~ [ source navigation ] ~ [ diff markup ] ~ [ identifier search ] ~ [ freetext search ] ~ [ file search ] ~

Wine Cross Reference
wine/dlls/oleaut32/variant.c

Version: ~ [ wine-1.1.33 ] ~ [ wine-1.1.32 ] ~ [ wine-1.1.31 ] ~ [ wine-1.1.30 ] ~ [ wine-1.1.29 ] ~ [ wine-1.1.28 ] ~ [ wine-1.1.27 ] ~ [ wine-1.1.26 ] ~ [ wine-1.1.25 ] ~ [ wine-1.1.24 ] ~ [ wine-1.1.23 ] ~ [ wine-1.1.22 ] ~ [ wine-1.1.21 ] ~ [ wine-1.1.20 ] ~ [ wine-1.1.19 ] ~ [ wine-1.1.18 ] ~ [ wine-1.1.17 ] ~ [ wine-1.1.16 ] ~ [ wine-1.1.15 ] ~ [ wine-1.1.14 ] ~ [ wine-1.1.13 ] ~ [ wine-1.1.12 ] ~ [ wine-1.1.11 ] ~ [ wine-1.1.10 ] ~ [ wine-1.1.9 ] ~ [ wine-1.1.8 ] ~ [ wine-1.1.7 ] ~ [ wine-1.0.1 ] ~ [ wine-1.1.6 ] ~ [ wine-1.1.5 ] ~ [ wine-1.1.4 ] ~ [ wine-1.1.3 ] ~ [ wine-1.1.2 ] ~ [ wine-1.1.1 ] ~ [ wine-1.1.0 ] ~ [ wine-1.0 ] ~

  1 /*
  2  * VARIANT
  3  *
  4  * Copyright 1998 Jean-Claude Cote
  5  * Copyright 2003 Jon Griffiths
  6  * Copyright 2005 Daniel Remenak
  7  * Copyright 2006 Google (Benjamin Arai)
  8  *
  9  * The algorithm for conversion from Julian days to day/month/year is based on
 10  * that devised by Henry Fliegel, as implemented in PostgreSQL, which is
 11  * Copyright 1994-7 Regents of the University of California
 12  *
 13  * This library is free software; you can redistribute it and/or
 14  * modify it under the terms of the GNU Lesser General Public
 15  * License as published by the Free Software Foundation; either
 16  * version 2.1 of the License, or (at your option) any later version.
 17  *
 18  * This library is distributed in the hope that it will be useful,
 19  * but WITHOUT ANY WARRANTY; without even the implied warranty of
 20  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 21  * Lesser General Public License for more details.
 22  *
 23  * You should have received a copy of the GNU Lesser General Public
 24  * License along with this library; if not, write to the Free Software
 25  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
 26  */
 27 
 28 #include "config.h"
 29 
 30 #include <string.h>
 31 #include <stdlib.h>
 32 #include <stdarg.h>
 33 
 34 #define COBJMACROS
 35 #define NONAMELESSUNION
 36 #define NONAMELESSSTRUCT
 37 
 38 #include "windef.h"
 39 #include "winbase.h"
 40 #include "wine/unicode.h"
 41 #include "winerror.h"
 42 #include "variant.h"
 43 #include "wine/debug.h"
 44 
 45 WINE_DEFAULT_DEBUG_CHANNEL(variant);
 46 
 47 const char * const wine_vtypes[VT_CLSID+1] =
 48 {
 49   "VT_EMPTY","VT_NULL","VT_I2","VT_I4","VT_R4","VT_R8","VT_CY","VT_DATE",
 50   "VT_BSTR","VT_DISPATCH","VT_ERROR","VT_BOOL","VT_VARIANT","VT_UNKNOWN",
 51   "VT_DECIMAL","15","VT_I1","VT_UI1","VT_UI2","VT_UI4","VT_I8","VT_UI8",
 52   "VT_INT","VT_UINT","VT_VOID","VT_HRESULT","VT_PTR","VT_SAFEARRAY",
 53   "VT_CARRAY","VT_USERDEFINED","VT_LPSTR","VT_LPWSTR","32","33","34","35",
 54   "VT_RECORD","VT_INT_PTR","VT_UINT_PTR","39","40","41","42","43","44","45",
 55   "46","47","48","49","50","51","52","53","54","55","56","57","58","59","60",
 56   "61","62","63","VT_FILETIME","VT_BLOB","VT_STREAM","VT_STORAGE",
 57   "VT_STREAMED_OBJECT","VT_STORED_OBJECT","VT_BLOB_OBJECT","VT_CF","VT_CLSID"
 58 };
 59 
 60 const char * const wine_vflags[16] =
 61 {
 62  "",
 63  "|VT_VECTOR",
 64  "|VT_ARRAY",
 65  "|VT_VECTOR|VT_ARRAY",
 66  "|VT_BYREF",
 67  "|VT_VECTOR|VT_ARRAY",
 68  "|VT_ARRAY|VT_BYREF",
 69  "|VT_VECTOR|VT_ARRAY|VT_BYREF",
 70  "|VT_HARDTYPE",
 71  "|VT_VECTOR|VT_HARDTYPE",
 72  "|VT_ARRAY|VT_HARDTYPE",
 73  "|VT_VECTOR|VT_ARRAY|VT_HARDTYPE",
 74  "|VT_BYREF|VT_HARDTYPE",
 75  "|VT_VECTOR|VT_ARRAY|VT_HARDTYPE",
 76  "|VT_ARRAY|VT_BYREF|VT_HARDTYPE",
 77  "|VT_VECTOR|VT_ARRAY|VT_BYREF|VT_HARDTYPE",
 78 };
 79 
 80 /* Convert a variant from one type to another */
 81 static inline HRESULT VARIANT_Coerce(VARIANTARG* pd, LCID lcid, USHORT wFlags,
 82                                      VARIANTARG* ps, VARTYPE vt)
 83 {
 84   HRESULT res = DISP_E_TYPEMISMATCH;
 85   VARTYPE vtFrom =  V_TYPE(ps);
 86   DWORD dwFlags = 0;
 87 
 88   TRACE("(%p->(%s%s),0x%08x,0x%04x,%p->(%s%s),%s%s)\n", pd, debugstr_VT(pd),
 89         debugstr_VF(pd), lcid, wFlags, ps, debugstr_VT(ps), debugstr_VF(ps),
 90         debugstr_vt(vt), debugstr_vf(vt));
 91 
 92   if (vt == VT_BSTR || vtFrom == VT_BSTR)
 93   {
 94     /* All flags passed to low level function are only used for
 95      * changing to or from strings. Map these here.
 96      */
 97     if (wFlags & VARIANT_LOCALBOOL)
 98       dwFlags |= VAR_LOCALBOOL;
 99     if (wFlags & VARIANT_CALENDAR_HIJRI)
100       dwFlags |= VAR_CALENDAR_HIJRI;
101     if (wFlags & VARIANT_CALENDAR_THAI)
102       dwFlags |= VAR_CALENDAR_THAI;
103     if (wFlags & VARIANT_CALENDAR_GREGORIAN)
104       dwFlags |= VAR_CALENDAR_GREGORIAN;
105     if (wFlags & VARIANT_NOUSEROVERRIDE)
106       dwFlags |= LOCALE_NOUSEROVERRIDE;
107     if (wFlags & VARIANT_USE_NLS)
108       dwFlags |= LOCALE_USE_NLS;
109   }
110 
111   /* Map int/uint to i4/ui4 */
112   if (vt == VT_INT)
113     vt = VT_I4;
114   else if (vt == VT_UINT)
115     vt = VT_UI4;
116 
117   if (vtFrom == VT_INT)
118     vtFrom = VT_I4;
119   else if (vtFrom == VT_UINT)
120     vtFrom = VT_UI4;
121 
122   if (vt == vtFrom)
123      return VariantCopy(pd, ps);
124 
125   if (wFlags & VARIANT_NOVALUEPROP && vtFrom == VT_DISPATCH && vt != VT_UNKNOWN)
126   {
127     /* VARIANT_NOVALUEPROP prevents IDispatch objects from being coerced by
128      * accessing the default object property.
129      */
130     return DISP_E_TYPEMISMATCH;
131   }
132 
133   switch (vt)
134   {
135   case VT_EMPTY:
136     if (vtFrom == VT_NULL)
137       return DISP_E_TYPEMISMATCH;
138     /* ... Fall through */
139   case VT_NULL:
140     if (vtFrom <= VT_UINT && vtFrom != (VARTYPE)15 && vtFrom != VT_ERROR)
141     {
142       res = VariantClear( pd );
143       if (vt == VT_NULL && SUCCEEDED(res))
144         V_VT(pd) = VT_NULL;
145     }
146     return res;
147 
148   case VT_I1:
149     switch (vtFrom)
150     {
151     case VT_EMPTY:    V_I1(pd) = 0; return S_OK;
152     case VT_I2:       return VarI1FromI2(V_I2(ps), &V_I1(pd));
153     case VT_I4:       return VarI1FromI4(V_I4(ps), &V_I1(pd));
154     case VT_UI1:      V_I1(pd) = V_UI1(ps); return S_OK;
155     case VT_UI2:      return VarI1FromUI2(V_UI2(ps), &V_I1(pd));
156     case VT_UI4:      return VarI1FromUI4(V_UI4(ps), &V_I1(pd));
157     case VT_I8:       return VarI1FromI8(V_I8(ps), &V_I1(pd));
158     case VT_UI8:      return VarI1FromUI8(V_UI8(ps), &V_I1(pd));
159     case VT_R4:       return VarI1FromR4(V_R4(ps), &V_I1(pd));
160     case VT_R8:       return VarI1FromR8(V_R8(ps), &V_I1(pd));
161     case VT_DATE:     return VarI1FromDate(V_DATE(ps), &V_I1(pd));
162     case VT_BOOL:     return VarI1FromBool(V_BOOL(ps), &V_I1(pd));
163     case VT_CY:       return VarI1FromCy(V_CY(ps), &V_I1(pd));
164     case VT_DECIMAL:  return VarI1FromDec(&V_DECIMAL(ps), &V_I1(pd) );
165     case VT_DISPATCH: return VarI1FromDisp(V_DISPATCH(ps), lcid, &V_I1(pd) );
166     case VT_BSTR:     return VarI1FromStr(V_BSTR(ps), lcid, dwFlags, &V_I1(pd) );
167     }
168     break;
169 
170   case VT_I2:
171     switch (vtFrom)
172     {
173     case VT_EMPTY:    V_I2(pd) = 0; return S_OK;
174     case VT_I1:       return VarI2FromI1(V_I1(ps), &V_I2(pd));
175     case VT_I4:       return VarI2FromI4(V_I4(ps), &V_I2(pd));
176     case VT_UI1:      return VarI2FromUI1(V_UI1(ps), &V_I2(pd));
177     case VT_UI2:      V_I2(pd) = V_UI2(ps); return S_OK;
178     case VT_UI4:      return VarI2FromUI4(V_UI4(ps), &V_I2(pd));
179     case VT_I8:       return VarI2FromI8(V_I8(ps), &V_I2(pd));
180     case VT_UI8:      return VarI2FromUI8(V_UI8(ps), &V_I2(pd));
181     case VT_R4:       return VarI2FromR4(V_R4(ps), &V_I2(pd));
182     case VT_R8:       return VarI2FromR8(V_R8(ps), &V_I2(pd));
183     case VT_DATE:     return VarI2FromDate(V_DATE(ps), &V_I2(pd));
184     case VT_BOOL:     return VarI2FromBool(V_BOOL(ps), &V_I2(pd));
185     case VT_CY:       return VarI2FromCy(V_CY(ps), &V_I2(pd));
186     case VT_DECIMAL:  return VarI2FromDec(&V_DECIMAL(ps), &V_I2(pd));
187     case VT_DISPATCH: return VarI2FromDisp(V_DISPATCH(ps), lcid, &V_I2(pd));
188     case VT_BSTR:     return VarI2FromStr(V_BSTR(ps), lcid, dwFlags, &V_I2(pd));
189     }
190     break;
191 
192   case VT_I4:
193     switch (vtFrom)
194     {
195     case VT_EMPTY:    V_I4(pd) = 0; return S_OK;
196     case VT_I1:       return VarI4FromI1(V_I1(ps), &V_I4(pd));
197     case VT_I2:       return VarI4FromI2(V_I2(ps), &V_I4(pd));
198     case VT_UI1:      return VarI4FromUI1(V_UI1(ps), &V_I4(pd));
199     case VT_UI2:      return VarI4FromUI2(V_UI2(ps), &V_I4(pd));
200     case VT_UI4:      V_I4(pd) = V_UI4(ps); return S_OK;
201     case VT_I8:       return VarI4FromI8(V_I8(ps), &V_I4(pd));
202     case VT_UI8:      return VarI4FromUI8(V_UI8(ps), &V_I4(pd));
203     case VT_R4:       return VarI4FromR4(V_R4(ps), &V_I4(pd));
204     case VT_R8:       return VarI4FromR8(V_R8(ps), &V_I4(pd));
205     case VT_DATE:     return VarI4FromDate(V_DATE(ps), &V_I4(pd));
206     case VT_BOOL:     return VarI4FromBool(V_BOOL(ps), &V_I4(pd));
207     case VT_CY:       return VarI4FromCy(V_CY(ps), &V_I4(pd));
208     case VT_DECIMAL:  return VarI4FromDec(&V_DECIMAL(ps), &V_I4(pd));
209     case VT_DISPATCH: return VarI4FromDisp(V_DISPATCH(ps), lcid, &V_I4(pd));
210     case VT_BSTR:     return VarI4FromStr(V_BSTR(ps), lcid, dwFlags, &V_I4(pd));
211     }
212     break;
213 
214   case VT_UI1:
215     switch (vtFrom)
216     {
217     case VT_EMPTY:    V_UI1(pd) = 0; return S_OK;
218     case VT_I1:       V_UI1(pd) = V_I1(ps); return S_OK;
219     case VT_I2:       return VarUI1FromI2(V_I2(ps), &V_UI1(pd));
220     case VT_I4:       return VarUI1FromI4(V_I4(ps), &V_UI1(pd));
221     case VT_UI2:      return VarUI1FromUI2(V_UI2(ps), &V_UI1(pd));
222     case VT_UI4:      return VarUI1FromUI4(V_UI4(ps), &V_UI1(pd));
223     case VT_I8:       return VarUI1FromI8(V_I8(ps), &V_UI1(pd));
224     case VT_UI8:      return VarUI1FromUI8(V_UI8(ps), &V_UI1(pd));
225     case VT_R4:       return VarUI1FromR4(V_R4(ps), &V_UI1(pd));
226     case VT_R8:       return VarUI1FromR8(V_R8(ps), &V_UI1(pd));
227     case VT_DATE:     return VarUI1FromDate(V_DATE(ps), &V_UI1(pd));
228     case VT_BOOL:     return VarUI1FromBool(V_BOOL(ps), &V_UI1(pd));
229     case VT_CY:       return VarUI1FromCy(V_CY(ps), &V_UI1(pd));
230     case VT_DECIMAL:  return VarUI1FromDec(&V_DECIMAL(ps), &V_UI1(pd));
231     case VT_DISPATCH: return VarUI1FromDisp(V_DISPATCH(ps), lcid, &V_UI1(pd));
232     case VT_BSTR:     return VarUI1FromStr(V_BSTR(ps), lcid, dwFlags, &V_UI1(pd));
233     }
234     break;
235 
236   case VT_UI2:
237     switch (vtFrom)
238     {
239     case VT_EMPTY:    V_UI2(pd) = 0; return S_OK;
240     case VT_I1:       return VarUI2FromI1(V_I1(ps), &V_UI2(pd));
241     case VT_I2:       V_UI2(pd) = V_I2(ps); return S_OK;
242     case VT_I4:       return VarUI2FromI4(V_I4(ps), &V_UI2(pd));
243     case VT_UI1:      return VarUI2FromUI1(V_UI1(ps), &V_UI2(pd));
244     case VT_UI4:      return VarUI2FromUI4(V_UI4(ps), &V_UI2(pd));
245     case VT_I8:       return VarUI4FromI8(V_I8(ps), &V_UI4(pd));
246     case VT_UI8:      return VarUI4FromUI8(V_UI8(ps), &V_UI4(pd));
247     case VT_R4:       return VarUI2FromR4(V_R4(ps), &V_UI2(pd));
248     case VT_R8:       return VarUI2FromR8(V_R8(ps), &V_UI2(pd));
249     case VT_DATE:     return VarUI2FromDate(V_DATE(ps), &V_UI2(pd));
250     case VT_BOOL:     return VarUI2FromBool(V_BOOL(ps), &V_UI2(pd));
251     case VT_CY:       return VarUI2FromCy(V_CY(ps), &V_UI2(pd));
252     case VT_DECIMAL:  return VarUI2FromDec(&V_DECIMAL(ps), &V_UI2(pd));
253     case VT_DISPATCH: return VarUI2FromDisp(V_DISPATCH(ps), lcid, &V_UI2(pd));
254     case VT_BSTR:     return VarUI2FromStr(V_BSTR(ps), lcid, dwFlags, &V_UI2(pd));
