dlls/mshtml/dispex.c

   1 /*
   2  * Copyright 2008-2009 Jacek Caban for CodeWeavers
   3  *
   4  * This library is free software; you can redistribute it and/or
   5  * modify it under the terms of the GNU Lesser General Public
   6  * License as published by the Free Software Foundation; either
   7  * version 2.1 of the License, or (at your option) any later version.
   8  *
   9  * This library is distributed in the hope that it will be useful,
  10  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  11  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  12  * Lesser General Public License for more details.
  13  *
  14  * You should have received a copy of the GNU Lesser General Public
  15  * License along with this library; if not, write to the Free Software
  16  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
  17  */
  18
  19 #include <stdarg.h>
  20 #include <assert.h>
  21
  22 #define COBJMACROS
  23
  24 #include "windef.h"
  25 #include "winbase.h"
  26 #include "winuser.h"
  27 #include "ole2.h"
  28
  29 #include "wine/debug.h"
  30
  31 #include "mshtml_private.h"
  32
  33 WINE_DEFAULT_DEBUG_CHANNEL(mshtml);
  34
  35 static CRITICAL_SECTION cs_dispex_static_data;
  36 static CRITICAL_SECTION_DEBUG cs_dispex_static_data_dbg =
  37 {
  38     0, 0, &cs_dispex_static_data,
  39     { &cs_dispex_static_data_dbg.ProcessLocksList, &cs_dispex_static_data_dbg.ProcessLocksList },
  40       0, 0, { (DWORD_PTR)(__FILE__ ": dispex_static_data") }
  41 };
  42 static CRITICAL_SECTION cs_dispex_static_data = { &cs_dispex_static_data_dbg, -1, 0, 0, 0, 0 };
  43
  44
  45 static const WCHAR objectW[] = {'[','o','b','j','e','c','t',']',0};
  46
  47 typedef struct {
  48     DISPID id;
  49     BSTR name;
  50     tid_t tid;
  51     SHORT put_vtbl_off;
  52     SHORT get_vtbl_off;
  53     SHORT func_disp_idx;
  54     VARTYPE prop_vt;
  55 } func_info_t;
  56
  57 struct dispex_data_t {
  58     DWORD func_cnt;
  59     func_info_t *funcs;
  60     func_info_t **name_table;
  61     DWORD func_disp_cnt;
  62
  63     struct list entry;
  64 };
  65
  66 typedef struct {
  67     VARIANT var;
  68     LPWSTR name;
  69     DWORD flags;
  70 } dynamic_prop_t;
  71
  72 #define DYNPROP_DELETED    0x01
  73
  74 typedef struct {
  75     DispatchEx dispex;
  76     IUnknown IUnknown_iface;
  77     DispatchEx *obj;
  78     func_info_t *info;
  79 } func_disp_t;
  80
  81 struct dispex_dynamic_data_t {
  82     DWORD buf_size;
  83     DWORD prop_cnt;
  84     dynamic_prop_t *props;
  85     func_disp_t **func_disps;
  86 };
  87
  88 #define DISPID_DYNPROP_0    0x50000000
  89 #define DISPID_DYNPROP_MAX  0x5fffffff
  90
  91 #define FDEX_VERSION_MASK 0xf0000000
  92
  93 static ITypeLib *typelib;
  94 static ITypeInfo *typeinfos[LAST_tid];
  95 static struct list dispex_data_list = LIST_INIT(dispex_data_list);
  96
  97 static REFIID tid_ids[] = {
  98 #define XIID(iface) &IID_ ## iface,
  99 #define XDIID(iface) &DIID_ ## iface,
 100 TID_LIST
 101 #undef XIID
 102 #undef XDIID
 103 };
 104
 105 static HRESULT load_typelib(void)
 106 {
 107     HRESULT hres;
 108     ITypeLib *tl;
 109
 110     hres = LoadRegTypeLib(&LIBID_MSHTML, 4, 0, LOCALE_SYSTEM_DEFAULT, &tl);
 111     if(FAILED(hres)) {
 112         ERR("LoadRegTypeLib failed: %08x\n", hres);
 113         return hres;
 114     }
 115
 116     if(InterlockedCompareExchangePointer((void**)&typelib, tl, NULL))
 117         ITypeLib_Release(tl);
 118     return hres;
 119 }
 120
 121 static HRESULT get_typeinfo(tid_t tid, ITypeInfo **typeinfo)
 122 {
 123     HRESULT hres;
 124
 125     if (!typelib)
 126         hres = load_typelib();
 127     if (!typelib)
 128         return hres;
 129
 130     if(!typeinfos[tid]) {
 131         ITypeInfo *ti;
 132
 133         hres = ITypeLib_GetTypeInfoOfGuid(typelib, tid_ids[tid], &ti);
 134         if(FAILED(hres)) {
 135             ERR("GetTypeInfoOfGuid(%s) failed: %08x\n", debugstr_guid(tid_ids[tid]), hres);
 136             return hres;
 137         }
 138
 139         if(InterlockedCompareExchangePointer((void**)(typeinfos+tid), ti, NULL))
 140             ITypeInfo_Release(ti);
 141     }
 142
 143     *typeinfo = typeinfos[tid];
 144     return S_OK;
 145 }
 146
 147 void release_typelib(void)
 148 {
 149     dispex_data_t *iter;
 150     unsigned i;
 151
 152     while(!list_empty(&dispex_data_list)) {
 153         iter = LIST_ENTRY(list_head(&dispex_data_list), dispex_data_t, entry);
 154         list_remove(&iter->entry);
 155
 156         for(i=0; i < iter->func_cnt; i++)
 157             SysFreeString(iter->funcs[i].name);
 158
 159         heap_free(iter->funcs);
 160         heap_free(iter->name_table);
 161         heap_free(iter);
 162     }
 163
 164     if(!typelib)
 165         return;
 166
 167     for(i=0; i < sizeof(typeinfos)/sizeof(*typeinfos); i++)
 168         if(typeinfos[i])
 169             ITypeInfo_Release(typeinfos[i]);
 170
 171     ITypeLib_Release(typelib);
 172     DeleteCriticalSection(&cs_dispex_static_data);
 173 }
 174
 175 HRESULT get_htmldoc_classinfo(ITypeInfo **typeinfo)
 176 {
 177     HRESULT hres;
 178
 179     if (!typelib)
 180         hres = load_typelib();
 181     if (!typelib)
 182         return hres;
 183
 184     hres = ITypeLib_GetTypeInfoOfGuid(typelib, &CLSID_HTMLDocument, typeinfo);
 185     if(FAILED(hres))
 186         ERR("GetTypeInfoOfGuid failed: %08x\n", hres);
 187     return hres;
 188 }
 189
 190 static void add_func_info(dispex_data_t *data, DWORD *size, tid_t tid, const FUNCDESC *desc, ITypeInfo *dti)
