classinfo(ITypeInfo **typeinfo)
 176 {
 177     HRESULT hres;
 178
 179     if (!typelib)
 180         hres = load_typelib();
 181     if (!typelib)
 182         return hres;
 183
 184     hres = ITypeLib_GetTypeInfoOfGuid(typelib, &CLSID_HTMLDocument, typeinfo);
 185     if(FAILED(hres))
 186         ERR("GetTypeInfoOfGuid failed: %08x\n", hres);
 187     return hres;
 188 }
 189
 190 static void add_func_info(dispex_data_t *data, DWORD *size, tid_t tid, const FUNCDESC *desc, ITypeInfo *dti)
 191 {
 192     func_info_t *info;
 193     HRESULT hres;
 194
 195     if(data->func_cnt && data->funcs[data->func_cnt-1].id == desc->memid) {
 196         info = data->funcs+data->func_cnt-1;
 197     }else {
 198         if(data->func_cnt == *size)
 199             data->funcs = heap_realloc(data->funcs, (*size <<= 1)*sizeof(func_info_t));
 200
 201         info = data->funcs+data->func_cnt;
 202         hres = ITypeInfo_GetDocumentation(dti, desc->memid, &info->name, NULL, NULL, NULL);
 203         if(FAILED(hres))
 204             return;
 205
 206         data->func_cnt++;
 207
 208         info->id = desc->memid;
 209         info->tid = tid;
 210         info->func_disp_idx = -1;
 211         info->prop_vt = VT_EMPTY;
 212         info->put_vtbl_off = 0;
 213         info->get_vtbl_off = 0;
 214     }
 215
 216     if(desc->invkind & DISPATCH_METHOD) {
 217         info->func_disp_idx = data->func_disp_cnt++;
 218     }else if(desc->invkind & (DISPATCH_PROPERTYPUT|DISPATCH_PROPERTYGET)) {
 219         VARTYPE vt = VT_EMPTY;
 220
 221         if(desc->invkind & DISPATCH_PROPERTYGET) {
 222             vt = desc->elemdescFunc.tdesc.vt;
 223             info->get_vtbl_off = desc->oVft/sizeof(void*);
 224         }
 225         if(desc->invkind & DISPATCH_PROPERTYPUT) {
 226             assert(desc->cParams == 1);
 227             vt = desc->lprgelemdescParam->tdesc.vt;
 228             info->put_vtbl_off = desc->oVft/sizeof(void*);
 229         }
 230
 231         assert(info->prop_vt == VT_EMPTY || vt == info->prop_vt);
 232         info->prop_vt = vt;
 233     }
 234 }
 235
 236 static int dispid_cmp(const void *p1, const void *p2)
 237 {
 238     return ((const func_info_t*)p1)->id - ((const func_info_t*)p2)->id;
 239 }
 240
 241 static int func_name_cmp(const void *p1, const void *p2)
 242 {
 243     return strcmpiW((*(func_info_t* const*)p1)->name, (*(func_info_t* const*)p2)->name);
 244 }
 245
 246 static dispex_data_t *preprocess_dispex_data(DispatchEx *This)
 247 {
 248     const tid_t *tid = This->data->iface_tids;
 249     FUNCDESC *funcdesc;
 250     dispex_data_t *data;
 251     DWORD size = 16, i;
 252     ITypeInfo *ti, *dti;
 253     HRESULT hres;
 254
 255     TRACE("(%p)\n", This);
 256
 257     if(This->data->disp_tid) {
 258         hres = get_typeinfo(This->data->disp_tid, &dti);
 259         if(FAILED(hres)) {
 260             ERR("Could not get disp type info: %08x\n", hres);
 261             return NULL;
 262         }
 263     }
 264
 265     data = heap_alloc(sizeof(dispex_data_t));
 266     data->func_cnt = 0;
 267     data->func_disp_cnt = 0;
 268     data->funcs = heap_alloc(size*sizeof(func_info_t));
 269     list_add_tail(&dispex_data_list, &data->entry);
 270
 271     while(*tid) {
 272         hres = get_typeinfo(*tid, &ti);
 273         if(FAILED(hres))
 274             break;
 275
 276         i=7;
 277         while(1) {
 278             hres = ITypeInfo_GetFuncDesc(ti, i++, &funcdesc);
 279             if(FAILED(hres))
 280                 break;
 281
 282             add_func_info(data, &size, *tid, funcdesc, dti);
 283             ITypeInfo_ReleaseFuncDesc(ti, funcdesc);
 284         }
 285
 286         tid++;
 287     }
 288
 289     if(!data->func_cnt) {
 290         heap_free(data->funcs);
 291         data->name_table = NULL;
 292         data->funcs = NULL;
 293         return data;
 294     }
 295
 296
 297     data->funcs = heap_realloc(data->funcs, data->func_cnt * sizeof(func_info_t));
 298     qsort(data->funcs, data->func_cnt, sizeof(func_info_t), dispid_cmp);
 299
 300     data->name_table = heap_alloc(data->func_cnt * sizeof(func_info_t*));
 301     for(i=0; i < data->func_cnt; i++)
 302         data->name_table[i] = data->funcs+i;
 303     qsort(data->name_table, data->func_cnt, sizeof(func_info_t*), func_name_cmp);
 304
 305     return data;
 306 }
 307
 308 static int id_cmp(const void *p1, const void *p2)
 309 {
 310     return *(const DISPID*)p1 - *(const DISPID*)p2;
 311 }
 312
 313 HRESULT get_dispids(tid_t tid, DWORD *ret_size, DISPID **ret)
 314 {
 315     unsigned i, func_cnt;
 316     FUNCDESC *funcdesc;
 317     ITypeInfo *ti;
 318     TYPEATTR *attr;
 319     DISPID *ids;
 320     HRESULT hres;
 321
 322     hres = get_typeinfo(tid, &ti);
 323     if(FAILED(hres))
 324         return hres;
 325
 326     hres = ITypeInfo_GetTypeAttr(ti, &attr);
 327     if(FAILED(hres)) {
 328         ITypeInfo_Release(ti);
 329         return hres;
 330     }
 331
 332     func_cnt = attr->cFuncs;
 333     ITypeInfo_ReleaseTypeAttr(ti, attr);
 334
 335     ids = heap_alloc(func_cnt*sizeof(DISPID));
 336     if(!ids) {
 337         ITypeInfo_Release(ti);
 338         return E_OUTOFMEMORY;
 339     }
 340
 341     for(i=0; i < func_cnt; i++) {