255     }
256     break;
257 
258   case VT_UI4:
259     switch (vtFrom)
260     {
261     case VT_EMPTY:    V_UI4(pd) = 0; return S_OK;
262     case VT_I1:       return VarUI4FromI1(V_I1(ps), &V_UI4(pd));
263     case VT_I2:       return VarUI4FromI2(V_I2(ps), &V_UI4(pd));
264     case VT_I4:       V_UI4(pd) = V_I4(ps); return S_OK;
265     case VT_UI1:      return VarUI4FromUI1(V_UI1(ps), &V_UI4(pd));
266     case VT_UI2:      return VarUI4FromUI2(V_UI2(ps), &V_UI4(pd));
267     case VT_I8:       return VarUI4FromI8(V_I8(ps), &V_UI4(pd));
268     case VT_UI8:      return VarUI4FromUI8(V_UI8(ps), &V_UI4(pd));
269     case VT_R4:       return VarUI4FromR4(V_R4(ps), &V_UI4(pd));
270     case VT_R8:       return VarUI4FromR8(V_R8(ps), &V_UI4(pd));
271     case VT_DATE:     return VarUI4FromDate(V_DATE(ps), &V_UI4(pd));
272     case VT_BOOL:     return VarUI4FromBool(V_BOOL(ps), &V_UI4(pd));
273     case VT_CY:       return VarUI4FromCy(V_CY(ps), &V_UI4(pd));
274     case VT_DECIMAL:  return VarUI4FromDec(&V_DECIMAL(ps), &V_UI4(pd));
275     case VT_DISPATCH: return VarUI4FromDisp(V_DISPATCH(ps), lcid, &V_UI4(pd));
276     case VT_BSTR:     return VarUI4FromStr(V_BSTR(ps), lcid, dwFlags, &V_UI4(pd));
277     }
278     break;
279 
280   case VT_UI8:
281     switch (vtFrom)
282     {
283     case VT_EMPTY:    V_UI8(pd) = 0; return S_OK;
284     case VT_I4:       if (V_I4(ps) < 0) return DISP_E_OVERFLOW; V_UI8(pd) = V_I4(ps); return S_OK;
285     case VT_I1:       return VarUI8FromI1(V_I1(ps), &V_UI8(pd));
286     case VT_I2:       return VarUI8FromI2(V_I2(ps), &V_UI8(pd));
287     case VT_UI1:      return VarUI8FromUI1(V_UI1(ps), &V_UI8(pd));
288     case VT_UI2:      return VarUI8FromUI2(V_UI2(ps), &V_UI8(pd));
289     case VT_UI4:      return VarUI8FromUI4(V_UI4(ps), &V_UI8(pd));
290     case VT_I8:       V_UI8(pd) = V_I8(ps); return S_OK;
291     case VT_R4:       return VarUI8FromR4(V_R4(ps), &V_UI8(pd));
292     case VT_R8:       return VarUI8FromR8(V_R8(ps), &V_UI8(pd));
293     case VT_DATE:     return VarUI8FromDate(V_DATE(ps), &V_UI8(pd));
294     case VT_BOOL:     return VarUI8FromBool(V_BOOL(ps), &V_UI8(pd));
295     case VT_CY:       return VarUI8FromCy(V_CY(ps), &V_UI8(pd));
296     case VT_DECIMAL:  return VarUI8FromDec(&V_DECIMAL(ps), &V_UI8(pd));
297     case VT_DISPATCH: return VarUI8FromDisp(V_DISPATCH(ps), lcid, &V_UI8(pd));
298     case VT_BSTR:     return VarUI8FromStr(V_BSTR(ps), lcid, dwFlags, &V_UI8(pd));
299     }
300     break;
301 
302   case VT_I8:
303     switch (vtFrom)
304     {
305     case VT_EMPTY:    V_I8(pd) = 0; return S_OK;
306     case VT_I4:       V_I8(pd) = V_I4(ps); return S_OK;
307     case VT_I1:       return VarI8FromI1(V_I1(ps), &V_I8(pd));
308     case VT_I2:       return VarI8FromI2(V_I2(ps), &V_I8(pd));
309     case VT_UI1:      return VarI8FromUI1(V_UI1(ps), &V_I8(pd));
310     case VT_UI2:      return VarI8FromUI2(V_UI2(ps), &V_I8(pd));
311     case VT_UI4:      return VarI8FromUI4(V_UI4(ps), &V_I8(pd));
312     case VT_UI8:      V_I8(pd) = V_UI8(ps); return S_OK;
313     case VT_R4:       return VarI8FromR4(V_R4(ps), &V_I8(pd));
314     case VT_R8:       return VarI8FromR8(V_R8(ps), &V_I8(pd));
315     case VT_DATE:     return VarI8FromDate(V_DATE(ps), &V_I8(pd));
316     case VT_BOOL:     return VarI8FromBool(V_BOOL(ps), &V_I8(pd));
317     case VT_CY:       return VarI8FromCy(V_CY(ps), &V_I8(pd));
318     case VT_DECIMAL:  return VarI8FromDec(&V_DECIMAL(ps), &V_I8(pd));
319     case VT_DISPATCH: return VarI8FromDisp(V_DISPATCH(ps), lcid, &V_I8(pd));
320     case VT_BSTR:     return VarI8FromStr(V_BSTR(ps), lcid, dwFlags, &V_I8(pd));
321     }
322     break;
323 
324   case VT_R4:
325     switch (vtFrom)
326     {
327     case VT_EMPTY:    V_R4(pd) = 0.0f; return S_OK;
328     case VT_I1:       return VarR4FromI1(V_I1(ps), &V_R4(pd));
329     case VT_I2:       return VarR4FromI2(V_I2(ps), &V_R4(pd));
330     case VT_I4:       return VarR4FromI4(V_I4(ps), &V_R4(pd));
331     case VT_UI1:      return VarR4FromUI1(V_UI1(ps), &V_R4(pd));
332     case VT_UI2:      return VarR4FromUI2(V_UI2(ps), &V_R4(pd));
333     case VT_UI4:      return VarR4FromUI4(V_UI4(ps), &V_R4(pd));
334     case VT_I8:       return VarR4FromI8(V_I8(ps), &V_R4(pd));
335     case VT_UI8:      return VarR4FromUI8(V_UI8(ps), &V_R4(pd));
336     case VT_R8:       return VarR4FromR8(V_R8(ps), &V_R4(pd));
337     case VT_DATE:     return VarR4FromDate(V_DATE(ps), &V_R4(pd));
338     case VT_BOOL:     return VarR4FromBool(V_BOOL(ps), &V_R4(pd));
339     case VT_CY:       return VarR4FromCy(V_CY(ps), &V_R4(pd));
340     case VT_DECIMAL:  return VarR4FromDec(&V_DECIMAL(ps), &V_R4(pd));
341     case VT_DISPATCH: return VarR4FromDisp(V_DISPATCH(ps), lcid, &V_R4(pd));
342     case VT_BSTR:     return VarR4FromStr(V_BSTR(ps), lcid, dwFlags, &V_R4(pd));
343     }
344     break;
345 
346   case VT_R8:
347     switch (vtFrom)
348     {
349     case VT_EMPTY:    V_R8(pd) = 0.0; return S_OK;
350     case VT_I1:       return VarR8FromI1(V_I1(ps), &V_R8(pd));
351     case VT_I2:       return VarR8FromI2(V_I2(ps), &V_R8(pd));
352     case VT_I4:       return VarR8FromI4(V_I4(ps), &V_R8(pd));
353     case VT_UI1:      return VarR8FromUI1(V_UI1(ps), &V_R8(pd));
354     case VT_UI2:      return VarR8FromUI2(V_UI2(ps), &V_R8(pd));
355     case VT_UI4:      return VarR8FromUI4(V_UI4(ps), &V_R8(pd));
356     case VT_I8:       return VarR8FromI8(V_I8(ps), &V_R8(pd));
357     case VT_UI8:      return VarR8FromUI8(V_UI8(ps), &V_R8(pd));
358     case VT_R4:       return VarR8FromR4(V_R4(ps), &V_R8(pd));
359     case VT_DATE:     return VarR8FromDate(V_DATE(ps), &V_R8(pd));
360     case VT_BOOL:     return VarR8FromBool(V_BOOL(ps), &V_R8(pd));
361     case VT_CY:       return VarR8FromCy(V_CY(ps), &V_R8(pd));
362     case VT_DECIMAL:  return VarR8FromDec(&V_DECIMAL(ps), &V_R8(pd));
363     case VT_DISPATCH: return VarR8FromDisp(V_DISPATCH(ps), lcid, &V_R8(pd));
364     case VT_BSTR:     return VarR8FromStr(V_BSTR(ps), lcid, dwFlags, &V_R8(pd));
365     }
366     break;
367 
368   case VT_DATE:
369     switch (vtFrom)
370     {
371     case VT_EMPTY:    V_DATE(pd) = 0.0; return S_OK;
372     case VT_I1:       return VarDateFromI1(V_I1(ps), &V_DATE(pd));
373     case VT_I2:       return VarDateFromI2(V_I2(ps), &V_DATE(pd));
374     case VT_I4:       return VarDateFromI4(V_I4(ps), &V_DATE(pd));
375     case VT_UI1:      return VarDateFromUI1(V_UI1(ps), &V_DATE(pd));
376     case VT_UI2:      return VarDateFromUI2(V_UI2(ps), &V_DATE(pd));
377     case VT_UI4:      return VarDateFromUI4(V_UI4(ps), &V_DATE(pd));
378     case VT_I8:       return VarDateFromI8(V_I8(ps), &V_DATE(pd));
379     case VT_UI8:      return VarDateFromUI8(V_UI8(ps), &V_DATE(pd));
380     case VT_R4:       return VarDateFromR4(V_R4(ps), &V_DATE(pd));
381     case VT_R8:       return VarDateFromR8(V_R8(ps), &V_DATE(pd));
382     case VT_BOOL:     return VarDateFromBool(V_BOOL(ps), &V_DATE(pd));
383     case VT_CY:       return VarDateFromCy(V_CY(ps), &V_DATE(pd));
384     case VT_DECIMAL:  return VarDateFromDec(&V_DECIMAL(ps), &V_DATE(pd));
385     case VT_DISPATCH: return VarDateFromDisp(V_DISPATCH(ps), lcid, &V_DATE(pd));
386     case VT_BSTR:     return VarDateFromStr(V_BSTR(ps), lcid, dwFlags, &V_DATE(pd));
387     }
388     break;
389 
390   case VT_BOOL:
391     switch (vtFrom)
392     {
393     case VT_EMPTY:    V_BOOL(pd) = 0; return S_OK;
394     case VT_I1:       return VarBoolFromI1(V_I1(ps), &V_BOOL(pd));
395     case VT_I2:       return VarBoolFromI2(V_I2(ps), &V_BOOL(pd));
396     case VT_I4:       return VarBoolFromI4(V_I4(ps), &V_BOOL(pd));
397     case VT_UI1:      return VarBoolFromUI1(V_UI1(ps), &V_BOOL(pd));
398     case VT_UI2:      return VarBoolFromUI2(V_UI2(ps), &V_BOOL(pd));
399     case VT_UI4:      return VarBoolFromUI4(V_UI4(ps), &V_BOOL(pd));
400     case VT_I8:       return VarBoolFromI8(V_I8(ps), &V_BOOL(pd));
401     case VT_UI8:      return VarBoolFromUI8(V_UI8(ps), &V_BOOL(pd));
402     case VT_R4:       return VarBoolFromR4(V_R4(ps), &V_BOOL(pd));
403     case VT_R8:       return VarBoolFromR8(V_R8(ps), &V_BOOL(pd));
404     case VT_DATE:     return VarBoolFromDate(V_DATE(ps), &V_BOOL(pd));
405     case VT_CY:       return VarBoolFromCy(V_CY(ps), &V_BOOL(pd));
406     case VT_DECIMAL:  return VarBoolFromDec(&V_DECIMAL(ps), &V_BOOL(pd));
407     case VT_DISPATCH: return VarBoolFromDisp(V_DISPATCH(ps), lcid, &V_BOOL(pd));
408     case VT_BSTR:     return VarBoolFromStr(V_BSTR(ps), lcid, dwFlags, &V_BOOL(pd));
409     }
410     break;
411 
412   case VT_BSTR:
413     switch (vtFrom)
414     {
415     case VT_EMPTY:
416       V_BSTR(pd) = SysAllocStringLen(NULL, 0);
417       return V_BSTR(pd) ? S_OK : E_OUTOFMEMORY;
418     case VT_BOOL:
419       if (wFlags & (VARIANT_ALPHABOOL|VARIANT_LOCALBOOL))
420          return VarBstrFromBool(V_BOOL(ps), lcid, dwFlags, &V_BSTR(pd));
421       return VarBstrFromI2(V_BOOL(ps), lcid, dwFlags, &V_BSTR(pd));
422     case VT_I1:       return VarBstrFromI1(V_I1(ps), lcid, dwFlags, &V_BSTR(pd));
423     case VT_I2:       return VarBstrFromI2(V_I2(ps), lcid, dwFlags, &V_BSTR(pd));
424     case VT_I4:       return VarBstrFromI4(V_I4(ps), lcid, dwFlags, &V_BSTR(pd));
425     case VT_UI1:      return VarBstrFromUI1(V_UI1(ps), lcid, dwFlags, &V_BSTR(pd));
426     case VT_UI2:      return VarBstrFromUI2(V_UI2(ps), lcid, dwFlags, &V_BSTR(pd));
427     case VT_UI4:      return VarBstrFromUI4(V_UI4(ps), lcid, dwFlags, &V_BSTR(pd));
428     case VT_I8:       return VarBstrFromI8(V_I8(ps), lcid, dwFlags, &V_BSTR(pd));
429     case VT_UI8:      return VarBstrFromUI8(V_UI8(ps), lcid, dwFlags, &V_BSTR(pd));
430     case VT_R4:       return VarBstrFromR4(V_R4(ps), lcid, dwFlags, &V_BSTR(pd));
431     case VT_R8:       return VarBstrFromR8(V_R8(ps), lcid, dwFlags, &V_BSTR(pd));
432     case VT_DATE:     return VarBstrFromDate(V_DATE(ps), lcid, dwFlags, &V_BSTR(pd));
433     case VT_CY:       return VarBstrFromCy(V_CY(ps), lcid, dwFlags, &V_BSTR(pd));
434     case VT_DECIMAL:  return VarBstrFromDec(&V_DECIMAL(ps), lcid, dwFlags, &V_BSTR(pd));
435     case VT_DISPATCH: return VarBstrFromDisp(V_DISPATCH(ps), lcid, dwFlags, &V_BSTR(pd));
436     }
437     break;
438 
439   case VT_CY:
440     switch (vtFrom)
441     {
442     case VT_EMPTY:    V_CY(pd).int64 = 0; return S_OK;
443     case VT_I1:       return VarCyFromI1(V_I1(ps), &V_CY(pd));
444     case VT_I2:       return VarCyFromI2(V_I2(ps), &V_CY(pd));
445     case VT_I4:       return VarCyFromI4(V_I4(ps), &V_CY(pd));
446     case VT_UI1:      return VarCyFromUI1(V_UI1(ps), &V_CY(pd));
447     case VT_UI2:      return VarCyFromUI2(V_UI2(ps), &V_CY(pd));
448     case VT_UI4:      return VarCyFromUI4(V_UI4(ps), &V_CY(pd));
449     case VT_I8:       return VarCyFromI8(V_I8(ps), &V_CY(pd));
450     case VT_UI8:      return VarCyFromUI8(V_UI8(ps), &V_CY(pd));
451     case VT_R4:       return VarCyFromR4(V_R4(ps), &V_CY(pd));
452     case VT_R8:       return VarCyFromR8(V_R8(ps), &V_CY(pd));
453     case VT_DATE:     return VarCyFromDate(V_DATE(ps), &V_CY(pd));
454     case VT_BOOL:     return VarCyFromBool(V_BOOL(ps), &V_CY(pd));
455     case VT_DECIMAL:  return VarCyFromDec(&V_DECIMAL(ps), &V_CY(pd));
456     case VT_DISPATCH: return VarCyFromDisp(V_DISPATCH(ps), lcid, &V_CY(pd));
457     case VT_BSTR:     return VarCyFromStr(V_BSTR(ps), lcid, dwFlags, &V_CY(pd));
458     }
459     break;
460 
461   case VT_DECIMAL:
462     switch (vtFrom)
463     {
464     case VT_EMPTY:
465     case VT_BOOL:
466        DEC_SIGNSCALE(&V_DECIMAL(pd)) = SIGNSCALE(DECIMAL_POS,0);
467        DEC_HI32(&V_DECIMAL(pd)) = 0;
468        DEC_MID32(&V_DECIMAL(pd)) = 0;
469         /* VarDecFromBool() coerces to -1/0, ChangeTypeEx() coerces to 1/0.
470          * VT_NULL and VT_EMPTY always give a 0 value.