 191 {
 192     func_info_t *info;
 193     HRESULT hres;
 194
 195     if(data->func_cnt && data->funcs[data->func_cnt-1].id == desc->memid) {
 196         info = data->funcs+data->func_cnt-1;
 197     }else {
 198         if(data->func_cnt == *size)
 199             data->funcs = heap_realloc(data->funcs, (*size <<= 1)*sizeof(func_info_t));
 200
 201         info = data->funcs+data->func_cnt;
 202         hres = ITypeInfo_GetDocumentation(dti, desc->memid, &info->name, NULL, NULL, NULL);
 203         if(FAILED(hres))
 204             return;
 205
 206         data->func_cnt++;
 207
 208         info->id = desc->memid;
 209         info->tid = tid;
 210         info->func_disp_idx = -1;
 211         info->prop_vt = VT_EMPTY;
 212         info->put_vtbl_off = 0;
 213         info->get_vtbl_off = 0;
 214     }
 215
 216     if(desc->invkind & DISPATCH_METHOD) {
 217         info->func_disp_idx = data->func_disp_cnt++;
 218     }else if(desc->invkind & (DISPATCH_PROPERTYPUT|DISPATCH_PROPERTYGET)) {
 219         VARTYPE vt = VT_EMPTY;
 220
 221         if(desc->invkind & DISPATCH_PROPERTYGET) {
 222             vt = desc->elemdescFunc.tdesc.vt;
 223             info->get_vtbl_off = desc->oVft/sizeof(void*);
 224         }
 225         if(desc->invkind & DISPATCH_PROPERTYPUT) {
 226             assert(desc->cParams == 1);
 227             vt = desc->lprgelemdescParam->tdesc.vt;
 228             info->put_vtbl_off = desc->oVft/sizeof(void*);
 229         }
 230
 231         assert(info->prop_vt == VT_EMPTY || vt == info->prop_vt);
 232         info->prop_vt = vt;
 233     }
 234 }
 235
 236 static int dispid_cmp(const void *p1, const void *p2)
 237 {
 238     return ((const func_info_t*)p1)->id - ((const func_info_t*)p2)->id;
 239 }
 240
 241 static int func_name_cmp(const void *p1, const void *p2)
 242 {
 243     return strcmpiW((*(func_info_t* const*)p1)->name, (*(func_info_t* const*)p2)->name);
 244 }
 245
 246 static dispex_data_t *preprocess_dispex_data(DispatchEx *This)
 247 {
 248     const tid_t *tid = This->data->iface_tids;
 249     FUNCDESC *funcdesc;
 250     dispex_data_t *data;
 251     DWORD size = 16, i;
 252     ITypeInfo *ti, *dti;
 253     HRESULT hres;
 254
 255     TRACE("(%p)\n", This);
 256
 257     if(This->data->disp_tid) {
 258         hres = get_typeinfo(This->data->disp_tid, &dti);
 259         if(FAILED(hres)) {
 260             ERR("Could not get disp type info: %08x\n", hres);
 261             return NULL;
 262         }
 263     }
 264
 265     data = heap_alloc(sizeof(dispex_data_t));
 266     data->func_cnt = 0;
 267     data->func_disp_cnt = 0;
 268     data->funcs = heap_alloc(size*sizeof(func_info_t));
 269     list_add_tail(&dispex_data_list, &data->entry);
 270
 271     while(*tid) {
 272         hres = get_typeinfo(*tid, &ti);
 273         if(FAILED(hres))
 274             break;
 275
 276         i=7;
 277         while(1) {
 278             hres = ITypeInfo_GetFuncDesc(ti, i++, &funcdesc);
 279             if(FAILED(hres))
 280                 break;
 281
 282             add_func_info(data, &size, *tid, funcdesc, dti);
 283             ITypeInfo_ReleaseFuncDesc(ti, funcdesc);
 284         }
 285
 286         tid++;
 287     }
 288
 289     if(!data->func_cnt) {
 290         heap_free(data->funcs);
 291         data->name_table = NULL;
 292         data->funcs = NULL;
 293         return data;
 294     }
 295
 296
 297     data->funcs = heap_realloc(data->funcs, data->func_cnt * sizeof(func_info_t));
 298     qsort(data->funcs, data->func_cnt, sizeof(func_info_t), dispid_cmp);
 299
 300     data->name_table = heap_alloc(data->func_cnt * sizeof(func_info_t*));
 301     for(i=0; i < data->func_cnt; i++)
 302         data->name_table[i] = data->funcs+i;
 303     qsort(data->name_table, data->func_cnt, sizeof(func_info_t*), func_name_cmp);
 304
 305     return data;
 306 }
 307
 308 static int id_cmp(const void *p1, const void *p2)
 309 {
 310     return *(const DISPID*)p1 - *(const DISPID*)p2;
 311 }
 312
 313 HRESULT get_dispids(tid_t tid, DWORD *ret_size, DISPID **ret)
 314 {
 315     unsigned i, func_cnt;
 316     FUNCDESC *funcdesc;
 317     ITypeInfo *ti;
 318     TYPEATTR *attr;
 319     DISPID *ids;
 320     HRESULT hres;
 321
 322     hres = get_typeinfo(tid, &ti);
 323     if(FAILED(hres))
 324         return hres;
 325
 326     hres = ITypeInfo_GetTypeAttr(ti, &attr);
 327     if(FAILED(hres)) {
 328         ITypeInfo_Release(ti);
 329         return hres;
 330     }
 331
 332     func_cnt = attr->cFuncs;
 333     ITypeInfo_ReleaseTypeAttr(ti, attr);
 334
 335     ids = heap_alloc(func_cnt*sizeof(DISPID));
 336     if(!ids) {
 337         ITypeInfo_Release(ti);
 338         return E_OUTOFMEMORY;
 339     }
 340
 341     for(i=0; i < func_cnt; i++) {
 342         hres = ITypeInfo_GetFuncDesc(ti, i, &funcdesc);
 343         if(FAILED(hres))
 344             break;
 345
 346         ids[i] = funcdesc->memid;
 347         ITypeInfo_ReleaseFuncDesc(ti, funcdesc);
 348     }
 349
 350     ITypeInfo_Release(ti);
 351     if(FAILED(hres)) {
 352         heap_free(ids);
 353         return hres;
 354     }
 355
 356     qsort(ids, func_cnt, sizeof(DISPID), id_cmp);
 357
 358     *ret_size = func_cnt;
 359     *ret = ids;
 360     return S_OK;
 361 }
 362
 363 static dispex_data_t *get_dispex_data(DispatchEx *This)
 364 {
 365     if(This->data->data)
 366         return This->data->data;
 367
 368     EnterCriticalSection(&cs_dispex_static_data);
 369
 370     if(!This->data->data)
 371         This->data->data = preprocess_dispex_data(This);
