dlls/ole32/tests/marshal.c

   1 /*
   2  * Marshaling Tests
   3  *
   4  * Copyright 2004 Robert Shearman
   5  *
   6  * This library is free software; you can redistribute it and/or
   7  * modify it under the terms of the GNU Lesser General Public
   8  * License as published by the Free Software Foundation; either
   9  * version 2.1 of the License, or (at your option) any later version.
  10  *
  11  * This library is distributed in the hope that it will be useful,
  12  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  13  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  14  * Lesser General Public License for more details.
  15  *
  16  * You should have received a copy of the GNU Lesser General Public
  17  * License along with this library; if not, write to the Free Software
  18  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
  19  */
  20
  21 #define _WIN32_DCOM
  22 #define COBJMACROS
  23 #define CONST_VTABLE
  24
  25 #include <stdarg.h>
  26 #include <stdio.h>
  27
  28 #include "windef.h"
  29 #include "winbase.h"
  30 #include "objbase.h"
  31 #include "olectl.h"
  32 #include "shlguid.h"
  33 #include "shobjidl.h"
  34 #include "initguid.h"
  35
  36 #include "wine/test.h"
  37
  38 DEFINE_GUID(CLSID_StdGlobalInterfaceTable,0x00000323,0x0000,0x0000,0xc0,0x00,0x00,0x00,0x00,0x00,0x00,0x46);
  39 DEFINE_GUID(CLSID_ManualResetEvent,       0x0000032c,0x0000,0x0000,0xc0,0x00,0x00,0x00,0x00,0x00,0x00,0x46);
  40
  41 /* functions that are not present on all versions of Windows */
  42 static HRESULT (WINAPI * pCoInitializeEx)(LPVOID lpReserved, DWORD dwCoInit);
  43
  44 /* helper macros to make tests a bit leaner */
  45 #define ok_more_than_one_lock() ok(cLocks > 0, "Number of locks should be > 0, but actually is %d\n", cLocks)
  46 #define ok_no_locks() ok(cLocks == 0, "Number of locks should be 0, but actually is %d\n", cLocks)
  47 #define ok_ole_success(hr, func) ok(hr == S_OK, #func " failed with error 0x%08x\n", hr)
  48
  49 static const IID IID_IWineTest =
  50 {
  51     0x5201163f,
  52     0x8164,
  53     0x4fd0,
  54     {0xa1, 0xa2, 0x5d, 0x5a, 0x36, 0x54, 0xd3, 0xbd}
  55 }; /* 5201163f-8164-4fd0-a1a2-5d5a3654d3bd */
  56
  57 static const IID IID_IRemUnknown =
  58 {
  59     0x00000131,
  60     0x0000,
  61     0x0000,
  62     {0xc0,0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x46}
  63 };
  64
  65 #define EXTENTID_WineTest IID_IWineTest
  66 #define CLSID_WineTest IID_IWineTest
  67
  68 static const CLSID CLSID_WineOOPTest =
  69 {
  70     0x5201163f,
  71     0x8164,
  72     0x4fd0,
  73     {0xa1, 0xa2, 0x5d, 0x5a, 0x36, 0x54, 0xd3, 0xbd}
  74 }; /* 5201163f-8164-4fd0-a1a2-5d5a3654d3bd */
  75
  76 static void test_cocreateinstance_proxy(void)
  77 {
  78     IUnknown *pProxy;
  79     IMultiQI *pMQI;
  80     HRESULT hr;
  81
  82     pCoInitializeEx(NULL, COINIT_MULTITHREADED);
  83
  84     hr = CoCreateInstance(&CLSID_ShellDesktop, NULL, CLSCTX_INPROC, &IID_IUnknown, (void **)&pProxy);
  85     ok_ole_success(hr, CoCreateInstance);
  86     hr = IUnknown_QueryInterface(pProxy, &IID_IMultiQI, (void **)&pMQI);
  87     ok(hr == S_OK, "created object is not a proxy, so was created in the wrong apartment\n");
  88     if (hr == S_OK)
  89         IMultiQI_Release(pMQI);
  90     IUnknown_Release(pProxy);
  91
  92     CoUninitialize();
  93 }
  94
  95 static const LARGE_INTEGER ullZero;
  96 static LONG cLocks;
  97
  98 static void LockModule(void)
  99 {
 100     InterlockedIncrement(&cLocks);
 101 }
 102
 103 static void UnlockModule(void)
 104 {
 105     InterlockedDecrement(&cLocks);
 106 }
 107
 108
 109 static HRESULT WINAPI Test_IUnknown_QueryInterface(
 110     LPUNKNOWN iface,
 111     REFIID riid,
 112     LPVOID *ppvObj)
 113 {
 114     if (ppvObj == NULL) return E_POINTER;
 115
 116     if (IsEqualGUID(riid, &IID_IUnknown))
 117     {
 118         *ppvObj = iface;
 119         IUnknown_AddRef(iface);
 120         return S_OK;
 121     }
 122
 123     *ppvObj = NULL;
 124     return E_NOINTERFACE;
 125 }
 126
 127 static ULONG WINAPI Test_IUnknown_AddRef(LPUNKNOWN iface)
 128 {
 129     LockModule();
 130     return 2; /* non-heap-based object */
 131 }
 132
 133 static ULONG WINAPI Test_IUnknown_Release(LPUNKNOWN iface)
 134 {
 135     UnlockModule();
 136     return 1; /* non-heap-based object */
 137 }
 138
 139 static const IUnknownVtbl TestUnknown_Vtbl =
 140 {
 141     Test_IUnknown_QueryInterface,
 142     Test_IUnknown_AddRef,
 143     Test_IUnknown_Release,
 144 };
 145
 146 static IUnknown Test_Unknown = { &TestUnknown_Vtbl };
 147
 148
 149 static HRESULT WINAPI Test_IClassFactory_QueryInterface(
 150     LPCLASSFACTORY iface,
 151     REFIID riid,
 152     LPVOID *ppvObj)
 153 {
 154     if (ppvObj == NULL) return E_POINTER;
 155
 156     if (IsEqualGUID(riid, &IID_IUnknown) ||
 157         IsEqualGUID(riid, &IID_IClassFactory) ||
 158         /* the only other interface Wine is currently able to marshal (for testing two proxies) */
 159         IsEqualGUID(riid, &IID_IRemUnknown))
 160     {
 161         *ppvObj = iface;
 162         IClassFactory_AddRef(iface);
 163         return S_OK;
 164     }
 165
 166     *ppvObj = NULL;
 167     return E_NOINTERFACE;
 168 }
 169
 170 static ULONG WINAPI Test_IClassFactory_AddRef(LPCLASSFACTORY iface)
 171 {
 172     LockModule();
 173     return 2; /* non-heap-based object */
 174 }
 175
 176 static ULONG WINAPI Test_IClassFactory_Release(LPCLASSFACTORY iface)
 177 {
 178     UnlockModule();
 179     return 1; /* non-heap-based object */
 180 }
 181
 182 static HRESULT WINAPI Test_IClassFactory_CreateInstance(
 183     LPCLASSFACTORY iface,
 184     LPUNKNOWN pUnkOuter,
 185     REFIID riid,
 186     LPVOID *ppvObj)
 187 {
 188     if (pUnkOuter) return CLASS_E_NOAGGREGATION;
 189     return IUnknown_QueryInterface((IUnknown*)&Test_Unknown, riid, ppvObj);
 190 }
 191
 192 static HRESULT WINAPI Test_IClassFactory_LockServer(
 193     LPCLASSFACTORY iface,
 194     BOOL fLock)
 195 {
 196     return S_OK;
 197 }
 198
 199 static const IClassFactoryVtbl TestClassFactory_Vtbl =
 200 {
 201     Test_IClassFactory_QueryInterface,
 202     Test_IClassFactory_AddRef,
 203     Test_IClassFactory_Release,
 204     Test_IClassFactory_CreateInstance,
 205     Test_IClassFactory_LockServer
 206 };
 207
 208 static IClassFactory Test_ClassFactory = { &TestClassFactory_Vtbl };
 209
 210 #define RELEASEMARSHALDATA WM_USER
 211
 212 struct host_object_data
 213 {
 214     IStream *stream;
 215     IID iid;
 216     IUnknown *object;
 217     MSHLFLAGS marshal_flags;
 218     HANDLE marshal_event;
 219     IMessageFilter *filter;
 220 };
 221
 222 static DWORD CALLBACK host_object_proc(LPVOID p)
 223 {
 224     struct host_object_data *data = p;
 225     HRESULT hr;
 226     MSG msg;
 227
 228     pCoInitializeEx(NULL, COINIT_APARTMENTTHREADED);
 229
 230     if (data->filter)
 231     {
 232         IMessageFilter * prev_filter = NULL;
 233         hr = CoRegisterMessageFilter(data->filter, &prev_filter);
 234         if (prev_filter) IMessageFilter_Release(prev_filter);
 235         ok_ole_success(hr, CoRegisterMessageFilter);
 236     }
 237
 238     hr = CoMarshalInterface(data->stream, &data->iid, data->object, MSHCTX_INPROC, NULL, data->marshal_flags);
 239     ok_ole_success(hr, CoMarshalInterface);
 240
 241     /* force the message queue to be created before signaling parent thread */
 242     PeekMessage(&msg, NULL, WM_USER, WM_USER, PM_NOREMOVE);
 243
 244     SetEvent(data->marshal_event);
 245
 246     while (GetMessage(&msg, NULL, 0, 0))
 247     {
 248         if (msg.hwnd == NULL && msg.message == RELEASEMARSHALDATA)
 249         {
 250             CoReleaseMarshalData(data->stream);
 251             SetEvent((HANDLE)msg.lParam);
 252         }
 253         else
 254             DispatchMessage(&msg);
 255     }
 256
 257     HeapFree(GetProcessHeap(), 0, data);
 258
 259     CoUninitialize();
 260
 261     return hr;
 262 }
 263
 264 static DWORD start_host_object2(IStream *stream, REFIID riid, IUnknown *object, MSHLFLAGS marshal_flags, IMessageFilter *filter, HANDLE *thread)
 265 {
 266     DWORD tid = 0;
 267     HANDLE marshal_event = CreateEvent(NULL, FALSE, FALSE, NULL);
 268     struct host_object_data *data = HeapAlloc(GetProcessHeap(), 0, sizeof(*data));
 269
 270     data->stream = stream;
 271     data->iid = *riid;
 272     data->object = object;
 273     data->marshal_flags = marshal_flags;
 274     data->marshal_event = marshal_event;
 275     data->filter = filter;
 276
 277     *thread = CreateThread(NULL, 0, host_object_proc, data, 0, &tid);
 278
 279     /* wait for marshaling to complete before returning */
 280     ok( !WaitForSingleObject(marshal_event, 10000), "wait timed out\n" );
 281     CloseHandle(marshal_event);
 282
 283     return tid;
 284 }
 285
 286 static DWORD start_host_object(IStream *stream, REFIID riid, IUnknown *object, MSHLFLAGS marshal_flags, HANDLE *thread)
 287 {
 288     return start_host_object2(stream, riid, object, marshal_flags, NULL, thread);
 289 }
 290
 291 /* asks thread to release the marshal data because it has to be done by the
 292  * same thread that marshaled the interface in the first place. */
 293 static void release_host_object(DWORD tid)
 294 {
 295     HANDLE event = CreateEvent(NULL, FALSE, FALSE, NULL);
 296     PostThreadMessage(tid, RELEASEMARSHALDATA, 0, (LPARAM)event);
 297     ok( !WaitForSingleObject(event, 10000), "wait timed out\n" );
 298     CloseHandle(event);
 299 }
 300
 301 static void end_host_object(DWORD tid, HANDLE thread)
 302 {
 303     BOOL ret = PostThreadMessage(tid, WM_QUIT, 0, 0);
 304     ok(ret, "PostThreadMessage failed with error %d\n", GetLastError());
 305     /* be careful of races - don't return until hosting thread has terminated */
 306     ok( !WaitForSingleObject(thread, 10000), "wait timed out\n" );
 307     CloseHandle(thread);
 308 }
 309
 310 /* tests failure case of interface not having a marshaler specified in the
 311  * registry */
 312 static void test_no_marshaler(void)
 313 {
 314     IStream *pStream;
 315     HRESULT hr;
 316
 317     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
 318     ok_ole_success(hr, CreateStreamOnHGlobal);
 319     hr = CoMarshalInterface(pStream, &IID_IWineTest, (IUnknown*)&Test_ClassFactory, MSHCTX_INPROC, NULL, MSHLFLAGS_NORMAL);
 320     ok(hr == E_NOINTERFACE, "CoMarshalInterface should have returned E_NOINTERFACE instead of 0x%08x\n", hr);
 321
 322     IStream_Release(pStream);
 323 }
 324
 325 /* tests normal marshal and then release without unmarshaling */
 326 static void test_normal_marshal_and_release(void)
 327 {
 328     HRESULT hr;
 329     IStream *pStream = NULL;
 330
 331     cLocks = 0;
 332
 333     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
 334     ok_ole_success(hr, CreateStreamOnHGlobal);
 335     hr = CoMarshalInterface(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHCTX_INPROC, NULL, MSHLFLAGS_NORMAL);
 336     ok_ole_success(hr, CoMarshalInterface);
 337
 338     ok_more_than_one_lock();
 339
 340     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 341     hr = CoReleaseMarshalData(pStream);
 342     ok_ole_success(hr, CoReleaseMarshalData);
 343     IStream_Release(pStream);
 344
 345     ok_no_locks();
 346 }
 347
 348 /* tests success case of a same-thread marshal and unmarshal */
 349 static void test_normal_marshal_and_unmarshal(void)
 350 {
 351     HRESULT hr;
 352     IStream *pStream = NULL;
 353     IUnknown *pProxy = NULL;
 354
 355     cLocks = 0;
 356
 357     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
 358     ok_ole_success(hr, CreateStreamOnHGlobal);
 359     hr = CoMarshalInterface(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHCTX_INPROC, NULL, MSHLFLAGS_NORMAL);
 360     ok_ole_success(hr, CoMarshalInterface);
 361
 362     ok_more_than_one_lock();
 363
 364     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 365     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy);
 366     ok_ole_success(hr, CoUnmarshalInterface);
 367     IStream_Release(pStream);
 368
 369     ok_more_than_one_lock();
 370
 371     IUnknown_Release(pProxy);
 372
 373     ok_no_locks();
 374 }
 375
 376 /* tests failure case of unmarshaling a freed object */
 377 static void test_marshal_and_unmarshal_invalid(void)
 378 {
 379     HRESULT hr;
 380     IStream *pStream = NULL;
 381     IClassFactory *pProxy = NULL;
 382     DWORD tid;
 383     void * dummy;
 384     HANDLE thread;
 385
 386     cLocks = 0;
 387
 388     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
 389     ok_ole_success(hr, CreateStreamOnHGlobal);
 390     tid = start_host_object(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHLFLAGS_NORMAL, &thread);
 391
 392     ok_more_than_one_lock();
 393
 394     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 395     hr = CoReleaseMarshalData(pStream);
 396     ok_ole_success(hr, CoReleaseMarshalData);
 397
 398     ok_no_locks();
 399
 400     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 401     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy);
 402     todo_wine { ok_ole_success(hr, CoUnmarshalInterface); }
 403
 404     ok_no_locks();
 405
 406     if (pProxy)
 407     {
 408         hr = IClassFactory_CreateInstance(pProxy, NULL, &IID_IUnknown, &dummy);
 409         ok(hr == RPC_E_DISCONNECTED, "Remote call should have returned RPC_E_DISCONNECTED, instead of 0x%08x\n", hr);
 410
 411         IClassFactory_Release(pProxy);
 412     }
 413
 414     IStream_Release(pStream);
 415
 416     end_host_object(tid, thread);
 417 }
 418
 419 static void test_same_apartment_unmarshal_failure(void)
 420 {
 421     HRESULT hr;
 422     IStream *pStream;
 423     IUnknown *pProxy;
 424     static const LARGE_INTEGER llZero;
 425
 426     cLocks = 0;
 427
 428     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
 429     ok_ole_success(hr, CreateStreamOnHGlobal);
 430
 431     hr = CoMarshalInterface(pStream, &IID_IUnknown, (IUnknown *)&Test_ClassFactory, MSHCTX_INPROC, NULL, MSHLFLAGS_NORMAL);
 432     ok_ole_success(hr, CoMarshalInterface);