471          */
472        DEC_LO32(&V_DECIMAL(pd)) = vtFrom == VT_BOOL && V_BOOL(ps) ? 1 : 0;
473        return S_OK;
474     case VT_I1:       return VarDecFromI1(V_I1(ps), &V_DECIMAL(pd));
475     case VT_I2:       return VarDecFromI2(V_I2(ps), &V_DECIMAL(pd));
476     case VT_I4:       return VarDecFromI4(V_I4(ps), &V_DECIMAL(pd));
477     case VT_UI1:      return VarDecFromUI1(V_UI1(ps), &V_DECIMAL(pd));
478     case VT_UI2:      return VarDecFromUI2(V_UI2(ps), &V_DECIMAL(pd));
479     case VT_UI4:      return VarDecFromUI4(V_UI4(ps), &V_DECIMAL(pd));
480     case VT_I8:       return VarDecFromI8(V_I8(ps), &V_DECIMAL(pd));
481     case VT_UI8:      return VarDecFromUI8(V_UI8(ps), &V_DECIMAL(pd));
482     case VT_R4:       return VarDecFromR4(V_R4(ps), &V_DECIMAL(pd));
483     case VT_R8:       return VarDecFromR8(V_R8(ps), &V_DECIMAL(pd));
484     case VT_DATE:     return VarDecFromDate(V_DATE(ps), &V_DECIMAL(pd));
485     case VT_CY:       return VarDecFromCy(V_CY(ps), &V_DECIMAL(pd));
486     case VT_DISPATCH: return VarDecFromDisp(V_DISPATCH(ps), lcid, &V_DECIMAL(pd));
487     case VT_BSTR:     return VarDecFromStr(V_BSTR(ps), lcid, dwFlags, &V_DECIMAL(pd));
488     }
489     break;
490 
491   case VT_UNKNOWN:
492     switch (vtFrom)
493     {
494     case VT_DISPATCH:
495       if (V_DISPATCH(ps) == NULL)
496         V_UNKNOWN(pd) = NULL;
497       else
498         res = IDispatch_QueryInterface(V_DISPATCH(ps), &IID_IUnknown, (LPVOID*)&V_UNKNOWN(pd));
499       break;
500     }
501     break;
502 
503   case VT_DISPATCH:
504     switch (vtFrom)
505     {
506     case VT_UNKNOWN:
507       if (V_UNKNOWN(ps) == NULL)
508         V_DISPATCH(pd) = NULL;
509       else
510         res = IUnknown_QueryInterface(V_UNKNOWN(ps), &IID_IDispatch, (LPVOID*)&V_DISPATCH(pd));
511       break;
512     }
513     break;
514 
515   case VT_RECORD:
516     break;
517   }
518   return res;
519 }
520 
521 /* Coerce to/from an array */
522 static inline HRESULT VARIANT_CoerceArray(VARIANTARG* pd, VARIANTARG* ps, VARTYPE vt)
523 {
524   if (vt == VT_BSTR && V_VT(ps) == (VT_ARRAY|VT_UI1))
525     return BstrFromVector(V_ARRAY(ps), &V_BSTR(pd));
526 
527   if (V_VT(ps) == VT_BSTR && vt == (VT_ARRAY|VT_UI1))
528     return VectorFromBstr(V_BSTR(ps), &V_ARRAY(ps));
529 
530   if (V_VT(ps) == vt)
531     return SafeArrayCopy(V_ARRAY(ps), &V_ARRAY(pd));
532 
533   return DISP_E_TYPEMISMATCH;
534 }
535 
536 /******************************************************************************
537  * Check if a variants type is valid.
538  */
539 static inline HRESULT VARIANT_ValidateType(VARTYPE vt)
540 {
541   VARTYPE vtExtra = vt & VT_EXTRA_TYPE;
542 
543   vt &= VT_TYPEMASK;
544 
545   if (!(vtExtra & (VT_VECTOR|VT_RESERVED)))
546   {
547     if (vt < VT_VOID || vt == VT_RECORD || vt == VT_CLSID)
548     {
549       if ((vtExtra & (VT_BYREF|VT_ARRAY)) && vt <= VT_NULL)
550         return DISP_E_BADVARTYPE;
551       if (vt != (VARTYPE)15)
552         return S_OK;
553     }
554   }
555   return DISP_E_BADVARTYPE;
556 }
557 
558 /******************************************************************************
559  *              VariantInit     [OLEAUT32.8]
560  *
561  * Initialise a variant.
562  *
563  * PARAMS
564  *  pVarg [O] Variant to initialise
565  *
566  * RETURNS
567  *  Nothing.
568  *
569  * NOTES
570  *  This function simply sets the type of the variant to VT_EMPTY. It does not
571  *  free any existing value, use VariantClear() for that.
572  */
573 void WINAPI VariantInit(VARIANTARG* pVarg)
574 {
575   TRACE("(%p)\n", pVarg);
576 
577   V_VT(pVarg) = VT_EMPTY; /* Native doesn't set any other fields */
578 }
579 
580 /******************************************************************************
581  *              VariantClear    [OLEAUT32.9]
582  *
583  * Clear a variant.
584  *
585  * PARAMS
586  *  pVarg [I/O] Variant to clear
587  *
588  * RETURNS
589  *  Success: S_OK. Any previous value in pVarg is freed and its type is set to VT_EMPTY.
590  *  Failure: DISP_E_BADVARTYPE, if the variant is a not a valid variant type.
591  */
592 HRESULT WINAPI VariantClear(VARIANTARG* pVarg)
593 {
594   HRESULT hres = S_OK;
595 
596   TRACE("(%p->(%s%s))\n", pVarg, debugstr_VT(pVarg), debugstr_VF(pVarg));
597 
598   hres = VARIANT_ValidateType(V_VT(pVarg));
599 
600   if (SUCCEEDED(hres))
601   {
602     if (!V_ISBYREF(pVarg))
603     {
604       if (V_ISARRAY(pVarg) || V_VT(pVarg) == VT_SAFEARRAY)
605       {
606         if (V_ARRAY(pVarg))
607           hres = SafeArrayDestroy(V_ARRAY(pVarg));
608       }
609       else if (V_VT(pVarg) == VT_BSTR)
610       {
611         if (V_BSTR(pVarg))
612           SysFreeString(V_BSTR(pVarg));
613       }
614       else if (V_VT(pVarg) == VT_RECORD)
615       {
616         struct __tagBRECORD* pBr = &V_UNION(pVarg,brecVal);
617         if (pBr->pRecInfo)
618         {
619           IRecordInfo_RecordClear(pBr->pRecInfo, pBr->pvRecord);
620           IRecordInfo_Release(pBr->pRecInfo);
621         }
622       }
623       else if (V_VT(pVarg) == VT_DISPATCH ||
624                V_VT(pVarg) == VT_UNKNOWN)
625       {
626         if (V_UNKNOWN(pVarg))
627           IUnknown_Release(V_UNKNOWN(pVarg));
628       }
629     }
630     V_VT(pVarg) = VT_EMPTY;
631   }
632   return hres;
633 }
634 
635 /******************************************************************************
636  * Copy an IRecordInfo object contained in a variant.
637  */
638 static HRESULT VARIANT_CopyIRecordInfo(struct __tagBRECORD* pBr)
639 {
640   HRESULT hres = S_OK;
641 
642   if (pBr->pRecInfo)
643   {
644     ULONG ulSize;
645 
646     hres = IRecordInfo_GetSize(pBr->pRecInfo, &ulSize);
647     if (SUCCEEDED(hres))
648     {
649       PVOID pvRecord = HeapAlloc(GetProcessHeap(), 0, ulSize);
650       if (!pvRecord)
651         hres = E_OUTOFMEMORY;
652       else
653       {
654         memcpy(pvRecord, pBr->pvRecord, ulSize);
655         pBr->pvRecord = pvRecord;
656 
657         hres = IRecordInfo_RecordCopy(pBr->pRecInfo, pvRecord, pvRecord);
658         if (SUCCEEDED(hres))
659           IRecordInfo_AddRef(pBr->pRecInfo);
660       }
661     }
662   }
663   else if (pBr->pvRecord)
664     hres = E_INVALIDARG;
665   return hres;
666 }
667 
668 /******************************************************************************
669  *    VariantCopy  [OLEAUT32.10]
670  *
671  * Copy a variant.
672  *
673  * PARAMS
674  *  pvargDest [O] Destination for copy
675  *  pvargSrc  [I] Source variant to copy
676  *
677  * RETURNS
678  *  Success: S_OK. pvargDest contains a copy of pvargSrc.
679  *  Failure: DISP_E_BADVARTYPE, if either variant has an invalid type.
680  *           E_OUTOFMEMORY, if memory cannot be allocated. Otherwise an
681  *           HRESULT error code from SafeArrayCopy(), IRecordInfo_GetSize(),
682  *           or IRecordInfo_RecordCopy(), depending on the type of pvargSrc.
683  *
684  * NOTES
685  *  - If pvargSrc == pvargDest, this function does nothing, and succeeds if
686  *    pvargSrc is valid. Otherwise, pvargDest is always cleared using
687  *    VariantClear() before pvargSrc is copied to it. If clearing pvargDest
688  *    fails, so does this function.
689  *  - VT_CLSID is a valid type type for pvargSrc, but not for pvargDest.
690  *  - For by-value non-intrinsic types, a deep copy is made, i.e. The whole value
691  *    is copied rather than just any pointers to it.
692  *  - For by-value object types the object pointer is copied and the objects
693  *    reference count increased using IUnknown_AddRef().
694  *  - For all by-reference types, only the referencing pointer is copied.
695  */
696 HRESULT WINAPI VariantCopy(VARIANTARG* pvargDest, VARIANTARG* pvargSrc)
697 {
698   HRESULT hres = S_OK;
699 
700   TRACE("(%p->(%s%s),%p->(%s%s))\n", pvargDest, debugstr_VT(pvargDest),
701         debugstr_VF(pvargDest), pvargSrc, debugstr_VT(pvargSrc),
702         debugstr_VF(pvargSrc));
703 
704   if (V_TYPE(pvargSrc) == VT_CLSID || /* VT_CLSID is a special case */
705       FAILED(VARIANT_ValidateType(V_VT(pvargSrc))))
706     return DISP_E_BADVARTYPE;
707 
708   if (pvargSrc != pvargDest &&
709       SUCCEEDED(hres = VariantClear(pvargDest)))
710   {
711     *pvargDest = *pvargSrc; /* Shallow copy the value */
712 
713     if (!V_ISBYREF(pvargSrc))
714     {
715       if (V_ISARRAY(pvargSrc))
716       {
717         if (V_ARRAY(pvargSrc))
718           hres = SafeArrayCopy(V_ARRAY(pvargSrc), &V_ARRAY(pvargDest));
719       }
720       else if (V_VT(pvargSrc) == VT_BSTR)
721       {
722         V_BSTR(pvargDest) = SysAllocStringByteLen((char*)V_BSTR(pvargSrc), SysStringByteLen(V_BSTR(pvargSrc)));
723         if (!V_BSTR(pvargDest))
724         {
725           TRACE("!V_BSTR(pvargDest), SysAllocStringByteLen() failed to allocate %d bytes\n", SysStringByteLen(V_BSTR(pvargSrc)));
726           hres = E_OUTOFMEMORY;
727         }
728       }
729       else if (V_VT(pvargSrc) == VT_RECORD)
730       {
731         hres = VARIANT_CopyIRecordInfo(&V_UNION(pvargDest,brecVal));
732       }
733       else if (V_VT(pvargSrc) == VT_DISPATCH ||
734                V_VT(pvargSrc) == VT_UNKNOWN)
735       {
736         if (V_UNKNOWN(pvargSrc))
737           IUnknown_AddRef(V_UNKNOWN(pvargSrc));
738       }
739     }
740   }
741   return hres;
742 }
743 
744 /* Return the byte size of a variants data */
745 static inline size_t VARIANT_DataSize(const VARIANT* pv)
746 {
747   switch (V_TYPE(pv))
748   {
749   case VT_I1:
750   case VT_UI1:   return sizeof(BYTE);
751   case VT_I2:
752   case VT_UI2:   return sizeof(SHORT);
753   case VT_INT:
754   case VT_UINT:
755   case VT_I4:
756   case VT_UI4:   return sizeof(LONG);
757   case VT_I8:
758   case VT_UI8:   return sizeof(LONGLONG);
759   case VT_R4:    return sizeof(float);
760   case VT_R8:    return sizeof(double);
761   case VT_DATE:  return sizeof(DATE);
762   case VT_BOOL:  return sizeof(VARIANT_BOOL);
763   case VT_DISPATCH:
764   case VT_UNKNOWN:
765   case VT_BSTR:  return sizeof(void*);
766   case VT_CY:    return sizeof(CY);
767   case VT_ERROR: return sizeof(SCODE);
768   }
769   TRACE("Shouldn't be called for vt %s%s!\n", debugstr_VT(pv), debugstr_VF(pv));
770   return 0;
771 }
772 
773 /******************************************************************************
774  *    VariantCopyInd  [OLEAUT32.11]
775  *
776  * Copy a variant, dereferencing it if it is by-reference.
777  *
778  * PARAMS
779  *  pvargDest [O] Destination for copy
780  *  pvargSrc  [I] Source variant to copy
781  *
782  * RETURNS
783  *  Success: S_OK. pvargDest contains a copy of pvargSrc.
784  *  Failure: An HRESULT error code indicating the error.
785  *
786  * NOTES
787  *  Failure: DISP_E_BADVARTYPE, if either variant has an invalid by-value type.
788  *           E_INVALIDARG, if pvargSrc  is an invalid by-reference type.
789  *           E_OUTOFMEMORY, if memory cannot be allocated. Otherwise an
790  *           HRESULT error code from SafeArrayCopy(), IRecordInfo_GetSize(),
791  *           or IRecordInfo_RecordCopy(), depending on the type of pvargSrc.
792  *
793  * NOTES
794  *  - If pvargSrc is by-value, this function behaves exactly as VariantCopy().
795  *  - If pvargSrc is by-reference, the value copied to pvargDest is the pointed-to
796  *    value.
797  *  - if pvargSrc == pvargDest, this function dereferences in place. Otherwise,
798  *    pvargDest is always cleared using VariantClear() before pvargSrc is copied
799  *    to it. If clearing pvargDest fails, so does this function.
800  */
801 HRESULT WINAPI VariantCopyInd(VARIANT* pvargDest, VARIANTARG* pvargSrc)
802 {
803   VARIANTARG vTmp, *pSrc = pvargSrc;
804   VARTYPE vt;
805   HRESULT hres = S_OK;
806 
807   TRACE("(%p->(%s%s),%p->(%s%s))\n", pvargDest, debugstr_VT(pvargDest),
808         debugstr_VF(pvargDest), pvargSrc, debugstr_VT(pvargSrc),
809         debugstr_VF(pvargSrc));
810 
811   if (!V_ISBYREF(pvargSrc))
812     return VariantCopy(pvargDest, pvargSrc);
813 
814   /* Argument checking is more lax than VariantCopy()... */
815   vt = V_TYPE(pvargSrc);
816   if (V_ISARRAY(pvargSrc) ||
817      (vt > VT_NULL && vt != (VARTYPE)15 && vt < VT_VOID &&
818      !(V_VT(pvargSrc) & (VT_VECTOR|VT_RESERVED))))
819   {
820     /* OK */
821   }
822   else
823     return E_INVALIDARG; /* ...And the return value for invalid types differs too */
824 
825   if (pvargSrc == pvargDest)
826   {
827     /* In place copy. Use a shallow copy of pvargSrc & init pvargDest.
828      * This avoids an expensive VariantCopy() call - e.g. SafeArrayCopy().