 372
 373     LeaveCriticalSection(&cs_dispex_static_data);
 374
 375     return This->data->data;
 376 }
 377
 378 static inline BOOL is_custom_dispid(DISPID id)
 379 {
 380     return MSHTML_DISPID_CUSTOM_MIN <= id && id <= MSHTML_DISPID_CUSTOM_MAX;
 381 }
 382
 383 static inline BOOL is_dynamic_dispid(DISPID id)
 384 {
 385     return DISPID_DYNPROP_0 <= id && id <= DISPID_DYNPROP_MAX;
 386 }
 387
 388 static HRESULT variant_copy(VARIANT *dest, VARIANT *src)
 389 {
 390     if(V_VT(src) == VT_BSTR && !V_BSTR(src)) {
 391         V_VT(dest) = VT_BSTR;
 392         V_BSTR(dest) = NULL;
 393         return S_OK;
 394     }
 395
 396     return VariantCopy(dest, src);
 397 }
 398
 399 static inline dispex_dynamic_data_t *get_dynamic_data(DispatchEx *This)
 400 {
 401     if(This->dynamic_data)
 402         return This->dynamic_data;
 403
 404     This->dynamic_data = heap_alloc_zero(sizeof(dispex_dynamic_data_t));
 405     if(!This->dynamic_data)
 406         return NULL;
 407
 408     if(This->data->vtbl && This->data->vtbl->populate_props)
 409         This->data->vtbl->populate_props(This);
 410
 411     return This->dynamic_data;
 412 }
 413
 414 static HRESULT get_dynamic_prop(DispatchEx *This, const WCHAR *name, DWORD flags, dynamic_prop_t **ret)
 415 {
 416     const BOOL alloc = flags & fdexNameEnsure;
 417     dispex_dynamic_data_t *data;
 418     dynamic_prop_t *prop;
 419
 420     data = get_dynamic_data(This);
 421     if(!data)
 422         return E_OUTOFMEMORY;
 423
 424     for(prop = data->props; prop < data->props+data->prop_cnt; prop++) {
 425         if(flags & fdexNameCaseInsensitive ? !strcmpiW(prop->name, name) : !strcmpW(prop->name, name)) {
 426             if(prop->flags & DYNPROP_DELETED) {
 427                 if(!alloc)
 428                     return DISP_E_UNKNOWNNAME;
 429                 prop->flags &= ~DYNPROP_DELETED;
 430             }
 431             *ret = prop;
 432             return S_OK;
 433         }
 434     }
 435
 436     if(!alloc)
 437         return DISP_E_UNKNOWNNAME;
 438
 439     TRACE("creating dynamic prop %s\n", debugstr_w(name));
 440
 441     if(!data->buf_size) {
 442         data->props = heap_alloc(sizeof(dynamic_prop_t)*4);
 443         if(!data->props)
 444             return E_OUTOFMEMORY;
 445         data->buf_size = 4;
 446     }else if(data->buf_size == data->prop_cnt) {
 447         dynamic_prop_t *new_props;
 448
 449         new_props = heap_realloc(data->props, sizeof(dynamic_prop_t)*(data->buf_size<<1));
 450         if(!new_props)
 451             return E_OUTOFMEMORY;
 452
 453         data->props = new_props;
 454         data->buf_size <<= 1;
 455     }
 456
 457     prop = data->props + data->prop_cnt;
 458
 459     prop->name = heap_strdupW(name);
 460     if(!prop->name)
 461         return E_OUTOFMEMORY;
 462
 463     VariantInit(&prop->var);
 464     prop->flags = 0;
 465     data->prop_cnt++;
 466     *ret = prop;
 467     return S_OK;
 468 }
 469
 470 HRESULT dispex_get_dprop_ref(DispatchEx *This, const WCHAR *name, BOOL alloc, VARIANT **ret)
 471 {
 472     dynamic_prop_t *prop;
 473     HRESULT hres;
 474
 475     hres = get_dynamic_prop(This, name, alloc ? fdexNameEnsure : 0, &prop);
 476     if(FAILED(hres))
 477         return hres;
 478
 479     *ret = &prop->var;
 480     return S_OK;
 481 }
 482
 483 static HRESULT dispex_value(DispatchEx *This, LCID lcid, WORD flags, DISPPARAMS *params,
 484         VARIANT *res, EXCEPINFO *ei, IServiceProvider *caller)
 485 {
 486     if(This->data->vtbl && This->data->vtbl->value)
 487         return This->data->vtbl->value(This, lcid, flags, params, res, ei, caller);
 488
 489     switch(flags) {
 490     case DISPATCH_PROPERTYGET:
 491         V_VT(res) = VT_BSTR;
 492         V_BSTR(res) = SysAllocString(objectW);
 493         if(!V_BSTR(res))
 494             return E_OUTOFMEMORY;
 495         break;
 496     default:
 497         FIXME("Unimplemented flags %x\n", flags);
 498         return E_NOTIMPL;
 499     }
 500
 501     return S_OK;
 502 }
 503
 504 static HRESULT typeinfo_invoke(DispatchEx *This, func_info_t *func, WORD flags, DISPPARAMS *dp, VARIANT *res,
 505         EXCEPINFO *ei)
 506 {
 507     ITypeInfo *ti;
 508     IUnknown *unk;
 509     UINT argerr=0;
 510     HRESULT hres;
 511
 512     hres = get_typeinfo(func->tid, &ti);
 513     if(FAILED(hres)) {
 514         ERR("Could not get type info: %08x\n", hres);
 515         return hres;
 516     }
 517
 518     hres = IUnknown_QueryInterface(This->outer, tid_ids[func->tid], (void**)&unk);
 519     if(FAILED(hres)) {
 520         ERR("Could not get iface %s: %08x\n", debugstr_guid(tid_ids[func->tid]), hres);
 521         return E_FAIL;
 522     }
 523
 524     hres = ITypeInfo_Invoke(ti, unk, func->id, flags, dp, res, ei, &argerr);
 525
 526     IUnknown_Release(unk);
 527     return hres;
 528 }
 529
 530 static inline func_disp_t *impl_from_IUnknown(IUnknown *iface)
 531 {
 532     return CONTAINING_RECORD(iface, func_disp_t, IUnknown_iface);
 533 }
 534
 535 static HRESULT WINAPI Function_QueryInterface(IUnknown *iface, REFIID riid, void **ppv)
 536 {
 537     func_disp_t *This = impl_from_IUnknown(iface);
 538
 539     if(IsEqualGUID(&IID_IUnknown, riid)) {
 540         TRACE("(%p)->(IID_IUnknown %p)\n", This, ppv);
 541         *ppv = &This->IUnknown_iface;
 542     }else if(dispex_query_interface(&This->dispex, riid, ppv)) {
 543         return *ppv ? S_OK : E_NOINTERFACE;
 544     }else {
 545         *ppv = NULL;
 546         return E_NOINTERFACE;
 547     }