 433
 434     ok_more_than_one_lock();
 435
 436     hr = IStream_Seek(pStream, llZero, STREAM_SEEK_SET, NULL);
 437     ok_ole_success(hr, IStream_Seek);
 438
 439     hr = CoUnmarshalInterface(pStream, &IID_IParseDisplayName, (void **)&pProxy);
 440     ok(hr == E_NOINTERFACE, "CoUnmarshalInterface should have returned E_NOINTERFACE instead of 0x%08x\n", hr);
 441
 442     ok_no_locks();
 443
 444     IStream_Release(pStream);
 445 }
 446
 447 /* tests success case of an interthread marshal */
 448 static void test_interthread_marshal_and_unmarshal(void)
 449 {
 450     HRESULT hr;
 451     IStream *pStream = NULL;
 452     IUnknown *pProxy = NULL;
 453     DWORD tid;
 454     HANDLE thread;
 455
 456     cLocks = 0;
 457
 458     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
 459     ok_ole_success(hr, CreateStreamOnHGlobal);
 460     tid = start_host_object(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHLFLAGS_NORMAL, &thread);
 461
 462     ok_more_than_one_lock();
 463
 464     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 465     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy);
 466     ok_ole_success(hr, CoUnmarshalInterface);
 467     IStream_Release(pStream);
 468
 469     ok_more_than_one_lock();
 470
 471     IUnknown_Release(pProxy);
 472
 473     ok_no_locks();
 474
 475     end_host_object(tid, thread);
 476 }
 477
 478 /* the number of external references that Wine's proxy manager normally gives
 479  * out, so we can test the border case of running out of references */
 480 #define NORMALEXTREFS 5
 481
 482 /* tests success case of an interthread marshal and then marshaling the proxy */
 483 static void test_proxy_marshal_and_unmarshal(void)
 484 {
 485     HRESULT hr;
 486     IStream *pStream = NULL;
 487     IUnknown *pProxy = NULL;
 488     IUnknown *pProxy2 = NULL;
 489     DWORD tid;
 490     HANDLE thread;
 491     int i;
 492
 493     cLocks = 0;
 494
 495     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
 496     ok_ole_success(hr, CreateStreamOnHGlobal);
 497     tid = start_host_object(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHLFLAGS_NORMAL, &thread);
 498
 499     ok_more_than_one_lock();
 500
 501     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 502     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy);
 503     ok_ole_success(hr, CoUnmarshalInterface);
 504
 505     ok_more_than_one_lock();
 506
 507     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 508     /* marshal the proxy */
 509     hr = CoMarshalInterface(pStream, &IID_IClassFactory, pProxy, MSHCTX_INPROC, NULL, MSHLFLAGS_NORMAL);
 510     ok_ole_success(hr, CoMarshalInterface);
 511
 512     ok_more_than_one_lock();
 513
 514     /* marshal 5 more times to exhaust the normal external references of 5 */
 515     for (i = 0; i < NORMALEXTREFS; i++)
 516     {
 517         hr = CoMarshalInterface(pStream, &IID_IClassFactory, pProxy, MSHCTX_INPROC, NULL, MSHLFLAGS_NORMAL);
 518         ok_ole_success(hr, CoMarshalInterface);
 519     }
 520
 521     ok_more_than_one_lock();
 522
 523     /* release the original proxy to test that we successfully keep the
 524      * original object alive */
 525     IUnknown_Release(pProxy);
 526
 527     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 528     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy2);
 529     ok_ole_success(hr, CoUnmarshalInterface);
 530
 531     ok_more_than_one_lock();
 532
 533     IUnknown_Release(pProxy2);
 534
 535     /* unmarshal all of the proxies to check that the object stub still exists */
 536     for (i = 0; i < NORMALEXTREFS; i++)
 537     {
 538         hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy2);
 539         ok_ole_success(hr, CoUnmarshalInterface);
 540
 541         IUnknown_Release(pProxy2);
 542     }
 543
 544     ok_no_locks();
 545
 546     IStream_Release(pStream);
 547
 548     end_host_object(tid, thread);
 549 }
 550
 551 /* tests success case of an interthread marshal and then marshaling the proxy
 552  * using an iid that hasn't previously been unmarshaled */
 553 static void test_proxy_marshal_and_unmarshal2(void)
 554 {
 555     HRESULT hr;
 556     IStream *pStream = NULL;
 557     IUnknown *pProxy = NULL;
 558     IUnknown *pProxy2 = NULL;
 559     DWORD tid;
 560     HANDLE thread;
 561
 562     cLocks = 0;
 563
 564     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
 565     ok_ole_success(hr, CreateStreamOnHGlobal);
 566     tid = start_host_object(pStream, &IID_IUnknown, (IUnknown*)&Test_ClassFactory, MSHLFLAGS_NORMAL, &thread);
 567
 568     ok_more_than_one_lock();
 569
 570     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 571     hr = CoUnmarshalInterface(pStream, &IID_IUnknown, (void **)&pProxy);
 572     ok_ole_success(hr, CoUnmarshalInterface);
 573
 574     ok_more_than_one_lock();
 575
 576     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 577     /* marshal the proxy */
 578     hr = CoMarshalInterface(pStream, &IID_IClassFactory, pProxy, MSHCTX_INPROC, NULL, MSHLFLAGS_NORMAL);
 579     ok_ole_success(hr, CoMarshalInterface);
 580
 581     ok_more_than_one_lock();
 582
 583     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 584     /* unmarshal the second proxy to the object */
 585     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy2);
 586     ok_ole_success(hr, CoUnmarshalInterface);
 587     IStream_Release(pStream);
 588
 589     /* now the proxies should be as follows:
 590      *  pProxy -> &Test_ClassFactory
 591      *  pProxy2 -> &Test_ClassFactory
 592      * they should NOT be as follows:
 593      *  pProxy -> &Test_ClassFactory
 594      *  pProxy2 -> pProxy
 595      * the above can only really be tested by looking in +ole traces
 596      */
 597
 598     ok_more_than_one_lock();
 599
 600     IUnknown_Release(pProxy);
 601
 602     ok_more_than_one_lock();
 603
 604     IUnknown_Release(pProxy2);
 605
 606     ok_no_locks();
 607
 608     end_host_object(tid, thread);
 609 }
 610
 611 /* tests success case of an interthread marshal and then table-weak-marshaling the proxy */
 612 static void test_proxy_marshal_and_unmarshal_weak(void)
 613 {
 614     HRESULT hr;
 615     IStream *pStream = NULL;
 616     IUnknown *pProxy = NULL;
 617     IUnknown *pProxy2 = NULL;
 618     DWORD tid;
 619     HANDLE thread;
 620
 621     cLocks = 0;
 622
 623     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
 624     ok_ole_success(hr, CreateStreamOnHGlobal);
 625     tid = start_host_object(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHLFLAGS_NORMAL, &thread);
 626
 627     ok_more_than_one_lock();
 628
 629     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 630     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy);
 631     ok_ole_success(hr, CoUnmarshalInterface);
 632
 633     ok_more_than_one_lock();
 634
 635     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 636     /* marshal the proxy */
 637     hr = CoMarshalInterface(pStream, &IID_IClassFactory, pProxy, MSHCTX_INPROC, NULL, MSHLFLAGS_TABLEWEAK);
 638     ok_ole_success(hr, CoMarshalInterface);
 639
 640     ok_more_than_one_lock();
 641
 642     /* release the original proxy to test that we successfully keep the
 643      * original object alive */
 644     IUnknown_Release(pProxy);
 645
 646     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 647     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy2);
 648     todo_wine
 649     ok(hr == CO_E_OBJNOTREG, "CoUnmarshalInterface should return CO_E_OBJNOTREG instead of 0x%08x\n", hr);
 650
 651     ok_no_locks();
 652
 653     IStream_Release(pStream);
 654
 655     end_host_object(tid, thread);
 656 }
 657
 658 /* tests success case of an interthread marshal and then table-strong-marshaling the proxy */
 659 static void test_proxy_marshal_and_unmarshal_strong(void)
 660 {
 661     HRESULT hr;
 662     IStream *pStream = NULL;
 663     IUnknown *pProxy = NULL;
 664     IUnknown *pProxy2 = NULL;
 665     DWORD tid;
 666     HANDLE thread;
 667
 668     cLocks = 0;
 669
 670     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
 671     ok_ole_success(hr, CreateStreamOnHGlobal);
 672     tid = start_host_object(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHLFLAGS_NORMAL, &thread);
 673
 674     ok_more_than_one_lock();
 675
 676     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 677     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy);
 678     ok_ole_success(hr, CoUnmarshalInterface);
 679
 680     ok_more_than_one_lock();
 681
 682     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 683     /* marshal the proxy */
 684     hr = CoMarshalInterface(pStream, &IID_IClassFactory, pProxy, MSHCTX_INPROC, NULL, MSHLFLAGS_TABLESTRONG);
 685     ok(hr == S_OK /* WinNT */ || hr == E_INVALIDARG /* Win9x */,
 686         "CoMarshalInterface should have return S_OK or E_INVALIDARG instead of 0x%08x\n", hr);
 687     if (FAILED(hr))
 688     {
 689         IUnknown_Release(pProxy);
 690         goto end;
 691     }
 692
 693     ok_more_than_one_lock();
 694
 695     /* release the original proxy to test that we successfully keep the
 696      * original object alive */
 697     IUnknown_Release(pProxy);
 698
 699     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 700     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy2);
 701     ok_ole_success(hr, CoUnmarshalInterface);
 702
 703     ok_more_than_one_lock();
 704
 705     IUnknown_Release(pProxy2);
 706
 707     ok_more_than_one_lock();
 708
 709 end:
 710     IStream_Release(pStream);
 711
 712     end_host_object(tid, thread);
 713
 714     ok_no_locks();
 715 }
 716
 717 /* tests that stubs are released when the containing apartment is destroyed */
 718 static void test_marshal_stub_apartment_shutdown(void)
 719 {
 720     HRESULT hr;
 721     IStream *pStream = NULL;
 722     IUnknown *pProxy = NULL;
 723     DWORD tid;
 724     HANDLE thread;
 725
 726     cLocks = 0;
 727
 728     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
 729     ok_ole_success(hr, CreateStreamOnHGlobal);
 730     tid = start_host_object(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHLFLAGS_NORMAL, &thread);
 731
 732     ok_more_than_one_lock();
 733
 734     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 735     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy);
 736     ok_ole_success(hr, CoUnmarshalInterface);
 737     IStream_Release(pStream);
 738
 739     ok_more_than_one_lock();
 740
 741     end_host_object(tid, thread);
 742
 743     ok_no_locks();
 744
 745     IUnknown_Release(pProxy);
 746
 747     ok_no_locks();
 748 }
 749
 750 /* tests that proxies are released when the containing apartment is destroyed */
 751 static void test_marshal_proxy_apartment_shutdown(void)
 752 {
 753     HRESULT hr;
 754     IStream *pStream = NULL;
 755     IUnknown *pProxy = NULL;
 756     DWORD tid;
 757     HANDLE thread;
 758
 759     cLocks = 0;
 760
 761     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
 762     ok_ole_success(hr, CreateStreamOnHGlobal);
 763     tid = start_host_object(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHLFLAGS_NORMAL, &thread);
 764
 765     ok_more_than_one_lock();
 766
 767     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 768     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy);
 769     ok_ole_success(hr, CoUnmarshalInterface);
 770     IStream_Release(pStream);
 771
 772     ok_more_than_one_lock();
 773
 774     CoUninitialize();
 775
 776     ok_no_locks();
 777
 778     IUnknown_Release(pProxy);
 779
 780     ok_no_locks();
 781
 782     end_host_object(tid, thread);
 783
 784     pCoInitializeEx(NULL, COINIT_APARTMENTTHREADED);
 785 }
 786
 787 /* tests that proxies are released when the containing mta apartment is destroyed */
 788 static void test_marshal_proxy_mta_apartment_shutdown(void)
 789 {
 790     HRESULT hr;
 791     IStream *pStream = NULL;
 792     IUnknown *pProxy = NULL;
 793     DWORD tid;
 794     HANDLE thread;
 795
 796     CoUninitialize();
 797     pCoInitializeEx(NULL, COINIT_MULTITHREADED);
 798
 799     cLocks = 0;
 800
 801     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
 802     ok_ole_success(hr, CreateStreamOnHGlobal);
 803     tid = start_host_object(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHLFLAGS_NORMAL, &thread);
 804
 805     ok_more_than_one_lock();
 806
 807     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 808     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy);
 809     ok_ole_success(hr, CoUnmarshalInterface);
 810     IStream_Release(pStream);
 811
 812     ok_more_than_one_lock();
 813
 814     CoUninitialize();
 815
 816     ok_no_locks();
 817
 818     IUnknown_Release(pProxy);
 819
 820     ok_no_locks();
 821
 822     end_host_object(tid, thread);
 823
 824     pCoInitializeEx(NULL, COINIT_APARTMENTTHREADED);
 825 }
 826
 827 struct ncu_params
 828 {
 829     LPSTREAM stream;
 830     HANDLE marshal_event;
 831     HANDLE unmarshal_event;
 832 };
 833
 834 /* helper for test_no_couninitialize_server */
 835 static DWORD CALLBACK no_couninitialize_server_proc(LPVOID p)
 836 {
 837     struct ncu_params *ncu_params = p;
 838     HRESULT hr;
 839
 840     pCoInitializeEx(NULL, COINIT_MULTITHREADED);
 841
 842     hr = CoMarshalInterface(ncu_params->stream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHCTX_INPROC, NULL, MSHLFLAGS_NORMAL);
 843     ok_ole_success(hr, CoMarshalInterface);
 844
 845     SetEvent(ncu_params->marshal_event);
 846
 847     ok( !WaitForSingleObject(ncu_params->unmarshal_event, 10000), "wait timed out\n" );
 848
 849     /* die without calling CoUninitialize */
 850
 851     return 0;
 852 }
 853
 854 /* tests apartment that an apartment with a stub is released without deadlock
 855  * if the owning thread exits */
 856 static void test_no_couninitialize_server(void)
 857 {
 858     HRESULT hr;
 859     IStream *pStream = NULL;
 860     IUnknown *pProxy = NULL;
 861     DWORD tid;
 862     HANDLE thread;
 863     struct ncu_params ncu_params;
 864
 865     cLocks = 0;
 866