829      */
830     vTmp = *pvargSrc;
831     pSrc = &vTmp;
832     V_VT(pvargDest) = VT_EMPTY;
833   }
834   else
835   {
836     /* Copy into another variant. Free the variant in pvargDest */
837     if (FAILED(hres = VariantClear(pvargDest)))
838     {
839       TRACE("VariantClear() of destination failed\n");
840       return hres;
841     }
842   }
843 
844   if (V_ISARRAY(pSrc))
845   {
846     /* Native doesn't check that *V_ARRAYREF(pSrc) is valid */
847     hres = SafeArrayCopy(*V_ARRAYREF(pSrc), &V_ARRAY(pvargDest));
848   }
849   else if (V_VT(pSrc) == (VT_BSTR|VT_BYREF))
850   {
851     /* Native doesn't check that *V_BSTRREF(pSrc) is valid */
852     V_BSTR(pvargDest) = SysAllocStringByteLen((char*)*V_BSTRREF(pSrc), SysStringByteLen(*V_BSTRREF(pSrc)));
853   }
854   else if (V_VT(pSrc) == (VT_RECORD|VT_BYREF))
855   {
856     V_UNION(pvargDest,brecVal) = V_UNION(pvargSrc,brecVal);
857     hres = VARIANT_CopyIRecordInfo(&V_UNION(pvargDest,brecVal));
858   }
859   else if (V_VT(pSrc) == (VT_DISPATCH|VT_BYREF) ||
860            V_VT(pSrc) == (VT_UNKNOWN|VT_BYREF))
861   {
862     /* Native doesn't check that *V_UNKNOWNREF(pSrc) is valid */
863     V_UNKNOWN(pvargDest) = *V_UNKNOWNREF(pSrc);
864     if (*V_UNKNOWNREF(pSrc))
865       IUnknown_AddRef(*V_UNKNOWNREF(pSrc));
866   }
867   else if (V_VT(pSrc) == (VT_VARIANT|VT_BYREF))
868   {
869     /* Native doesn't check that *V_VARIANTREF(pSrc) is valid */
870     if (V_VT(V_VARIANTREF(pSrc)) == (VT_VARIANT|VT_BYREF))
871       hres = E_INVALIDARG; /* Don't dereference more than one level */
872     else
873       hres = VariantCopyInd(pvargDest, V_VARIANTREF(pSrc));
874 
875     /* Use the dereferenced variants type value, not VT_VARIANT */
876     goto VariantCopyInd_Return;
877   }
878   else if (V_VT(pSrc) == (VT_DECIMAL|VT_BYREF))
879   {
880     memcpy(&DEC_SCALE(&V_DECIMAL(pvargDest)), &DEC_SCALE(V_DECIMALREF(pSrc)),
881            sizeof(DECIMAL) - sizeof(USHORT));
882   }
883   else
884   {
885     /* Copy the pointed to data into this variant */
886     memcpy(&V_BYREF(pvargDest), V_BYREF(pSrc), VARIANT_DataSize(pSrc));
887   }
888 
889   V_VT(pvargDest) = V_VT(pSrc) & ~VT_BYREF;
890 
891 VariantCopyInd_Return:
892 
893   if (pSrc != pvargSrc)
894     VariantClear(pSrc);
895 
896   TRACE("returning 0x%08x, %p->(%s%s)\n", hres, pvargDest,
897         debugstr_VT(pvargDest), debugstr_VF(pvargDest));
898   return hres;
899 }
900 
901 /******************************************************************************
902  *    VariantChangeType  [OLEAUT32.12]
903  *
904  * Change the type of a variant.
905  *
906  * PARAMS
907  *  pvargDest [O] Destination for the converted variant
908  *  pvargSrc  [O] Source variant to change the type of
909  *  wFlags    [I] VARIANT_ flags from "oleauto.h"
910  *  vt        [I] Variant type to change pvargSrc into
911  *
912  * RETURNS
913  *  Success: S_OK. pvargDest contains the converted value.
914  *  Failure: An HRESULT error code describing the failure.
915  *
916  * NOTES
917  *  The LCID used for the conversion is LOCALE_USER_DEFAULT.
918  *  See VariantChangeTypeEx.
919  */
920 HRESULT WINAPI VariantChangeType(VARIANTARG* pvargDest, VARIANTARG* pvargSrc,
921                                  USHORT wFlags, VARTYPE vt)
922 {
923   return VariantChangeTypeEx( pvargDest, pvargSrc, LOCALE_USER_DEFAULT, wFlags, vt );
924 }
925 
926 /******************************************************************************
927  *    VariantChangeTypeEx  [OLEAUT32.147]
928  *
929  * Change the type of a variant.
930  *
931  * PARAMS
932  *  pvargDest [O] Destination for the converted variant
933  *  pvargSrc  [O] Source variant to change the type of
934  *  lcid      [I] LCID for the conversion
935  *  wFlags    [I] VARIANT_ flags from "oleauto.h"
936  *  vt        [I] Variant type to change pvargSrc into
937  *
938  * RETURNS
939  *  Success: S_OK. pvargDest contains the converted value.
940  *  Failure: An HRESULT error code describing the failure.
941  *
942  * NOTES
943  *  pvargDest and pvargSrc can point to the same variant to perform an in-place
944  *  conversion. If the conversion is successful, pvargSrc will be freed.
945  */
946 HRESULT WINAPI VariantChangeTypeEx(VARIANTARG* pvargDest, VARIANTARG* pvargSrc,
947                                    LCID lcid, USHORT wFlags, VARTYPE vt)
948 {
949   HRESULT res = S_OK;
950 
951   TRACE("(%p->(%s%s),%p->(%s%s),0x%08x,0x%04x,%s%s)\n", pvargDest,
952         debugstr_VT(pvargDest), debugstr_VF(pvargDest), pvargSrc,
953         debugstr_VT(pvargSrc), debugstr_VF(pvargSrc), lcid, wFlags,
954         debugstr_vt(vt), debugstr_vf(vt));
955 
956   if (vt == VT_CLSID)
957     res = DISP_E_BADVARTYPE;
958   else
959   {
960     res = VARIANT_ValidateType(V_VT(pvargSrc));
961 
962     if (SUCCEEDED(res))
963     {
964       res = VARIANT_ValidateType(vt);
965 
966       if (SUCCEEDED(res))
967       {
968         VARIANTARG vTmp, vSrcDeref;
969 
970         if(V_ISBYREF(pvargSrc) && !V_BYREF(pvargSrc))
971           res = DISP_E_TYPEMISMATCH;
972         else
973         {
974           V_VT(&vTmp) = VT_EMPTY;
975           V_VT(&vSrcDeref) = VT_EMPTY;
976           VariantClear(&vTmp);
977           VariantClear(&vSrcDeref);
978         }
979 
980         if (SUCCEEDED(res))
981         {
982           res = VariantCopyInd(&vSrcDeref, pvargSrc);
983           if (SUCCEEDED(res))
984           {
985             if (V_ISARRAY(&vSrcDeref) || (vt & VT_ARRAY))
986               res = VARIANT_CoerceArray(&vTmp, &vSrcDeref, vt);
987             else
988               res = VARIANT_Coerce(&vTmp, lcid, wFlags, &vSrcDeref, vt);
989 
990             if (SUCCEEDED(res)) {
991                 V_VT(&vTmp) = vt;
992                 VariantCopy(pvargDest, &vTmp);
993             }
994             VariantClear(&vTmp);
995             VariantClear(&vSrcDeref);
996           }
997         }
998       }
999     }
1000   }
1001 
1002   TRACE("returning 0x%08x, %p->(%s%s)\n", res, pvargDest,
1003         debugstr_VT(pvargDest), debugstr_VF(pvargDest));
1004   return res;
1005 }
1006 
1007 /* Date Conversions */
1008 
1009 #define IsLeapYear(y) (((y % 4) == 0) && (((y % 100) != 0) || ((y % 400) == 0)))
1010 
1011 /* Convert a VT_DATE value to a Julian Date */
1012 static inline int VARIANT_JulianFromDate(int dateIn)
1013 {
1014   int julianDays = dateIn;
1015 
1016   julianDays -= DATE_MIN; /* Convert to + days from 1 Jan 100 AD */
1017   julianDays += 1757585;  /* Convert to + days from 23 Nov 4713 BC (Julian) */
1018   return julianDays;
1019 }
1020 
1021 /* Convert a Julian Date to a VT_DATE value */
1022 static inline int VARIANT_DateFromJulian(int dateIn)
1023 {
1024   int julianDays = dateIn;
1025 
1026   julianDays -= 1757585;  /* Convert to + days from 1 Jan 100 AD */
1027   julianDays += DATE_MIN; /* Convert to +/- days from 1 Jan 1899 AD */
1028   return julianDays;
1029 }
1030 
1031 /* Convert a Julian date to Day/Month/Year - from PostgreSQL */
1032 static inline void VARIANT_DMYFromJulian(int jd, USHORT *year, USHORT *month, USHORT *day)
1033 {
1034   int j, i, l, n;
1035 
1036   l = jd + 68569;
1037   n = l * 4 / 146097;
1038   l -= (n * 146097 + 3) / 4;
1039   i = (4000 * (l + 1)) / 1461001;
1040   l += 31 - (i * 1461) / 4;
1041   j = (l * 80) / 2447;
1042   *day = l - (j * 2447) / 80;
1043   l = j / 11;
1044   *month = (j + 2) - (12 * l);
1045   *year = 100 * (n - 49) + i + l;
1046 }
1047 
1048 /* Convert Day/Month/Year to a Julian date - from PostgreSQL */
1049 static inline double VARIANT_JulianFromDMY(USHORT year, USHORT month, USHORT day)
1050 {
1051   int m12 = (month - 14) / 12;
1052 
1053   return ((1461 * (year + 4800 + m12)) / 4 + (367 * (month - 2 - 12 * m12)) / 12 -
1054            (3 * ((year + 4900 + m12) / 100)) / 4 + day - 32075);
1055 }
1056 
1057 /* Macros for accessing DOS format date/time fields */
1058 #define DOS_YEAR(x)   (1980 + (x >> 9))
1059 #define DOS_MONTH(x)  ((x >> 5) & 0xf)
1060 #define DOS_DAY(x)    (x & 0x1f)
1061 #define DOS_HOUR(x)   (x >> 11)
1062 #define DOS_MINUTE(x) ((x >> 5) & 0x3f)
1063 #define DOS_SECOND(x) ((x & 0x1f) << 1)
1064 /* Create a DOS format date/time */
1065 #define DOS_DATE(d,m,y) (d | (m << 5) | ((y-1980) << 9))
1066 #define DOS_TIME(h,m,s) ((s >> 1) | (m << 5) | (h << 11))
1067 
1068 /* Roll a date forwards or backwards to correct it */
1069 static HRESULT VARIANT_RollUdate(UDATE *lpUd)
1070 {
1071   static const BYTE days[] = { 0, 31, 28, 31, 30, 31, 30, 31, 31, 30, 31, 30, 31 };
1072 
1073   TRACE("Raw date: %d/%d/%d %d:%d:%d\n", lpUd->st.wDay, lpUd->st.wMonth,
1074         lpUd->st.wYear, lpUd->st.wHour, lpUd->st.wMinute, lpUd->st.wSecond);
1075 
1076   /* Years < 100 are treated as 1900 + year */
1077   if (lpUd->st.wYear < 100)
1078     lpUd->st.wYear += 1900;
1079 
1080   if (!lpUd->st.wMonth)
1081   {
1082     /* Roll back to December of the previous year */
1083     lpUd->st.wMonth = 12;
1084     lpUd->st.wYear--;
1085   }
1086   else while (lpUd->st.wMonth > 12)
1087   {
1088     /* Roll forward the correct number of months */
1089     lpUd->st.wYear++;
1090     lpUd->st.wMonth -= 12;
1091   }
1092 
1093   if (lpUd->st.wYear > 9999 || lpUd->st.wHour > 23 ||
1094       lpUd->st.wMinute > 59 || lpUd->st.wSecond > 59)
1095     return E_INVALIDARG; /* Invalid values */
1096 
1097   if (!lpUd->st.wDay)
1098   {
1099     /* Roll back the date one day */
1100     if (lpUd->st.wMonth == 1)
1101     {
1102       /* Roll back to December 31 of the previous year */
1103       lpUd->st.wDay   = 31;
1104       lpUd->st.wMonth = 12;
1105       lpUd->st.wYear--;
1106     }
1107     else
1108     {
1109       lpUd->st.wMonth--; /* Previous month */
1110       if (lpUd->st.wMonth == 2 && IsLeapYear(lpUd->st.wYear))
1111         lpUd->st.wDay = 29; /* February has 29 days on leap years */
1112       else
1113         lpUd->st.wDay = days[lpUd->st.wMonth]; /* Last day of the month */
1114     }
1115   }
1116   else if (lpUd->st.wDay > 28)
1117   {
1118     int rollForward = 0;
1119 
1120     /* Possibly need to roll the date forward */
1121     if (lpUd->st.wMonth == 2 && IsLeapYear(lpUd->st.wYear))
1122       rollForward = lpUd->st.wDay - 29; /* February has 29 days on leap years */
1123     else
1124       rollForward = lpUd->st.wDay - days[lpUd->st.wMonth];
1125 
1126     if (rollForward > 0)
1127     {
1128       lpUd->st.wDay = rollForward;
1129       lpUd->st.wMonth++;
1130       if (lpUd->st.wMonth > 12)
1131       {
1132         lpUd->st.wMonth = 1; /* Roll forward into January of the next year */
1133         lpUd->st.wYear++;
1134       }
1135     }
1136   }
1137   TRACE("Rolled date: %d/%d/%d %d:%d:%d\n", lpUd->st.wDay, lpUd->st.wMonth,
1138         lpUd->st.wYear, lpUd->st.wHour, lpUd->st.wMinute, lpUd->st.wSecond);
1139   return S_OK;
1140 }
1141 
1142 /**********************************************************************
1143  *              DosDateTimeToVariantTime [OLEAUT32.14]
1144  *
1145  * Convert a Dos format date and time into variant VT_DATE format.
1146  *
1147  * PARAMS
1148  *  wDosDate [I] Dos format date
1149  *  wDosTime [I] Dos format time
1150  *  pDateOut [O] Destination for VT_DATE format
1151  *
1152  * RETURNS
1153  *  Success: TRUE. pDateOut contains the converted time.
1154  *  Failure: FALSE, if wDosDate or wDosTime are invalid (see notes).
1155  *
1156  * NOTES
1157  * - Dos format dates can only hold dates from 1-Jan-1980 to 31-Dec-2099.
1158  * - Dos format times are accurate to only 2 second precision.
1159  * - The format of a Dos Date is:
1160  *| Bits   Values  Meaning
1161  *| ----   ------  -------
1162  *| 0-4    1-31    Day of the week. 0 rolls back one day. A value greater than
1163  *|                the days in the month rolls forward the extra days.
1164  *| 5-8    1-12    Month of the year. 0 rolls back to December of the previous
1165  *|                year. 13-15 are invalid.
1166  *| 9-15   0-119   Year based from 1980 (Max 2099). 120-127 are invalid.
1167  * - The format of a Dos Time is:
1168  *| Bits   Values  Meaning
1169  *| ----   ------  -------
1170  *| 0-4    0-29    Seconds/2. 30 and 31 are invalid.
1171  *| 5-10   0-59    Minutes. 60-63 are invalid.
1172  *| 11-15  0-23    Hours (24 hour clock). 24-32 are invalid.
1173  */
1174 INT WINAPI DosDateTimeToVariantTime(USHORT wDosDate, USHORT wDosTime,
1175                                     double *pDateOut)
1176 {
1177   UDATE ud;
1178 
1179   TRACE("(0x%x(%d/%d/%d),0x%x(%d:%d:%d),%p)\n",
1180         wDosDate, DOS_YEAR(wDosDate), DOS_MONTH(wDosDate), DOS_DAY(wDosDate),
1181         wDosTime, DOS_HOUR(wDosTime), DOS_MINUTE(wDosTime), DOS_SECOND(wDosTime),
1182         pDateOut);
1183 
1184   ud.st.wYear = DOS_YEAR(wDosDate);
1185   ud.st.wMonth = DOS_MONTH(wDosDate);
1186   if (ud.st.wYear > 2099 || ud.st.wMonth > 12)
1187     return FALSE;
1188   ud.st.wDay = DOS_DAY(wDosDate);
1189   ud.st.wHour = DOS_HOUR(wDosTime);
1190   ud.st.wMinute = DOS_MINUTE(wDosTime);
1191   ud.st.wSecond = DOS_SECOND(wDosTime);
1192   ud.st.wDayOfWeek = ud.st.wMilliseconds = 0;
1193 
1194   return VarDateFromUdate(&ud, 0, pDateOut) == S_OK;
1195 }
1196 
1197 /**********************************************************************
1198  *              VariantTimeToDosDateTime [OLEAUT32.13]
1199  *
1200  * Convert a variant format date into a Dos format date and time.
1201  *
1202  *  dateIn    [I] VT_DATE time format
1203  *  pwDosDate [O] Destination for Dos format date
1204  *  pwDosTime [O] Destination for Dos format time
1205  *
1206  * RETURNS
1207  *  Success: TRUE. pwDosDate and pwDosTime contains the converted values.
1208  *  Failure: FALSE, if dateIn cannot be represented in Dos format.
1209  *
1210  * NOTES
1211  *   See DosDateTimeToVariantTime() for Dos format details and bugs.
1212  */
1213 INT WINAPI VariantTimeToDosDateTime(double dateIn, USHORT *pwDosDate, USHORT *pwDosTime)
1214 {
1215   UDATE ud;
1216 
1217   TRACE("(%g,%p,%p)\n", dateIn, pwDosDate, pwDosTime);
1218 
1219   if (FAILED(VarUdateFromDate(dateIn, 0, &ud)))
1220     return FALSE;
1221 
1222   if (ud.st.wYear < 1980 || ud.st.wYear > 2099)
1223     return FALSE;
1224 
1225   *pwDosDate = DOS_DATE(ud.st.wDay, ud.st.wMonth, ud.st.wYear);
1226   *pwDosTime = DOS_TIME(ud.st.wHour, ud.st.wMinute, ud.st.wSecond);
1227 
1228   TRACE("Returning 0x%x(%d/%d/%d), 0x%x(%d:%d:%d)\n",
1229         *pwDosDate, DOS_YEAR(*pwDosDate), DOS_MONTH(*pwDosDate), DOS_DAY(*pwDosDate),
1230         *pwDosTime, DOS_HOUR(*pwDosTime), DOS_MINUTE(*pwDosTime), DOS_SECOND(*pwDosTime));
1231   return TRUE;
1232 }
1233 
1234 /***********************************************************************
1235  *              SystemTimeToVariantTime [OLEAUT32.184]
1236  *
1237  * Convert a System format date and time into variant VT_DATE format.