 548
 549     IUnknown_AddRef((IUnknown*)*ppv);
 550     return S_OK;
 551 }
 552
 553 static ULONG WINAPI Function_AddRef(IUnknown *iface)
 554 {
 555     func_disp_t *This = impl_from_IUnknown(iface);
 556
 557     TRACE("(%p)\n", This);
 558
 559     return IDispatchEx_AddRef(&This->obj->IDispatchEx_iface);
 560 }
 561
 562 static ULONG WINAPI Function_Release(IUnknown *iface)
 563 {
 564     func_disp_t *This = impl_from_IUnknown(iface);
 565
 566     TRACE("(%p)\n", This);
 567
 568     return IDispatchEx_Release(&This->obj->IDispatchEx_iface);
 569 }
 570
 571 static const IUnknownVtbl FunctionUnkVtbl = {
 572     Function_QueryInterface,
 573     Function_AddRef,
 574     Function_Release
 575 };
 576
 577 static inline func_disp_t *impl_from_DispatchEx(DispatchEx *iface)
 578 {
 579     return CONTAINING_RECORD(iface, func_disp_t, dispex);
 580 }
 581
 582 static HRESULT function_value(DispatchEx *dispex, LCID lcid, WORD flags, DISPPARAMS *params,
 583         VARIANT *res, EXCEPINFO *ei, IServiceProvider *caller)
 584 {
 585     func_disp_t *This = impl_from_DispatchEx(dispex);
 586     HRESULT hres;
 587
 588     switch(flags) {
 589     case DISPATCH_METHOD|DISPATCH_PROPERTYGET:
 590         if(!res)
 591             return E_INVALIDARG;
 592         /* fall through */
 593     case DISPATCH_METHOD:
 594         hres = typeinfo_invoke(This->obj, This->info, flags, params, res, ei);
 595         break;
 596     default:
 597         FIXME("Unimplemented flags %x\n", flags);
 598         hres = E_NOTIMPL;
 599     }
 600
 601     return hres;
 602 }
 603
 604 static const dispex_static_data_vtbl_t function_dispex_vtbl = {
 605     function_value,
 606     NULL,
 607     NULL,
 608     NULL
 609 };
 610
 611 static const tid_t function_iface_tids[] = {0};
 612
 613 static dispex_static_data_t function_dispex = {
 614     &function_dispex_vtbl,
 615     NULL_tid,
 616     NULL,
 617     function_iface_tids
 618 };
 619
 620 static func_disp_t *create_func_disp(DispatchEx *obj, func_info_t *info)
 621 {
 622     func_disp_t *ret;
 623
 624     ret = heap_alloc_zero(sizeof(func_disp_t));
 625     if(!ret)
 626         return NULL;
 627
 628     ret->IUnknown_iface.lpVtbl = &FunctionUnkVtbl;
 629     init_dispex(&ret->dispex, &ret->IUnknown_iface,  &function_dispex);
 630     ret->obj = obj;
 631     ret->info = info;
 632
 633     return ret;
 634 }
 635
 636 static HRESULT function_invoke(DispatchEx *This, func_info_t *func, WORD flags, DISPPARAMS *dp, VARIANT *res,
 637         EXCEPINFO *ei)
 638 {
 639     HRESULT hres;
 640
 641     switch(flags) {
 642     case DISPATCH_METHOD|DISPATCH_PROPERTYGET:
 643         if(!res)
 644             return E_INVALIDARG;
 645         /* fall through */
 646     case DISPATCH_METHOD:
 647         hres = typeinfo_invoke(This, func, flags, dp, res, ei);
 648         break;
 649     case DISPATCH_PROPERTYGET: {
 650         dispex_dynamic_data_t *dynamic_data;
 651
 652         if(func->id == DISPID_VALUE) {
 653             BSTR ret;
 654
 655             ret = SysAllocString(objectW);
 656             if(!ret)
 657                 return E_OUTOFMEMORY;
 658
 659             V_VT(res) = VT_BSTR;
 660             V_BSTR(res) = ret;
 661             return S_OK;
 662         }
 663
 664         dynamic_data = get_dynamic_data(This);
 665         if(!dynamic_data)
 666             return E_OUTOFMEMORY;
 667
 668         if(!dynamic_data->func_disps) {
 669             dynamic_data->func_disps = heap_alloc_zero(This->data->data->func_disp_cnt * sizeof(func_disp_t*));
 670             if(!dynamic_data->func_disps)
 671                 return E_OUTOFMEMORY;
 672         }
 673
 674         if(!dynamic_data->func_disps[func->func_disp_idx]) {
 675             dynamic_data->func_disps[func->func_disp_idx] = create_func_disp(This, func);
 676             if(!dynamic_data->func_disps[func->func_disp_idx])
 677                 return E_OUTOFMEMORY;
 678         }
 679
 680         V_VT(res) = VT_DISPATCH;
 681         V_DISPATCH(res) = (IDispatch*)&dynamic_data->func_disps[func->func_disp_idx]->dispex.IDispatchEx_iface;
 682         IDispatch_AddRef(V_DISPATCH(res));
 683         hres = S_OK;
 684         break;
 685     }
 686     default:
 687         FIXME("Unimplemented flags %x\n", flags);
 688         /* fall through */
 689     case DISPATCH_PROPERTYPUT:
 690         hres = E_NOTIMPL;
 691     }
 692
 693     return hres;
 694 }
 695
 696 static HRESULT get_builtin_func(dispex_data_t *data, DISPID id, func_info_t **ret)
 697 {
 698     int min, max, n;
 699
 700     min = 0;
 701     max = data->func_cnt-1;
 702
 703     while(min <= max) {
 704         n = (min+max)/2;
 705
 706         if(data->funcs[n].id == id) {
 707             *ret = data->funcs+n;
 708             return S_OK;
 709         }
 710
 711         if(data->funcs[n].id < id)
 712             min = n+1;
 713         else
 714             max = n-1;
 715     }
 716
 717     WARN("invalid id %x\n", id);
 718     return DISP_E_UNKNOWNNAME;
 719 }
 720
 721 static HRESULT get_builtin_id(DispatchEx *This, BSTR name, DWORD grfdex, DISPID *ret)
 722 {
 723     dispex_data_t *data;
 724     int min, max, n, c;
 725
 726     data = get_dispex_data(This);
 727     if(!data)
 728         return E_FAIL;
 729
 730     min = 0;
 731     max = data->func_cnt-1;
 732
 733     while(min <= max) {
 734         n = (min+max)/2;
 735
 736         c = strcmpiW(data->name_table[n]->name, name);
 737         if(!c) {
 738             if((grfdex & fdexNameCaseSensitive) && strcmpW(data->name_table[n]->name, name))