 867     ncu_params.marshal_event = CreateEvent(NULL, TRUE, FALSE, NULL);
 868     ncu_params.unmarshal_event = CreateEvent(NULL, TRUE, FALSE, NULL);
 869
 870     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
 871     ok_ole_success(hr, CreateStreamOnHGlobal);
 872     ncu_params.stream = pStream;
 873
 874     thread = CreateThread(NULL, 0, no_couninitialize_server_proc, &ncu_params, 0, &tid);
 875
 876     ok( !WaitForSingleObject(ncu_params.marshal_event, 10000), "wait timed out\n" );
 877     ok_more_than_one_lock();
 878
 879     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 880     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy);
 881     ok_ole_success(hr, CoUnmarshalInterface);
 882     IStream_Release(pStream);
 883
 884     ok_more_than_one_lock();
 885
 886     SetEvent(ncu_params.unmarshal_event);
 887     ok( !WaitForSingleObject(thread, 10000), "wait timed out\n" );
 888
 889     ok_no_locks();
 890
 891     CloseHandle(thread);
 892     CloseHandle(ncu_params.marshal_event);
 893     CloseHandle(ncu_params.unmarshal_event);
 894
 895     IUnknown_Release(pProxy);
 896
 897     ok_no_locks();
 898 }
 899
 900 /* STA -> STA call during DLL_THREAD_DETACH */
 901 static DWORD CALLBACK no_couninitialize_client_proc(LPVOID p)
 902 {
 903     struct ncu_params *ncu_params = p;
 904     HRESULT hr;
 905     IUnknown *pProxy = NULL;
 906
 907     pCoInitializeEx(NULL, COINIT_APARTMENTTHREADED);
 908
 909     hr = CoUnmarshalInterface(ncu_params->stream, &IID_IClassFactory, (void **)&pProxy);
 910     ok_ole_success(hr, CoUnmarshalInterface);
 911     IStream_Release(ncu_params->stream);
 912
 913     ok_more_than_one_lock();
 914
 915     /* die without calling CoUninitialize */
 916
 917     return 0;
 918 }
 919
 920 /* tests STA -> STA call during DLL_THREAD_DETACH doesn't deadlock */
 921 static void test_no_couninitialize_client(void)
 922 {
 923     HRESULT hr;
 924     IStream *pStream = NULL;
 925     DWORD tid;
 926     DWORD host_tid;
 927     HANDLE thread;
 928     HANDLE host_thread;
 929     struct ncu_params ncu_params;
 930
 931     cLocks = 0;
 932
 933     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
 934     ok_ole_success(hr, CreateStreamOnHGlobal);
 935     ncu_params.stream = pStream;
 936
 937     /* NOTE: assumes start_host_object uses an STA to host the object, as MTAs
 938      * always deadlock when called from within DllMain */
 939     host_tid = start_host_object(pStream, &IID_IClassFactory, (IUnknown *)&Test_ClassFactory, MSHLFLAGS_NORMAL, &host_thread);
 940     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 941
 942     ok_more_than_one_lock();
 943
 944     thread = CreateThread(NULL, 0, no_couninitialize_client_proc, &ncu_params, 0, &tid);
 945
 946     ok( !WaitForSingleObject(thread, 10000), "wait timed out\n" );
 947     CloseHandle(thread);
 948
 949     ok_no_locks();
 950
 951     end_host_object(host_tid, host_thread);
 952 }
 953
 954 /* tests success case of a same-thread table-weak marshal, unmarshal, unmarshal */
 955 static void test_tableweak_marshal_and_unmarshal_twice(void)
 956 {
 957     HRESULT hr;
 958     IStream *pStream = NULL;
 959     IUnknown *pProxy1 = NULL;
 960     IUnknown *pProxy2 = NULL;
 961     DWORD tid;
 962     HANDLE thread;
 963
 964     cLocks = 0;
 965
 966     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
 967     ok_ole_success(hr, CreateStreamOnHGlobal);
 968     tid = start_host_object(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHLFLAGS_TABLEWEAK, &thread);
 969
 970     ok_more_than_one_lock();
 971
 972     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 973     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy1);
 974     ok_ole_success(hr, CoUnmarshalInterface);
 975
 976     ok_more_than_one_lock();
 977
 978     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
 979     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy2);
 980     IStream_Release(pStream);
 981     ok_ole_success(hr, CoUnmarshalInterface);
 982
 983     ok_more_than_one_lock();
 984
 985     IUnknown_Release(pProxy1);
 986     IUnknown_Release(pProxy2);
 987
 988     /* this line is shows the difference between weak and strong table marshaling:
 989      *  weak has cLocks == 0
 990      *  strong has cLocks > 0 */
 991     ok_no_locks();
 992
 993     end_host_object(tid, thread);
 994 }
 995
 996 /* tests releasing after unmarshaling one object */
 997 static void test_tableweak_marshal_releasedata1(void)
 998 {
 999     HRESULT hr;
1000     IStream *pStream = NULL;
1001     IUnknown *pProxy1 = NULL;
1002     IUnknown *pProxy2 = NULL;
1003     DWORD tid;
1004     HANDLE thread;
1005
1006     cLocks = 0;
1007
1008     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
1009     ok_ole_success(hr, CreateStreamOnHGlobal);
1010     tid = start_host_object(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHLFLAGS_TABLEWEAK, &thread);
1011
1012     ok_more_than_one_lock();
1013
1014     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
1015     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy1);
1016     ok_ole_success(hr, CoUnmarshalInterface);
1017
1018     ok_more_than_one_lock();
1019
1020     /* release the remaining reference on the object by calling
1021      * CoReleaseMarshalData in the hosting thread */
1022     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
1023     release_host_object(tid);
1024
1025     ok_more_than_one_lock();
1026
1027     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
1028     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy2);
1029     ok_ole_success(hr, CoUnmarshalInterface);
1030     IStream_Release(pStream);
1031
1032     ok_more_than_one_lock();
1033
1034     IUnknown_Release(pProxy1);
1035     if (pProxy2)
1036         IUnknown_Release(pProxy2);
1037
1038     /* this line is shows the difference between weak and strong table marshaling:
1039      *  weak has cLocks == 0
1040      *  strong has cLocks > 0 */
1041     ok_no_locks();
1042
1043     end_host_object(tid, thread);
1044 }
1045
1046 /* tests releasing after unmarshaling one object */
1047 static void test_tableweak_marshal_releasedata2(void)
1048 {
1049     HRESULT hr;
1050     IStream *pStream = NULL;
1051     IUnknown *pProxy = NULL;
1052     DWORD tid;
1053     HANDLE thread;
1054
1055     cLocks = 0;
1056
1057     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
1058     ok_ole_success(hr, CreateStreamOnHGlobal);
1059     tid = start_host_object(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHLFLAGS_TABLEWEAK, &thread);
1060
1061     ok_more_than_one_lock();
1062
1063     /* release the remaining reference on the object by calling
1064      * CoReleaseMarshalData in the hosting thread */
1065     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
1066     release_host_object(tid);
1067
1068     ok_no_locks();
1069
1070     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
1071     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy);
1072     todo_wine
1073     {
1074     ok(hr == CO_E_OBJNOTREG,
1075        "CoUnmarshalInterface should have failed with CO_E_OBJNOTREG, but returned 0x%08x instead\n",
1076        hr);
1077     }
1078     IStream_Release(pStream);
1079
1080     ok_no_locks();
1081
1082     end_host_object(tid, thread);
1083 }
1084
1085 struct weak_and_normal_marshal_data
1086 {
1087     IStream *pStreamWeak;
1088     IStream *pStreamNormal;
1089     HANDLE hReadyEvent;
1090     HANDLE hQuitEvent;
1091 };
1092
1093 static DWORD CALLBACK weak_and_normal_marshal_thread_proc(void *p)
1094 {
1095     HRESULT hr;
1096     struct weak_and_normal_marshal_data *data = p;
1097     HANDLE hQuitEvent = data->hQuitEvent;
1098     MSG msg;
1099
1100     pCoInitializeEx(NULL, COINIT_APARTMENTTHREADED);
1101
1102     hr = CoMarshalInterface(data->pStreamWeak, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHCTX_INPROC, NULL, MSHLFLAGS_TABLEWEAK);
1103     ok_ole_success(hr, "CoMarshalInterface");
1104
1105     hr = CoMarshalInterface(data->pStreamNormal, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHCTX_INPROC, NULL, MSHLFLAGS_NORMAL);
1106     ok_ole_success(hr, "CoMarshalInterface");
1107
1108     /* force the message queue to be created before signaling parent thread */
1109     PeekMessage(&msg, NULL, WM_USER, WM_USER, PM_NOREMOVE);
1110
1111     SetEvent(data->hReadyEvent);
1112
1113     while (WAIT_OBJECT_0 + 1 == MsgWaitForMultipleObjects(1, &hQuitEvent, FALSE, 10000, QS_ALLINPUT))
1114     {
1115         while (PeekMessage(&msg, NULL, 0, 0, PM_REMOVE))
1116             DispatchMessage(&msg);
1117     }
1118     CloseHandle(hQuitEvent);
1119
1120     CoUninitialize();
1121
1122     return 0;
1123 }
1124
1125 /* tests interaction between table-weak and normal marshalling of an object */
1126 static void test_tableweak_and_normal_marshal_and_unmarshal(void)
1127 {
1128     HRESULT hr;
1129     IUnknown *pProxyWeak = NULL;
1130     IUnknown *pProxyNormal = NULL;
1131     DWORD tid;
1132     HANDLE thread;
1133     struct weak_and_normal_marshal_data data;
1134
1135     cLocks = 0;
1136
1137     data.hReadyEvent = CreateEvent(NULL, FALSE, FALSE, NULL);
1138     data.hQuitEvent = CreateEvent(NULL, FALSE, FALSE, NULL);
1139     hr = CreateStreamOnHGlobal(NULL, TRUE, &data.pStreamWeak);
1140     ok_ole_success(hr, CreateStreamOnHGlobal);
1141     hr = CreateStreamOnHGlobal(NULL, TRUE, &data.pStreamNormal);
1142     ok_ole_success(hr, CreateStreamOnHGlobal);
1143
1144     thread = CreateThread(NULL, 0, weak_and_normal_marshal_thread_proc, &data, 0, &tid);
1145     ok( !WaitForSingleObject(data.hReadyEvent, 10000), "wait timed out\n" );
1146     CloseHandle(data.hReadyEvent);
1147
1148     ok_more_than_one_lock();
1149
1150     IStream_Seek(data.pStreamWeak, ullZero, STREAM_SEEK_SET, NULL);
1151     hr = CoUnmarshalInterface(data.pStreamWeak, &IID_IClassFactory, (void **)&pProxyWeak);
1152     ok_ole_success(hr, CoUnmarshalInterface);
1153
1154     ok_more_than_one_lock();
1155
1156     IStream_Seek(data.pStreamNormal, ullZero, STREAM_SEEK_SET, NULL);
1157     hr = CoUnmarshalInterface(data.pStreamNormal, &IID_IClassFactory, (void **)&pProxyNormal);
1158     ok_ole_success(hr, CoUnmarshalInterface);
1159
1160     ok_more_than_one_lock();
1161
1162     IUnknown_Release(pProxyNormal);
1163
1164     ok_more_than_one_lock();
1165
1166     IUnknown_Release(pProxyWeak);
1167
1168     ok_no_locks();
1169
1170     IStream_Release(data.pStreamWeak);
1171     IStream_Release(data.pStreamNormal);
1172
1173     SetEvent(data.hQuitEvent);
1174     ok( !WaitForSingleObject(thread, 10000), "wait timed out\n" );
1175     CloseHandle(thread);
1176 }
1177
1178 /* tests success case of a same-thread table-strong marshal, unmarshal, unmarshal */
1179 static void test_tablestrong_marshal_and_unmarshal_twice(void)
1180 {
1181     HRESULT hr;
1182     IStream *pStream = NULL;
1183     IUnknown *pProxy1 = NULL;
1184     IUnknown *pProxy2 = NULL;
1185     DWORD tid;
1186     HANDLE thread;
1187
1188     cLocks = 0;
1189
1190     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
1191     ok_ole_success(hr, CreateStreamOnHGlobal);
1192     tid = start_host_object(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHLFLAGS_TABLESTRONG, &thread);
1193
1194     ok_more_than_one_lock();
1195
1196     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
1197     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy1);
1198     ok_ole_success(hr, CoUnmarshalInterface);
1199
1200     ok_more_than_one_lock();
1201
1202     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
1203     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy2);
1204     ok_ole_success(hr, CoUnmarshalInterface);
1205
1206     ok_more_than_one_lock();
1207
1208     if (pProxy1) IUnknown_Release(pProxy1);
1209     if (pProxy2) IUnknown_Release(pProxy2);
1210
1211     /* this line is shows the difference between weak and strong table marshaling:
1212      *  weak has cLocks == 0
1213      *  strong has cLocks > 0 */
1214     ok_more_than_one_lock();
1215
1216     /* release the remaining reference on the object by calling
1217      * CoReleaseMarshalData in the hosting thread */
1218     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
1219     release_host_object(tid);
1220     IStream_Release(pStream);
1221
1222     ok_no_locks();
1223
1224     end_host_object(tid, thread);
1225 }
1226
1227 /* tests CoLockObjectExternal */
1228 static void test_lock_object_external(void)
1229 {
1230     HRESULT hr;
1231     IStream *pStream = NULL;
1232
1233     cLocks = 0;
1234
1235     /* test the stub manager creation aspect of CoLockObjectExternal when the
1236      * object hasn't been marshaled yet */
1237     CoLockObjectExternal((IUnknown*)&Test_ClassFactory, TRUE, TRUE);
1238
1239     ok_more_than_one_lock();
1240
1241     CoDisconnectObject((IUnknown*)&Test_ClassFactory, 0);
1242
1243     ok_no_locks();
1244
1245     /* test our empty stub manager being handled correctly in
1246      * CoMarshalInterface */
1247     CoLockObjectExternal((IUnknown*)&Test_ClassFactory, TRUE, TRUE);
1248
1249     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
1250     ok_ole_success(hr, CreateStreamOnHGlobal);
1251     hr = CoMarshalInterface(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHCTX_INPROC, NULL, MSHLFLAGS_NORMAL);
1252     ok_ole_success(hr, CoMarshalInterface);
1253
1254     CoLockObjectExternal((IUnknown*)&Test_ClassFactory, TRUE, TRUE);
1255
1256     ok_more_than_one_lock();
1257
1258     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
1259     hr = CoReleaseMarshalData(pStream);
1260     ok_ole_success(hr, CoReleaseMarshalData);
1261     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
1262
1263     ok_more_than_one_lock();
1264
1265     CoLockObjectExternal((IUnknown*)&Test_ClassFactory, FALSE, TRUE);
1266
1267     ok_more_than_one_lock();
1268
1269     CoLockObjectExternal((IUnknown*)&Test_ClassFactory, FALSE, TRUE);
1270
1271     ok_no_locks();
1272
1273     /* test CoLockObjectExternal releases reference to object with
1274      * fLastUnlockReleases as TRUE and there are only strong references on