1238  *
1239  * PARAMS
1240  *  lpSt     [I] System format date and time
1241  *  pDateOut [O] Destination for VT_DATE format date
1242  *
1243  * RETURNS
1244  *  Success: TRUE. *pDateOut contains the converted value.
1245  *  Failure: FALSE, if lpSt cannot be represented in VT_DATE format.
1246  */
1247 INT WINAPI SystemTimeToVariantTime(LPSYSTEMTIME lpSt, double *pDateOut)
1248 {
1249   UDATE ud;
1250 
1251   TRACE("(%p->%d/%d/%d %d:%d:%d,%p)\n", lpSt, lpSt->wDay, lpSt->wMonth,
1252         lpSt->wYear, lpSt->wHour, lpSt->wMinute, lpSt->wSecond, pDateOut);
1253 
1254   if (lpSt->wMonth > 12)
1255     return FALSE;
1256 
1257   ud.st = *lpSt;
1258   return VarDateFromUdate(&ud, 0, pDateOut) == S_OK;
1259 }
1260 
1261 /***********************************************************************
1262  *              VariantTimeToSystemTime [OLEAUT32.185]
1263  *
1264  * Convert a variant VT_DATE into a System format date and time.
1265  *
1266  * PARAMS
1267  *  datein [I] Variant VT_DATE format date
1268  *  lpSt   [O] Destination for System format date and time
1269  *
1270  * RETURNS
1271  *  Success: TRUE. *lpSt contains the converted value.
1272  *  Failure: FALSE, if dateIn is too large or small.
1273  */
1274 INT WINAPI VariantTimeToSystemTime(double dateIn, LPSYSTEMTIME lpSt)
1275 {
1276   UDATE ud;
1277 
1278   TRACE("(%g,%p)\n", dateIn, lpSt);
1279 
1280   if (FAILED(VarUdateFromDate(dateIn, 0, &ud)))
1281     return FALSE;
1282 
1283   *lpSt = ud.st;
1284   return TRUE;
1285 }
1286 
1287 /***********************************************************************
1288  *              VarDateFromUdateEx [OLEAUT32.319]
1289  *
1290  * Convert an unpacked format date and time to a variant VT_DATE.
1291  *
1292  * PARAMS
1293  *  pUdateIn [I] Unpacked format date and time to convert
1294  *  lcid     [I] Locale identifier for the conversion
1295  *  dwFlags  [I] Flags controlling the conversion (VAR_ flags from "oleauto.h")
1296  *  pDateOut [O] Destination for variant VT_DATE.
1297  *
1298  * RETURNS
1299  *  Success: S_OK. *pDateOut contains the converted value.
1300  *  Failure: E_INVALIDARG, if pUdateIn cannot be represented in VT_DATE format.
1301  */
1302 HRESULT WINAPI VarDateFromUdateEx(UDATE *pUdateIn, LCID lcid, ULONG dwFlags, DATE *pDateOut)
1303 {
1304   UDATE ud;
1305   double dateVal;
1306 
1307   TRACE("(%p->%d/%d/%d %d:%d:%d:%d %d %d,0x%08x,0x%08x,%p)\n", pUdateIn,
1308         pUdateIn->st.wMonth, pUdateIn->st.wDay, pUdateIn->st.wYear,
1309         pUdateIn->st.wHour, pUdateIn->st.wMinute, pUdateIn->st.wSecond,
1310         pUdateIn->st.wMilliseconds, pUdateIn->st.wDayOfWeek,
1311         pUdateIn->wDayOfYear, lcid, dwFlags, pDateOut);
1312 
1313   if (lcid != MAKELCID(MAKELANGID(LANG_ENGLISH, SUBLANG_ENGLISH_US), SORT_DEFAULT))
1314     FIXME("lcid possibly not handled, treating as en-us\n");
1315 
1316   ud = *pUdateIn;
1317 
1318   if (dwFlags & VAR_VALIDDATE)
1319     WARN("Ignoring VAR_VALIDDATE\n");
1320 
1321   if (FAILED(VARIANT_RollUdate(&ud)))
1322     return E_INVALIDARG;
1323 
1324   /* Date */
1325   dateVal = VARIANT_DateFromJulian(VARIANT_JulianFromDMY(ud.st.wYear, ud.st.wMonth, ud.st.wDay));
1326 
1327   /* Time */
1328   dateVal += ud.st.wHour / 24.0;
1329   dateVal += ud.st.wMinute / 1440.0;
1330   dateVal += ud.st.wSecond / 86400.0;
1331   dateVal += ud.st.wMilliseconds / 86400000.0;
1332 
1333   TRACE("Returning %g\n", dateVal);
1334   *pDateOut = dateVal;
1335   return S_OK;
1336 }
1337 
1338 /***********************************************************************
1339  *              VarDateFromUdate [OLEAUT32.330]
1340  *
1341  * Convert an unpacked format date and time to a variant VT_DATE.
1342  *
1343  * PARAMS
1344  *  pUdateIn [I] Unpacked format date and time to convert
1345  *  dwFlags  [I] Flags controlling the conversion (VAR_ flags from "oleauto.h")
1346  *  pDateOut [O] Destination for variant VT_DATE.
1347  *
1348  * RETURNS
1349  *  Success: S_OK. *pDateOut contains the converted value.
1350  *  Failure: E_INVALIDARG, if pUdateIn cannot be represented in VT_DATE format.
1351  *
1352  * NOTES
1353  *  This function uses the United States English locale for the conversion. Use
1354  *  VarDateFromUdateEx() for alternate locales.
1355  */
1356 HRESULT WINAPI VarDateFromUdate(UDATE *pUdateIn, ULONG dwFlags, DATE *pDateOut)
1357 {
1358   LCID lcid = MAKELCID(MAKELANGID(LANG_ENGLISH, SUBLANG_ENGLISH_US), SORT_DEFAULT);
1359   
1360   return VarDateFromUdateEx(pUdateIn, lcid, dwFlags, pDateOut);
1361 }
1362 
1363 /***********************************************************************
1364  *              VarUdateFromDate [OLEAUT32.331]
1365  *
1366  * Convert a variant VT_DATE into an unpacked format date and time.
1367  *
1368  * PARAMS
1369  *  datein    [I] Variant VT_DATE format date
1370  *  dwFlags   [I] Flags controlling the conversion (VAR_ flags from "oleauto.h")
1371  *  lpUdate   [O] Destination for unpacked format date and time
1372  *
1373  * RETURNS
1374  *  Success: S_OK. *lpUdate contains the converted value.
1375  *  Failure: E_INVALIDARG, if dateIn is too large or small.
1376  */
1377 HRESULT WINAPI VarUdateFromDate(DATE dateIn, ULONG dwFlags, UDATE *lpUdate)
1378 {
1379   /* Cumulative totals of days per month */
1380   static const USHORT cumulativeDays[] =
1381   {
1382     0, 0, 31, 59, 90, 120, 151, 181, 212, 243, 273, 304, 334
1383   };
1384   double datePart, timePart;
1385   int julianDays;
1386 
1387   TRACE("(%g,0x%08x,%p)\n", dateIn, dwFlags, lpUdate);
1388 
1389   if (dateIn <= (DATE_MIN - 1.0) || dateIn >= (DATE_MAX + 1.0))
1390     return E_INVALIDARG;
1391 
1392   datePart = dateIn < 0.0 ? ceil(dateIn) : floor(dateIn);
1393   /* Compensate for int truncation (always downwards) */
1394   timePart = dateIn - datePart + 0.00000000001;
1395   if (timePart >= 1.0)
1396     timePart -= 0.00000000001;
1397 
1398   /* Date */
1399   julianDays = VARIANT_JulianFromDate(dateIn);
1400   VARIANT_DMYFromJulian(julianDays, &lpUdate->st.wYear, &lpUdate->st.wMonth,
1401                         &lpUdate->st.wDay);
1402 
1403   datePart = (datePart + 1.5) / 7.0;
1404   lpUdate->st.wDayOfWeek = (datePart - floor(datePart)) * 7;
1405   if (lpUdate->st.wDayOfWeek == 0)
1406     lpUdate->st.wDayOfWeek = 5;
1407   else if (lpUdate->st.wDayOfWeek == 1)
1408     lpUdate->st.wDayOfWeek = 6;
1409   else
1410     lpUdate->st.wDayOfWeek -= 2;
1411 
1412   if (lpUdate->st.wMonth > 2 && IsLeapYear(lpUdate->st.wYear))
1413     lpUdate->wDayOfYear = 1; /* After February, in a leap year */
1414   else
1415     lpUdate->wDayOfYear = 0;
1416 
1417   lpUdate->wDayOfYear += cumulativeDays[lpUdate->st.wMonth];
1418   lpUdate->wDayOfYear += lpUdate->st.wDay;
1419 
1420   /* Time */
1421   timePart *= 24.0;
1422   lpUdate->st.wHour = timePart;
1423   timePart -= lpUdate->st.wHour;
1424   timePart *= 60.0;
1425   lpUdate->st.wMinute = timePart;
1426   timePart -= lpUdate->st.wMinute;
1427   timePart *= 60.0;
1428   lpUdate->st.wSecond = timePart;
1429   timePart -= lpUdate->st.wSecond;
1430   lpUdate->st.wMilliseconds = 0;
1431   if (timePart > 0.5)
1432   {
1433     /* Round the milliseconds, adjusting the time/date forward if needed */
1434     if (lpUdate->st.wSecond < 59)
1435       lpUdate->st.wSecond++;
1436     else
1437     {
1438       lpUdate->st.wSecond = 0;
1439       if (lpUdate->st.wMinute < 59)
1440         lpUdate->st.wMinute++;
1441       else
1442       {
1443         lpUdate->st.wMinute = 0;
1444         if (lpUdate->st.wHour < 23)
1445           lpUdate->st.wHour++;
1446         else
1447         {
1448           lpUdate->st.wHour = 0;
1449           /* Roll over a whole day */
1450           if (++lpUdate->st.wDay > 28)
1451             VARIANT_RollUdate(lpUdate);
1452         }
1453       }
1454     }
1455   }
1456   return S_OK;
1457 }
1458 
1459 #define GET_NUMBER_TEXT(fld,name) \
1460   buff[0] = 0; \
1461   if (!GetLocaleInfoW(lcid, lctype|fld, buff, 2)) \
1462     WARN("buffer too small for " #fld "\n"); \
1463   else \
1464     if (buff[0]) lpChars->name = buff[0]; \
1465   TRACE("lcid 0x%x, " #name "=%d '%c'\n", lcid, lpChars->name, lpChars->name)
1466 
1467 /* Get the valid number characters for an lcid */
1468 static void VARIANT_GetLocalisedNumberChars(VARIANT_NUMBER_CHARS *lpChars, LCID lcid, DWORD dwFlags)
1469 {
1470   static const VARIANT_NUMBER_CHARS defaultChars = { '-','+','.',',','$',0,'.',',' };
1471   static CRITICAL_SECTION csLastChars = { NULL, -1, 0, 0, 0, 0 };
1472   static VARIANT_NUMBER_CHARS lastChars;
1473   static LCID lastLcid = -1;
1474   static DWORD lastFlags = 0;
1475   LCTYPE lctype = dwFlags & LOCALE_NOUSEROVERRIDE;
1476   WCHAR buff[4];
1477 
1478   /* To make caching thread-safe, a critical section is needed */
1479   EnterCriticalSection(&csLastChars);
1480 
1481   /* Asking for default locale entries is very expensive: It is a registry
1482      server call. So cache one locally, as Microsoft does it too */
1483   if(lcid == lastLcid && dwFlags == lastFlags)
1484   {
1485     memcpy(lpChars, &lastChars, sizeof(defaultChars));
1486     LeaveCriticalSection(&csLastChars);
1487     return;
1488   }
1489 
1490   memcpy(lpChars, &defaultChars, sizeof(defaultChars));
1491   GET_NUMBER_TEXT(LOCALE_SNEGATIVESIGN, cNegativeSymbol);
1492   GET_NUMBER_TEXT(LOCALE_SPOSITIVESIGN, cPositiveSymbol);
1493   GET_NUMBER_TEXT(LOCALE_SDECIMAL, cDecimalPoint);
1494   GET_NUMBER_TEXT(LOCALE_STHOUSAND, cDigitSeparator);
1495   GET_NUMBER_TEXT(LOCALE_SMONDECIMALSEP, cCurrencyDecimalPoint);
1496   GET_NUMBER_TEXT(LOCALE_SMONTHOUSANDSEP, cCurrencyDigitSeparator);
1497 
1498   /* Local currency symbols are often 2 characters */
1499   lpChars->cCurrencyLocal2 = '\0';
1500   switch(GetLocaleInfoW(lcid, lctype|LOCALE_SCURRENCY, buff, sizeof(buff)/sizeof(WCHAR)))
1501   {
1502     case 3: lpChars->cCurrencyLocal2 = buff[1]; /* Fall through */
1503     case 2: lpChars->cCurrencyLocal  = buff[0];
1504             break;
1505     default: WARN("buffer too small for LOCALE_SCURRENCY\n");
1506   }
1507   TRACE("lcid 0x%x, cCurrencyLocal =%d,%d '%c','%c'\n", lcid, lpChars->cCurrencyLocal,
1508         lpChars->cCurrencyLocal2, lpChars->cCurrencyLocal, lpChars->cCurrencyLocal2);
1509 
1510   memcpy(&lastChars, lpChars, sizeof(defaultChars));
1511   lastLcid = lcid;
1512   lastFlags = dwFlags;
1513   LeaveCriticalSection(&csLastChars);
1514 }
1515 
1516 /* Number Parsing States */
1517 #define B_PROCESSING_EXPONENT 0x1
1518 #define B_NEGATIVE_EXPONENT   0x2
1519 #define B_EXPONENT_START      0x4
1520 #define B_INEXACT_ZEROS       0x8
1521 #define B_LEADING_ZERO        0x10
1522 #define B_PROCESSING_HEX      0x20
1523 #define B_PROCESSING_OCT      0x40
1524 
1525 /**********************************************************************
1526  *              VarParseNumFromStr [OLEAUT32.46]
1527  *
1528  * Parse a string containing a number into a NUMPARSE structure.
1529  *
1530  * PARAMS
1531  *  lpszStr [I]   String to parse number from
1532  *  lcid    [I]   Locale Id for the conversion
1533  *  dwFlags [I]   0, or LOCALE_NOUSEROVERRIDE to use system default number chars
1534  *  pNumprs [I/O] Destination for parsed number
1535  *  rgbDig  [O]   Destination for digits read in
1536  *
1537  * RETURNS
1538  *  Success: S_OK. pNumprs and rgbDig contain the parsed representation of
1539  *           the number.
1540  *  Failure: E_INVALIDARG, if any parameter is invalid.
1541  *           DISP_E_TYPEMISMATCH, if the string is not a number or is formatted
1542  *           incorrectly.
1543  *           DISP_E_OVERFLOW, if rgbDig is too small to hold the number.
1544  *
1545  * NOTES
1546  *  pNumprs must have the following fields set:
1547  *   cDig: Set to the size of rgbDig.
1548  *   dwInFlags: Set to the allowable syntax of the number using NUMPRS_ flags
1549  *            from "oleauto.h".
1550  *
1551  * FIXME
1552  *  - I am unsure if this function should parse non-arabic (e.g. Thai)
1553  *   numerals, so this has not been implemented.