 739                 break;
 740
 741             *ret = data->name_table[n]->id;
 742             return S_OK;
 743         }
 744
 745         if(c > 0)
 746             max = n-1;
 747         else
 748             min = n+1;
 749     }
 750
 751     if(This->data->vtbl && This->data->vtbl->get_dispid) {
 752         HRESULT hres;
 753
 754         hres = This->data->vtbl->get_dispid(This, name, grfdex, ret);
 755         if(hres != DISP_E_UNKNOWNNAME)
 756             return hres;
 757     }
 758
 759     return DISP_E_UNKNOWNNAME;
 760 }
 761
 762 /* List all types used by IDispatchEx-based properties */
 763 #define BUILTIN_TYPES_SWITCH                            \
 764     CASE_VT(VT_I2, INT16, V_I2);                        \
 765     CASE_VT(VT_I4, INT32, V_I4);                        \
 766     CASE_VT(VT_R4, float, V_R4);                        \
 767     CASE_VT(VT_BSTR, BSTR, V_BSTR);                     \
 768     CASE_VT(VT_BOOL, VARIANT_BOOL, V_BOOL);             \
 769     CASE_VT(VT_VARIANT, VARIANT, *);                    \
 770     CASE_VT(VT_PTR, void*, V_BYREF);                    \
 771     CASE_VT(VT_UNKNOWN, IUnknown*, V_UNKNOWN);          \
 772     CASE_VT(VT_DISPATCH, IDispatch*, V_DISPATCH)
 773
 774 static HRESULT change_type(VARIANT *dst, VARIANT *src, VARTYPE vt, IServiceProvider *caller)
 775 {
 776     V_VT(dst) = VT_EMPTY;
 777
 778     if(caller) {
 779         IVariantChangeType *change_type = NULL;
 780         HRESULT hres;
 781
 782         hres = IServiceProvider_QueryService(caller, &SID_VariantConversion, &IID_IVariantChangeType, (void**)&change_type);
 783         if(SUCCEEDED(hres)) {
 784             hres = IVariantChangeType_ChangeType(change_type, dst, src, LOCALE_NEUTRAL, vt);
 785             IVariantChangeType_Release(change_type);
 786             return hres;
 787         }
 788     }
 789
 790     return VariantChangeType(dst, src, 0, vt);
 791 }
 792
 793 static HRESULT builtin_propget(DispatchEx *This, func_info_t *func, DISPPARAMS *dp, VARIANT *res)
 794 {
 795     IUnknown *iface;
 796     HRESULT hres;
 797
 798     if(dp->cArgs) {
 799         FIXME("cArgs %d\n", dp->cArgs);
 800         return E_NOTIMPL;
 801     }
 802
 803     assert(func->get_vtbl_off);
 804
 805     hres = IUnknown_QueryInterface(This->outer, tid_ids[func->tid], (void**)&iface);
 806     if(SUCCEEDED(hres)) {
 807         switch(func->prop_vt) {
 808 #define CASE_VT(vt,type,access) \
 809         case vt: { \
 810             type val; \
 811             hres = ((HRESULT (WINAPI*)(IUnknown*,type*))((void**)iface->lpVtbl)[func->get_vtbl_off])(iface,&val); \
 812             if(SUCCEEDED(hres)) \
 813                 access(res) = val; \
 814             } \
 815             break
 816         BUILTIN_TYPES_SWITCH;
 817 #undef CASE_VT
 818         default:
 819             FIXME("Unhandled vt %d\n", func->prop_vt);
 820             hres = E_NOTIMPL;
 821         }
 822         IUnknown_Release(iface);
 823     }
 824
 825     if(FAILED(hres))
 826         return hres;
 827
 828     if(func->prop_vt != VT_VARIANT)
 829         V_VT(res) = func->prop_vt == VT_PTR ? VT_DISPATCH : func->prop_vt;
 830     return S_OK;
 831 }
 832
 833 static HRESULT builtin_propput(DispatchEx *This, func_info_t *func, DISPPARAMS *dp, IServiceProvider *caller)
 834 {
 835     VARIANT *v, tmpv;
 836     IUnknown *iface;
 837     HRESULT hres;
 838
 839     if(dp->cArgs != 1 || (dp->cNamedArgs == 1 && *dp->rgdispidNamedArgs != DISPID_PROPERTYPUT)
 840             || dp->cNamedArgs > 1) {
 841         FIXME("invalid args\n");
 842         return E_INVALIDARG;
 843     }
 844
 845     if(!func->put_vtbl_off) {
 846         FIXME("No setter\n");
 847         return E_FAIL;
 848     }
 849
 850     v = dp->rgvarg;
 851     if(func->prop_vt != VT_VARIANT && V_VT(v) != func->prop_vt) {
 852         hres = change_type(&tmpv, v, func->prop_vt, caller);
 853         if(FAILED(hres))
 854             return hres;
 855         v = &tmpv;
 856     }
 857
 858     hres = IUnknown_QueryInterface(This->outer, tid_ids[func->tid], (void**)&iface);
 859     if(SUCCEEDED(hres)) {
 860         switch(func->prop_vt) {
 861 #define CASE_VT(vt,type,access) \
 862         case vt: \
 863             hres = ((HRESULT (WINAPI*)(IUnknown*,type))((void**)iface->lpVtbl)[func->put_vtbl_off])(iface,access(v)); \
 864             break
 865         BUILTIN_TYPES_SWITCH;
 866 #undef CASE_VT
 867         default:
 868             FIXME("Unimplemented vt %d\n", func->prop_vt);
 869             hres = E_NOTIMPL;
 870         }
 871
 872         IUnknown_Release(iface);
 873     }
 874
 875     if(v == &tmpv)
 876         VariantClear(v);
 877     return hres;
 878 }
 879
 880 static HRESULT invoke_builtin_prop(DispatchEx *This, DISPID id, LCID lcid, WORD flags, DISPPARAMS *dp,
 881         VARIANT *res, EXCEPINFO *ei, IServiceProvider *caller)
 882 {
 883     dispex_data_t *data;
 884     func_info_t *func;
 885     HRESULT hres;
 886
 887     data = get_dispex_data(This);
 888     if(!data)
 889         return E_FAIL;
 890
 891     hres = get_builtin_func(data, id, &func);
 892     if(id == DISPID_VALUE && hres == DISP_E_UNKNOWNNAME)
 893         return dispex_value(This, lcid, flags, dp, res, ei, caller);
 894     if(FAILED(hres))
 895         return hres;
 896
 897     if(func->func_disp_idx != -1)
 898         return function_invoke(This, func, flags, dp, res, ei);
 899
 900     switch(flags) {
 901     case DISPATCH_PROPERTYPUT:
 902         if(res)
 903             V_VT(res) = VT_EMPTY;