1275      * the object */
1276     CoLockObjectExternal((IUnknown*)&Test_ClassFactory, TRUE, FALSE);
1277
1278     ok_more_than_one_lock();
1279
1280     CoLockObjectExternal((IUnknown*)&Test_ClassFactory, FALSE, FALSE);
1281
1282     ok_no_locks();
1283
1284     /* test CoLockObjectExternal doesn't release the last reference to an
1285      * object with fLastUnlockReleases as TRUE and there is a weak reference
1286      * on the object */
1287     hr = CoMarshalInterface(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHCTX_INPROC, NULL, MSHLFLAGS_TABLEWEAK);
1288     ok_ole_success(hr, CoMarshalInterface);
1289
1290     ok_more_than_one_lock();
1291
1292     CoLockObjectExternal((IUnknown*)&Test_ClassFactory, TRUE, FALSE);
1293
1294     ok_more_than_one_lock();
1295
1296     CoLockObjectExternal((IUnknown*)&Test_ClassFactory, FALSE, FALSE);
1297
1298     ok_more_than_one_lock();
1299
1300     CoDisconnectObject((IUnknown*)&Test_ClassFactory, 0);
1301
1302     ok_no_locks();
1303
1304     IStream_Release(pStream);
1305 }
1306
1307 /* tests disconnecting stubs */
1308 static void test_disconnect_stub(void)
1309 {
1310     HRESULT hr;
1311     IStream *pStream = NULL;
1312
1313     cLocks = 0;
1314
1315     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
1316     ok_ole_success(hr, CreateStreamOnHGlobal);
1317     hr = CoMarshalInterface(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHCTX_INPROC, NULL, MSHLFLAGS_NORMAL);
1318     ok_ole_success(hr, CoMarshalInterface);
1319
1320     CoLockObjectExternal((IUnknown*)&Test_ClassFactory, TRUE, TRUE);
1321
1322     ok_more_than_one_lock();
1323
1324     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
1325     hr = CoReleaseMarshalData(pStream);
1326     ok_ole_success(hr, CoReleaseMarshalData);
1327     IStream_Release(pStream);
1328
1329     ok_more_than_one_lock();
1330
1331     CoDisconnectObject((IUnknown*)&Test_ClassFactory, 0);
1332
1333     ok_no_locks();
1334 }
1335
1336 /* tests failure case of a same-thread marshal and unmarshal twice */
1337 static void test_normal_marshal_and_unmarshal_twice(void)
1338 {
1339     HRESULT hr;
1340     IStream *pStream = NULL;
1341     IUnknown *pProxy1 = NULL;
1342     IUnknown *pProxy2 = NULL;
1343
1344     cLocks = 0;
1345
1346     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
1347     ok_ole_success(hr, CreateStreamOnHGlobal);
1348     hr = CoMarshalInterface(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHCTX_INPROC, NULL, MSHLFLAGS_NORMAL);
1349     ok_ole_success(hr, CoMarshalInterface);
1350
1351     ok_more_than_one_lock();
1352
1353     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
1354     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy1);
1355     ok_ole_success(hr, CoUnmarshalInterface);
1356
1357     ok_more_than_one_lock();
1358
1359     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
1360     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy2);
1361     ok(hr == CO_E_OBJNOTCONNECTED,
1362         "CoUnmarshalInterface should have failed with error CO_E_OBJNOTCONNECTED for double unmarshal, instead of 0x%08x\n", hr);
1363
1364     IStream_Release(pStream);
1365
1366     ok_more_than_one_lock();
1367
1368     IUnknown_Release(pProxy1);
1369
1370     ok_no_locks();
1371 }
1372
1373 /* tests success case of marshaling and unmarshaling an HRESULT */
1374 static void test_hresult_marshaling(void)
1375 {
1376     HRESULT hr;
1377     HRESULT hr_marshaled = 0;
1378     IStream *pStream = NULL;
1379     static const HRESULT E_DEADBEEF = 0xdeadbeef;
1380
1381     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
1382     ok_ole_success(hr, CreateStreamOnHGlobal);
1383
1384     hr = CoMarshalHresult(pStream, E_DEADBEEF);
1385     ok_ole_success(hr, CoMarshalHresult);
1386
1387     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
1388     hr = IStream_Read(pStream, &hr_marshaled, sizeof(HRESULT), NULL);
1389     ok_ole_success(hr, IStream_Read);
1390
1391     ok(hr_marshaled == E_DEADBEEF, "Didn't marshal HRESULT as expected: got value 0x%08x instead\n", hr_marshaled);
1392
1393     hr_marshaled = 0;
1394     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
1395     hr = CoUnmarshalHresult(pStream, &hr_marshaled);
1396     ok_ole_success(hr, CoUnmarshalHresult);
1397
1398     ok(hr_marshaled == E_DEADBEEF, "Didn't marshal HRESULT as expected: got value 0x%08x instead\n", hr_marshaled);
1399
1400     IStream_Release(pStream);
1401 }
1402
1403
1404 /* helper for test_proxy_used_in_wrong_thread */
1405 static DWORD CALLBACK bad_thread_proc(LPVOID p)
1406 {
1407     IClassFactory * cf = p;
1408     HRESULT hr;
1409     IUnknown * proxy = NULL;
1410
1411     hr = IClassFactory_CreateInstance(cf, NULL, &IID_IUnknown, (LPVOID*)&proxy);
1412     todo_wine
1413     ok(hr == CO_E_NOTINITIALIZED,
1414        "COM should have failed with CO_E_NOTINITIALIZED on using proxy without apartment, but instead returned 0x%08x\n",
1415        hr);
1416
1417     hr = IClassFactory_QueryInterface(cf, &IID_IMultiQI, (LPVOID *)&proxy);
1418     /* Win9x returns S_OK, whilst NT returns RPC_E_WRONG_THREAD */
1419     trace("call to proxy's QueryInterface for local interface without apartment returned 0x%08x\n", hr);
1420     if (SUCCEEDED(hr))
1421         IUnknown_Release(proxy);
1422
1423     hr = IClassFactory_QueryInterface(cf, &IID_IStream, (LPVOID *)&proxy);
1424     /* Win9x returns E_NOINTERFACE, whilst NT returns RPC_E_WRONG_THREAD */
1425     trace("call to proxy's QueryInterface without apartment returned 0x%08x\n", hr);
1426     if (SUCCEEDED(hr))
1427         IUnknown_Release(proxy);
1428
1429     pCoInitializeEx(NULL, COINIT_MULTITHREADED);
1430
1431     hr = IClassFactory_CreateInstance(cf, NULL, &IID_IUnknown, (LPVOID*)&proxy);
1432     if (proxy) IUnknown_Release(proxy);
1433     ok(hr == RPC_E_WRONG_THREAD,
1434         "COM should have failed with RPC_E_WRONG_THREAD on using proxy from wrong apartment, but instead returned 0x%08x\n",
1435         hr);
1436
1437     hr = IClassFactory_QueryInterface(cf, &IID_IStream, (LPVOID *)&proxy);
1438     /* Win9x returns E_NOINTERFACE, whilst NT returns RPC_E_WRONG_THREAD */
1439     trace("call to proxy's QueryInterface from wrong apartment returned 0x%08x\n", hr);
1440
1441     /* now be really bad and release the proxy from the wrong apartment */
1442     IUnknown_Release(cf);
1443
1444     CoUninitialize();
1445
1446     return 0;
1447 }
1448
1449 /* tests failure case of a using a proxy in the wrong apartment */
1450 static void test_proxy_used_in_wrong_thread(void)
1451 {
1452     HRESULT hr;
1453     IStream *pStream = NULL;
1454     IUnknown *pProxy = NULL;
1455     DWORD tid, tid2;
1456     HANDLE thread;
1457     HANDLE host_thread;
1458
1459     cLocks = 0;
1460
1461     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
1462     ok_ole_success(hr, CreateStreamOnHGlobal);
1463     tid = start_host_object(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHLFLAGS_NORMAL, &host_thread);
1464
1465     ok_more_than_one_lock();
1466
1467     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
1468     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy);
1469     ok_ole_success(hr, CoUnmarshalInterface);
1470     IStream_Release(pStream);
1471
1472     ok_more_than_one_lock();
1473
1474     /* do a call that will fail, but result in IRemUnknown being used by the proxy */
1475     IClassFactory_QueryInterface(pProxy, &IID_IStream, (LPVOID *)&pStream);
1476
1477     /* create a thread that we can misbehave in */
1478     thread = CreateThread(NULL, 0, bad_thread_proc, pProxy, 0, &tid2);
1479
1480     ok( !WaitForSingleObject(thread, 10000), "wait timed out\n" );
1481     CloseHandle(thread);
1482
1483     /* do release statement on Win9x that we should have done above */
1484     if (!GetProcAddress(GetModuleHandle("ole32"), "CoRegisterSurrogateEx"))
1485         IUnknown_Release(pProxy);
1486
1487     ok_no_locks();
1488
1489     end_host_object(tid, host_thread);
1490 }
1491
1492 static HRESULT WINAPI MessageFilter_QueryInterface(IMessageFilter *iface, REFIID riid, void ** ppvObj)
1493 {
1494     if (ppvObj == NULL) return E_POINTER;
1495
1496     if (IsEqualGUID(riid, &IID_IUnknown) ||
1497         IsEqualGUID(riid, &IID_IClassFactory))
1498     {
1499         *ppvObj = iface;
1500         IClassFactory_AddRef(iface);
1501         return S_OK;
1502     }
1503
1504     return E_NOINTERFACE;
1505 }
1506
1507 static ULONG WINAPI MessageFilter_AddRef(IMessageFilter *iface)
1508 {
1509     return 2; /* non-heap object */
1510 }
1511
1512 static ULONG WINAPI MessageFilter_Release(IMessageFilter *iface)
1513 {
1514     return 1; /* non-heap object */
1515 }
1516
1517 static DWORD WINAPI MessageFilter_HandleInComingCall(
1518   IMessageFilter *iface,
1519   DWORD dwCallType,
1520   HTASK threadIDCaller,
1521   DWORD dwTickCount,
1522   LPINTERFACEINFO lpInterfaceInfo)
1523 {
1524     static int callcount = 0;
1525     DWORD ret;
1526     trace("HandleInComingCall\n");
1527     switch (callcount)
1528     {
1529     case 0:
1530         ret = SERVERCALL_REJECTED;
1531         break;
1532     case 1:
1533         ret = SERVERCALL_RETRYLATER;
1534         break;
1535     default:
1536         ret = SERVERCALL_ISHANDLED;
1537         break;
1538     }
1539     callcount++;
1540     return ret;
1541 }
1542
1543 static DWORD WINAPI MessageFilter_RetryRejectedCall(
1544   IMessageFilter *iface,
1545   HTASK threadIDCallee,
1546   DWORD dwTickCount,
1547   DWORD dwRejectType)
1548 {
1549     trace("RetryRejectedCall\n");
1550     return 0;
1551 }
1552
1553 static DWORD WINAPI MessageFilter_MessagePending(
1554   IMessageFilter *iface,
1555   HTASK threadIDCallee,
1556   DWORD dwTickCount,
1557   DWORD dwPendingType)
1558 {
1559     trace("MessagePending\n");
1560     return PENDINGMSG_WAITNOPROCESS;
1561 }
1562
1563 static const IMessageFilterVtbl MessageFilter_Vtbl =
1564 {
1565     MessageFilter_QueryInterface,
1566     MessageFilter_AddRef,
1567     MessageFilter_Release,
1568     MessageFilter_HandleInComingCall,
1569     MessageFilter_RetryRejectedCall,
1570     MessageFilter_MessagePending
1571 };
1572
1573 static IMessageFilter MessageFilter = { &MessageFilter_Vtbl };
1574
1575 static void test_message_filter(void)
1576 {
1577     HRESULT hr;
1578     IStream *pStream = NULL;
1579     IClassFactory *cf = NULL;
1580     DWORD tid;
1581     IUnknown *proxy = NULL;
1582     IMessageFilter *prev_filter = NULL;
1583     HANDLE thread;
1584
1585     cLocks = 0;
1586
1587     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
1588     ok_ole_success(hr, CreateStreamOnHGlobal);
1589     tid = start_host_object2(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHLFLAGS_NORMAL, &MessageFilter, &thread);
1590
1591     ok_more_than_one_lock();
1592
1593     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
1594     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&cf);
1595     ok_ole_success(hr, CoUnmarshalInterface);
1596     IStream_Release(pStream);
1597
1598     ok_more_than_one_lock();
1599
1600     hr = IClassFactory_CreateInstance(cf, NULL, &IID_IUnknown, (LPVOID*)&proxy);
1601     ok(hr == RPC_E_CALL_REJECTED, "Call should have returned RPC_E_CALL_REJECTED, but return 0x%08x instead\n", hr);
1602     if (proxy) IUnknown_Release(proxy);
1603     proxy = NULL;
1604
1605     hr = CoRegisterMessageFilter(&MessageFilter, &prev_filter);
1606     ok_ole_success(hr, CoRegisterMessageFilter);
1607
1608     hr = IClassFactory_CreateInstance(cf, NULL, &IID_IUnknown, (LPVOID*)&proxy);
1609     ok_ole_success(hr, IClassFactory_CreateInstance);
1610
1611     IUnknown_Release(proxy);
1612
1613     IClassFactory_Release(cf);
1614
1615     ok_no_locks();
1616
1617     end_host_object(tid, thread);
1618
1619     hr = CoRegisterMessageFilter(prev_filter, NULL);
1620     ok_ole_success(hr, CoRegisterMessageFilter);
1621 }
1622
1623 /* test failure case of trying to unmarshal from bad stream */
1624 static void test_bad_marshal_stream(void)
1625 {
1626     HRESULT hr;
1627     IStream *pStream = NULL;
1628
1629     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
1630     ok_ole_success(hr, CreateStreamOnHGlobal);
1631     hr = CoMarshalInterface(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHCTX_INPROC, NULL, MSHLFLAGS_NORMAL);
1632     ok_ole_success(hr, CoMarshalInterface);
1633
1634     ok_more_than_one_lock();
1635
1636     /* try to read beyond end of stream */
1637     hr = CoReleaseMarshalData(pStream);
1638     ok(hr == STG_E_READFAULT, "Should have failed with STG_E_READFAULT, but returned 0x%08x instead\n", hr);
1639
1640     /* now release for real */
1641     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
1642     hr = CoReleaseMarshalData(pStream);
1643     ok_ole_success(hr, CoReleaseMarshalData);
1644
1645     IStream_Release(pStream);
1646 }
1647
1648 /* tests that proxies implement certain interfaces */
1649 static void test_proxy_interfaces(void)
1650 {
1651     HRESULT hr;
1652     IStream *pStream = NULL;
1653     IUnknown *pProxy = NULL;
1654     IUnknown *pOtherUnknown = NULL;
1655     DWORD tid;
1656     HANDLE thread;
1657
1658     cLocks = 0;
1659
1660     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
1661     ok_ole_success(hr, CreateStreamOnHGlobal);
1662     tid = start_host_object(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHLFLAGS_NORMAL, &thread);
1663
1664     ok_more_than_one_lock();
1665
1666     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
1667     hr = CoUnmarshalInterface(pStream, &IID_IUnknown, (void **)&pProxy);
1668     ok_ole_success(hr, CoUnmarshalInterface);
1669     IStream_Release(pStream);
1670
1671     ok_more_than_one_lock();
1672
1673     hr = IUnknown_QueryInterface(pProxy, &IID_IUnknown, (LPVOID*)&pOtherUnknown);
1674     ok_ole_success(hr, IUnknown_QueryInterface IID_IUnknown);
1675     if (hr == S_OK) IUnknown_Release(pOtherUnknown);
1676
1677     hr = IUnknown_QueryInterface(pProxy, &IID_IClientSecurity, (LPVOID*)&pOtherUnknown);
1678     ok_ole_success(hr, IUnknown_QueryInterface IID_IClientSecurity);