1554  */
1555 HRESULT WINAPI VarParseNumFromStr(OLECHAR *lpszStr, LCID lcid, ULONG dwFlags,
1556                                   NUMPARSE *pNumprs, BYTE *rgbDig)
1557 {
1558   VARIANT_NUMBER_CHARS chars;
1559   BYTE rgbTmp[1024];
1560   DWORD dwState = B_EXPONENT_START|B_INEXACT_ZEROS;
1561   int iMaxDigits = sizeof(rgbTmp) / sizeof(BYTE);
1562   int cchUsed = 0;
1563 
1564   TRACE("(%s,%d,0x%08x,%p,%p)\n", debugstr_w(lpszStr), lcid, dwFlags, pNumprs, rgbDig);
1565 
1566   if (!pNumprs || !rgbDig)
1567     return E_INVALIDARG;
1568 
1569   if (pNumprs->cDig < iMaxDigits)
1570     iMaxDigits = pNumprs->cDig;
1571 
1572   pNumprs->cDig = 0;
1573   pNumprs->dwOutFlags = 0;
1574   pNumprs->cchUsed = 0;
1575   pNumprs->nBaseShift = 0;
1576   pNumprs->nPwr10 = 0;
1577 
1578   if (!lpszStr)
1579     return DISP_E_TYPEMISMATCH;
1580 
1581   VARIANT_GetLocalisedNumberChars(&chars, lcid, dwFlags);
1582 
1583   /* First consume all the leading symbols and space from the string */
1584   while (1)
1585   {
1586     if (pNumprs->dwInFlags & NUMPRS_LEADING_WHITE && isspaceW(*lpszStr))
1587     {
1588       pNumprs->dwOutFlags |= NUMPRS_LEADING_WHITE;
1589       do
1590       {
1591         cchUsed++;
1592         lpszStr++;
1593       } while (isspaceW(*lpszStr));
1594     }
1595     else if (pNumprs->dwInFlags & NUMPRS_LEADING_PLUS &&
1596              *lpszStr == chars.cPositiveSymbol &&
1597              !(pNumprs->dwOutFlags & NUMPRS_LEADING_PLUS))
1598     {
1599       pNumprs->dwOutFlags |= NUMPRS_LEADING_PLUS;
1600       cchUsed++;
1601       lpszStr++;
1602     }
1603     else if (pNumprs->dwInFlags & NUMPRS_LEADING_MINUS &&
1604              *lpszStr == chars.cNegativeSymbol &&
1605              !(pNumprs->dwOutFlags & NUMPRS_LEADING_MINUS))
1606     {
1607       pNumprs->dwOutFlags |= (NUMPRS_LEADING_MINUS|NUMPRS_NEG);
1608       cchUsed++;
1609       lpszStr++;
1610     }
1611     else if (pNumprs->dwInFlags & NUMPRS_CURRENCY &&
1612              !(pNumprs->dwOutFlags & NUMPRS_CURRENCY) &&
1613              *lpszStr == chars.cCurrencyLocal &&
1614              (!chars.cCurrencyLocal2 || lpszStr[1] == chars.cCurrencyLocal2))
1615     {
1616       pNumprs->dwOutFlags |= NUMPRS_CURRENCY;
1617       cchUsed++;
1618       lpszStr++;
1619       /* Only accept currency characters */
1620       chars.cDecimalPoint = chars.cCurrencyDecimalPoint;
1621       chars.cDigitSeparator = chars.cCurrencyDigitSeparator;
1622     }
1623     else if (pNumprs->dwInFlags & NUMPRS_PARENS && *lpszStr == '(' &&
1624              !(pNumprs->dwOutFlags & NUMPRS_PARENS))
1625     {
1626       pNumprs->dwOutFlags |= NUMPRS_PARENS;
1627       cchUsed++;
1628       lpszStr++;
1629     }
1630     else
1631       break;
1632   }
1633 
1634   if (!(pNumprs->dwOutFlags & NUMPRS_CURRENCY))
1635   {
1636     /* Only accept non-currency characters */
1637     chars.cCurrencyDecimalPoint = chars.cDecimalPoint;
1638     chars.cCurrencyDigitSeparator = chars.cDigitSeparator;
1639   }
1640 
1641   if ((*lpszStr == '&' && (*(lpszStr+1) == 'H' || *(lpszStr+1) == 'h')) &&
1642     pNumprs->dwInFlags & NUMPRS_HEX_OCT)
1643   {
1644       dwState |= B_PROCESSING_HEX;
1645       pNumprs->dwOutFlags |= NUMPRS_HEX_OCT;
1646       cchUsed=cchUsed+2;
1647       lpszStr=lpszStr+2;
1648   }
1649   else if ((*lpszStr == '&' && (*(lpszStr+1) == 'O' || *(lpszStr+1) == 'o')) &&
1650     pNumprs->dwInFlags & NUMPRS_HEX_OCT)
1651   {
1652       dwState |= B_PROCESSING_OCT;
1653       pNumprs->dwOutFlags |= NUMPRS_HEX_OCT;
1654       cchUsed=cchUsed+2;
1655       lpszStr=lpszStr+2;
1656   }
1657 
1658   /* Strip Leading zeros */
1659   while (*lpszStr == '')
1660   {
1661     dwState |= B_LEADING_ZERO;
1662     cchUsed++;
1663     lpszStr++;
1664   }
1665 
1666   while (*lpszStr)
1667   {
1668     if (isdigitW(*lpszStr))
1669     {
1670       if (dwState & B_PROCESSING_EXPONENT)
1671       {
1672         int exponentSize = 0;
1673         if (dwState & B_EXPONENT_START)
1674         {
1675           if (!isdigitW(*lpszStr))
1676             break; /* No exponent digits - invalid */
1677           while (*lpszStr == '')
1678           {
1679             /* Skip leading zero's in the exponent */
1680             cchUsed++;
1681             lpszStr++;
1682           }
1683         }
1684 
1685         while (isdigitW(*lpszStr))
1686         {
1687           exponentSize *= 10;
1688           exponentSize += *lpszStr - '';
1689           cchUsed++;
1690           lpszStr++;
1691         }
1692         if (dwState & B_NEGATIVE_EXPONENT)
1693           exponentSize = -exponentSize;
1694         /* Add the exponent into the powers of 10 */
1695         pNumprs->nPwr10 += exponentSize;
1696         dwState &= ~(B_PROCESSING_EXPONENT|B_EXPONENT_START);
1697         lpszStr--; /* back up to allow processing of next char */
1698       }
1699       else
1700       {
1701         if ((pNumprs->cDig >= iMaxDigits) && !(dwState & B_PROCESSING_HEX)
1702           && !(dwState & B_PROCESSING_OCT))
1703         {
1704           pNumprs->dwOutFlags |= NUMPRS_INEXACT;
1705 
1706           if (*lpszStr != '')
1707             dwState &= ~B_INEXACT_ZEROS; /* Inexact number with non-trailing zeros */
1708 
1709           /* This digit can't be represented, but count it in nPwr10 */
1710           if (pNumprs->dwOutFlags & NUMPRS_DECIMAL)
1711             pNumprs->nPwr10--;
1712           else
1713             pNumprs->nPwr10++;
1714         }
1715         else
1716         {
1717           if ((dwState & B_PROCESSING_OCT) && ((*lpszStr == '8') || (*lpszStr == '9'))) {
1718             return DISP_E_TYPEMISMATCH;
1719           }
1720 
1721           if (pNumprs->dwOutFlags & NUMPRS_DECIMAL)
1722             pNumprs->nPwr10--; /* Count decimal points in nPwr10 */
1723 
1724           rgbTmp[pNumprs->cDig] = *lpszStr - '';
1725         }
1726         pNumprs->cDig++;
1727         cchUsed++;
1728       }
1729     }
1730     else if (*lpszStr == chars.cDigitSeparator && pNumprs->dwInFlags & NUMPRS_THOUSANDS)
1731     {
1732       pNumprs->dwOutFlags |= NUMPRS_THOUSANDS;
1733       cchUsed++;
1734     }
1735     else if (*lpszStr == chars.cDecimalPoint &&
1736              pNumprs->dwInFlags & NUMPRS_DECIMAL &&
1737              !(pNumprs->dwOutFlags & (NUMPRS_DECIMAL|NUMPRS_EXPONENT)))
1738     {
1739       pNumprs->dwOutFlags |= NUMPRS_DECIMAL;
1740       cchUsed++;
1741 
1742       /* If we have no digits so far, skip leading zeros */
1743       if (!pNumprs->cDig)
1744       {
1745         while (lpszStr[1] == '')
1746         {
1747           dwState |= B_LEADING_ZERO;
1748           cchUsed++;
1749           lpszStr++;
1750           pNumprs->nPwr10--;
1751         }
1752       }
1753     }
1754     else if (((*lpszStr >= 'a' && *lpszStr <= 'f') ||
1755              (*lpszStr >= 'A' && *lpszStr <= 'F')) &&
1756              dwState & B_PROCESSING_HEX)
1757     {
1758       if (pNumprs->cDig >= iMaxDigits)
1759       {
1760         return DISP_E_OVERFLOW;
1761       }
1762       else
1763       {
1764         if (*lpszStr >= 'a')
1765           rgbTmp[pNumprs->cDig] = *lpszStr - 'a' + 10;
1766         else
1767           rgbTmp[pNumprs->cDig] = *lpszStr - 'A' + 10;
1768       }
1769       pNumprs->cDig++;
1770       cchUsed++;
1771     }
1772     else if ((*lpszStr == 'e' || *lpszStr == 'E') &&
1773              pNumprs->dwInFlags & NUMPRS_EXPONENT &&
1774              !(pNumprs->dwOutFlags & NUMPRS_EXPONENT))
1775     {
1776       dwState |= B_PROCESSING_EXPONENT;
1777       pNumprs->dwOutFlags |= NUMPRS_EXPONENT;
1778       cchUsed++;
1779     }
1780     else if (dwState & B_PROCESSING_EXPONENT && *lpszStr == chars.cPositiveSymbol)
1781     {
1782       cchUsed++; /* Ignore positive exponent */
1783     }
1784     else if (dwState & B_PROCESSING_EXPONENT && *lpszStr == chars.cNegativeSymbol)
1785     {
1786       dwState |= B_NEGATIVE_EXPONENT;
1787       cchUsed++;
1788     }
1789     else
1790       break; /* Stop at an unrecognised character */
1791 
1792     lpszStr++;
1793   }
1794 
1795   if (!pNumprs->cDig && dwState & B_LEADING_ZERO)
1796   {
1797     /* Ensure a 0 on its own gets stored */
1798     pNumprs->cDig = 1;
1799     rgbTmp[0] = 0;
1800   }
1801 
1802   if (pNumprs->dwOutFlags & NUMPRS_EXPONENT && dwState & B_PROCESSING_EXPONENT)
1803   {
1804     pNumprs->cchUsed = cchUsed;
1805     WARN("didn't completely parse exponent\n");
1806     return DISP_E_TYPEMISMATCH; /* Failed to completely parse the exponent */
1807   }
1808 
1809   if (pNumprs->dwOutFlags & NUMPRS_INEXACT)
1810   {
1811     if (dwState & B_INEXACT_ZEROS)
1812       pNumprs->dwOutFlags &= ~NUMPRS_INEXACT; /* All zeros doesn't set NUMPRS_INEXACT */
1813   } else if(pNumprs->dwInFlags & NUMPRS_HEX_OCT)
1814   {
1815     /* copy all of the digits into the output digit buffer */
1816     /* this is exactly what windows does although it also returns */
1817     /* cDig of X and writes X+Y where Y>=0 number of digits to rgbDig */
1818     memcpy(rgbDig, rgbTmp, pNumprs->cDig * sizeof(BYTE));
1819 
1820     if (dwState & B_PROCESSING_HEX) {
1821       /* hex numbers have always the same format */
1822       pNumprs->nPwr10=0;
1823       pNumprs->nBaseShift=4;
1824     } else {
1825       if (dwState & B_PROCESSING_OCT) {
1826         /* oct numbers have always the same format */
1827         pNumprs->nPwr10=0;
1828         pNumprs->nBaseShift=3;
1829       } else {
1830         while (pNumprs->cDig > 1 && !rgbTmp[pNumprs->cDig - 1])
1831         {
1832           pNumprs->nPwr10++;
1833           pNumprs->cDig--;
1834         }
1835       }
1836     }
1837   } else
1838   {
1839     /* Remove trailing zeros from the last (whole number or decimal) part */
1840     while (pNumprs->cDig > 1 && !rgbTmp[pNumprs->cDig - 1])
1841     {
1842       pNumprs->nPwr10++;
1843       pNumprs->cDig--;
1844     }
1845   }
1846 
1847   if (pNumprs->cDig <= iMaxDigits)
1848     pNumprs->dwOutFlags &= ~NUMPRS_INEXACT; /* Ignore stripped zeros for NUMPRS_INEXACT */
1849   else
1850     pNumprs->cDig = iMaxDigits; /* Only return iMaxDigits worth of digits */
1851 
1852   /* Copy the digits we processed into rgbDig */
1853   memcpy(rgbDig, rgbTmp, pNumprs->cDig * sizeof(BYTE));
1854 
1855   /* Consume any trailing symbols and space */
1856   while (1)
1857   {
1858     if ((pNumprs->dwInFlags & NUMPRS_TRAILING_WHITE) && isspaceW(*lpszStr))
1859     {
1860       pNumprs->dwOutFlags |= NUMPRS_TRAILING_WHITE;
1861       do
1862       {
1863         cchUsed++;
1864         lpszStr++;
1865       } while (isspaceW(*lpszStr));
1866     }
1867     else if (pNumprs->dwInFlags & NUMPRS_TRAILING_PLUS &&
1868              !(pNumprs->dwOutFlags & NUMPRS_LEADING_PLUS) &&
1869              *lpszStr == chars.cPositiveSymbol)
1870     {
1871       pNumprs->dwOutFlags |= NUMPRS_TRAILING_PLUS;
1872       cchUsed++;
1873       lpszStr++;
1874     }
1875     else if (pNumprs->dwInFlags & NUMPRS_TRAILING_MINUS &&
1876              !(pNumprs->dwOutFlags & NUMPRS_LEADING_MINUS) &&
1877              *lpszStr == chars.cNegativeSymbol)
1878     {
1879       pNumprs->dwOutFlags |= (NUMPRS_TRAILING_MINUS|NUMPRS_NEG);
1880       cchUsed++;
1881       lpszStr++;
1882     }
1883     else if (pNumprs->dwInFlags & NUMPRS_PARENS && *lpszStr == ')' &&
1884              pNumprs->dwOutFlags & NUMPRS_PARENS)
1885     {
1886       cchUsed++;
1887       lpszStr++;
1888       pNumprs->dwOutFlags |= NUMPRS_NEG;
1889     }
1890     else
1891       break;
1892   }
1893 
1894   if (pNumprs->dwOutFlags & NUMPRS_PARENS && !(pNumprs->dwOutFlags & NUMPRS_NEG))
1895   {
1896     pNumprs->cchUsed = cchUsed;
1897     return DISP_E_TYPEMISMATCH; /* Opening parenthesis not matched */
1898   }
1899 
1900   if (pNumprs->dwInFlags & NUMPRS_USE_ALL && *lpszStr != '\0')
1901     return DISP_E_TYPEMISMATCH; /* Not all chars were consumed */
1902 
1903   if (!pNumprs->cDig)
1904     return DISP_E_TYPEMISMATCH; /* No Number found */
1905 
1906   pNumprs->cchUsed = cchUsed;
1907   return S_OK;
1908 }
1909 
1910 /* VTBIT flags indicating an integer value */
1911 #define INTEGER_VTBITS (VTBIT_I1|VTBIT_UI1|VTBIT_I2|VTBIT_UI2|VTBIT_I4|VTBIT_UI4|VTBIT_I8|VTBIT_UI8)
1912 /* VTBIT flags indicating a real number value */
1913 #define REAL_VTBITS (VTBIT_R4|VTBIT_R8|VTBIT_CY)
1914 
1915 /* Helper macros to check whether bit pattern fits in VARIANT (x is a ULONG64 ) */
1916 #define FITS_AS_I1(x) ((x) >> 8 == 0)
1917 #define FITS_AS_I2(x) ((x) >> 16 == 0)
1918 #define FITS_AS_I4(x) ((x) >> 32 == 0)
1919 
1920 /**********************************************************************
1921  *              VarNumFromParseNum [OLEAUT32.47]
1922  *
1923  * Convert a NUMPARSE structure into a numeric Variant type.
1924  *
1925  * PARAMS
1926  *  pNumprs  [I] Source for parsed number. cDig must be set to the size of rgbDig
1927  *  rgbDig   [I] Source for the numbers digits
1928  *  dwVtBits [I] VTBIT_ flags from "oleauto.h" indicating the acceptable dest types
1929  *  pVarDst  [O] Destination for the converted Variant value.
1930  *
1931  * RETURNS
1932  *  Success: S_OK. pVarDst contains the converted value.
1933  *  Failure: E_INVALIDARG, if any parameter is invalid.
1934  *           DISP_E_OVERFLOW, if the number is too big for the types set in dwVtBits.
1935  *
1936  * NOTES
1937  *  - The smallest favoured type present in dwVtBits that can represent the
1938  *    number in pNumprs without losing precision is used.
1939  *  - Signed types are preferred over unsigned types of the same size.
1940  *  - Preferred types in order are: integer, float, double, currency then decimal.
1941  *  - Rounding (dropping of decimal points) occurs without error. See VarI8FromR8()
1942  *    for details of the rounding method.
1943  *  - pVarDst is not cleared before the result is stored in it.
1944  *  - WinXP and Win2003 support VTBIT_I8, VTBIT_UI8 but that's buggy (by
1945  *    design?): If some other VTBIT's for integers are specified together
1946  *    with VTBIT_I8 and the number will fit only in a VT_I8 Windows will "cast"
1947  *    the number to the smallest requested integer truncating this way the
1948  *    number.  Wine doesn't implement this "feature" (yet?).