 904         hres = builtin_propput(This, func, dp, caller);
 905         break;
 906     case DISPATCH_PROPERTYGET:
 907         hres = builtin_propget(This, func, dp, res);
 908         break;
 909     default:
 910         hres = typeinfo_invoke(This, func, flags, dp, res, ei);
 911     }
 912
 913     return hres;
 914 }
 915
 916 HRESULT remove_prop(DispatchEx *This, BSTR name, VARIANT_BOOL *success)
 917 {
 918     dynamic_prop_t *prop;
 919     DISPID id;
 920     HRESULT hres;
 921
 922     hres = get_builtin_id(This, name, 0, &id);
 923     if(hres == S_OK) {
 924         DISPID named_id = DISPID_PROPERTYPUT;
 925         VARIANT var;
 926         DISPPARAMS dp = {&var,&named_id,1,1};
 927         EXCEPINFO ei;
 928
 929         V_VT(&var) = VT_EMPTY;
 930         memset(&ei, 0, sizeof(ei));
 931         hres = invoke_builtin_prop(This, id, 0, DISPATCH_PROPERTYPUT, &dp, NULL, &ei, NULL);
 932         if(FAILED(hres))
 933             return hres;
 934
 935         *success = VARIANT_TRUE;
 936         return S_OK;
 937     }
 938
 939     hres = get_dynamic_prop(This, name, 0, &prop);
 940     if(FAILED(hres)) {
 941         if(hres != DISP_E_UNKNOWNNAME)
 942             return hres;
 943         *success = VARIANT_FALSE;
 944         return S_OK;
 945     }
 946
 947     VariantClear(&prop->var);
 948     prop->flags |= DYNPROP_DELETED;
 949     *success = VARIANT_TRUE;
 950     return S_OK;
 951 }
 952
 953 static inline DispatchEx *impl_from_IDispatchEx(IDispatchEx *iface)
 954 {
 955     return CONTAINING_RECORD(iface, DispatchEx, IDispatchEx_iface);
 956 }
 957
 958 static HRESULT WINAPI DispatchEx_QueryInterface(IDispatchEx *iface, REFIID riid, void **ppv)
 959 {
 960     DispatchEx *This = impl_from_IDispatchEx(iface);
 961
 962     return IUnknown_QueryInterface(This->outer, riid, ppv);
 963 }
 964
 965 static ULONG WINAPI DispatchEx_AddRef(IDispatchEx *iface)
 966 {
 967     DispatchEx *This = impl_from_IDispatchEx(iface);
 968
 969     return IUnknown_AddRef(This->outer);
 970 }
 971
 972 static ULONG WINAPI DispatchEx_Release(IDispatchEx *iface)
 973 {
 974     DispatchEx *This = impl_from_IDispatchEx(iface);
 975
 976     return IUnknown_Release(This->outer);
 977 }
 978
 979 static HRESULT WINAPI DispatchEx_GetTypeInfoCount(IDispatchEx *iface, UINT *pctinfo)
 980 {
 981     DispatchEx *This = impl_from_IDispatchEx(iface);
 982
 983     TRACE("(%p)->(%p)\n", This, pctinfo);
 984
 985     *pctinfo = 1;
 986     return S_OK;
 987 }
 988
 989 static HRESULT WINAPI DispatchEx_GetTypeInfo(IDispatchEx *iface, UINT iTInfo,
 990                                               LCID lcid, ITypeInfo **ppTInfo)
 991 {
 992     DispatchEx *This = impl_from_IDispatchEx(iface);
 993     HRESULT hres;
 994
 995     TRACE("(%p)->(%u %u %p)\n", This, iTInfo, lcid, ppTInfo);
 996
 997     hres = get_typeinfo(This->data->disp_tid, ppTInfo);
 998     if(FAILED(hres))
 999         return hres;
1000
1001     ITypeInfo_AddRef(*ppTInfo);
1002     return S_OK;
1003 }
1004
1005 static HRESULT WINAPI DispatchEx_GetIDsOfNames(IDispatchEx *iface, REFIID riid,
1006                                                 LPOLESTR *rgszNames, UINT cNames,
1007                                                 LCID lcid, DISPID *rgDispId)
1008 {
1009     DispatchEx *This = impl_from_IDispatchEx(iface);
1010     UINT i;
1011     HRESULT hres;
1012
1013     TRACE("(%p)->(%s %p %u %u %p)\n", This, debugstr_guid(riid), rgszNames, cNames,
1014           lcid, rgDispId);
1015
1016     for(i=0; i < cNames; i++) {
1017         hres = IDispatchEx_GetDispID(&This->IDispatchEx_iface, rgszNames[i], 0, rgDispId+i);
1018         if(FAILED(hres))
1019             return hres;
1020     }
1021
1022     return S_OK;
1023 }
1024
1025 static HRESULT WINAPI DispatchEx_Invoke(IDispatchEx *iface, DISPID dispIdMember,
1026                             REFIID riid, LCID lcid, WORD wFlags, DISPPARAMS *pDispParams,
1027                             VARIANT *pVarResult, EXCEPINFO *pExcepInfo, UINT *puArgErr)
1028 {
1029     DispatchEx *This = impl_from_IDispatchEx(iface);
1030
1031     TRACE("(%p)->(%d %s %d %d %p %p %p %p)\n", This, dispIdMember, debugstr_guid(riid),
1032           lcid, wFlags, pDispParams, pVarResult, pExcepInfo, puArgErr);
1033
1034     return IDispatchEx_InvokeEx(&This->IDispatchEx_iface, dispIdMember, lcid, wFlags, pDispParams,
1035             pVarResult, pExcepInfo, NULL);
1036 }
1037
1038 static HRESULT WINAPI DispatchEx_GetDispID(IDispatchEx *iface, BSTR bstrName, DWORD grfdex, DISPID *pid)
1039 {
1040     DispatchEx *This = impl_from_IDispatchEx(iface);
1041     dynamic_prop_t *dprop;
1042     HRESULT hres;
1043
1044     TRACE("(%p)->(%s %x %p)\n", This, debugstr_w(bstrName), grfdex, pid);
1045
1046     if(grfdex & ~(fdexNameCaseSensitive|fdexNameCaseInsensitive|fdexNameEnsure|fdexNameImplicit|FDEX_VERSION_MASK))
1047         FIXME("Unsupported grfdex %x\n", grfdex);
1048
1049     hres = get_builtin_id(This, bstrName, grfdex, pid);
1050     if(hres != DISP_E_UNKNOWNNAME)
1051         return hres;
1052
1053     hres = get_dynamic_prop(This, bstrName, grfdex, &dprop);
1054     if(FAILED(hres))
1055         return hres;
1056
1057     *pid = DISPID_DYNPROP_0 + (dprop - This->dynamic_data->props);
1058     return S_OK;
1059 }
1060
1061 static HRESULT WINAPI DispatchEx_InvokeEx(IDispatchEx *iface, DISPID id, LCID lcid, WORD wFlags, DISPPARAMS *pdp,
1062         VARIANT *pvarRes, EXCEPINFO *pei, IServiceProvider *pspCaller)
1063 {
1064     DispatchEx *This = impl_from_IDispatchEx(iface);