 342         hres = ITypeInfo_GetFuncDesc(ti, i, &funcdesc);
 343         if(FAILED(hres))
 344             break;
 345
 346         ids[i] = funcdesc->memid;
 347         ITypeInfo_ReleaseFuncDesc(ti, funcdesc);
 348     }
 349
 350     ITypeInfo_Release(ti);
 351     if(FAILED(hres)) {
 352         heap_free(ids);
 353         return hres;
 354     }
 355
 356     qsort(ids, func_cnt, sizeof(DISPID), id_cmp);
 357
 358     *ret_size = func_cnt;
 359     *ret = ids;
 360     return S_OK;
 361 }
 362
 363 static dispex_data_t *get_dispex_data(DispatchEx *This)
 364 {
 365     if(This->data->data)
 366         return This->data->data;
 367
 368     EnterCriticalSection(&cs_dispex_static_data);
 369
 370     if(!This->data->data)
 371         This->data->data = preprocess_dispex_data(This);
 372
 373     LeaveCriticalSection(&cs_dispex_static_data);
 374
 375     return This->data->data;
 376 }
 377
 378 static inline BOOL is_custom_dispid(DISPID id)
 379 {
 380     return MSHTML_DISPID_CUSTOM_MIN <= id && id <= MSHTML_DISPID_CUSTOM_MAX;
 381 }
 382
 383 static inline BOOL is_dynamic_dispid(DISPID id)
 384 {
 385     return DISPID_DYNPROP_0 <= id && id <= DISPID_DYNPROP_MAX;
 386 }
 387
 388 dispex_prop_type_t get_dispid_type(DISPID id)
 389 {
 390     if(is_dynamic_dispid(id))
 391         return DISPEXPROP_DYNAMIC;
 392     if(is_custom_dispid(id))
 393         return DISPEXPROP_CUSTOM;
 394     return DISPEXPROP_BUILTIN;
 395 }
 396
 397 static HRESULT variant_copy(VARIANT *dest, VARIANT *src)
 398 {
 399     if(V_VT(src) == VT_BSTR && !V_BSTR(src)) {
 400         V_VT(dest) = VT_BSTR;
 401         V_BSTR(dest) = NULL;
 402         return S_OK;
 403     }
 404
 405     return VariantCopy(dest, src);
 406 }
 407
 408 static inline dispex_dynamic_data_t *get_dynamic_data(DispatchEx *This)
 409 {
 410     if(This->dynamic_data)
 411         return This->dynamic_data;
 412
 413     This->dynamic_data = heap_alloc_zero(sizeof(dispex_dynamic_data_t));
 414     if(!This->dynamic_data)
 415         return NULL;
 416
 417     if(This->data->vtbl && This->data->vtbl->populate_props)
 418         This->data->vtbl->populate_props(This);
 419
 420     return This->dynamic_data;
 421 }
 422
 423 static HRESULT get_dynamic_prop(DispatchEx *This, const WCHAR *name, DWORD flags, dynamic_prop_t **ret)
 424 {
 425     const BOOL alloc = flags & fdexNameEnsure;
 426     dispex_dynamic_data_t *data;
 427     dynamic_prop_t *prop;
 428
 429     data = get_dynamic_data(This);
 430     if(!data)
 431         return E_OUTOFMEMORY;
 432
 433     for(prop = data->props; prop < data->props+data->prop_cnt; prop++) {
 434         if(flags & fdexNameCaseInsensitive ? !strcmpiW(prop->name, name) : !strcmpW(prop->name, name)) {
 435             if(prop->flags & DYNPROP_DELETED) {
 436                 if(!alloc)
 437                     return DISP_E_UNKNOWNNAME;
 438                 prop->flags &= ~DYNPROP_DELETED;
 439             }
 440             *ret = prop;
 441             return S_OK;
 442         }
 443     }
 444
 445     if(!alloc)
 446         return DISP_E_UNKNOWNNAME;
 447
 448     TRACE("creating dynamic prop %s\n", debugstr_w(name));
 449
 450     if(!data->buf_size) {
 451         data->props = heap_alloc(sizeof(dynamic_prop_t)*4);
 452         if(!data->props)
 453             return E_OUTOFMEMORY;
 454         data->buf_size = 4;
 455     }else if(data->buf_size == data->prop_cnt) {
 456         dynamic_prop_t *new_props;
 457
 458         new_props = heap_realloc(data->props, sizeof(dynamic_prop_t)*(data->buf_size<<1));
 459         if(!new_props)
 460             return E_OUTOFMEMORY;
 461
 462         data->props = new_props;
 463         data->buf_size <<= 1;
 464     }
 465
 466     prop = data->props + data->prop_cnt;
 467
 468     prop->name = heap_strdupW(name);
 469     if(!prop->name)
 470         return E_OUTOFMEMORY;
 471
 472     VariantInit(&prop->var);
 473     prop->flags = 0;
 474     data->prop_cnt++;
 475     *ret = prop;
 476     return S_OK;
 477 }
 478
 479 HRESULT dispex_get_dprop_ref(DispatchEx *This, const WCHAR *name, BOOL alloc, VARIANT **ret)
 480 {
 481     dynamic_prop_t *prop;
 482     HRESULT hres;
 483
 484     hres = get_dynamic_prop(This, name, alloc ? fdexNameEnsure : 0, &prop);
 485     if(FAILED(hres))
 486         return hres;
 487
 488     *ret = &prop->var;
 489     return S_OK;
 490 }
 491
 492 HRESULT dispex_get_dynid(DispatchEx *This, const WCHAR *name, DISPID *id)
 493 {
 494     dynamic_prop_t *prop;
 495     HRESULT hres;
 496
 497     hres = get_dynamic_prop(This, name, fdexNameEnsure, &prop);
 498     if(FAILED(hres))
 499         return hres;
 500
 501     *id = DISPID_DYNPROP_0 + (prop - This->dynamic_data->props);
 502     return S_OK;
 503 }
 504
 505 static HRESULT dispex_value(DispatchEx *This, LCID lcid, WORD flags, DISPPARAMS *params,
 506         VARIANT *res, EXCEPINFO *ei, IServiceProvider *caller)
 507 {
 508     if(This->data->vtbl && This->data->vtbl->value)
 509         return This->data->vtbl->value(This, lcid, flags, params, res, ei, caller);
 510
 511     switch(flags) {
 512     case DISPATCH_PROPERTYGET:
 513         V_VT(res) = VT_BSTR;
 514         V_BSTR(res) = SysAllocString(objectW);
 515         if(!V_BSTR(res))
 516             return E_OUTOFMEMORY;
 517         break;