1949  */
1950 HRESULT WINAPI VarNumFromParseNum(NUMPARSE *pNumprs, BYTE *rgbDig,
1951                                   ULONG dwVtBits, VARIANT *pVarDst)
1952 {
1953   /* Scale factors and limits for double arithmetic */
1954   static const double dblMultipliers[11] = {
1955     1.0, 10.0, 100.0, 1000.0, 10000.0, 100000.0,
1956     1000000.0, 10000000.0, 100000000.0, 1000000000.0, 10000000000.0
1957   };
1958   static const double dblMinimums[11] = {
1959     R8_MIN, R8_MIN*10.0, R8_MIN*100.0, R8_MIN*1000.0, R8_MIN*10000.0,
1960     R8_MIN*100000.0, R8_MIN*1000000.0, R8_MIN*10000000.0,
1961     R8_MIN*100000000.0, R8_MIN*1000000000.0, R8_MIN*10000000000.0
1962   };
1963   static const double dblMaximums[11] = {
1964     R8_MAX, R8_MAX/10.0, R8_MAX/100.0, R8_MAX/1000.0, R8_MAX/10000.0,
1965     R8_MAX/100000.0, R8_MAX/1000000.0, R8_MAX/10000000.0,
1966     R8_MAX/100000000.0, R8_MAX/1000000000.0, R8_MAX/10000000000.0
1967   };
1968 
1969   int wholeNumberDigits, fractionalDigits, divisor10 = 0, multiplier10 = 0;
1970 
1971   TRACE("(%p,%p,0x%x,%p)\n", pNumprs, rgbDig, dwVtBits, pVarDst);
1972 
1973   if (pNumprs->nBaseShift)
1974   {
1975     /* nBaseShift indicates a hex or octal number */
1976     ULONG64 ul64 = 0;
1977     LONG64 l64;
1978     int i;
1979 
1980     /* Convert the hex or octal number string into a UI64 */
1981     for (i = 0; i < pNumprs->cDig; i++)
1982     {
1983       if (ul64 > ((UI8_MAX>>pNumprs->nBaseShift) - rgbDig[i]))
1984       {
1985         TRACE("Overflow multiplying digits\n");
1986         return DISP_E_OVERFLOW;
1987       }
1988       ul64 = (ul64<<pNumprs->nBaseShift) + rgbDig[i];
1989     }
1990 
1991     /* also make a negative representation */
1992     l64=-ul64;
1993 
1994     /* Try signed and unsigned types in size order */
1995     if (dwVtBits & VTBIT_I1 && FITS_AS_I1(ul64))
1996     {
1997       V_VT(pVarDst) = VT_I1;
1998       V_I1(pVarDst) = ul64;
1999       return S_OK;
2000     }
2001     else if (dwVtBits & VTBIT_UI1 && FITS_AS_I1(ul64))
2002     {
2003       V_VT(pVarDst) = VT_UI1;
2004       V_UI1(pVarDst) = ul64;
2005       return S_OK;
2006     }
2007     else if (dwVtBits & VTBIT_I2 && FITS_AS_I2(ul64))
2008     {
2009       V_VT(pVarDst) = VT_I2;
2010       V_I2(pVarDst) = ul64;
2011       return S_OK;
2012     }
2013     else if (dwVtBits & VTBIT_UI2 && FITS_AS_I2(ul64))
2014     {
2015       V_VT(pVarDst) = VT_UI2;
2016       V_UI2(pVarDst) = ul64;
2017       return S_OK;
2018     }
2019     else if (dwVtBits & VTBIT_I4 && FITS_AS_I4(ul64))
2020     {
2021       V_VT(pVarDst) = VT_I4;
2022       V_I4(pVarDst) = ul64;
2023       return S_OK;
2024     }
2025     else if (dwVtBits & VTBIT_UI4 && FITS_AS_I4(ul64))
2026     {
2027       V_VT(pVarDst) = VT_UI4;
2028       V_UI4(pVarDst) = ul64;
2029       return S_OK;
2030     }
2031     else if (dwVtBits & VTBIT_I8 && ((ul64 <= I8_MAX)||(l64>=I8_MIN)))
2032     {
2033       V_VT(pVarDst) = VT_I8;
2034       V_I8(pVarDst) = ul64;
2035       return S_OK;
2036     }
2037     else if (dwVtBits & VTBIT_UI8)
2038     {
2039       V_VT(pVarDst) = VT_UI8;
2040       V_UI8(pVarDst) = ul64;
2041       return S_OK;
2042     }
2043     else if ((dwVtBits & VTBIT_DECIMAL) == VTBIT_DECIMAL)
2044     {
2045       V_VT(pVarDst) = VT_DECIMAL;
2046       DEC_SIGNSCALE(&V_DECIMAL(pVarDst)) = SIGNSCALE(DECIMAL_POS,0);
2047       DEC_HI32(&V_DECIMAL(pVarDst)) = 0;
2048       DEC_LO64(&V_DECIMAL(pVarDst)) = ul64;
2049       return S_OK;
2050     }
2051     else if (dwVtBits & VTBIT_R4 && ((ul64 <= I4_MAX)||(l64 >= I4_MIN)))
2052     {
2053       V_VT(pVarDst) = VT_R4;
2054       if (ul64 <= I4_MAX)
2055           V_R4(pVarDst) = ul64;
2056       else
2057           V_R4(pVarDst) = l64;
2058       return S_OK;
2059     }
2060     else if (dwVtBits & VTBIT_R8 && ((ul64 <= I4_MAX)||(l64 >= I4_MIN)))
2061     {
2062       V_VT(pVarDst) = VT_R8;
2063       if (ul64 <= I4_MAX)
2064           V_R8(pVarDst) = ul64;
2065       else
2066           V_R8(pVarDst) = l64;
2067       return S_OK;
2068     }
2069 
2070     TRACE("Overflow: possible return types: 0x%x, value: %s\n", dwVtBits, wine_dbgstr_longlong(ul64));
2071     return DISP_E_OVERFLOW;
2072   }
2073 
2074   /* Count the number of relevant fractional and whole digits stored,
2075    * And compute the divisor/multiplier to scale the number by.
2076    */
2077   if (pNumprs->nPwr10 < 0)
2078   {
2079     if (-pNumprs->nPwr10 >= pNumprs->cDig)
2080     {
2081       /* A real number < +/- 1.0 e.g. 0.1024 or 0.01024 */
2082       wholeNumberDigits = 0;
2083       fractionalDigits = pNumprs->cDig;
2084       divisor10 = -pNumprs->nPwr10;
2085     }
2086     else
2087     {
2088       /* An exactly represented real number e.g. 1.024 */
2089       wholeNumberDigits = pNumprs->cDig + pNumprs->nPwr10;
2090       fractionalDigits = pNumprs->cDig - wholeNumberDigits;
2091       divisor10 = pNumprs->cDig - wholeNumberDigits;
2092     }
2093   }
2094   else if (pNumprs->nPwr10 == 0)
2095   {
2096     /* An exactly represented whole number e.g. 1024 */
2097     wholeNumberDigits = pNumprs->cDig;
2098     fractionalDigits = 0;
2099   }
2100   else /* pNumprs->nPwr10 > 0 */
2101   {
2102     /* A whole number followed by nPwr10 0's e.g. 102400 */
2103     wholeNumberDigits = pNumprs->cDig;
2104     fractionalDigits = 0;
2105     multiplier10 = pNumprs->nPwr10;
2106   }
2107 
2108   TRACE("cDig %d; nPwr10 %d, whole %d, frac %d mult %d; div %d\n",
2109         pNumprs->cDig, pNumprs->nPwr10, wholeNumberDigits, fractionalDigits,
2110         multiplier10, divisor10);
2111 
2112   if (dwVtBits & (INTEGER_VTBITS|VTBIT_DECIMAL) &&
2113       (!fractionalDigits || !(dwVtBits & (REAL_VTBITS|VTBIT_CY|VTBIT_DECIMAL))))
2114   {
2115     /* We have one or more integer output choices, and either:
2116      *  1) An integer input value, or
2117      *  2) A real number input value but no floating output choices.
2118      * Alternately, we have a DECIMAL output available and an integer input.
2119      *
2120      * So, place the integer value into pVarDst, using the smallest type
2121      * possible and preferring signed over unsigned types.
2122      */
2123     BOOL bOverflow = FALSE, bNegative;
2124     ULONG64 ul64 = 0;
2125     int i;
2126 
2127     /* Convert the integer part of the number into a UI8 */
2128     for (i = 0; i < wholeNumberDigits; i++)
2129     {
2130       if (ul64 > (UI8_MAX / 10 - rgbDig[i]))
2131       {
2132         TRACE("Overflow multiplying digits\n");
2133         bOverflow = TRUE;
2134         break;
2135       }
2136       ul64 = ul64 * 10 + rgbDig[i];
2137     }
2138 
2139     /* Account for the scale of the number */
2140     if (!bOverflow && multiplier10)
2141     {
2142       for (i = 0; i < multiplier10; i++)
2143       {
2144         if (ul64 > (UI8_MAX / 10))
2145         {
2146           TRACE("Overflow scaling number\n");
2147           bOverflow = TRUE;
2148           break;
2149         }
2150         ul64 = ul64 * 10;
2151       }
2152     }
2153 
2154     /* If we have any fractional digits, round the value.
2155      * Note we don't have to do this if divisor10 is < 1,
2156      * because this means the fractional part must be < 0.5
2157      */
2158     if (!bOverflow && fractionalDigits && divisor10 > 0)
2159     {
2160       const BYTE* fracDig = rgbDig + wholeNumberDigits;
2161       BOOL bAdjust = FALSE;
2162 
2163       TRACE("first decimal value is %d\n", *fracDig);
2164 
2165       if (*fracDig > 5)
2166         bAdjust = TRUE; /* > 0.5 */
2167       else if (*fracDig == 5)
2168       {
2169         for (i = 1; i < fractionalDigits; i++)
2170         {
2171           if (fracDig[i])
2172           {
2173             bAdjust = TRUE; /* > 0.5 */
2174             break;
2175           }
2176         }
2177         /* If exactly 0.5, round only odd values */
2178         if (i == fractionalDigits && (ul64 & 1))
2179           bAdjust = TRUE;
2180       }
2181 
2182       if (bAdjust)
2183       {
2184         if (ul64 == UI8_MAX)
2185         {
2186           TRACE("Overflow after rounding\n");
2187           bOverflow = TRUE;
2188         }
2189         ul64++;
2190       }
2191     }
2192 
2193     /* Zero is not a negative number */
2194     bNegative = pNumprs->dwOutFlags & NUMPRS_NEG && ul64 ? TRUE : FALSE;
2195 
2196     TRACE("Integer value is 0x%s, bNeg %d\n", wine_dbgstr_longlong(ul64), bNegative);
2197 
2198     /* For negative integers, try the signed types in size order */
2199     if (!bOverflow && bNegative)
2200     {
2201       if (dwVtBits & (VTBIT_I1|VTBIT_I2|VTBIT_I4|VTBIT_I8))
2202       {
2203         if (dwVtBits & VTBIT_I1 && ul64 <= -I1_MIN)
2204         {
2205           V_VT(pVarDst) = VT_I1;
2206           V_I1(pVarDst) = -ul64;
2207           return S_OK;
2208         }
2209         else if (dwVtBits & VTBIT_I2 && ul64 <= -I2_MIN)
2210         {
2211           V_VT(pVarDst) = VT_I2;
2212           V_I2(pVarDst) = -ul64;
2213           return S_OK;
2214         }
2215         else if (dwVtBits & VTBIT_I4 && ul64 <= -((LONGLONG)I4_MIN))
2216         {
2217           V_VT(pVarDst) = VT_I4;
2218           V_I4(pVarDst) = -ul64;
2219           return S_OK;
2220         }
2221         else if (dwVtBits & VTBIT_I8 && ul64 <= (ULONGLONG)I8_MAX + 1)
2222         {
2223           V_VT(pVarDst) = VT_I8;
2224           V_I8(pVarDst) = -ul64;
2225           return S_OK;
2226         }
2227         else if ((dwVtBits & REAL_VTBITS) == VTBIT_DECIMAL)
2228         {
2229           /* Decimal is only output choice left - fast path */
2230           V_VT(pVarDst) = VT_DECIMAL;
2231           DEC_SIGNSCALE(&V_DECIMAL(pVarDst)) = SIGNSCALE(DECIMAL_NEG,0);
2232           DEC_HI32(&V_DECIMAL(pVarDst)) = 0;
2233           DEC_LO64(&V_DECIMAL(pVarDst)) = -ul64;
2234           return S_OK;
2235         }
2236       }
2237     }
2238     else if (!bOverflow)
2239     {
2240       /* For positive integers, try signed then unsigned types in size order */
2241       if (dwVtBits & VTBIT_I1 && ul64 <= I1_MAX)
2242       {
2243         V_VT(pVarDst) = VT_I1;
2244         V_I1(pVarDst) = ul64;
2245         return S_OK;
2246       }
2247       else if (dwVtBits & VTBIT_UI1 && ul64 <= UI1_MAX)
2248       {
2249         V_VT(pVarDst) = VT_UI1;
2250         V_UI1(pVarDst) = ul64;
2251         return S_OK;
2252       }
2253       else if (dwVtBits & VTBIT_I2 && ul64 <= I2_MAX)
2254       {
2255         V_VT(pVarDst) = VT_I2;
2256         V_I2(pVarDst) = ul64;
2257         return S_OK;
2258       }
2259       else if (dwVtBits & VTBIT_UI2 && ul64 <= UI2_MAX)
2260       {
2261         V_VT(pVarDst) = VT_UI2;
2262         V_UI2(pVarDst) = ul64;
2263         return S_OK;
2264       }
2265       else if (dwVtBits & VTBIT_I4 && ul64 <= I4_MAX)
2266       {
2267         V_VT(pVarDst) = VT_I4;
2268         V_I4(pVarDst) = ul64;
2269         return S_OK;
2270       }
2271       else if (dwVtBits & VTBIT_UI4 && ul64 <= UI4_MAX)
2272       {
2273         V_VT(pVarDst) = VT_UI4;
2274         V_UI4(pVarDst) = ul64;
2275         return S_OK;
2276       }
2277       else if (dwVtBits & VTBIT_I8 && ul64 <= I8_MAX)
2278       {
2279         V_VT(pVarDst) = VT_I8;
2280         V_I8(pVarDst) = ul64;
2281         return S_OK;
2282       }
2283       else if (dwVtBits & VTBIT_UI8)
2284       {
2285         V_VT(pVarDst) = VT_UI8;
2286         V_UI8(pVarDst) = ul64;
2287         return S_OK;
2288       }
2289       else if ((dwVtBits & REAL_VTBITS) == VTBIT_DECIMAL)
2290       {
2291         /* Decimal is only output choice left - fast path */
2292         V_VT(pVarDst) = VT_DECIMAL;
2293         DEC_SIGNSCALE(&V_DECIMAL(pVarDst)) = SIGNSCALE(DECIMAL_POS,0);
2294         DEC_HI32(&V_DECIMAL(pVarDst)) = 0;
2295         DEC_LO64(&V_DECIMAL(pVarDst)) = ul64;
2296         return S_OK;
2297       }
2298     }
2299   }
2300 
2301   if (dwVtBits & REAL_VTBITS)
2302   {
2303     /* Try to put the number into a float or real */
2304     BOOL bOverflow = FALSE, bNegative = pNumprs->dwOutFlags & NUMPRS_NEG;
2305     double whole = 0.0;
2306     int i;
2307 
2308     /* Convert the number into a double */
2309     for (i = 0; i < pNumprs->cDig; i++)
2310       whole = whole * 10.0 + rgbDig[i];
2311 
2312     TRACE("Whole double value is %16.16g\n", whole);
2313 
2314     /* Account for the scale */
2315     while (multiplier10 > 10)
2316     {
2317       if (whole > dblMaximums[10])
2318       {
2319         dwVtBits &= ~(VTBIT_R4|VTBIT_R8|VTBIT_CY);
2320         bOverflow = TRUE;
2321         break;
2322       }
2323       whole = whole * dblMultipliers[10];
2324       multiplier10 -= 10;
2325     }
2326     if (multiplier10)
2327     {
2328       if (whole > dblMaximums[multiplier10])
2329       {
2330         dwVtBits &= ~(VTBIT_R4|VTBIT_R8|VTBIT_CY);
2331         bOverflow = TRUE;
2332       }
2333       else
2334         whole = whole * dblMultipliers[multiplier10];
2335     }
2336 
2337     TRACE("Scaled double value is %16.16g\n", whole);
2338 
2339     while (divisor10 > 10)
2340     {
2341       if (whole < dblMinimums[10] && whole != 0)
2342       {
2343         dwVtBits &= ~(VTBIT_R4|VTBIT_R8|VTBIT_CY); /* Underflow */
2344         bOverflow = TRUE;
2345         break;
2346       }
2347       whole = whole / dblMultipliers[10];
2348       divisor10 -= 10;
2349     }
2350     if (divisor10)
2351     {
2352       if (whole < dblMinimums[divisor10] && whole != 0)
2353       {
2354         dwVtBits &= ~(VTBIT_R4|VTBIT_R8|VTBIT_CY); /* Underflow */
2355         bOverflow = TRUE;
2356       }
2357       else
2358         whole = whole / dblMultipliers[divisor10];
2359     }
2360     if (!bOverflow)
2361       TRACE("Final double value is %16.16g\n", whole);
2362 
2363     if (dwVtBits & VTBIT_R4 &&
2364         ((whole <= R4_MAX && whole >= R4_MIN) || whole == 0.0))
2365     {
2366       TRACE("Set R4 to final value\n");
2367       V_VT(pVarDst) = VT_R4; /* Fits into a float */
2368       V_R4(pVarDst) = pNumprs->dwOutFlags & NUMPRS_NEG ? -whole : whole;
2369       return S_OK;
2370     }
2371 
2372     if (dwVtBits & VTBIT_R8)
2373     {
2374       TRACE("Set R8 to final value\n");
2375       V_VT(pVarDst) = VT_R8; /* Fits into a double */
2376       V_R8(pVarDst) = pNumprs->dwOutFlags & NUMPRS_NEG ? -whole : whole;
2377       return S_OK;
2378     }
2379 
2380     if (dwVtBits & VTBIT_CY)
2381     {
2382       if (SUCCEEDED(VarCyFromR8(bNegative ? -whole : whole, &V_CY(pVarDst))))
2383       {
2384         V_VT(pVarDst) = VT_CY; /* Fits into a currency */
2385         TRACE("Set CY to final value\n");
2386         return S_OK;
2387       }
2388       TRACE("Value Overflows CY\n");
2389     }
2390   }
2391 
2392   if (dwVtBits & VTBIT_DECIMAL)
2393   {
2394     int i;
2395     ULONG carry;
2396     ULONG64 tmp;
2397     DECIMAL* pDec = &V_DECIMAL(pVarDst);
2398 
2399     DECIMAL_SETZERO(*pDec);
2400     DEC_LO32(pDec) = 0;
2401 
2402     if (pNumprs->dwOutFlags & NUMPRS_NEG)
2403       DEC_SIGN(pDec) = DECIMAL_NEG;
2404     else
2405       DEC_SIGN(pDec) = DECIMAL_POS;
2406 
2407     /* Factor the significant digits */
2408     for (i = 0; i < pNumprs->cDig; i++)
2409     {
2410       tmp = (ULONG64)DEC_LO32(pDec) * 10 + rgbDig[i];
2411       carry = (ULONG)(tmp >> 32);
2412       DEC_LO32(pDec) = (ULONG)(tmp & UI4_MAX);
2413       tmp = (ULONG64)DEC_MID32(pDec) * 10 + carry;
2414       carry = (ULONG)(tmp >> 32);
2415       DEC_MID32(pDec) = (ULONG)(tmp & UI4_MAX);
2416       tmp = (ULONG64)DEC_HI32(pDec) * 10 + carry;
2417       DEC_HI32(pDec) = (ULONG)(tmp & UI4_MAX);
2418 
2419       if (tmp >> 32 & UI4_MAX)
2420       {
2421 VarNumFromParseNum_DecOverflow:
2422         TRACE("Overflow\n");
2423         DEC_LO32(pDec) = DEC_MID32(pDec) = DEC_HI32(pDec) = UI4_MAX;
2424         return DISP_E_OVERFLOW;
2425       }
2426     }
2427 
2428     /* Account for the scale of the number */
2429     while (multiplier10 > 0)
2430     {
2431       tmp = (ULONG64)DEC_LO32(pDec) * 10;
2432       carry = (ULONG)(tmp >> 32);
2433       DEC_LO32(pDec) = (ULONG)(tmp & UI4_MAX);
2434       tmp = (ULONG64)DEC_MID32(pDec) * 10 + carry;
2435       carry = (ULONG)(tmp >> 32);
2436       DEC_MID32(pDec) = (ULONG)(tmp & UI4_MAX);
2437       tmp = (ULONG64)DEC_HI32(pDec) * 10 + carry;
2438       DEC_HI32(pDec) = (ULONG)(tmp & UI4_MAX);
2439 
2440       if (tmp >> 32 & UI4_MAX)
2441         goto VarNumFromParseNum_DecOverflow;
2442       multiplier10--;
2443     }
2444     DEC_SCALE(pDec) = divisor10;
2445 
2446     V_VT(pVarDst) = VT_DECIMAL;
2447     return S_OK;
2448   }
2449   return DISP_E_OVERFLOW; /* No more output choices */
2450 }
2451 
2452 /**********************************************************************
2453  *              VarCat [OLEAUT32.318]
2454  *
2455  * Concatenates one variant onto another.