1679     if (hr == S_OK) IUnknown_Release(pOtherUnknown);
1680
1681     hr = IUnknown_QueryInterface(pProxy, &IID_IMultiQI, (LPVOID*)&pOtherUnknown);
1682     ok_ole_success(hr, IUnknown_QueryInterface IID_IMultiQI);
1683     if (hr == S_OK) IUnknown_Release(pOtherUnknown);
1684
1685     hr = IUnknown_QueryInterface(pProxy, &IID_IMarshal, (LPVOID*)&pOtherUnknown);
1686     ok_ole_success(hr, IUnknown_QueryInterface IID_IMarshal);
1687     if (hr == S_OK) IUnknown_Release(pOtherUnknown);
1688
1689     /* IMarshal2 is also supported on NT-based systems, but is pretty much
1690      * useless as it has no more methods over IMarshal that it inherits from. */
1691
1692     IUnknown_Release(pProxy);
1693
1694     ok_no_locks();
1695
1696     end_host_object(tid, thread);
1697 }
1698
1699 typedef struct
1700 {
1701     IUnknown IUnknown_iface;
1702     ULONG refs;
1703 } HeapUnknown;
1704
1705 static inline HeapUnknown *impl_from_IUnknown(IUnknown *iface)
1706 {
1707     return CONTAINING_RECORD(iface, HeapUnknown, IUnknown_iface);
1708 }
1709
1710 static HRESULT WINAPI HeapUnknown_QueryInterface(IUnknown *iface, REFIID riid, void **ppv)
1711 {
1712     if (IsEqualIID(riid, &IID_IUnknown))
1713     {
1714         IUnknown_AddRef(iface);
1715         *ppv = iface;
1716         return S_OK;
1717     }
1718     *ppv = NULL;
1719     return E_NOINTERFACE;
1720 }
1721
1722 static ULONG WINAPI HeapUnknown_AddRef(IUnknown *iface)
1723 {
1724     HeapUnknown *This = impl_from_IUnknown(iface);
1725     return InterlockedIncrement((LONG*)&This->refs);
1726 }
1727
1728 static ULONG WINAPI HeapUnknown_Release(IUnknown *iface)
1729 {
1730     HeapUnknown *This = impl_from_IUnknown(iface);
1731     ULONG refs = InterlockedDecrement((LONG*)&This->refs);
1732     if (!refs) HeapFree(GetProcessHeap(), 0, This);
1733     return refs;
1734 }
1735
1736 static const IUnknownVtbl HeapUnknown_Vtbl =
1737 {
1738     HeapUnknown_QueryInterface,
1739     HeapUnknown_AddRef,
1740     HeapUnknown_Release
1741 };
1742
1743 static void test_proxybuffer(REFIID riid)
1744 {
1745     HRESULT hr;
1746     IPSFactoryBuffer *psfb;
1747     IRpcProxyBuffer *proxy;
1748     LPVOID lpvtbl;
1749     ULONG refs;
1750     CLSID clsid;
1751     HeapUnknown *pUnkOuter = HeapAlloc(GetProcessHeap(), 0, sizeof(*pUnkOuter));
1752
1753     pUnkOuter->IUnknown_iface.lpVtbl = &HeapUnknown_Vtbl;
1754     pUnkOuter->refs = 1;
1755
1756     hr = CoGetPSClsid(riid, &clsid);
1757     ok_ole_success(hr, CoGetPSClsid);
1758
1759     hr = CoGetClassObject(&clsid, CLSCTX_INPROC_SERVER, NULL, &IID_IPSFactoryBuffer, (LPVOID*)&psfb);
1760     ok_ole_success(hr, CoGetClassObject);
1761
1762     hr = IPSFactoryBuffer_CreateProxy(psfb, &pUnkOuter->IUnknown_iface, riid, &proxy, &lpvtbl);
1763     ok_ole_success(hr, IPSFactoryBuffer_CreateProxy);
1764     ok(lpvtbl != NULL, "IPSFactoryBuffer_CreateProxy succeeded, but returned a NULL vtable!\n");
1765
1766     /* release our reference to the outer unknown object - the PS factory
1767      * buffer will have AddRef's it in the CreateProxy call */
1768     refs = IUnknown_Release(&pUnkOuter->IUnknown_iface);
1769     ok(refs == 1, "Ref count of outer unknown should have been 1 instead of %d\n", refs);
1770
1771     /* Not checking return, unreliable on native. Maybe it leaks references? */
1772     IPSFactoryBuffer_Release(psfb);
1773
1774     refs = IUnknown_Release((IUnknown *)lpvtbl);
1775     ok(refs == 0, "Ref-count leak of %d on IRpcProxyBuffer\n", refs);
1776
1777     refs = IRpcProxyBuffer_Release(proxy);
1778     ok(refs == 0, "Ref-count leak of %d on IRpcProxyBuffer\n", refs);
1779 }
1780
1781 static void test_stubbuffer(REFIID riid)
1782 {
1783     HRESULT hr;
1784     IPSFactoryBuffer *psfb;
1785     IRpcStubBuffer *stub;
1786     ULONG refs;
1787     CLSID clsid;
1788
1789     cLocks = 0;
1790
1791     hr = CoGetPSClsid(riid, &clsid);
1792     ok_ole_success(hr, CoGetPSClsid);
1793
1794     hr = CoGetClassObject(&clsid, CLSCTX_INPROC_SERVER, NULL, &IID_IPSFactoryBuffer, (LPVOID*)&psfb);
1795     ok_ole_success(hr, CoGetClassObject);
1796
1797     hr = IPSFactoryBuffer_CreateStub(psfb, riid, (IUnknown*)&Test_ClassFactory, &stub);
1798     ok_ole_success(hr, IPSFactoryBuffer_CreateStub);
1799
1800     /* Not checking return, unreliable on native. Maybe it leaks references? */
1801     IPSFactoryBuffer_Release(psfb);
1802
1803     ok_more_than_one_lock();
1804
1805     IRpcStubBuffer_Disconnect(stub);
1806
1807     ok_no_locks();
1808
1809     refs = IRpcStubBuffer_Release(stub);
1810     ok(refs == 0, "Ref-count leak of %d on IRpcProxyBuffer\n", refs);
1811 }
1812
1813 static HWND hwnd_app;
1814
1815 static HRESULT WINAPI TestRE_IClassFactory_CreateInstance(
1816     LPCLASSFACTORY iface,
1817     LPUNKNOWN pUnkOuter,
1818     REFIID riid,
1819     LPVOID *ppvObj)
1820 {
1821     DWORD_PTR res;
1822     if (IsEqualIID(riid, &IID_IWineTest))
1823     {
1824         BOOL ret = SendMessageTimeout(hwnd_app, WM_NULL, 0, 0, SMTO_BLOCK, 5000, &res);
1825         ok(ret, "Timed out sending a message to originating window during RPC call\n");
1826     }
1827     *ppvObj = NULL;
1828     return S_FALSE;
1829 }
1830
1831 static const IClassFactoryVtbl TestREClassFactory_Vtbl =
1832 {
1833     Test_IClassFactory_QueryInterface,
1834     Test_IClassFactory_AddRef,
1835     Test_IClassFactory_Release,
1836     TestRE_IClassFactory_CreateInstance,
1837     Test_IClassFactory_LockServer
1838 };
1839
1840 static IClassFactory TestRE_ClassFactory = { &TestREClassFactory_Vtbl };
1841
1842 static LRESULT CALLBACK window_proc(HWND hwnd, UINT msg, WPARAM wparam, LPARAM lparam)
1843 {
1844     switch (msg)
1845     {
1846     case WM_USER:
1847     {
1848         HRESULT hr;
1849         IStream *pStream = NULL;
1850         IClassFactory *proxy = NULL;
1851         IUnknown *object;
1852         DWORD tid;
1853         HANDLE thread;
1854
1855         cLocks = 0;
1856
1857         hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
1858         ok_ole_success(hr, CreateStreamOnHGlobal);
1859         tid = start_host_object(pStream, &IID_IClassFactory, (IUnknown*)&TestRE_ClassFactory, MSHLFLAGS_NORMAL, &thread);
1860
1861         ok_more_than_one_lock();
1862
1863         IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
1864         hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&proxy);
1865         ok_ole_success(hr, CoReleaseMarshalData);
1866         IStream_Release(pStream);
1867
1868         ok_more_than_one_lock();
1869
1870         /* note the use of the magic IID_IWineTest value to tell remote thread
1871          * to try to send a message back to us */
1872         hr = IClassFactory_CreateInstance(proxy, NULL, &IID_IWineTest, (void **)&object);
1873         ok(hr == S_FALSE, "expected S_FALSE, got %d\n", hr);
1874
1875         IClassFactory_Release(proxy);
1876
1877         ok_no_locks();
1878
1879         end_host_object(tid, thread);
1880
1881         PostMessage(hwnd, WM_QUIT, 0, 0);
1882
1883         return 0;
1884     }
1885     case WM_USER+1:
1886     {
1887         HRESULT hr;
1888         IStream *pStream = NULL;
1889         IClassFactory *proxy = NULL;
1890         IUnknown *object;
1891         DWORD tid;
1892         HANDLE thread;
1893
1894         cLocks = 0;
1895
1896         hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
1897         ok_ole_success(hr, CreateStreamOnHGlobal);
1898         tid = start_host_object(pStream, &IID_IClassFactory, (IUnknown*)&TestRE_ClassFactory, MSHLFLAGS_NORMAL, &thread);
1899
1900         ok_more_than_one_lock();
1901
1902         IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
1903         hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&proxy);
1904         ok_ole_success(hr, CoReleaseMarshalData);
1905         IStream_Release(pStream);
1906
1907         ok_more_than_one_lock();
1908
1909         /* post quit message before a doing a COM call to show that a pending
1910         * WM_QUIT message doesn't stop the call from succeeding */
1911         PostMessage(hwnd, WM_QUIT, 0, 0);
1912         hr = IClassFactory_CreateInstance(proxy, NULL, &IID_IUnknown, (void **)&object);
1913         ok(hr == S_FALSE, "IClassFactory_CreateInstance returned 0x%08x, expected S_FALSE\n", hr);
1914
1915         IClassFactory_Release(proxy);
1916
1917         ok_no_locks();
1918
1919         end_host_object(tid, thread);
1920
1921         return 0;
1922     }
1923     case WM_USER+2:
1924     {
1925         HRESULT hr;
1926         IStream *pStream = NULL;
1927         IClassFactory *proxy = NULL;
1928         IUnknown *object;
1929         DWORD tid;
1930         HANDLE thread;
1931
1932         hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
1933         ok_ole_success(hr, CreateStreamOnHGlobal);
1934         tid = start_host_object(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHLFLAGS_NORMAL, &thread);
1935
1936         IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
1937         hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&proxy);
1938         ok_ole_success(hr, CoReleaseMarshalData);
1939         IStream_Release(pStream);
1940
1941         /* shows that COM calls executed during the processing of sent
1942          * messages should fail */
1943         hr = IClassFactory_CreateInstance(proxy, NULL, &IID_IUnknown, (void **)&object);
1944         ok(hr == RPC_E_CANTCALLOUT_ININPUTSYNCCALL,
1945            "COM call during processing of sent message should return RPC_E_CANTCALLOUT_ININPUTSYNCCALL instead of 0x%08x\n", hr);
1946
1947         IClassFactory_Release(proxy);
1948
1949         end_host_object(tid, thread);
1950
1951         PostQuitMessage(0);
1952
1953         return 0;
1954     }
1955     default:
1956         return DefWindowProc(hwnd, msg, wparam, lparam);
1957     }
1958 }
1959
1960 static void register_test_window(void)
1961 {
1962     WNDCLASS wndclass;
1963
1964     memset(&wndclass, 0, sizeof(wndclass));
1965     wndclass.lpfnWndProc = window_proc;
1966     wndclass.lpszClassName = "WineCOMTest";
1967     RegisterClass(&wndclass);
1968 }
1969
1970 static void test_message_reentrancy(void)
1971 {
1972     MSG msg;
1973
1974     hwnd_app = CreateWindow("WineCOMTest", NULL, 0, CW_USEDEFAULT, CW_USEDEFAULT, CW_USEDEFAULT, CW_USEDEFAULT, NULL, NULL, NULL, 0);
1975     ok(hwnd_app != NULL, "Window creation failed\n");
1976
1977     /* start message re-entrancy test */
1978     PostMessage(hwnd_app, WM_USER, 0, 0);
1979
1980     while (GetMessage(&msg, NULL, 0, 0))
1981     {
1982         TranslateMessage(&msg);
1983         DispatchMessage(&msg);
1984     }
1985     DestroyWindow(hwnd_app);
1986 }
1987
1988 static HRESULT WINAPI TestMsg_IClassFactory_CreateInstance(
1989     LPCLASSFACTORY iface,
1990     LPUNKNOWN pUnkOuter,
1991     REFIID riid,
1992     LPVOID *ppvObj)
1993 {
1994     *ppvObj = NULL;
1995     SendMessage(hwnd_app, WM_USER+2, 0, 0);
1996     return S_OK;
1997 }
1998
1999 static IClassFactoryVtbl TestMsgClassFactory_Vtbl =
2000 {
2001     Test_IClassFactory_QueryInterface,
2002     Test_IClassFactory_AddRef,
2003     Test_IClassFactory_Release,
2004     TestMsg_IClassFactory_CreateInstance,
2005     Test_IClassFactory_LockServer
2006 };
2007
2008 static IClassFactory TestMsg_ClassFactory = { &TestMsgClassFactory_Vtbl };
2009
2010 static void test_call_from_message(void)
2011 {
2012     MSG msg;
2013     IStream *pStream;
2014     HRESULT hr;
2015     IClassFactory *proxy;
2016     DWORD tid;
2017     HANDLE thread;
2018     IUnknown *object;
2019
2020     hwnd_app = CreateWindow("WineCOMTest", NULL, 0, CW_USEDEFAULT, CW_USEDEFAULT, CW_USEDEFAULT, CW_USEDEFAULT, NULL, NULL, NULL, 0);
2021     ok(hwnd_app != NULL, "Window creation failed\n");
2022
2023     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
2024     ok_ole_success(hr, CreateStreamOnHGlobal);
2025     tid = start_host_object(pStream, &IID_IClassFactory, (IUnknown*)&TestMsg_ClassFactory, MSHLFLAGS_NORMAL, &thread);
2026
2027     ok_more_than_one_lock();
2028
2029     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
2030     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&proxy);
2031     ok_ole_success(hr, CoReleaseMarshalData);
2032     IStream_Release(pStream);
2033
2034     ok_more_than_one_lock();
2035
2036     /* start message re-entrancy test */
2037     hr = IClassFactory_CreateInstance(proxy, NULL, &IID_IUnknown, (void **)&object);
2038     ok_ole_success(hr, IClassFactory_CreateInstance);
2039
2040     IClassFactory_Release(proxy);
2041
2042     ok_no_locks();
2043
2044     end_host_object(tid, thread);
2045
2046     while (GetMessage(&msg, NULL, 0, 0))
2047     {
2048         TranslateMessage(&msg);
2049         DispatchMessage(&msg);
2050     }
2051     DestroyWindow(hwnd_app);
2052 }
2053
2054 static void test_WM_QUIT_handling(void)
2055 {
2056     MSG msg;
2057
2058     hwnd_app = CreateWindow("WineCOMTest", NULL, 0, CW_USEDEFAULT, CW_USEDEFAULT, CW_USEDEFAULT, CW_USEDEFAULT, NULL, NULL, NULL, 0);
2059     ok(hwnd_app != NULL, "Window creation failed\n");
2060
2061     /* start WM_QUIT handling test */
2062     PostMessage(hwnd_app, WM_USER+1, 0, 0);
2063
2064     while (GetMessage(&msg, NULL, 0, 0))
2065     {
2066         TranslateMessage(&msg);
2067         DispatchMessage(&msg);
2068     }
2069 }
2070
2071 static SIZE_T round_global_size(SIZE_T size)
2072 {
2073     static SIZE_T global_size_alignment = -1;
2074     if (global_size_alignment == -1)
2075     {
2076         void *p = GlobalAlloc(GMEM_FIXED, 1);
2077         global_size_alignment = GlobalSize(p);
2078         GlobalFree(p);
2079     }
2080
2081     return ((size + global_size_alignment - 1) & ~(global_size_alignment - 1));
2082 }
2083
2084 static void test_freethreadedmarshaldata(IStream *pStream, MSHCTX mshctx, void *ptr, DWORD mshlflags)
2085 {
2086     HGLOBAL hglobal;
2087     DWORD size;
2088     char *marshal_data;
2089     HRESULT hr;
2090
2091     hr = GetHGlobalFromStream(pStream, &hglobal);
2092     ok_ole_success(hr, GetHGlobalFromStream);
2093
2094     size = GlobalSize(hglobal);
2095
2096     marshal_data = GlobalLock(hglobal);
2097