 518     default:
 519         FIXME("Unimplemented flags %x\n", flags);
 520         return E_NOTIMPL;
 521     }
 522
 523     return S_OK;
 524 }
 525
 526 static HRESULT typeinfo_invoke(DispatchEx *This, func_info_t *func, WORD flags, DISPPARAMS *dp, VARIANT *res,
 527         EXCEPINFO *ei)
 528 {
 529     ITypeInfo *ti;
 530     IUnknown *unk;
 531     UINT argerr=0;
 532     HRESULT hres;
 533
 534     hres = get_typeinfo(func->tid, &ti);
 535     if(FAILED(hres)) {
 536         ERR("Could not get type info: %08x\n", hres);
 537         return hres;
 538     }
 539
 540     hres = IUnknown_QueryInterface(This->outer, tid_ids[func->tid], (void**)&unk);
 541     if(FAILED(hres)) {
 542         ERR("Could not get iface %s: %08x\n", debugstr_guid(tid_ids[func->tid]), hres);
 543         return E_FAIL;
 544     }
 545
 546     hres = ITypeInfo_Invoke(ti, unk, func->id, flags, dp, res, ei, &argerr);
 547
 548     IUnknown_Release(unk);
 549     return hres;
 550 }
 551
 552 static inline func_disp_t *impl_from_IUnknown(IUnknown *iface)
 553 {
 554     return CONTAINING_RECORD(iface, func_disp_t, IUnknown_iface);
 555 }
 556
 557 static HRESULT WINAPI Function_QueryInterface(IUnknown *iface, REFIID riid, void **ppv)
 558 {
 559     func_disp_t *This = impl_from_IUnknown(iface);
 560
 561     if(IsEqualGUID(&IID_IUnknown, riid)) {
 562         TRACE("(%p)->(IID_IUnknown %p)\n", This, ppv);
 563         *ppv = &This->IUnknown_iface;
 564     }else if(dispex_query_interface(&This->dispex, riid, ppv)) {
 565         return *ppv ? S_OK : E_NOINTERFACE;
 566     }else {
 567         *ppv = NULL;
 568         return E_NOINTERFACE;
 569     }
 570
 571     IUnknown_AddRef((IUnknown*)*ppv);
 572     return S_OK;
 573 }
 574
 575 static ULONG WINAPI Function_AddRef(IUnknown *iface)
 576 {
 577     func_disp_t *This = impl_from_IUnknown(iface);
 578
 579     TRACE("(%p)\n", This);
 580
 581     return IDispatchEx_AddRef(&This->obj->IDispatchEx_iface);
 582 }
 583
 584 static ULONG WINAPI Function_Release(IUnknown *iface)
 585 {
 586     func_disp_t *This = impl_from_IUnknown(iface);
 587
 588     TRACE("(%p)\n", This);
 589
 590     return IDispatchEx_Release(&This->obj->IDispatchEx_iface);
 591 }
 592
 593 static const IUnknownVtbl FunctionUnkVtbl = {
 594     Function_QueryInterface,
 595     Function_AddRef,
 596     Function_Release
 597 };
 598
 599 static inline func_disp_t *impl_from_DispatchEx(DispatchEx *iface)
 600 {
 601     return CONTAINING_RECORD(iface, func_disp_t, dispex);
 602 }
 603
 604 static HRESULT function_value(DispatchEx *dispex, LCID lcid, WORD flags, DISPPARAMS *params,
 605         VARIANT *res, EXCEPINFO *ei, IServiceProvider *caller)
 606 {
 607     func_disp_t *This = impl_from_DispatchEx(dispex);
 608     HRESULT hres;
 609
 610     switch(flags) {
 611     case DISPATCH_METHOD|DISPATCH_PROPERTYGET:
 612         if(!res)
 613             return E_INVALIDARG;
 614         /* fall through */
 615     case DISPATCH_METHOD:
 616         hres = typeinfo_invoke(This->obj, This->info, flags, params, res, ei);
 617         break;
 618     default:
 619         FIXME("Unimplemented flags %x\n", flags);
 620         hres = E_NOTIMPL;
 621     }
 622
 623     return hres;
 624 }
 625
 626 static const dispex_static_data_vtbl_t function_dispex_vtbl = {
 627     function_value,
 628     NULL,
 629     NULL,
 630     NULL
 631 };
 632
 633 static const tid_t function_iface_tids[] = {0};
 634
 635 static dispex_static_data_t function_dispex = {
 636     &function_dispex_vtbl,
 637     NULL_tid,
 638     NULL,
 639     function_iface_tids
 640 };
 641
 642 static func_disp_t *create_func_disp(DispatchEx *obj, func_info_t *info)
 643 {
 644     func_disp_t *ret;
 645
 646     ret = heap_alloc_zero(sizeof(func_disp_t));
 647     if(!ret)
 648         return NULL;
 649
 650     ret->IUnknown_iface.lpVtbl = &FunctionUnkVtbl;
 651     init_dispex(&ret->dispex, &ret->IUnknown_iface,  &function_dispex);
 652     ret->obj = obj;
 653     ret->info = info;
 654
 655     return ret;
 656 }
 657
 658 static HRESULT invoke_disp_value(DispatchEx *This, IDispatch *func_disp, LCID lcid, WORD flags, DISPPARAMS *dp,
 659         VARIANT *res, EXCEPINFO *ei, IServiceProvider *caller)
 660 {
 661     DISPID named_arg = DISPID_THIS;
 662     DISPPARAMS new_dp = {NULL, &named_arg, 0, 1};
 663     IDispatchEx *dispex;
 664     HRESULT hres;
 665
 666     if(dp->cNamedArgs) {
 667         FIXME("named args not supported\n");
 668         return E_NOTIMPL;
 669     }
 670
 671     new_dp.rgvarg = heap_alloc((dp->cArgs+1)*sizeof(VARIANTARG));
 672     if(!new_dp.rgvarg)
 673         return E_OUTOFMEMORY;
 674
 675     new_dp.cArgs = dp->cArgs+1;
 676     memcpy(new_dp.rgvarg+1, dp->rgvarg, dp->cArgs*sizeof(VARIANTARG));
 677
 678     V_VT(new_dp.rgvarg) = VT_DISPATCH;
 679     V_DISPATCH(new_dp.rgvarg) = (IDispatch*)&This->IDispatchEx_iface;
 680
 681     hres = IDispatch_QueryInterface(func_disp, &IID_IDispatchEx, (void**)&dispex);
 682     TRACE(">>>\n");
 683     if(SUCCEEDED(hres)) {
 684         hres = IDispatchEx_InvokeEx(dispex, DISPID_VALUE, lcid, flags, &new_dp, res, ei, caller);
 685         IDispatchEx_Release(dispex);
 686     }else {
 687         ULONG err = 0;