1065     HRESULT hres;
1066
1067     TRACE("(%p)->(%x %x %x %p %p %p %p)\n", This, id, lcid, wFlags, pdp, pvarRes, pei, pspCaller);
1068
1069     if(is_custom_dispid(id) && This->data->vtbl && This->data->vtbl->invoke)
1070         return This->data->vtbl->invoke(This, id, lcid, wFlags, pdp, pvarRes, pei, pspCaller);
1071
1072     if(wFlags == DISPATCH_CONSTRUCT) {
1073         if(id == DISPID_VALUE) {
1074             if(This->data->vtbl && This->data->vtbl->value) {
1075                 return This->data->vtbl->value(This, lcid, wFlags, pdp, pvarRes, pei, pspCaller);
1076             }
1077             FIXME("DISPATCH_CONSTRUCT flag but missing value function\n");
1078             return E_FAIL;
1079         }
1080         FIXME("DISPATCH_CONSTRUCT flag without DISPID_VALUE\n");
1081         return E_FAIL;
1082     }
1083
1084     if(is_dynamic_dispid(id)) {
1085         DWORD idx = id - DISPID_DYNPROP_0;
1086         dynamic_prop_t *prop;
1087
1088         if(!get_dynamic_data(This) || This->dynamic_data->prop_cnt <= idx)
1089             return DISP_E_UNKNOWNNAME;
1090
1091         prop = This->dynamic_data->props+idx;
1092
1093         switch(wFlags) {
1094         case DISPATCH_METHOD|DISPATCH_PROPERTYGET:
1095             if(!pvarRes)
1096                 return E_INVALIDARG;
1097             /* fall through */
1098         case DISPATCH_METHOD: {
1099             DISPID named_arg = DISPID_THIS;
1100             DISPPARAMS dp = {NULL, &named_arg, 0, 1};
1101             IDispatchEx *dispex;
1102
1103             if(V_VT(&prop->var) != VT_DISPATCH) {
1104                 FIXME("invoke %s\n", debugstr_variant(&prop->var));
1105                 return E_NOTIMPL;
1106             }
1107
1108             if(pdp->cNamedArgs) {
1109                 FIXME("named args not supported\n");
1110                 return E_NOTIMPL;
1111             }
1112
1113             dp.rgvarg = heap_alloc((pdp->cArgs+1)*sizeof(VARIANTARG));
1114             if(!dp.rgvarg)
1115                 return E_OUTOFMEMORY;
1116
1117             dp.cArgs = pdp->cArgs+1;
1118             memcpy(dp.rgvarg+1, pdp->rgvarg, pdp->cArgs*sizeof(VARIANTARG));
1119
1120             V_VT(dp.rgvarg) = VT_DISPATCH;
1121             V_DISPATCH(dp.rgvarg) = (IDispatch*)&This->IDispatchEx_iface;
1122
1123             hres = IDispatch_QueryInterface(V_DISPATCH(&prop->var), &IID_IDispatchEx, (void**)&dispex);
1124             TRACE("%s call\n", debugstr_w(This->dynamic_data->props[idx].name));
1125             if(SUCCEEDED(hres)) {
1126                 hres = IDispatchEx_InvokeEx(dispex, DISPID_VALUE, lcid, wFlags, &dp, pvarRes, pei, pspCaller);
1127                 IDispatchEx_Release(dispex);
1128             }else {
1129                 ULONG err = 0;
1130                 hres = IDispatch_Invoke(V_DISPATCH(&prop->var), DISPID_VALUE, &IID_NULL, lcid, wFlags, pdp, pvarRes, pei, &err);
1131             }
1132             TRACE("%s ret %08x\n", debugstr_w(This->dynamic_data->props[idx].name), hres);
1133
1134             heap_free(dp.rgvarg);
1135             return hres;
1136         }
1137         case DISPATCH_PROPERTYGET:
1138             if(prop->flags & DYNPROP_DELETED)
1139                 return DISP_E_UNKNOWNNAME;
1140             V_VT(pvarRes) = VT_EMPTY;
1141             return variant_copy(pvarRes, &prop->var);
1142         case DISPATCH_PROPERTYPUT|DISPATCH_PROPERTYPUTREF:
1143         case DISPATCH_PROPERTYPUT:
1144             if(pdp->cArgs != 1 || (pdp->cNamedArgs == 1 && *pdp->rgdispidNamedArgs != DISPID_PROPERTYPUT)
1145                || pdp->cNamedArgs > 1) {
1146                 FIXME("invalid args\n");
1147                 return E_INVALIDARG;
1148             }
1149
1150             TRACE("put %s\n", debugstr_variant(pdp->rgvarg));
1151             VariantClear(&prop->var);
1152             hres = variant_copy(&prop->var, pdp->rgvarg);
1153             if(FAILED(hres))
1154                 return hres;
1155
1156             prop->flags &= ~DYNPROP_DELETED;
1157             return S_OK;
1158         default:
1159             FIXME("unhandled wFlags %x\n", wFlags);
1160             return E_NOTIMPL;
1161         }
1162     }
1163
1164     return invoke_builtin_prop(This, id, lcid, wFlags, pdp, pvarRes, pei, pspCaller);
1165 }
1166
1167 static HRESULT WINAPI DispatchEx_DeleteMemberByName(IDispatchEx *iface, BSTR bstrName, DWORD grfdex)
1168 {
1169     DispatchEx *This = impl_from_IDispatchEx(iface);
1170
1171     TRACE("(%p)->(%s %x)\n", This, debugstr_w(bstrName), grfdex);
1172
1173     /* Not implemented by IE */
1174     return E_NOTIMPL;
1175 }
1176
1177 static HRESULT WINAPI DispatchEx_DeleteMemberByDispID(IDispatchEx *iface, DISPID id)
1178 {
1179     DispatchEx *This = impl_from_IDispatchEx(iface);
1180
1181     TRACE("(%p)->(%x)\n", This, id);
1182
1183     /* Not implemented by IE */
1184     return E_NOTIMPL;
1185 }
1186
1187 static HRESULT WINAPI DispatchEx_GetMemberProperties(IDispatchEx *iface, DISPID id, DWORD grfdexFetch, DWORD *pgrfdex)
1188 {
1189     DispatchEx *This = impl_from_IDispatchEx(iface);
1190     FIXME("(%p)->(%x %x %p)\n", This, id, grfdexFetch, pgrfdex);
1191     return E_NOTIMPL;
1192 }
1193
1194 static HRESULT WINAPI DispatchEx_GetMemberName(IDispatchEx *iface, DISPID id, BSTR *pbstrName)
1195 {
1196     DispatchEx *This = impl_from_IDispatchEx(iface);
1197     dispex_data_t *data;
1198     func_info_t *func;
1199     HRESULT hres;
1200
1201     TRACE("(%p)->(%x %p)\n", This, id, pbstrName);
1202
1203     if(is_dynamic_dispid(id)) {
1204         DWORD idx = id - DISPID_DYNPROP_0;