2098     if (mshctx == MSHCTX_INPROC)
2099     {
2100         DWORD expected_size = round_global_size(3*sizeof(DWORD) + sizeof(GUID));
2101         ok(size == expected_size ||
2102            broken(size == (2*sizeof(DWORD))) /* Win9x & NT4 */,
2103            "size should have been %d instead of %d\n", expected_size, size);
2104
2105         ok(*(DWORD *)marshal_data == mshlflags, "expected 0x%x, but got 0x%x for mshctx\n", mshlflags, *(DWORD *)marshal_data);
2106         marshal_data += sizeof(DWORD);
2107         ok(*(void **)marshal_data == ptr, "expected %p, but got %p for mshctx\n", ptr, *(void **)marshal_data);
2108         marshal_data += sizeof(void *);
2109         if (sizeof(void*) == 4 && size >= 3*sizeof(DWORD))
2110         {
2111             ok(*(DWORD *)marshal_data == 0, "expected 0x0, but got 0x%x\n", *(DWORD *)marshal_data);
2112             marshal_data += sizeof(DWORD);
2113         }
2114         if (size >= 3*sizeof(DWORD) + sizeof(GUID))
2115         {
2116             trace("got guid data: {%08x-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x}\n",
2117                 ((GUID *)marshal_data)->Data1, ((GUID *)marshal_data)->Data2, ((GUID *)marshal_data)->Data3,
2118                 ((GUID *)marshal_data)->Data4[0], ((GUID *)marshal_data)->Data4[1], ((GUID *)marshal_data)->Data4[2], ((GUID *)marshal_data)->Data4[3],
2119                 ((GUID *)marshal_data)->Data4[4], ((GUID *)marshal_data)->Data4[5], ((GUID *)marshal_data)->Data4[6], ((GUID *)marshal_data)->Data4[7]);
2120         }
2121     }
2122     else
2123     {
2124         ok(size > sizeof(DWORD), "size should have been > sizeof(DWORD), not %d\n", size);
2125         ok(*(DWORD *)marshal_data == 0x574f454d /* MEOW */,
2126             "marshal data should be filled by standard marshal and start with MEOW signature\n");
2127     }
2128
2129     GlobalUnlock(hglobal);
2130 }
2131
2132 static void test_freethreadedmarshaler(void)
2133 {
2134     HRESULT hr;
2135     IUnknown *pFTUnknown;
2136     IMarshal *pFTMarshal;
2137     IStream *pStream;
2138     IUnknown *pProxy;
2139     static const LARGE_INTEGER llZero;
2140
2141     cLocks = 0;
2142     hr = CoCreateFreeThreadedMarshaler(NULL, &pFTUnknown);
2143     ok_ole_success(hr, CoCreateFreeThreadedMarshaler);
2144     hr = IUnknown_QueryInterface(pFTUnknown, &IID_IMarshal, (void **)&pFTMarshal);
2145     ok_ole_success(hr, IUnknown_QueryInterface);
2146     IUnknown_Release(pFTUnknown);
2147
2148     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
2149     ok_ole_success(hr, CreateStreamOnHGlobal);
2150
2151     /* inproc normal marshaling */
2152
2153     hr = IMarshal_MarshalInterface(pFTMarshal, pStream, &IID_IClassFactory,
2154         &Test_ClassFactory, MSHCTX_INPROC, NULL, MSHLFLAGS_NORMAL);
2155     ok_ole_success(hr, IMarshal_MarshalInterface);
2156
2157     ok_more_than_one_lock();
2158
2159     test_freethreadedmarshaldata(pStream, MSHCTX_INPROC, &Test_ClassFactory, MSHLFLAGS_NORMAL);
2160
2161     IStream_Seek(pStream, llZero, STREAM_SEEK_SET, NULL);
2162     hr = IMarshal_UnmarshalInterface(pFTMarshal, pStream, &IID_IUnknown, (void **)&pProxy);
2163     ok_ole_success(hr, IMarshal_UnmarshalInterface);
2164
2165     IUnknown_Release(pProxy);
2166
2167     ok_no_locks();
2168
2169 /* native doesn't allow us to unmarshal or release the stream data,
2170  * presumably because it wants us to call CoMarshalInterface instead */
2171     if (0)
2172     {
2173     /* local normal marshaling */
2174
2175     IStream_Seek(pStream, llZero, STREAM_SEEK_SET, NULL);
2176     hr = IMarshal_MarshalInterface(pFTMarshal, pStream, &IID_IClassFactory, &Test_ClassFactory, MSHCTX_LOCAL, NULL, MSHLFLAGS_NORMAL);
2177     ok_ole_success(hr, IMarshal_MarshalInterface);
2178
2179     ok_more_than_one_lock();
2180
2181     test_freethreadedmarshaldata(pStream, MSHCTX_LOCAL, &Test_ClassFactory, MSHLFLAGS_NORMAL);
2182
2183     IStream_Seek(pStream, llZero, STREAM_SEEK_SET, NULL);
2184     hr = IMarshal_ReleaseMarshalData(pFTMarshal, pStream);
2185     ok_ole_success(hr, IMarshal_ReleaseMarshalData);
2186
2187     ok_no_locks();
2188     }
2189
2190     /* inproc table-strong marshaling */
2191
2192     IStream_Seek(pStream, llZero, STREAM_SEEK_SET, NULL);
2193     hr = IMarshal_MarshalInterface(pFTMarshal, pStream, &IID_IClassFactory,
2194         (IUnknown*)&Test_ClassFactory, MSHCTX_INPROC, (void *)0xdeadbeef,
2195         MSHLFLAGS_TABLESTRONG);
2196     ok_ole_success(hr, IMarshal_MarshalInterface);
2197
2198     ok_more_than_one_lock();
2199
2200     test_freethreadedmarshaldata(pStream, MSHCTX_INPROC, &Test_ClassFactory, MSHLFLAGS_TABLESTRONG);
2201
2202     IStream_Seek(pStream, llZero, STREAM_SEEK_SET, NULL);
2203     hr = IMarshal_UnmarshalInterface(pFTMarshal, pStream, &IID_IUnknown, (void **)&pProxy);
2204     ok_ole_success(hr, IMarshal_UnmarshalInterface);
2205
2206     IUnknown_Release(pProxy);
2207
2208     ok_more_than_one_lock();
2209
2210     IStream_Seek(pStream, llZero, STREAM_SEEK_SET, NULL);
2211     hr = IMarshal_ReleaseMarshalData(pFTMarshal, pStream);
2212     ok_ole_success(hr, IMarshal_ReleaseMarshalData);
2213
2214     ok_no_locks();
2215
2216     /* inproc table-weak marshaling */
2217
2218     IStream_Seek(pStream, llZero, STREAM_SEEK_SET, NULL);
2219     hr = IMarshal_MarshalInterface(pFTMarshal, pStream, &IID_IClassFactory,
2220         (IUnknown*)&Test_ClassFactory, MSHCTX_INPROC, (void *)0xdeadbeef,
2221         MSHLFLAGS_TABLEWEAK);
2222     ok_ole_success(hr, IMarshal_MarshalInterface);
2223
2224     ok_no_locks();
2225
2226     test_freethreadedmarshaldata(pStream, MSHCTX_INPROC, &Test_ClassFactory, MSHLFLAGS_TABLEWEAK);
2227
2228     IStream_Seek(pStream, llZero, STREAM_SEEK_SET, NULL);
2229     hr = IMarshal_UnmarshalInterface(pFTMarshal, pStream, &IID_IUnknown, (void **)&pProxy);
2230     ok_ole_success(hr, IMarshal_UnmarshalInterface);
2231
2232     ok_more_than_one_lock();
2233
2234     IUnknown_Release(pProxy);
2235
2236     ok_no_locks();
2237
2238     /* inproc normal marshaling (for extraordinary cases) */
2239
2240     IStream_Seek(pStream, llZero, STREAM_SEEK_SET, NULL);
2241     hr = IMarshal_MarshalInterface(pFTMarshal, pStream, &IID_IClassFactory,
2242         &Test_ClassFactory, MSHCTX_INPROC, NULL, MSHLFLAGS_NORMAL);
2243     ok_ole_success(hr, IMarshal_MarshalInterface);
2244
2245     ok_more_than_one_lock();
2246
2247     /* this call shows that DisconnectObject does nothing */
2248     hr = IMarshal_DisconnectObject(pFTMarshal, 0);
2249     ok_ole_success(hr, IMarshal_DisconnectObject);
2250
2251     ok_more_than_one_lock();
2252
2253     IStream_Seek(pStream, llZero, STREAM_SEEK_SET, NULL);
2254     hr = IMarshal_ReleaseMarshalData(pFTMarshal, pStream);
2255     ok_ole_success(hr, IMarshal_ReleaseMarshalData);
2256
2257     ok_no_locks();
2258
2259     /* doesn't enforce marshaling rules here and allows us to unmarshal the
2260      * interface, even though it was freed above */
2261     IStream_Seek(pStream, llZero, STREAM_SEEK_SET, NULL);
2262     hr = IMarshal_UnmarshalInterface(pFTMarshal, pStream, &IID_IUnknown, (void **)&pProxy);
2263     ok_ole_success(hr, IMarshal_UnmarshalInterface);
2264
2265     ok_no_locks();
2266
2267     IStream_Release(pStream);
2268     IMarshal_Release(pFTMarshal);
2269 }
2270
2271 static void reg_unreg_wine_test_class(BOOL Register)
2272 {
2273     HRESULT hr;
2274     char buffer[256];
2275     LPOLESTR pszClsid;
2276     HKEY hkey;
2277     DWORD dwDisposition;
2278     DWORD error;
2279
2280     hr = StringFromCLSID(&CLSID_WineTest, &pszClsid);
2281     ok_ole_success(hr, "StringFromCLSID");
2282     strcpy(buffer, "CLSID\\");
2283     WideCharToMultiByte(CP_ACP, 0, pszClsid, -1, buffer + strlen(buffer), sizeof(buffer) - strlen(buffer), NULL, NULL);
2284     CoTaskMemFree(pszClsid);
2285     strcat(buffer, "\\InprocHandler32");
2286     if (Register)
2287     {
2288         error = RegCreateKeyEx(HKEY_CLASSES_ROOT, buffer, 0, NULL, 0, KEY_SET_VALUE, NULL, &hkey, &dwDisposition);
2289         ok(error == ERROR_SUCCESS, "RegCreateKeyEx failed with error %d\n", error);
2290         error = RegSetValueEx(hkey, NULL, 0, REG_SZ, (const unsigned char *)"\"ole32.dll\"", strlen("\"ole32.dll\"") + 1);
2291         ok(error == ERROR_SUCCESS, "RegSetValueEx failed with error %d\n", error);
2292         RegCloseKey(hkey);
2293     }
2294     else
2295     {
2296         RegDeleteKey(HKEY_CLASSES_ROOT, buffer);
2297         *strrchr(buffer, '\\') = '\0';
2298         RegDeleteKey(HKEY_CLASSES_ROOT, buffer);
2299     }
2300 }
2301
2302 static void test_inproc_handler(void)
2303 {
2304     HRESULT hr;
2305     IUnknown *pObject;
2306     IUnknown *pObject2;
2307
2308     reg_unreg_wine_test_class(TRUE);
2309
2310     hr = CoCreateInstance(&CLSID_WineTest, NULL, CLSCTX_INPROC_HANDLER, &IID_IUnknown, (void **)&pObject);
2311     ok_ole_success(hr, "CoCreateInstance");
2312
2313     if (SUCCEEDED(hr))
2314     {
2315         hr = IUnknown_QueryInterface(pObject, &IID_IWineTest, (void **)&pObject2);
2316         ok(hr == E_NOINTERFACE, "IUnknown_QueryInterface on handler for invalid interface returned 0x%08x instead of E_NOINTERFACE\n", hr);
2317
2318         /* it's a handler as it supports IOleObject */
2319         hr = IUnknown_QueryInterface(pObject, &IID_IOleObject, (void **)&pObject2);
2320         ok_ole_success(hr, "IUnknown_QueryInterface(&IID_IOleObject)");
2321         IUnknown_Release(pObject2);
2322
2323         IUnknown_Release(pObject);
2324     }
2325
2326     reg_unreg_wine_test_class(FALSE);
2327 }
2328
2329 static HRESULT WINAPI Test_SMI_QueryInterface(
2330     IStdMarshalInfo *iface,
2331     REFIID riid,
2332     LPVOID *ppvObj)
2333 {
2334     if (ppvObj == NULL) return E_POINTER;
2335
2336     if (IsEqualGUID(riid, &IID_IUnknown) ||
2337         IsEqualGUID(riid, &IID_IStdMarshalInfo))
2338     {
2339         *ppvObj = iface;
2340         IClassFactory_AddRef(iface);
2341         return S_OK;
2342     }
2343
2344     return E_NOINTERFACE;
2345 }
2346
2347 static ULONG WINAPI Test_SMI_AddRef(IStdMarshalInfo *iface)
2348 {
2349     LockModule();
2350     return 2; /* non-heap-based object */
2351 }
2352
2353 static ULONG WINAPI Test_SMI_Release(IStdMarshalInfo *iface)
2354 {
2355     UnlockModule();
2356     return 1; /* non-heap-based object */
2357 }
2358
2359 static HRESULT WINAPI Test_SMI_GetClassForHandler(
2360     IStdMarshalInfo *iface,
2361     DWORD dwDestContext,
2362     void *pvDestContext,
2363     CLSID *pClsid)
2364 {
2365     *pClsid = CLSID_WineTest;
2366     return S_OK;
2367 }
2368
2369 static const IStdMarshalInfoVtbl Test_SMI_Vtbl =
2370 {
2371     Test_SMI_QueryInterface,
2372     Test_SMI_AddRef,
2373     Test_SMI_Release,
2374     Test_SMI_GetClassForHandler
2375 };
2376
2377 static IStdMarshalInfo Test_SMI = {&Test_SMI_Vtbl};
2378
2379 static void test_handler_marshaling(void)
2380 {
2381     HRESULT hr;
2382     IStream *pStream = NULL;
2383     IUnknown *pProxy = NULL;
2384     IUnknown *pObject;
2385     DWORD tid;
2386     HANDLE thread;
2387     static const LARGE_INTEGER ullZero;
2388
2389     reg_unreg_wine_test_class(TRUE);
2390     cLocks = 0;
2391
2392     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
2393     ok_ole_success(hr, "CreateStreamOnHGlobal");
2394     tid = start_host_object(pStream, &IID_IUnknown, (IUnknown*)&Test_SMI, MSHLFLAGS_NORMAL, &thread);
2395
2396     ok_more_than_one_lock();
2397
2398     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
2399     hr = CoUnmarshalInterface(pStream, &IID_IUnknown, (void **)&pProxy);
2400     ok_ole_success(hr, "CoUnmarshalInterface");
2401     IStream_Release(pStream);
2402
2403     if(hr == S_OK)
2404     {
2405         ok_more_than_one_lock();
2406
2407         hr = IUnknown_QueryInterface(pProxy, &IID_IWineTest, (void **)&pObject);
2408         ok(hr == E_NOINTERFACE, "IUnknown_QueryInterface with unknown IID should have returned E_NOINTERFACE instead of 0x%08x\n", hr);
2409
2410         /* it's a handler as it supports IOleObject */
2411         hr = IUnknown_QueryInterface(pProxy, &IID_IOleObject, (void **)&pObject);
2412         todo_wine
2413         ok_ole_success(hr, "IUnknown_QueryInterface(&IID_IOleObject)");
2414         if (SUCCEEDED(hr)) IUnknown_Release(pObject);
2415
2416         IUnknown_Release(pProxy);
2417
2418         ok_no_locks();
2419     }
2420
2421     end_host_object(tid, thread);
2422     reg_unreg_wine_test_class(FALSE);
2423
2424     /* FIXME: test IPersist interface has the same effect as IStdMarshalInfo */
2425 }
2426
2427
2428 static void test_client_security(void)
2429 {
2430     HRESULT hr;
2431     IStream *pStream = NULL;
2432     IClassFactory *pProxy = NULL;
2433     IUnknown *pProxy2 = NULL;
2434     IUnknown *pUnknown1 = NULL;
2435     IUnknown *pUnknown2 = NULL;
2436     IClientSecurity *pCliSec = NULL;
2437     IMarshal *pMarshal;
2438     DWORD tid;
2439     HANDLE thread;
2440     static const LARGE_INTEGER ullZero;
2441     DWORD dwAuthnSvc;
2442     DWORD dwAuthzSvc;
2443     OLECHAR *pServerPrincName;
2444     DWORD dwAuthnLevel;
2445     DWORD dwImpLevel;
2446     void *pAuthInfo;
2447     DWORD dwCapabilities;
2448     void *pv;
2449
2450     cLocks = 0;
2451
2452     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
2453     ok_ole_success(hr, "CreateStreamOnHGlobal");
2454     tid = start_host_object(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHLFLAGS_NORMAL, &thread);
2455
2456     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
2457     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&pProxy);
2458     ok_ole_success(hr, "CoUnmarshalInterface");
2459     IStream_Release(pStream);
2460
2461     hr = IUnknown_QueryInterface(pProxy, &IID_IUnknown, (LPVOID*)&pUnknown1);
2462     ok_ole_success(hr, "IUnknown_QueryInterface IID_IUnknown");
2463
2464     hr = IUnknown_QueryInterface(pProxy, &IID_IRemUnknown, (LPVOID*)&pProxy2);
2465     ok_ole_success(hr, "IUnknown_QueryInterface IID_IStream");
2466
2467     hr = IUnknown_QueryInterface(pProxy2, &IID_IUnknown, (LPVOID*)&pUnknown2);
2468     ok_ole_success(hr, "IUnknown_QueryInterface IID_IUnknown");