 688         hres = IDispatch_Invoke(func_disp, DISPID_VALUE, &IID_NULL, lcid, flags, &new_dp, res, ei, &err);
 689     }
 690     if(SUCCEEDED(hres))
 691         TRACE("<<< %s\n", debugstr_variant(res));
 692     else
 693         WARN("<<< %08x\n", hres);
 694
 695     heap_free(new_dp.rgvarg);
 696     return hres;
 697 }
 698
 699 static HRESULT function_invoke(DispatchEx *This, func_info_t *func, WORD flags, DISPPARAMS *dp, VARIANT *res,
 700         EXCEPINFO *ei)
 701 {
 702     HRESULT hres;
 703
 704     switch(flags) {
 705     case DISPATCH_METHOD|DISPATCH_PROPERTYGET:
 706         if(!res)
 707             return E_INVALIDARG;
 708         /* fall through */
 709     case DISPATCH_METHOD:
 710         hres = typeinfo_invoke(This, func, flags, dp, res, ei);
 711         break;
 712     case DISPATCH_PROPERTYGET: {
 713         dispex_dynamic_data_t *dynamic_data;
 714
 715         if(func->id == DISPID_VALUE) {
 716             BSTR ret;
 717
 718             ret = SysAllocString(objectW);
 719             if(!ret)
 720                 return E_OUTOFMEMORY;
 721
 722             V_VT(res) = VT_BSTR;
 723             V_BSTR(res) = ret;
 724             return S_OK;
 725         }
 726
 727         dynamic_data = get_dynamic_data(This);
 728         if(!dynamic_data)
 729             return E_OUTOFMEMORY;
 730
 731         if(!dynamic_data->func_disps) {
 732             dynamic_data->func_disps = heap_alloc_zero(This->data->data->func_disp_cnt * sizeof(func_disp_t*));
 733             if(!dynamic_data->func_disps)
 734                 return E_OUTOFMEMORY;
 735         }
 736
 737         if(!dynamic_data->func_disps[func->func_disp_idx]) {
 738             dynamic_data->func_disps[func->func_disp_idx] = create_func_disp(This, func);
 739             if(!dynamic_data->func_disps[func->func_disp_idx])
 740                 return E_OUTOFMEMORY;
 741         }
 742
 743         V_VT(res) = VT_DISPATCH;
 744         V_DISPATCH(res) = (IDispatch*)&dynamic_data->func_disps[func->func_disp_idx]->dispex.IDispatchEx_iface;
 745         IDispatch_AddRef(V_DISPATCH(res));
 746         hres = S_OK;
 747         break;
 748     }
 749     default:
 750         FIXME("Unimplemented flags %x\n", flags);
 751         /* fall through */
 752     case DISPATCH_PROPERTYPUT:
 753         hres = E_NOTIMPL;
 754     }
 755
 756     return hres;
 757 }
 758
 759 static HRESULT get_builtin_func(dispex_data_t *data, DISPID id, func_info_t **ret)
 760 {
 761     int min, max, n;
 762
 763     min = 0;
 764     max = data->func_cnt-1;
 765
 766     while(min <= max) {
 767         n = (min+max)/2;
 768
 769         if(data->funcs[n].id == id) {
 770             *ret = data->funcs+n;
 771             return S_OK;
 772         }
 773
 774         if(data->funcs[n].id < id)
 775             min = n+1;
 776         else
 777             max = n-1;
 778     }
 779
 780     WARN("invalid id %x\n", id);
 781     return DISP_E_UNKNOWNNAME;
 782 }
 783
 784 static HRESULT get_builtin_id(DispatchEx *This, BSTR name, DWORD grfdex, DISPID *ret)
 785 {
 786     dispex_data_t *data;
 787     int min, max, n, c;
 788
 789     data = get_dispex_data(This);
 790     if(!data)
 791         return E_FAIL;
 792
 793     min = 0;
 794     max = data->func_cnt-1;
 795
 796     while(min <= max) {
 797         n = (min+max)/2;
 798
 799         c = strcmpiW(data->name_table[n]->name, name);
 800         if(!c) {
 801             if((grfdex & fdexNameCaseSensitive) && strcmpW(data->name_table[n]->name, name))
 802                 break;
 803
 804             *ret = data->name_table[n]->id;
 805             return S_OK;
 806         }
 807
 808         if(c > 0)
 809             max = n-1;
 810         else
 811             min = n+1;
 812     }
 813
 814     if(This->data->vtbl && This->data->vtbl->get_dispid) {
 815         HRESULT hres;
 816
 817         hres = This->data->vtbl->get_dispid(This, name, grfdex, ret);
 818         if(hres != DISP_E_UNKNOWNNAME)
 819             return hres;
 820     }
 821
 822     return DISP_E_UNKNOWNNAME;
 823 }
 824
 825 /* List all types used by IDispatchEx-based properties */
 826 #define BUILTIN_TYPES_SWITCH                            \
 827     CASE_VT(VT_I2, INT16, V_I2);                        \
 828     CASE_VT(VT_I4, INT32, V_I4);                        \
 829     CASE_VT(VT_R4, float, V_R4);                        \
 830     CASE_VT(VT_BSTR, BSTR, V_BSTR);                     \
 831     CASE_VT(VT_BOOL, VARIANT_BOOL, V_BOOL);             \
 832     CASE_VT(VT_VARIANT, VARIANT, *);                    \
 833     CASE_VT(VT_PTR, void*, V_BYREF);                    \
 834     CASE_VT(VT_UNKNOWN, IUnknown*, V_UNKNOWN);          \
 835     CASE_VT(VT_DISPATCH, IDispatch*, V_DISPATCH)
 836
 837 static HRESULT change_type(VARIANT *dst, VARIANT *src, VARTYPE vt, IServiceProvider *caller)
 838 {
 839     V_VT(dst) = VT_EMPTY;
 840
 841     if(caller) {
 842         IVariantChangeType *change_type = NULL;
 843         HRESULT hres;
 844
 845         hres = IServiceProvider_QueryService(caller, &SID_VariantConversion, &IID_IVariantChangeType, (void**)&change_type);
 846         if(SUCCEEDED(hres)) {
 847             hres = IVariantChangeType_ChangeType(change_type, dst, src, LOCALE_NEUTRAL, vt);
 848             IVariantChangeType_Release(change_type);