1205
1206         if(!get_dynamic_data(This) || This->dynamic_data->prop_cnt <= idx)
1207             return DISP_E_UNKNOWNNAME;
1208
1209         *pbstrName = SysAllocString(This->dynamic_data->props[idx].name);
1210         if(!*pbstrName)
1211             return E_OUTOFMEMORY;
1212
1213         return S_OK;
1214     }
1215
1216     data = get_dispex_data(This);
1217     if(!data)
1218         return E_FAIL;
1219
1220     hres = get_builtin_func(data, id, &func);
1221     if(FAILED(hres))
1222         return hres;
1223
1224     *pbstrName = SysAllocString(func->name);
1225     if(!*pbstrName)
1226         return E_OUTOFMEMORY;
1227     return S_OK;
1228 }
1229
1230 static HRESULT WINAPI DispatchEx_GetNextDispID(IDispatchEx *iface, DWORD grfdex, DISPID id, DISPID *pid)
1231 {
1232     DispatchEx *This = impl_from_IDispatchEx(iface);
1233     dispex_data_t *data;
1234     func_info_t *func;
1235     HRESULT hres;
1236
1237     TRACE("(%p)->(%x %x %p)\n", This, grfdex, id, pid);
1238
1239     if(is_dynamic_dispid(id)) {
1240         DWORD idx = id - DISPID_DYNPROP_0;
1241
1242         if(!get_dynamic_data(This) || This->dynamic_data->prop_cnt <= idx)
1243             return DISP_E_UNKNOWNNAME;
1244
1245         while(++idx < This->dynamic_data->prop_cnt && This->dynamic_data->props[idx].flags & DYNPROP_DELETED);
1246
1247         if(idx == This->dynamic_data->prop_cnt) {
1248             *pid = DISPID_STARTENUM;
1249             return S_FALSE;
1250         }
1251
1252         *pid = DISPID_DYNPROP_0+idx;
1253         return S_OK;
1254     }
1255
1256     data = get_dispex_data(This);
1257     if(!data)
1258         return E_FAIL;
1259
1260     if(id == DISPID_STARTENUM) {
1261         func = data->funcs;
1262     }else {
1263         hres = get_builtin_func(data, id, &func);
1264         if(FAILED(hres))
1265             return hres;
1266         func++;
1267     }
1268
1269     while(func < data->funcs+data->func_cnt) {
1270         /* FIXME: Skip hidden properties */
1271         if(func->func_disp_idx == -1) {
1272             *pid = func->id;
1273             return S_OK;
1274         }
1275         func++;
1276     }
1277
1278     if(get_dynamic_data(This) && This->dynamic_data->prop_cnt) {
1279         *pid = DISPID_DYNPROP_0;
1280         return S_OK;
1281     }
1282
1283     *pid = DISPID_STARTENUM;
1284     return S_FALSE;
1285 }
1286
1287 static HRESULT WINAPI DispatchEx_GetNameSpaceParent(IDispatchEx *iface, IUnknown **ppunk)
1288 {
1289     DispatchEx *This = impl_from_IDispatchEx(iface);
1290     FIXME("(%p)->(%p)\n", This, ppunk);
1291     return E_NOTIMPL;
1292 }
1293
1294 static IDispatchExVtbl DispatchExVtbl = {
1295     DispatchEx_QueryInterface,
1296     DispatchEx_AddRef,
1297     DispatchEx_Release,
1298     DispatchEx_GetTypeInfoCount,
1299     DispatchEx_GetTypeInfo,
1300     DispatchEx_GetIDsOfNames,
1301     DispatchEx_Invoke,
1302     DispatchEx_GetDispID,
1303     DispatchEx_InvokeEx,
1304     DispatchEx_DeleteMemberByName,
1305     DispatchEx_DeleteMemberByDispID,
1306     DispatchEx_GetMemberProperties,
1307     DispatchEx_GetMemberName,
1308     DispatchEx_GetNextDispID,
1309     DispatchEx_GetNameSpaceParent
1310 };
1311
1312 BOOL dispex_query_interface(DispatchEx *This, REFIID riid, void **ppv)
1313 {
1314     static const IID IID_UndocumentedScriptIface =
1315         {0x719c3050,0xf9d3,0x11cf,{0xa4,0x93,0x00,0x40,0x05,0x23,0xa8,0xa0}};
1316     static const IID IID_IDispatchJS =
1317         {0x719c3050,0xf9d3,0x11cf,{0xa4,0x93,0x00,0x40,0x05,0x23,0xa8,0xa6}};
1318
1319     if(IsEqualGUID(&IID_IDispatch, riid)) {
1320         TRACE("(%p)->(IID_IDispatch %p)\n", This, ppv);
1321         *ppv = &This->IDispatchEx_iface;
1322     }else if(IsEqualGUID(&IID_IDispatchEx, riid)) {
1323         TRACE("(%p)->(IID_IDispatchEx %p)\n", This, ppv);
1324         *ppv = &This->IDispatchEx_iface;
1325     }else if(IsEqualGUID(&IID_IDispatchJS, riid)) {
1326         TRACE("(%p)->(IID_IDispatchJS %p) returning NULL\n", This, ppv);
1327         *ppv = NULL;
1328     }else if(IsEqualGUID(&IID_UndocumentedScriptIface, riid)) {
1329         TRACE("(%p)->(IID_UndocumentedScriptIface %p) returning NULL\n", This, ppv);
1330         *ppv = NULL;
1331     }else {
1332         return FALSE;
1333     }
1334
1335     if(*ppv)
1336         IUnknown_AddRef((IUnknown*)*ppv);
1337     return TRUE;
1338 }
1339
1340 void release_dispex(DispatchEx *This)
1341 {
1342     dynamic_prop_t *prop;
1343
1344     if(!This->dynamic_data)
1345         return;
1346
1347     for(prop = This->dynamic_data->props; prop < This->dynamic_data->props + This->dynamic_data->prop_cnt; prop++) {
1348         VariantClear(&prop->var);
1349         heap_free(prop->name);
1350     }
1351
1352     heap_free(This->dynamic_data->props);
1353
1354     if(This->dynamic_data->func_disps) {
1355         unsigned i;
1356
1357         for(i=0; i < This->data->data->func_disp_cnt; i++) {
1358             if(This->dynamic_data->func_disps[i]) {
1359                 release_dispex(&This->dynamic_data->func_disps[i]->dispex);
1360                 heap_free(This->dynamic_data->func_disps[i]);
1361             }
1362         }
1363
1364         heap_free(This->dynamic_data->func_disps);
1365     }
1366
1367     heap_free(This->dynamic_data);
1368 }
1369
1370 void init_dispex(DispatchEx *dispex, IUnknown *outer, dispex_static_data_t *data)
1371 {
1372     dispex->IDispatchEx_iface.lpVtbl = &DispatchExVtbl;
1373     dispex->outer = outer;
1374     dispex->data = data;
1375     dispex->dynamic_data = NULL;
1376 }