2469
2470     ok(pUnknown1 == pUnknown2, "both proxy's IUnknowns should be the same - %p, %p\n", pUnknown1, pUnknown2);
2471
2472     hr = IUnknown_QueryInterface(pProxy, &IID_IMarshal, (LPVOID*)&pMarshal);
2473     ok_ole_success(hr, "IUnknown_QueryInterface IID_IMarshal");
2474
2475     hr = IUnknown_QueryInterface(pProxy, &IID_IClientSecurity, (LPVOID*)&pCliSec);
2476     ok_ole_success(hr, "IUnknown_QueryInterface IID_IClientSecurity");
2477
2478     hr = IClientSecurity_QueryBlanket(pCliSec, (IUnknown *)pProxy, NULL, NULL, NULL, NULL, NULL, NULL, NULL);
2479     todo_wine ok_ole_success(hr, "IClientSecurity_QueryBlanket (all NULLs)");
2480
2481     hr = IClientSecurity_QueryBlanket(pCliSec, (IUnknown *)pMarshal, NULL, NULL, NULL, NULL, NULL, NULL, NULL);
2482     todo_wine ok(hr == E_NOINTERFACE, "IClientSecurity_QueryBlanket with local interface should have returned E_NOINTERFACE instead of 0x%08x\n", hr);
2483
2484     hr = IClientSecurity_QueryBlanket(pCliSec, (IUnknown *)pProxy, &dwAuthnSvc, &dwAuthzSvc, &pServerPrincName, &dwAuthnLevel, &dwImpLevel, &pAuthInfo, &dwCapabilities);
2485     todo_wine ok_ole_success(hr, "IClientSecurity_QueryBlanket");
2486
2487     hr = IClientSecurity_SetBlanket(pCliSec, (IUnknown *)pProxy, dwAuthnSvc, dwAuthzSvc, pServerPrincName, dwAuthnLevel, RPC_C_IMP_LEVEL_IMPERSONATE, pAuthInfo, dwCapabilities);
2488     todo_wine ok_ole_success(hr, "IClientSecurity_SetBlanket");
2489
2490     hr = IClassFactory_CreateInstance(pProxy, NULL, &IID_IWineTest, &pv);
2491     ok(hr == E_NOINTERFACE, "COM call should have succeeded instead of returning 0x%08x\n", hr);
2492
2493     hr = IClientSecurity_SetBlanket(pCliSec, (IUnknown *)pMarshal, dwAuthnSvc, dwAuthzSvc, pServerPrincName, dwAuthnLevel, dwImpLevel, pAuthInfo, dwCapabilities);
2494     todo_wine ok(hr == E_NOINTERFACE, "IClientSecurity_SetBlanket with local interface should have returned E_NOINTERFACE instead of 0x%08x\n", hr);
2495
2496     hr = IClientSecurity_SetBlanket(pCliSec, (IUnknown *)pProxy, 0xdeadbeef, dwAuthzSvc, pServerPrincName, dwAuthnLevel, dwImpLevel, pAuthInfo, dwCapabilities);
2497     todo_wine ok(hr == E_INVALIDARG, "IClientSecurity_SetBlanke with invalid dwAuthnSvc should have returned E_INVALIDARG instead of 0x%08x\n", hr);
2498
2499     CoTaskMemFree(pServerPrincName);
2500
2501     hr = IClientSecurity_QueryBlanket(pCliSec, pUnknown1, &dwAuthnSvc, &dwAuthzSvc, &pServerPrincName, &dwAuthnLevel, &dwImpLevel, &pAuthInfo, &dwCapabilities);
2502     todo_wine ok_ole_success(hr, "IClientSecurity_QueryBlanket(IUnknown)");
2503
2504     CoTaskMemFree(pServerPrincName);
2505
2506     IClassFactory_Release(pProxy);
2507     IUnknown_Release(pProxy2);
2508     IUnknown_Release(pUnknown1);
2509     IUnknown_Release(pUnknown2);
2510     IMarshal_Release(pMarshal);
2511     IClientSecurity_Release(pCliSec);
2512
2513     end_host_object(tid, thread);
2514 }
2515
2516 static HANDLE heventShutdown;
2517
2518 static void LockModuleOOP(void)
2519 {
2520     InterlockedIncrement(&cLocks); /* for test purposes only */
2521     CoAddRefServerProcess();
2522 }
2523
2524 static void UnlockModuleOOP(void)
2525 {
2526     InterlockedDecrement(&cLocks); /* for test purposes only */
2527     if (!CoReleaseServerProcess())
2528         SetEvent(heventShutdown);
2529 }
2530
2531 static HWND hwnd_app;
2532
2533 static HRESULT WINAPI TestOOP_IClassFactory_QueryInterface(
2534     LPCLASSFACTORY iface,
2535     REFIID riid,
2536     LPVOID *ppvObj)
2537 {
2538     if (ppvObj == NULL) return E_POINTER;
2539
2540     if (IsEqualGUID(riid, &IID_IUnknown) ||
2541         IsEqualGUID(riid, &IID_IClassFactory))
2542     {
2543         *ppvObj = iface;
2544         IClassFactory_AddRef(iface);
2545         return S_OK;
2546     }
2547
2548     return E_NOINTERFACE;
2549 }
2550
2551 static ULONG WINAPI TestOOP_IClassFactory_AddRef(LPCLASSFACTORY iface)
2552 {
2553     return 2; /* non-heap-based object */
2554 }
2555
2556 static ULONG WINAPI TestOOP_IClassFactory_Release(LPCLASSFACTORY iface)
2557 {
2558     return 1; /* non-heap-based object */
2559 }
2560
2561 static HRESULT WINAPI TestOOP_IClassFactory_CreateInstance(
2562     LPCLASSFACTORY iface,
2563     LPUNKNOWN pUnkOuter,
2564     REFIID riid,
2565     LPVOID *ppvObj)
2566 {
2567     if (IsEqualIID(riid, &IID_IClassFactory) || IsEqualIID(riid, &IID_IUnknown))
2568     {
2569         *ppvObj = iface;
2570         return S_OK;
2571     }
2572     return CLASS_E_CLASSNOTAVAILABLE;
2573 }
2574
2575 static HRESULT WINAPI TestOOP_IClassFactory_LockServer(
2576     LPCLASSFACTORY iface,
2577     BOOL fLock)
2578 {
2579     if (fLock)
2580         LockModuleOOP();
2581     else
2582         UnlockModuleOOP();
2583     return S_OK;
2584 }
2585
2586 static const IClassFactoryVtbl TestClassFactoryOOP_Vtbl =
2587 {
2588     TestOOP_IClassFactory_QueryInterface,
2589     TestOOP_IClassFactory_AddRef,
2590     TestOOP_IClassFactory_Release,
2591     TestOOP_IClassFactory_CreateInstance,
2592     TestOOP_IClassFactory_LockServer
2593 };
2594
2595 static IClassFactory TestOOP_ClassFactory = { &TestClassFactoryOOP_Vtbl };
2596
2597 static void test_register_local_server(void)
2598 {
2599     DWORD cookie;
2600     HRESULT hr;
2601     HANDLE ready_event;
2602     HANDLE quit_event;
2603     DWORD wait;
2604
2605     heventShutdown = CreateEvent(NULL, TRUE, FALSE, NULL);
2606
2607     hr = CoRegisterClassObject(&CLSID_WineOOPTest, (IUnknown *)&TestOOP_ClassFactory,
2608                                CLSCTX_LOCAL_SERVER, REGCLS_SINGLEUSE, &cookie);
2609     ok_ole_success(hr, CoRegisterClassObject);
2610
2611     ready_event = CreateEvent(NULL, FALSE, FALSE, "Wine COM Test Ready Event");
2612     SetEvent(ready_event);
2613
2614     quit_event = CreateEvent(NULL, FALSE, FALSE, "Wine COM Test Quit Event");
2615
2616     do
2617     {
2618         wait = MsgWaitForMultipleObjects(1, &quit_event, FALSE, 30000, QS_ALLINPUT);
2619         if (wait == WAIT_OBJECT_0+1)
2620         {
2621             MSG msg;
2622             BOOL ret = PeekMessage(&msg, NULL, 0, 0, PM_REMOVE);
2623             if (ret)
2624             {
2625                 trace("Message 0x%x\n", msg.message);
2626                 TranslateMessage(&msg);
2627                 DispatchMessage(&msg);
2628             }
2629         }
2630     }
2631     while (wait == WAIT_OBJECT_0+1);
2632
2633     ok( wait == WAIT_OBJECT_0, "quit event wait timed out\n" );
2634     hr = CoRevokeClassObject(cookie);
2635     ok_ole_success(hr, CoRevokeClassObject);
2636 }
2637
2638 static HANDLE create_target_process(const char *arg)
2639 {
2640     char **argv;
2641     char cmdline[MAX_PATH];
2642     BOOL ret;
2643     PROCESS_INFORMATION pi;
2644     STARTUPINFO si = { 0 };
2645     si.cb = sizeof(si);
2646
2647     pi.hThread = NULL;
2648     pi.hProcess = NULL;
2649     winetest_get_mainargs( &argv );
2650     sprintf(cmdline, "%s %s %s", argv[0], argv[1], arg);
2651     ret = CreateProcess(argv[0], cmdline, NULL, NULL, FALSE, 0, NULL, NULL, &si, &pi);
2652     ok(ret, "CreateProcess failed with error: %u\n", GetLastError());
2653     if (pi.hThread) CloseHandle(pi.hThread);
2654     return pi.hProcess;
2655 }
2656
2657 /* tests functions commonly used by out of process COM servers */
2658 static void test_local_server(void)
2659 {
2660     DWORD cookie;
2661     HRESULT hr;
2662     IClassFactory * cf;
2663     DWORD ret;
2664     HANDLE process;
2665     HANDLE quit_event;
2666     HANDLE ready_event;
2667
2668     heventShutdown = CreateEvent(NULL, TRUE, FALSE, NULL);
2669
2670     cLocks = 0;
2671
2672     /* Start the object suspended */
2673     hr = CoRegisterClassObject(&CLSID_WineOOPTest, (IUnknown *)&TestOOP_ClassFactory,
2674         CLSCTX_LOCAL_SERVER, REGCLS_MULTIPLEUSE | REGCLS_SUSPENDED, &cookie);
2675     ok_ole_success(hr, CoRegisterClassObject);
2676
2677     /* ... and CoGetClassObject does not find it and fails when it looks for the
2678      * class in the registry */
2679     hr = CoGetClassObject(&CLSID_WineOOPTest, CLSCTX_INPROC_SERVER,
2680         NULL, &IID_IClassFactory, (LPVOID*)&cf);
2681     ok(hr == REGDB_E_CLASSNOTREG || /* NT */
2682        hr == S_OK /* Win9x */,
2683         "CoGetClassObject should have returned REGDB_E_CLASSNOTREG instead of 0x%08x\n", hr);
2684
2685     /* Resume the object suspended above ... */
2686     hr = CoResumeClassObjects();
2687     ok_ole_success(hr, CoResumeClassObjects);
2688
2689     /* ... and now it should succeed */
2690     hr = CoGetClassObject(&CLSID_WineOOPTest, CLSCTX_INPROC_SERVER,
2691         NULL, &IID_IClassFactory, (LPVOID*)&cf);
2692     ok_ole_success(hr, CoGetClassObject);
2693
2694     /* Now check the locking is working */
2695     /* NOTE: we are accessing the class directly, not through a proxy */
2696
2697     ok_no_locks();
2698
2699     hr = IClassFactory_LockServer(cf, TRUE);
2700     ok_ole_success(hr, IClassFactory_LockServer);
2701
2702     ok_more_than_one_lock();
2703
2704     IClassFactory_LockServer(cf, FALSE);
2705     ok_ole_success(hr, IClassFactory_LockServer);
2706
2707     ok_no_locks();
2708
2709     IClassFactory_Release(cf);
2710
2711     /* wait for shutdown signal */
2712     ret = WaitForSingleObject(heventShutdown, 0);
2713     ok(ret != WAIT_TIMEOUT, "Server didn't shut down\n");
2714
2715     /* try to connect again after SCM has suspended registered class objects */
2716     hr = CoGetClassObject(&CLSID_WineOOPTest, CLSCTX_INPROC_SERVER | CLSCTX_LOCAL_SERVER, NULL,
2717         &IID_IClassFactory, (LPVOID*)&cf);
2718     ok(hr == CO_E_SERVER_STOPPING || /* NT */
2719        hr == REGDB_E_CLASSNOTREG || /* win2k */
2720        hr == S_OK /* Win9x */,
2721         "CoGetClassObject should have returned CO_E_SERVER_STOPPING or REGDB_E_CLASSNOTREG instead of 0x%08x\n", hr);
2722
2723     hr = CoRevokeClassObject(cookie);
2724     ok_ole_success(hr, CoRevokeClassObject);
2725
2726     CloseHandle(heventShutdown);
2727
2728     process = create_target_process("-Embedding");
2729     ok(process != NULL, "couldn't start local server process, error was %d\n", GetLastError());
2730
2731     ready_event = CreateEvent(NULL, FALSE, FALSE, "Wine COM Test Ready Event");
2732     ok( !WaitForSingleObject(ready_event, 10000), "wait timed out\n" );
2733     CloseHandle(ready_event);
2734
2735     hr = CoCreateInstance(&CLSID_WineOOPTest, NULL, CLSCTX_LOCAL_SERVER, &IID_IClassFactory, (void **)&cf);
2736     ok_ole_success(hr, CoCreateInstance);
2737
2738     IClassFactory_Release(cf);
2739
2740     hr = CoCreateInstance(&CLSID_WineOOPTest, NULL, CLSCTX_LOCAL_SERVER, &IID_IClassFactory, (void **)&cf);
2741     ok(hr == REGDB_E_CLASSNOTREG, "Second CoCreateInstance on REGCLS_SINGLEUSE object should have failed\n");
2742
2743     quit_event = CreateEvent(NULL, FALSE, FALSE, "Wine COM Test Quit Event");
2744     SetEvent(quit_event);
2745
2746     winetest_wait_child_process( process );
2747     CloseHandle(quit_event);
2748     CloseHandle(process);
2749 }
2750
2751 struct git_params
2752 {
2753         DWORD cookie;
2754         IGlobalInterfaceTable *git;
2755 };
2756
2757 static DWORD CALLBACK get_global_interface_proc(LPVOID pv)
2758 {
2759         HRESULT hr;
2760         struct git_params *params = pv;
2761         IClassFactory *cf;
2762
2763         hr = IGlobalInterfaceTable_GetInterfaceFromGlobal(params->git, params->cookie, &IID_IClassFactory, (void **)&cf);
2764         ok(hr == CO_E_NOTINITIALIZED ||
2765                 broken(hr == E_UNEXPECTED) /* win2k */ ||
2766                 broken(hr == S_OK) /* NT 4 */,
2767                 "IGlobalInterfaceTable_GetInterfaceFromGlobal should have failed with error CO_E_NOTINITIALIZED or E_UNEXPECTED instead of 0x%08x\n",
2768                 hr);
2769         if (hr == S_OK)
2770                 IClassFactory_Release(cf);
2771
2772         CoInitialize(NULL);
2773
2774         hr = IGlobalInterfaceTable_GetInterfaceFromGlobal(params->git, params->cookie, &IID_IClassFactory, (void **)&cf);
2775         ok_ole_success(hr, IGlobalInterfaceTable_GetInterfaceFromGlobal);
2776
2777         IClassFactory_Release(cf);
2778
2779         CoUninitialize();
2780
2781         return hr;
2782 }
2783
2784 static void test_globalinterfacetable(void)
2785 {
2786         HRESULT hr;
2787         IGlobalInterfaceTable *git;
2788         DWORD cookie;
2789         HANDLE thread;
2790         DWORD tid;
2791         struct git_params params;
2792         DWORD ret;
2793         IUnknown *object;
2794
2795         trace("test_globalinterfacetable\n");
2796         cLocks = 0;
2797
2798         hr = CoCreateInstance(&CLSID_StdGlobalInterfaceTable, NULL, CLSCTX_INPROC_SERVER, &IID_IGlobalInterfaceTable, (void **)&git);
2799         ok_ole_success(hr, CoCreateInstance);
2800
2801         hr = IGlobalInterfaceTable_RegisterInterfaceInGlobal(git, (IUnknown *)&Test_ClassFactory, &IID_IClassFactory, &cookie);
2802         ok_ole_success(hr, IGlobalInterfaceTable_RegisterInterfaceInGlobal);
2803
2804         ok_more_than_one_lock();
2805
2806         params.cookie = cookie;
2807         params.git = git;
2808         /* note: params is on stack so we MUST wait for get_global_interface_proc
2809          * to exit before we can return */
2810         thread = CreateThread(NULL, 0, get_global_interface_proc, &params, 0, &tid);
2811
2812         ret = MsgWaitForMultipleObjects(1, &thread, FALSE, 10000, QS_ALLINPUT);
2813         while (ret == WAIT_OBJECT_0 + 1)
2814         {
2815                 MSG msg;
2816                 while (PeekMessage(&msg, NULL, 0, 0, PM_REMOVE))
2817                         DispatchMessage(&msg);
2818                 ret = MsgWaitForMultipleObjects(1, &thread, FALSE, 10000, QS_ALLINPUT);
2819         }
2820
2821         CloseHandle(thread);
2822
2823         /* test getting interface from global with different iid */
2824         hr = IGlobalInterfaceTable_GetInterfaceFromGlobal(git, cookie, &IID_IUnknown, (void **)&object);
2825         ok_ole_success(hr, IGlobalInterfaceTable_GetInterfaceFromGlobal);
2826         IUnknown_Release(object);
2827
2828         /* test getting interface from global with same iid */