 849             return hres;
 850         }
 851     }
 852
 853     return VariantChangeType(dst, src, 0, vt);
 854 }
 855
 856 static HRESULT builtin_propget(DispatchEx *This, func_info_t *func, DISPPARAMS *dp, VARIANT *res)
 857 {
 858     IUnknown *iface;
 859     HRESULT hres;
 860
 861     if(dp && dp->cArgs) {
 862         FIXME("cArgs %d\n", dp->cArgs);
 863         return E_NOTIMPL;
 864     }
 865
 866     assert(func->get_vtbl_off);
 867
 868     hres = IUnknown_QueryInterface(This->outer, tid_ids[func->tid], (void**)&iface);
 869     if(SUCCEEDED(hres)) {
 870         switch(func->prop_vt) {
 871 #define CASE_VT(vt,type,access) \
 872         case vt: { \
 873             type val; \
 874             hres = ((HRESULT (WINAPI*)(IUnknown*,type*))((void**)iface->lpVtbl)[func->get_vtbl_off])(iface,&val); \
 875             if(SUCCEEDED(hres)) \
 876                 access(res) = val; \
 877             } \
 878             break
 879         BUILTIN_TYPES_SWITCH;
 880 #undef CASE_VT
 881         default:
 882             FIXME("Unhandled vt %d\n", func->prop_vt);
 883             hres = E_NOTIMPL;
 884         }
 885         IUnknown_Release(iface);
 886     }
 887
 888     if(FAILED(hres))
 889         return hres;
 890
 891     if(func->prop_vt != VT_VARIANT)
 892         V_VT(res) = func->prop_vt == VT_PTR ? VT_DISPATCH : func->prop_vt;
 893     return S_OK;
 894 }
 895
 896 static HRESULT builtin_propput(DispatchEx *This, func_info_t *func, DISPPARAMS *dp, IServiceProvider *caller)
 897 {
 898     VARIANT *v, tmpv;
 899     IUnknown *iface;
 900     HRESULT hres;
 901
 902     if(dp->cArgs != 1 || (dp->cNamedArgs == 1 && *dp->rgdispidNamedArgs != DISPID_PROPERTYPUT)
 903             || dp->cNamedArgs > 1) {
 904         FIXME("invalid args\n");
 905         return E_INVALIDARG;
 906     }
 907
 908     if(!func->put_vtbl_off) {
 909         FIXME("No setter\n");
 910         return E_FAIL;
 911     }
 912
 913     v = dp->rgvarg;
 914     if(func->prop_vt != VT_VARIANT && V_VT(v) != func->prop_vt) {
 915         hres = change_type(&tmpv, v, func->prop_vt, caller);
 916         if(FAILED(hres))
 917             return hres;
 918         v = &tmpv;
 919     }
 920
 921     hres = IUnknown_QueryInterface(This->outer, tid_ids[func->tid], (void**)&iface);
 922     if(SUCCEEDED(hres)) {
 923         switch(func->prop_vt) {
 924 #define CASE_VT(vt,type,access) \
 925         case vt: \
 926             hres = ((HRESULT (WINAPI*)(IUnknown*,type))((void**)iface->lpVtbl)[func->put_vtbl_off])(iface,access(v)); \
 927             break
 928         BUILTIN_TYPES_SWITCH;
 929 #undef CASE_VT
 930         default:
 931             FIXME("Unimplemented vt %d\n", func->prop_vt);
 932             hres = E_NOTIMPL;
 933         }
 934
 935         IUnknown_Release(iface);
 936     }
 937
 938     if(v == &tmpv)
 939         VariantClear(v);
 940     return hres;
 941 }
 942
 943 static HRESULT invoke_builtin_prop(DispatchEx *This, DISPID id, LCID lcid, WORD flags, DISPPARAMS *dp,
 944         VARIANT *res, EXCEPINFO *ei, IServiceProvider *caller)
 945 {
 946     dispex_data_t *data;
 947     func_info_t *func;
 948     HRESULT hres;
 949
 950     data = get_dispex_data(This);
 951     if(!data)
 952         return E_FAIL;
 953
 954     hres = get_builtin_func(data, id, &func);
 955     if(id == DISPID_VALUE && hres == DISP_E_UNKNOWNNAME)
 956         return dispex_value(This, lcid, flags, dp, res, ei, caller);
 957     if(FAILED(hres))
 958         return hres;
 959
 960     if(func->func_disp_idx != -1)
 961         return function_invoke(This, func, flags, dp, res, ei);
 962
 963     switch(flags) {
 964     case DISPATCH_PROPERTYPUT:
 965         if(res)
 966             V_VT(res) = VT_EMPTY;
 967         hres = builtin_propput(This, func, dp, caller);
 968         break;
 969     case DISPATCH_PROPERTYGET:
 970         hres = builtin_propget(This, func, dp, res);
 971         break;
 972     default:
 973         if(!func->get_vtbl_off) {
 974             hres = typeinfo_invoke(This, func, flags, dp, res, ei);
 975         }else {
 976             VARIANT v;
 977
 978             hres = builtin_propget(This, func, NULL, &v);
 979             if(FAILED(hres))
 980                 return hres;
 981
 982             if(V_VT(&v) != VT_DISPATCH) {
 983                 FIXME("Not a function %s\n", debugstr_variant(&v));
 984                 VariantClear(&v);
 985                 return E_FAIL;
 986             }
 987
 988             if(flags != (DISPATCH_PROPERTYGET|DISPATCH_METHOD)) {
 989                 hres = invoke_disp_value(This, V_DISPATCH(&v), lcid, flags, dp, res, ei, caller);
 990                 IDispatch_Release(V_DISPATCH(&v));
 991             }else if(res) {
 992                 *res = v;
 993             }else {
 994                 IDispatch_Release(V_DISPATCH(&v));
 995             }
 996         }
 997     }
 998
 999     return hres;
1000 }
1001
1002 HRESULT remove_prop(DispatchEx *This, BSTR name, VARIANT_BOOL *success)
1003 {
1004     dynamic_prop_t *prop;
1005     DISPID id;
1006     HRESULT hres;
1007
1008     hres = get_builtin_id(This, name, 0, &id);
1009     if(hres == S_OK) {
1010         DISPID named_id = DISPID_PROPERTYPUT;
1011         VARIANT var;
1012         DISPPARAMS dp = {&var,&named_id,1,1};
1013         EXCEPINFO ei;
1014
1015         V_VT(&var) = VT_EMPTY;
1016         memset(&ei, 0, sizeof(ei));
1017         hres = invoke_builtin_prop(This, id, 0, DISPATCH_PROPERTYPUT, &dp, NULL, &ei, NULL);
1018         if(FAILED(hres))
1019             return hres;
1020
1021         *success = VARIANT_TRUE;
1022         return S_OK;
1023     }
1024
1025     hres = get_dynamic_prop(This, name, 0, &prop);
1026     if(FAILED(hres)) {
1027         if(hres != DISP_E_UNKNOWNNAME)
1028             return hres;
1029         *success = VARIANT_FALSE;
1030         return S_OK;
1031     }
1032
1033     VariantClear(&prop->var);
1034     prop->flags |= DYNPROP_DELETED;
1035     *success = VARIANT_TRUE;
1036     return S_OK;
1037 }
1038
1039 static inline DispatchEx *impl_from_IDispatchEx(IDispatchEx *iface)
1040 {
1041     return CONTAINING_RECORD(iface, DispatchEx, IDispatchEx_iface);
1042 }
1043
1044 static HRESULT WINAPI DispatchEx_QueryInterface(IDispatchEx *iface, REFIID riid, void **ppv)
1045 {
1046     DispatchEx *This = impl_from_IDispatchEx(iface);
1047
1048     return IUnknown_QueryInterface(This->outer, riid, ppv);
1049 }
1050
1051 static ULONG WINAPI DispatchEx_AddRef(IDispatchEx *iface)
1052 {
1053     DispatchEx *This = impl_from_IDispatchEx(iface);
1054
1055     return IUnknown_AddRef(This->outer);
1056 }
1057
1058 static ULONG WINAPI DispatchEx_Release(IDispatchEx *iface)
1059 {
1060     DispatchEx *This = impl_from_IDispatchEx(iface);
1061
1062     return IUnknown_Release(This->outer);
1063 }
1064
1065 static HRESULT WINAPI DispatchEx_GetTypeInfoCount(IDispatchEx *iface, UINT *pctinfo)
1066 {
1067     DispatchEx *This = impl_from_IDispatchEx(iface);
1068
1069     TRACE("(%p)->(%p)\n", This, pctinfo);
1070
1071     *pctinfo = 1;
1072     return S_OK;
1073 }
1074
1075 static HRESULT WINAPI DispatchEx_GetTypeInfo(IDispatchEx *iface, UINT iTInfo,
1076                                               LCID lcid, ITypeInfo **ppTInfo)
1077 {
1078     DispatchEx *This = impl_from_IDispatchEx(iface);
1079     HRESULT hres;
1080
1081     TRACE("(%p)->(%u %u %p)\n", This, iTInfo, lcid, ppTInfo);
1082
1083     hres = get_typeinfo(This->data->disp_tid, ppTInfo);
1084     if(FAILED(hres))
1085         return hres;
1086
1087     ITypeInfo_AddRef(*ppTInfo);
1088     return S_OK;
1089 }
1090
1091 static HRESULT WINAPI DispatchEx_GetIDsOfNames(IDispatchEx *iface, REFIID riid,
1092                                                 LPOLESTR *rgszNames, UINT cNames,
1093                                                 LCID lcid, DISPID *rgDispId)
1094 {
1095     DispatchEx *This = impl_from_IDispatchEx(iface);
1096     UINT i;
1097     HRESULT hres;
1098
1099     TRACE("(%p)->(%s %p %u %u %p)\n", This, debugstr_guid(riid), rgszNames, cNames,
1100           lcid, rgDispId);
1101
1102     for(i=0; i < cNames; i++) {
1103         hres = IDispatchEx_GetDispID(&This->IDispatchEx_iface, rgszNames[i], 0, rgDispId+i);
1104         if(FAILED(hres))
1105             return hres;
1106     }
1107
1108     return S_OK;
1109 }
1110
1111 static HRESULT WINAPI DispatchEx_Invoke(IDispatchEx *iface, DISPID dispIdMember,
1112                             REFIID riid, LCID lcid, WORD wFlags, DISPPARAMS *pDispParams,
1113                             VARIANT *pVarResult, EXCEPINFO *pExcepInfo, UINT *puArgErr)
1114 {
1115     DispatchEx *This = impl_from_IDispatchEx(iface);
1116
1117     TRACE("(%p)->(%d %s %d %d %p %p %p %p)\n", This, dispIdMember, debugstr_guid(riid),
1118           lcid, wFlags, pDispParams, pVarResult, pExcepInfo, puArgErr);
1119
1120     return IDispatchEx_InvokeEx(&This->IDispatchEx_iface, dispIdMember, lcid, wFlags, pDispParams,
1121             pVarResult, pExcepInfo, NULL);
1122 }
1123
1124 static HRESULT WINAPI DispatchEx_GetDispID(IDispatchEx *iface, BSTR bstrName, DWORD grfdex, DISPID *pid)
1125 {
1126     DispatchEx *This = impl_from_IDispatchEx(iface);
1127     dynamic_prop_t *dprop;
1128     HRESULT hres;
1129
1130     TRACE("(%p)->(%s %x %p)\n", This, debugstr_w(bstrName), grfdex, pid);
1131
1132     if(grfdex & ~(fdexNameCaseSensitive|fdexNameCaseInsensitive|fdexNameEnsure|fdexNameImplicit|FDEX_VERSION_MASK))
1133         FIXME("Unsupported grfdex %x\n", grfdex);
1134
1135     hres = get_builtin_id(This, bstrName, grfdex, pid);
1136     if(hres != DISP_E_UNKNOWNNAME)
1137         return hres;
1138
1139     hres = get_dynamic_prop(This, bstrName, grfdex, &dprop);
1140     if(FAILED(hres))
1141         return hres;
1142
1143     *pid = DISPID_DYNPROP_0 + (dprop - This->dynamic_data->props);
1144     return S_OK;
1145 }
1146
1147 static HRESULT WINAPI DispatchEx_InvokeEx(IDispatchEx *iface, DISPID id, LCID lcid, WORD wFlags, DISPPARAMS *pdp,
1148         VARIANT *pvarRes, EXCEPINFO *pei, IServiceProvider *pspCaller)
1149 {
1150     DispatchEx *This = impl_from_IDispatchEx(iface);
1151     HRESULT hres;
1152
1153     TRACE("(%p)->(%x %x %x %p %p %p %p)\n", This, id, lcid, wFlags, pdp, pvarRes, pei, pspCaller);
1154
1155     switch(get_dispid_type(id)) {
1156     case DISPEXPROP_CUSTOM:
1157         if(!This->data->vtbl || !This->data->vtbl->invoke)
1158             return DISP_E_UNKNOWNNAME;
1159         return This->data->vtbl->invoke(This, id, lcid, wFlags, pdp, pvarRes, pei, pspCaller);
1160