2829         hr = IGlobalInterfaceTable_GetInterfaceFromGlobal(git, cookie, &IID_IClassFactory, (void **)&object);
2830         ok_ole_success(hr, IGlobalInterfaceTable_GetInterfaceFromGlobal);
2831         IUnknown_Release(object);
2832
2833         hr = IGlobalInterfaceTable_RevokeInterfaceFromGlobal(git, cookie);
2834         ok_ole_success(hr, IGlobalInterfaceTable_RevokeInterfaceFromGlobal);
2835
2836         ok_no_locks();
2837
2838         IGlobalInterfaceTable_Release(git);
2839 }
2840
2841 static void test_manualresetevent(void)
2842 {
2843     ISynchronize *psync1, *psync2;
2844     IUnknown *punk;
2845     LONG ref;
2846     HRESULT hr;
2847
2848     hr = CoCreateInstance(&CLSID_ManualResetEvent, NULL, CLSCTX_INPROC_SERVER, &IID_IUnknown, (void**)&punk);
2849     ok(hr == S_OK, "Got 0x%08x\n", hr);
2850     ok(!!punk, "Got NULL.\n");
2851     IUnknown_Release(punk);
2852
2853     hr = CoCreateInstance(&CLSID_ManualResetEvent, NULL, CLSCTX_INPROC_SERVER, &IID_ISynchronize, (void**)&psync1);
2854     ok(hr == S_OK, "Got 0x%08x\n", hr);
2855     ok(!!psync1, "Got NULL.\n");
2856
2857     hr = ISynchronize_Wait(psync1, 0, 5);
2858     ok(hr == RPC_S_CALLPENDING, "Got 0x%08x\n", hr);
2859
2860     hr = ISynchronize_Reset(psync1);
2861     ok(hr == S_OK, "Got 0x%08x\n", hr);
2862     hr = ISynchronize_Signal(psync1);
2863     ok(hr == S_OK, "Got 0x%08x\n", hr);
2864     hr = ISynchronize_Wait(psync1, 0, 5);
2865     ok(hr == S_OK, "Got 0x%08x\n", hr);
2866     hr = ISynchronize_Wait(psync1, 0, 5);
2867     ok(hr == S_OK, "Got 0x%08x\n", hr);
2868     hr = ISynchronize_Reset(psync1);
2869     ok(hr == S_OK, "Got 0x%08x\n", hr);
2870     hr = ISynchronize_Wait(psync1, 0, 5);
2871     ok(hr == RPC_S_CALLPENDING, "Got 0x%08x\n", hr);
2872
2873     hr = CoCreateInstance(&CLSID_ManualResetEvent, NULL, CLSCTX_INPROC_SERVER, &IID_ISynchronize, (void**)&psync2);
2874     ok(hr == S_OK, "Got 0x%08x\n", hr);
2875     ok(!!psync2, "Got NULL.\n");
2876     ok(psync1 != psync2, "psync1 == psync2.\n");
2877     hr = ISynchronize_Wait(psync2, 0, 5);
2878     ok(hr == RPC_S_CALLPENDING, "Got 0x%08x\n", hr);
2879
2880     hr = ISynchronize_Reset(psync1);
2881     ok(hr == S_OK, "Got 0x%08x\n", hr);
2882     hr = ISynchronize_Reset(psync2);
2883     ok(hr == S_OK, "Got 0x%08x\n", hr);
2884     hr = ISynchronize_Signal(psync1);
2885     ok(hr == S_OK, "Got 0x%08x\n", hr);
2886     hr = ISynchronize_Wait(psync2, 0, 5);
2887     ok(hr == RPC_S_CALLPENDING, "Got 0x%08x\n", hr);
2888
2889     ref = ISynchronize_AddRef(psync1);
2890     ok(ref == 2, "Got ref: %d\n", ref);
2891     ref = ISynchronize_AddRef(psync1);
2892     ok(ref == 3, "Got ref: %d\n", ref);
2893     ref = ISynchronize_Release(psync1);
2894     ok(ref == 2, "Got nonzero ref: %d\n", ref);
2895     ref = ISynchronize_Release(psync2);
2896     ok(!ref, "Got nonzero ref: %d\n", ref);
2897     ref = ISynchronize_Release(psync1);
2898     ok(ref == 1, "Got nonzero ref: %d\n", ref);
2899     ref = ISynchronize_Release(psync1);
2900     ok(!ref, "Got nonzero ref: %d\n", ref);
2901 }
2902
2903 static const char *debugstr_iid(REFIID riid)
2904 {
2905     static char name[256];
2906     HKEY hkeyInterface;
2907     WCHAR bufferW[39];
2908     char buffer[39];
2909     LONG name_size = sizeof(name);
2910     StringFromGUID2(riid, bufferW, sizeof(bufferW)/sizeof(bufferW[0]));
2911     WideCharToMultiByte(CP_ACP, 0, bufferW, sizeof(bufferW)/sizeof(bufferW[0]), buffer, sizeof(buffer), NULL, NULL);
2912     if (RegOpenKeyEx(HKEY_CLASSES_ROOT, "Interface", 0, KEY_QUERY_VALUE, &hkeyInterface) != ERROR_SUCCESS)
2913     {
2914         memcpy(name, buffer, sizeof(buffer));
2915         goto done;
2916     }
2917     if (RegQueryValue(hkeyInterface, buffer, name, &name_size) != ERROR_SUCCESS)
2918     {
2919         memcpy(name, buffer, sizeof(buffer));
2920         goto done;
2921     }
2922     RegCloseKey(hkeyInterface);
2923 done:
2924     return name;
2925 }
2926
2927 static HRESULT WINAPI TestChannelHook_QueryInterface(IChannelHook *iface, REFIID riid, void **ppv)
2928 {
2929     if (IsEqualIID(riid, &IID_IUnknown) || IsEqualIID(riid, &IID_IChannelHook))
2930     {
2931         *ppv = iface;
2932         IUnknown_AddRef(iface);
2933         return S_OK;
2934     }
2935
2936     *ppv = NULL;
2937     return E_NOINTERFACE;
2938 }
2939
2940 static ULONG WINAPI TestChannelHook_AddRef(IChannelHook *iface)
2941 {
2942     return 2;
2943 }
2944
2945 static ULONG WINAPI TestChannelHook_Release(IChannelHook *iface)
2946 {
2947     return 1;
2948 }
2949
2950 static void WINAPI TestChannelHook_ClientGetSize(
2951     IChannelHook *iface,
2952     REFGUID uExtent,
2953     REFIID  riid,
2954     ULONG  *pDataSize )
2955 {
2956     SChannelHookCallInfo *info = (SChannelHookCallInfo *)riid;
2957     trace("TestChannelHook_ClientGetBuffer\n");
2958     trace("\t%s method %d\n", debugstr_iid(riid), info->iMethod);
2959     trace("\tcid: %s\n", debugstr_iid(&info->uCausality));
2960     ok(info->cbSize == sizeof(*info), "info->cbSize was %d instead of %d\n", info->cbSize, (int)sizeof(*info));
2961     ok(info->dwServerPid == GetCurrentProcessId(), "info->dwServerPid was 0x%x instead of 0x%x\n", info->dwServerPid, GetCurrentProcessId());
2962     ok(!info->pObject, "info->pObject should be NULL\n");
2963     ok(IsEqualGUID(uExtent, &EXTENTID_WineTest), "uExtent wasn't correct\n");
2964
2965     *pDataSize = 1;
2966 }
2967
2968 static void WINAPI TestChannelHook_ClientFillBuffer(
2969     IChannelHook *iface,
2970     REFGUID uExtent,
2971     REFIID  riid,
2972     ULONG  *pDataSize,
2973     void   *pDataBuffer )
2974 {
2975     SChannelHookCallInfo *info = (SChannelHookCallInfo *)riid;
2976     trace("TestChannelHook_ClientFillBuffer\n");
2977     ok(info->cbSize == sizeof(*info), "info->cbSize was %d instead of %d\n", info->cbSize, (int)sizeof(*info));
2978     ok(info->dwServerPid == GetCurrentProcessId(), "info->dwServerPid was 0x%x instead of 0x%x\n", info->dwServerPid, GetCurrentProcessId());
2979     ok(!info->pObject, "info->pObject should be NULL\n");
2980     ok(IsEqualGUID(uExtent, &EXTENTID_WineTest), "uExtent wasn't correct\n");
2981
2982     *(unsigned char *)pDataBuffer = 0xcc;
2983     *pDataSize = 1;
2984 }
2985
2986 static void WINAPI TestChannelHook_ClientNotify(
2987     IChannelHook *iface,
2988     REFGUID uExtent,
2989     REFIID  riid,
2990     ULONG   cbDataSize,
2991     void   *pDataBuffer,
2992     DWORD   lDataRep,
2993     HRESULT hrFault )
2994 {
2995     SChannelHookCallInfo *info = (SChannelHookCallInfo *)riid;
2996     trace("TestChannelHook_ClientNotify hrFault = 0x%08x\n", hrFault);
2997     ok(info->cbSize == sizeof(*info), "info->cbSize was %d instead of %d\n", info->cbSize, (int)sizeof(*info));
2998     ok(info->dwServerPid == GetCurrentProcessId(), "info->dwServerPid was 0x%x instead of 0x%x\n", info->dwServerPid, GetCurrentProcessId());
2999     todo_wine {
3000     ok(info->pObject != NULL, "info->pObject shouldn't be NULL\n");
3001     }
3002     ok(IsEqualGUID(uExtent, &EXTENTID_WineTest), "uExtent wasn't correct\n");
3003 }
3004
3005 static void WINAPI TestChannelHook_ServerNotify(
3006     IChannelHook *iface,
3007     REFGUID uExtent,
3008     REFIID  riid,
3009     ULONG   cbDataSize,
3010     void   *pDataBuffer,
3011     DWORD   lDataRep )
3012 {
3013     SChannelHookCallInfo *info = (SChannelHookCallInfo *)riid;
3014     trace("TestChannelHook_ServerNotify\n");
3015     ok(info->cbSize == sizeof(*info), "info->cbSize was %d instead of %d\n", info->cbSize, (int)sizeof(*info));
3016     ok(info->dwServerPid == GetCurrentProcessId(), "info->dwServerPid was 0x%x instead of 0x%x\n", info->dwServerPid, GetCurrentProcessId());
3017     ok(info->pObject != NULL, "info->pObject shouldn't be NULL\n");
3018     ok(cbDataSize == 1, "cbDataSize should have been 1 instead of %d\n", cbDataSize);
3019     ok(*(unsigned char *)pDataBuffer == 0xcc, "pDataBuffer should have contained 0xcc instead of 0x%x\n", *(unsigned char *)pDataBuffer);
3020     ok(IsEqualGUID(uExtent, &EXTENTID_WineTest), "uExtent wasn't correct\n");
3021 }
3022
3023 static void WINAPI TestChannelHook_ServerGetSize(
3024     IChannelHook *iface,
3025     REFGUID uExtent,
3026     REFIID  riid,
3027     HRESULT hrFault,
3028     ULONG  *pDataSize )
3029 {
3030     SChannelHookCallInfo *info = (SChannelHookCallInfo *)riid;
3031     trace("TestChannelHook_ServerGetSize\n");
3032     trace("\t%s method %d\n", debugstr_iid(riid), info->iMethod);
3033     ok(info->cbSize == sizeof(*info), "info->cbSize was %d instead of %d\n", info->cbSize, (int)sizeof(*info));
3034     ok(info->dwServerPid == GetCurrentProcessId(), "info->dwServerPid was 0x%x instead of 0x%x\n", info->dwServerPid, GetCurrentProcessId());
3035     ok(info->pObject != NULL, "info->pObject shouldn't be NULL\n");
3036     ok(IsEqualGUID(uExtent, &EXTENTID_WineTest), "uExtent wasn't correct\n");
3037     if (hrFault != S_OK)
3038         trace("\thrFault = 0x%08x\n", hrFault);
3039
3040     *pDataSize = 0;
3041 }
3042
3043 static void WINAPI TestChannelHook_ServerFillBuffer(
3044     IChannelHook *iface,
3045     REFGUID uExtent,
3046     REFIID  riid,
3047     ULONG  *pDataSize,
3048     void   *pDataBuffer,
3049     HRESULT hrFault )
3050 {
3051     trace("TestChannelHook_ServerFillBuffer\n");
3052     ok(0, "TestChannelHook_ServerFillBuffer shouldn't be called\n");
3053 }
3054
3055 static const IChannelHookVtbl TestChannelHookVtbl =
3056 {
3057     TestChannelHook_QueryInterface,
3058     TestChannelHook_AddRef,
3059     TestChannelHook_Release,
3060     TestChannelHook_ClientGetSize,
3061     TestChannelHook_ClientFillBuffer,
3062     TestChannelHook_ClientNotify,
3063     TestChannelHook_ServerNotify,
3064     TestChannelHook_ServerGetSize,
3065     TestChannelHook_ServerFillBuffer,
3066 };
3067
3068 static IChannelHook TestChannelHook = { &TestChannelHookVtbl };
3069
3070 static void test_channel_hook(void)
3071 {
3072     IStream *pStream = NULL;
3073     IClassFactory *cf = NULL;
3074     DWORD tid;
3075     IUnknown *proxy = NULL;
3076     HANDLE thread;
3077     HRESULT hr;
3078
3079     hr = CoRegisterChannelHook(&EXTENTID_WineTest, &TestChannelHook);
3080     ok_ole_success(hr, CoRegisterChannelHook);
3081
3082     hr = CoRegisterMessageFilter(&MessageFilter, NULL);
3083     ok_ole_success(hr, CoRegisterMessageFilter);
3084
3085     cLocks = 0;
3086
3087     hr = CreateStreamOnHGlobal(NULL, TRUE, &pStream);
3088     ok_ole_success(hr, CreateStreamOnHGlobal);
3089     tid = start_host_object2(pStream, &IID_IClassFactory, (IUnknown*)&Test_ClassFactory, MSHLFLAGS_NORMAL, &MessageFilter, &thread);
3090
3091     ok_more_than_one_lock();
3092
3093     IStream_Seek(pStream, ullZero, STREAM_SEEK_SET, NULL);
3094     hr = CoUnmarshalInterface(pStream, &IID_IClassFactory, (void **)&cf);
3095     ok_ole_success(hr, CoUnmarshalInterface);
3096     IStream_Release(pStream);
3097
3098     ok_more_than_one_lock();
3099
3100     hr = IClassFactory_CreateInstance(cf, NULL, &IID_IUnknown, (LPVOID*)&proxy);
3101     ok_ole_success(hr, IClassFactory_CreateInstance);
3102     IUnknown_Release(proxy);
3103
3104     IClassFactory_Release(cf);
3105
3106     ok_no_locks();
3107
3108     end_host_object(tid, thread);
3109
3110     hr = CoRegisterMessageFilter(NULL, NULL);
3111     ok_ole_success(hr, CoRegisterMessageFilter);
3112 }
3113
3114 START_TEST(marshal)
3115 {
3116     HMODULE hOle32 = GetModuleHandle("ole32");
3117     int argc;
3118     char **argv;
3119
3120     if (!GetProcAddress(hOle32, "CoRegisterSurrogateEx")) {
3121         win_skip("skipping test on win9x\n");
3122         return;
3123     }
3124
3125     pCoInitializeEx = (void*)GetProcAddress(hOle32, "CoInitializeEx");
3126
3127     argc = winetest_get_mainargs( &argv );
3128     if (argc > 2 && (!strcmp(argv[2], "-Embedding")))
3129     {
3130         pCoInitializeEx(NULL, COINIT_APARTMENTTHREADED);
3131         test_register_local_server();
3132         CoUninitialize();
3133
3134         return;
3135     }
3136
3137     register_test_window();
3138
3139     test_cocreateinstance_proxy();
3140
3141     pCoInitializeEx(NULL, COINIT_APARTMENTTHREADED);
3142
3143     /* FIXME: test CoCreateInstanceEx */
3144
3145     /* lifecycle management and marshaling tests */
3146     test_no_marshaler();
3147     test_normal_marshal_and_release();
3148     test_normal_marshal_and_unmarshal();
3149     test_marshal_and_unmarshal_invalid();
3150     test_same_apartment_unmarshal_failure();
3151     test_interthread_marshal_and_unmarshal();
3152     test_proxy_marshal_and_unmarshal();
3153     test_proxy_marshal_and_unmarshal2();
3154     test_proxy_marshal_and_unmarshal_weak();
3155     test_proxy_marshal_and_unmarshal_strong();
3156     test_marshal_stub_apartment_shutdown();
3157     test_marshal_proxy_apartment_shutdown();
3158     test_marshal_proxy_mta_apartment_shutdown();
3159     test_no_couninitialize_server();
3160     test_no_couninitialize_client();
3161     test_tableweak_marshal_and_unmarshal_twice();
3162     test_tableweak_marshal_releasedata1();
3163     test_tableweak_marshal_releasedata2();
3164     test_tableweak_and_normal_marshal_and_unmarshal();
3165     test_tablestrong_marshal_and_unmarshal_twice();
3166     test_lock_object_external();
3167     test_disconnect_stub();
3168     test_normal_marshal_and_unmarshal_twice();
3169     test_hresult_marshaling();
3170     test_proxy_used_in_wrong_thread();
3171     test_message_filter();
3172     test_bad_marshal_stream();
3173     test_proxy_interfaces();
3174     test_stubbuffer(&IID_IClassFactory);
3175     test_proxybuffer(&IID_IClassFactory);
3176     test_message_reentrancy();
3177     test_call_from_message();
3178     test_WM_QUIT_handling();
3179     test_freethreadedmarshaler();
3180     test_inproc_handler();
3181     test_handler_marshaling();
3182     test_client_security();
3183
3184     test_local_server();
3185
3186     test_globalinterfacetable();
3187     test_manualresetevent();
3188
3189     /* must be last test as channel hooks can't be unregistered */
3190     test_channel_hook();
3191
3192     CoUninitialize();
3193 }