1161     case DISPEXPROP_DYNAMIC: {
1162         DWORD idx = id - DISPID_DYNPROP_0;
1163         dynamic_prop_t *prop;
1164
1165         if(!get_dynamic_data(This) || This->dynamic_data->prop_cnt <= idx)
1166             return DISP_E_UNKNOWNNAME;
1167
1168         prop = This->dynamic_data->props+idx;
1169
1170         switch(wFlags) {
1171         case DISPATCH_METHOD|DISPATCH_PROPERTYGET:
1172             if(!pvarRes)
1173                 return E_INVALIDARG;
1174             /* fall through */
1175         case DISPATCH_METHOD:
1176             if(V_VT(&prop->var) != VT_DISPATCH) {
1177                 FIXME("invoke %s\n", debugstr_variant(&prop->var));
1178                 return E_NOTIMPL;
1179             }
1180
1181             return invoke_disp_value(This, V_DISPATCH(&prop->var), lcid, wFlags, pdp, pvarRes, pei, pspCaller);
1182         case DISPATCH_PROPERTYGET:
1183             if(prop->flags & DYNPROP_DELETED)
1184                 return DISP_E_UNKNOWNNAME;
1185             V_VT(pvarRes) = VT_EMPTY;
1186             return variant_copy(pvarRes, &prop->var);
1187         case DISPATCH_PROPERTYPUT|DISPATCH_PROPERTYPUTREF:
1188         case DISPATCH_PROPERTYPUT:
1189             if(pdp->cArgs != 1 || (pdp->cNamedArgs == 1 && *pdp->rgdispidNamedArgs != DISPID_PROPERTYPUT)
1190                || pdp->cNamedArgs > 1) {
1191                 FIXME("invalid args\n");
1192                 return E_INVALIDARG;
1193             }
1194
1195             TRACE("put %s\n", debugstr_variant(pdp->rgvarg));
1196             VariantClear(&prop->var);
1197             hres = variant_copy(&prop->var, pdp->rgvarg);
1198             if(FAILED(hres))
1199                 return hres;
1200
1201             prop->flags &= ~DYNPROP_DELETED;
1202             return S_OK;
1203         default:
1204             FIXME("unhandled wFlags %x\n", wFlags);
1205             return E_NOTIMPL;
1206         }
1207     }
1208     case DISPEXPROP_BUILTIN:
1209         if(wFlags == DISPATCH_CONSTRUCT) {
1210             if(id == DISPID_VALUE) {
1211                 if(This->data->vtbl && This->data->vtbl->value) {
1212                     return This->data->vtbl->value(This, lcid, wFlags, pdp, pvarRes, pei, pspCaller);
1213                 }
1214                 FIXME("DISPATCH_CONSTRUCT flag but missing value function\n");
1215                 return E_FAIL;
1216             }
1217             FIXME("DISPATCH_CONSTRUCT flag without DISPID_VALUE\n");
1218             return E_FAIL;
1219         }
1220
1221         return invoke_builtin_prop(This, id, lcid, wFlags, pdp, pvarRes, pei, pspCaller);
1222     default:
1223         assert(0);
1224         return E_FAIL;
1225     }
1226 }
1227
1228 static HRESULT WINAPI DispatchEx_DeleteMemberByName(IDispatchEx *iface, BSTR bstrName, DWORD grfdex)
1229 {
1230     DispatchEx *This = impl_from_IDispatchEx(iface);
1231
1232     TRACE("(%p)->(%s %x)\n", This, debugstr_w(bstrName), grfdex);
1233
1234     /* Not implemented by IE */
1235     return E_NOTIMPL;
1236 }
1237
1238 static HRESULT WINAPI DispatchEx_DeleteMemberByDispID(IDispatchEx *iface, DISPID id)
1239 {
1240     DispatchEx *This = impl_from_IDispatchEx(iface);
1241
1242     TRACE("(%p)->(%x)\n", This, id);
1243
1244     /* Not implemented by IE */
1245     return E_NOTIMPL;
1246 }
1247
1248 static HRESULT WINAPI DispatchEx_GetMemberProperties(IDispatchEx *iface, DISPID id, DWORD grfdexFetch, DWORD *pgrfdex)
1249 {
1250     DispatchEx *This = impl_from_IDispatchEx(iface);
1251     FIXME("(%p)->(%x %x %p)\n", This, id, grfdexFetch, pgrfdex);
1252     return E_NOTIMPL;
1253 }
1254
1255 static HRESULT WINAPI DispatchEx_GetMemberName(IDispatchEx *iface, DISPID id, BSTR *pbstrName)
1256 {
1257     DispatchEx *This = impl_from_IDispatchEx(iface);
1258     dispex_data_t *data;
1259     func_info_t *func;
1260     HRESULT hres;
1261
1262     TRACE("(%p)->(%x %p)\n", This, id, pbstrName);
1263
1264     if(is_dynamic_dispid(id)) {
1265         DWORD idx = id - DISPID_DYNPROP_0;
1266
1267         if(!get_dynamic_data(This) || This->dynamic_data->prop_cnt <= idx)
1268             return DISP_E_UNKNOWNNAME;
1269
1270         *pbstrName = SysAllocString(This->dynamic_data->props[idx].name);
1271         if(!*pbstrName)
1272             return E_OUTOFMEMORY;
1273
1274         return S_OK;
1275     }
1276
1277     data = get_dispex_data(This);
1278     if(!data)
1279         return E_FAIL;
1280
1281     hres = get_builtin_func(data, id, &func);
1282     if(FAILED(hres))
1283         return hres;
1284
1285     *pbstrName = SysAllocString(func->name);
1286     if(!*pbstrName)
1287         return E_OUTOFMEMORY;
1288     return S_OK;
1289 }
1290
1291 static HRESULT WINAPI DispatchEx_GetNextDispID(IDispatchEx *iface, DWORD grfdex, DISPID id, DISPID *pid)
1292 {
1293     DispatchEx *This = impl_from_IDispatchEx(iface);
1294     dispex_data_t *data;
1295     func_info_t *func;
1296     HRESULT hres;
1297
1298     TRACE("(%p)->(%x %x %p)\n", This, grfdex, id, pid);
1299
1300     if(is_dynamic_dispid(id)) {
1301         DWORD idx = id - DISPID_DYNPROP_0;
1302
1303         if(!get_dynamic_data(This) || This->dynamic_data->prop_cnt <= idx)
1304             return DISP_E_UNKNOWNNAME;
1305
1306         while(++idx < This->dynamic_data->prop_cnt && This->dynamic_data->props[idx].flags & DYNPROP_DELETED);
1307
1308         if(idx == This->dynamic_data->prop_cnt) {
1309             *pid = DISPID_STARTENUM;
1310             return S_FALSE;
1311         }
1312
1313         *pid = DISPID_DYNPROP_0+idx;
1314         return S_OK;
1315     }
1316
1317     data = get_dispex_data(This);
1318     if(!data)
1319         return E_FAIL;
1320
1321     if(id == DISPID_STARTENUM) {
1322         func = data->funcs;
1323     }else {
1324         hres = get_builtin_func(data, id, &func);
1325         if(FAILED(hres))
1326             return hres;
1327         func++;
1328     }
1329
1330     while(func < data->funcs+data->func_cnt) {
1331         /* FIXME: Skip hidden properties */
1332         if(func->func_disp_idx == -1) {
1333             *pid = func->id;
1334             return S_OK;
1335         }
1336         func++;
1337     }
1338
1339     if(get_dynamic_data(This) && This->dynamic_data->prop_cnt) {
1340         *pid = DISPID_DYNPROP_0;
1341         return S_OK;
1342     }
1343
1344     *pid = DISPID_STARTENUM;
1345     return S_FALSE;
1346 }
1347
1348 static HRESULT WINAPI DispatchEx_GetNameSpaceParent(IDispatchEx *iface, IUnknown **ppunk)
1349 {
1350     DispatchEx *This = impl_from_IDispatchEx(iface);
1351     FIXME("(%p)->(%p)\n", This, ppunk);
1352     return E_NOTIMPL;
1353 }
1354
1355 static IDispatchExVtbl DispatchExVtbl = {
1356     DispatchEx_QueryInterface,
1357     DispatchEx_AddRef,
1358     DispatchEx_Release,
1359     DispatchEx_GetTypeInfoCount,
1360     DispatchEx_GetTypeInfo,
1361     DispatchEx_GetIDsOfNames,
1362     DispatchEx_Invoke,
1363     DispatchEx_GetDispID,
1364     DispatchEx_InvokeEx,
1365     DispatchEx_DeleteMemberByName,
1366     DispatchEx_DeleteMemberByDispID,
1367     DispatchEx_GetMemberProperties,
1368     DispatchEx_GetMemberName,
1369     DispatchEx_GetNextDispID,
1370     DispatchEx_GetNameSpaceParent
1371 };
1372
1373 BOOL dispex_query_interface(DispatchEx *This, REFIID riid, void **ppv)
1374 {
1375     static const IID IID_UndocumentedScriptIface =
1376         {0x719c3050,0xf9d3,0x11cf,{0xa4,0x93,0x00,0x40,0x05,0x23,0xa8,0xa0}};
1377     static const IID IID_IDispatchJS =
1378         {0x719c3050,0xf9d3,0x11cf,{0xa4,0x93,0x00,0x40,0x05,0x23,0xa8,0xa6}};
1379
1380     if(IsEqualGUID(&IID_IDispatch, riid)) {
1381         TRACE("(%p)->(IID_IDispatch %p)\n", This, ppv);
1382         *ppv = &This->IDispatchEx_iface;
1383     }else if(IsEqualGUID(&IID_IDispatchEx, riid)) {
1384         TRACE("(%p)->(IID_IDispatchEx %p)\n", This, ppv);
1385         *ppv = &This->IDispatchEx_iface;
1386     }else if(IsEqualGUID(&IID_IDispatchJS, riid)) {
1387         TRACE("(%p)->(IID_IDispatchJS %p) returning NULL\n", This, ppv);
1388         *ppv = NULL;
1389     }else if(IsEqualGUID(&IID_UndocumentedScriptIface, riid)) {
1390         TRACE("(%p)->(IID_UndocumentedScriptIface %p) returning NULL\n", This, ppv);
1391         *ppv = NULL;
1392     }else {
1393         return FALSE;
1394     }
1395
1396     if(*ppv)
1397         IUnknown_AddRef((IUnknown*)*ppv);
1398     return TRUE;
1399 }
1400
1401 void dispex_traverse(DispatchEx *This, nsCycleCollectionTraversalCallback *cb)
1402 {
1403     dynamic_prop_t *prop;
1404
1405     if(!This->dynamic_data)
1406         return;
1407
1408     for(prop = This->dynamic_data->props; prop < This->dynamic_data->props + This->dynamic_data->prop_cnt; prop++) {
1409         if(V_VT(&prop->var) == VT_DISPATCH)
1410             note_cc_edge((nsISupports*)V_DISPATCH(&prop->var), "dispex_data", cb);
1411     }
1412
1413     /* FIXME: Traverse func_disps */
1414 }
1415
1416 void dispex_unlink(DispatchEx *This)
1417 {
1418     dynamic_prop_t *prop;
1419
1420     if(!This->dynamic_data)
1421         return;
1422
1423     for(prop = This->dynamic_data->props; prop < This->dynamic_data->props + This->dynamic_data->prop_cnt; prop++) {
1424         if(V_VT(&prop->var) == VT_DISPATCH) {
1425             V_VT(&prop->var) = VT_EMPTY;
1426             IDispatch_Release(V_DISPATCH(&prop->var));
1427         }else {
1428             VariantClear(&prop->var);
1429         }
1430     }
1431 }
1432
1433 void release_dispex(DispatchEx *This)
1434 {
1435     dynamic_prop_t *prop;
1436
1437     if(!This->dynamic_data)
1438         return;
1439
1440     for(prop = This->dynamic_data->props; prop < This->dynamic_data->props + This->dynamic_data->prop_cnt; prop++) {
1441         VariantClear(&prop->var);
1442         heap_free(prop->name);
1443     }
1444
1445     heap_free(This->dynamic_data->props);
1446
1447     if(This->dynamic_data->func_disps) {
1448         unsigned i;
1449
1450         for(i=0; i < This->data->data->func_disp_cnt; i++) {
1451             if(This->dynamic_data->func_disps[i]) {
1452                 release_dispex(&This->dynamic_data->func_disps[i]->dispex);
1453                 heap_free(This->dynamic_data->func_disps[i]);
1454             }
1455         }
1456
1457         heap_free(This->dynamic_data->func_disps);
1458     }
1459
1460     heap_free(This->dynamic_data);
1461 }
1462
1463 void init_dispex(DispatchEx *dispex, IUnknown *outer, dispex_static_data_t *data)
1464 {
1465     dispex->IDispatchEx_iface.lpVtbl = &DispatchExVtbl;
1466     dispex->outer = outer;
1467     dispex->data = data;
1468     dispex->dynamic_data = NULL;
1469 }