2456  *
2457  * PARAMS
2458  *  left    [I] First variant
2459  *  right   [I] Second variant
2460  *  result  [O] Result variant
2461  *
2462  * RETURNS
2463  *  Success: S_OK.
2464  *  Failure: An HRESULT error code indicating the error.
2465  */
2466 HRESULT WINAPI VarCat(LPVARIANT left, LPVARIANT right, LPVARIANT out)
2467 {
2468     VARTYPE leftvt,rightvt,resultvt;
2469     HRESULT hres;
2470     static const WCHAR str_true[] = {'T','r','u','e','\0'};
2471     static const WCHAR str_false[] = {'F','a','l','s','e','\0'};
2472     static const WCHAR sz_empty[] = {'\0'};
2473     leftvt = V_VT(left);
2474     rightvt = V_VT(right);
2475 
2476     TRACE("(%p->(%s%s),%p->(%s%s),%p)\n", left, debugstr_VT(left),
2477           debugstr_VF(left), right, debugstr_VT(right), debugstr_VF(right), out);
2478 
2479     /* when both left and right are NULL the result is NULL */
2480     if (leftvt == VT_NULL && rightvt == VT_NULL)
2481     {
2482         V_VT(out) = VT_NULL;
2483         return S_OK;
2484     }
2485 
2486     hres = S_OK;
2487     resultvt = VT_EMPTY;
2488 
2489     /* There are many special case for errors and return types */
2490     if (leftvt == VT_VARIANT && (rightvt == VT_ERROR ||
2491         rightvt == VT_DATE || rightvt == VT_DECIMAL))
2492         hres = DISP_E_TYPEMISMATCH;
2493     else if ((leftvt == VT_I2 || leftvt == VT_I4 ||
2494         leftvt == VT_R4 || leftvt == VT_R8 ||
2495         leftvt == VT_CY || leftvt == VT_BOOL ||
2496         leftvt == VT_BSTR || leftvt == VT_I1 ||
2497         leftvt == VT_UI1 || leftvt == VT_UI2 ||
2498         leftvt == VT_UI4 || leftvt == VT_I8 ||
2499         leftvt == VT_UI8 || leftvt == VT_INT ||
2500         leftvt == VT_UINT || leftvt == VT_EMPTY ||
2501         leftvt == VT_NULL || leftvt == VT_DATE ||
2502         leftvt == VT_DECIMAL || leftvt == VT_DISPATCH)
2503         &&
2504         (rightvt == VT_I2 || rightvt == VT_I4 ||
2505         rightvt == VT_R4 || rightvt == VT_R8 ||
2506         rightvt == VT_CY || rightvt == VT_BOOL ||
2507         rightvt == VT_BSTR || rightvt == VT_I1 ||
2508         rightvt == VT_UI1 || rightvt == VT_UI2 ||
2509         rightvt == VT_UI4 || rightvt == VT_I8 ||
2510         rightvt == VT_UI8 || rightvt == VT_INT ||
2511         rightvt == VT_UINT || rightvt == VT_EMPTY ||
2512         rightvt == VT_NULL || rightvt == VT_DATE ||
2513         rightvt == VT_DECIMAL || rightvt == VT_DISPATCH))
2514         resultvt = VT_BSTR;
2515     else if (rightvt == VT_ERROR && leftvt < VT_VOID)
2516         hres = DISP_E_TYPEMISMATCH;
2517     else if (leftvt == VT_ERROR && (rightvt == VT_DATE ||
2518         rightvt == VT_ERROR || rightvt == VT_DECIMAL))
2519         hres = DISP_E_TYPEMISMATCH;
2520     else if (rightvt == VT_DATE || rightvt == VT_ERROR ||
2521         rightvt == VT_DECIMAL)
2522         hres = DISP_E_BADVARTYPE;
2523     else if (leftvt == VT_ERROR || rightvt == VT_ERROR)
2524         hres = DISP_E_TYPEMISMATCH;
2525     else if (leftvt == VT_VARIANT)
2526         hres = DISP_E_TYPEMISMATCH;
2527     else if (rightvt == VT_VARIANT && (leftvt == VT_EMPTY ||
2528         leftvt == VT_NULL || leftvt ==  VT_I2 ||
2529         leftvt == VT_I4 || leftvt == VT_R4 ||
2530         leftvt == VT_R8 || leftvt == VT_CY ||
2531         leftvt == VT_DATE || leftvt == VT_BSTR ||
2532         leftvt == VT_BOOL ||  leftvt == VT_DECIMAL ||
2533         leftvt == VT_I1 || leftvt == VT_UI1 ||
2534         leftvt == VT_UI2 || leftvt == VT_UI4 ||
2535         leftvt == VT_I8 || leftvt == VT_UI8 ||
2536         leftvt == VT_INT || leftvt == VT_UINT))
2537         hres = DISP_E_TYPEMISMATCH;
2538     else
2539         hres = DISP_E_BADVARTYPE;
2540 
2541     /* if result type is not S_OK, then no need to go further */
2542     if (hres != S_OK)
2543     {
2544         V_VT(out) = resultvt;
2545         return hres;
2546     }
2547     /* Else proceed with formatting inputs to strings */
2548     else
2549     {
2550         VARIANT bstrvar_left, bstrvar_right;
2551         V_VT(out) = VT_BSTR;
2552 
2553         VariantInit(&bstrvar_left);
2554         VariantInit(&bstrvar_right);
2555 
2556         /* Convert left side variant to string */
2557         if (leftvt != VT_BSTR)
2558         {
2559             if (leftvt == VT_BOOL)
2560             {
2561                 /* Bools are handled as True/False strings instead of 0/-1 as in MSDN */
2562                 V_VT(&bstrvar_left) = VT_BSTR;
2563                 if (V_BOOL(left) == TRUE)
2564                     V_BSTR(&bstrvar_left) = SysAllocString(str_true);
2565                 else
2566                     V_BSTR(&bstrvar_left) = SysAllocString(str_false);
2567             }
2568             /* Fill with empty string for later concat with right side */
2569             else if (leftvt == VT_NULL)
2570             {
2571                 V_VT(&bstrvar_left) = VT_BSTR;
2572                 V_BSTR(&bstrvar_left) = SysAllocString(sz_empty);
2573             }
2574             else
2575             {
2576                 hres = VariantChangeTypeEx(&bstrvar_left,left,0,0,VT_BSTR);
2577                 if (hres != S_OK) {
2578                     VariantClear(&bstrvar_left);
2579                     VariantClear(&bstrvar_right);
2580                     if (leftvt == VT_NULL && (rightvt == VT_EMPTY ||
2581                         rightvt == VT_NULL || rightvt ==  VT_I2 ||
2582                         rightvt == VT_I4 || rightvt == VT_R4 ||
2583                         rightvt == VT_R8 || rightvt == VT_CY ||
2584                         rightvt == VT_DATE || rightvt == VT_BSTR ||
2585                         rightvt == VT_BOOL ||  rightvt == VT_DECIMAL ||
2586                         rightvt == VT_I1 || rightvt == VT_UI1 ||
2587                         rightvt == VT_UI2 || rightvt == VT_UI4 ||
2588                         rightvt == VT_I8 || rightvt == VT_UI8 ||
2589                         rightvt == VT_INT || rightvt == VT_UINT))
2590                         return DISP_E_BADVARTYPE;
2591                     return hres;
2592                 }
2593             }
2594         }
2595 
2596         /* convert right side variant to string */
2597         if (rightvt != VT_BSTR)
2598         {
2599             if (rightvt == VT_BOOL)
2600             {
2601                 /* Bools are handled as True/False strings instead of 0/-1 as in MSDN */
2602                 V_VT(&bstrvar_right) = VT_BSTR;
2603                 if (V_BOOL(right) == TRUE)
2604                     V_BSTR(&bstrvar_right) = SysAllocString(str_true);
2605                 else
2606                     V_BSTR(&bstrvar_right) = SysAllocString(str_false);
2607             }
2608             /* Fill with empty string for later concat with right side */
2609             else if (rightvt == VT_NULL)
2610             {
2611                 V_VT(&bstrvar_right) = VT_BSTR;
2612                 V_BSTR(&bstrvar_right) = SysAllocString(sz_empty);
2613             }
2614             else
2615             {
2616                 hres = VariantChangeTypeEx(&bstrvar_right,right,0,0,VT_BSTR);
2617                 if (hres != S_OK) {
2618                     VariantClear(&bstrvar_left);
2619                     VariantClear(&bstrvar_right);
2620                     if (rightvt == VT_NULL && (leftvt == VT_EMPTY ||
2621                         leftvt == VT_NULL || leftvt ==  VT_I2 ||
2622                         leftvt == VT_I4 || leftvt == VT_R4 ||
2623                         leftvt == VT_R8 || leftvt == VT_CY ||
2624                         leftvt == VT_DATE || leftvt == VT_BSTR ||
2625                         leftvt == VT_BOOL ||  leftvt == VT_DECIMAL ||
2626                         leftvt == VT_I1 || leftvt == VT_UI1 ||
2627                         leftvt == VT_UI2 || leftvt == VT_UI4 ||
2628                         leftvt == VT_I8 || leftvt == VT_UI8 ||
2629                         leftvt == VT_INT || leftvt == VT_UINT))
2630                         return DISP_E_BADVARTYPE;
2631                     return hres;
2632                 }
2633             }
2634         }
2635 
2636         /* Concat the resulting strings together */
2637         if (leftvt == VT_BSTR && rightvt == VT_BSTR)
2638             VarBstrCat (V_BSTR(left), V_BSTR(right), &V_BSTR(out));
2639         else if (leftvt != VT_BSTR && rightvt != VT_BSTR)
2640             VarBstrCat (V_BSTR(&bstrvar_left), V_BSTR(&bstrvar_right), &V_BSTR(out));
2641         else if (leftvt != VT_BSTR && rightvt == VT_BSTR)
2642             VarBstrCat (V_BSTR(&bstrvar_left), V_BSTR(right), &V_BSTR(out));
2643         else if (leftvt == VT_BSTR && rightvt != VT_BSTR)
2644             VarBstrCat (V_BSTR(left), V_BSTR(&bstrvar_right), &V_BSTR(out));
2645 
2646         VariantClear(&bstrvar_left);
2647         VariantClear(&bstrvar_right);
2648         return S_OK;
2649     }
2650 }
2651 
2652 
2653 /* Wrapper around VariantChangeTypeEx() which permits changing a
2654    variant with VT_RESERVED flag set. Needed by VarCmp. */
2655 static HRESULT _VarChangeTypeExWrap (VARIANTARG* pvargDest,
2656                     VARIANTARG* pvargSrc, LCID lcid, USHORT wFlags, VARTYPE vt)
2657 {
2658     HRESULT res;
2659     VARTYPE flags;
2660 
2661     flags = V_VT(pvargSrc) & ~VT_TYPEMASK;
2662     V_VT(pvargSrc) &= ~VT_RESERVED;
2663     res = VariantChangeTypeEx(pvargDest,pvargSrc,lcid,wFlags,vt);
2664     V_VT(pvargSrc) |= flags;
2665 
2666     return res;
2667 }
2668 
2669 /**********************************************************************
2670  *              VarCmp [OLEAUT32.176]
2671  *
2672  * Compare two variants.
2673  *
2674  * PARAMS
2675  *  left    [I] First variant
2676  *  right   [I] Second variant
2677  *  lcid    [I] LCID (locale identifier) for the comparison
2678  *  flags   [I] Flags to be used in the comparison:
2679  *              NORM_IGNORECASE, NORM_IGNORENONSPACE, NORM_IGNORESYMBOLS,
2680  *              NORM_IGNOREWIDTH, NORM_IGNOREKANATYPE, NORM_IGNOREKASHIDA
2681  *
2682  * RETURNS
2683  *  VARCMP_LT:   left variant is less than right variant.
2684  *  VARCMP_EQ:   input variants are equal.
2685  *  VARCMP_GT:   left variant is greater than right variant.
2686  *  VARCMP_NULL: either one of the input variants is NULL.
2687  *  Failure:     An HRESULT error code indicating the error.
2688  *
2689  * NOTES
2690  *  Native VarCmp up to and including WinXP doesn't like I1, UI2, VT_UI4,
2691  *  UI8 and UINT as input variants. INT is accepted only as left variant.
2692  *
2693  *  If both input variants are ERROR then VARCMP_EQ will be returned, else
2694  *  an ERROR variant will trigger an error.
2695  *
2696  *  Both input variants can have VT_RESERVED flag set which is ignored
2697  *  unless one and only one of the variants is a BSTR and the other one
2698  *  is not an EMPTY variant. All four VT_RESERVED combinations have a
2699  *  different meaning:
2700  *   - BSTR and other: BSTR is always greater than the other variant.
2701  *   - BSTR|VT_RESERVED and other: a string comparison is performed.
2702  *   - BSTR and other|VT_RESERVED: If the BSTR is a number a numeric
2703  *     comparison will take place else the BSTR is always greater.
2704  *   - BSTR|VT_RESERVED and other|VT_RESERVED: It seems that the other
2705  *     variant is ignored and the return value depends only on the sign
2706  *     of the BSTR if it is a number else the BSTR is always greater. A
2707  *     positive BSTR is greater, a negative one is smaller than the other
2708  *     variant.
2709  *
2710  * SEE
2711  *  VarBstrCmp for the lcid and flags usage.
2712  */
2713 HRESULT WINAPI VarCmp(LPVARIANT left, LPVARIANT right, LCID lcid, DWORD flags)
2714 {
2715     VARTYPE     lvt, rvt, vt;
2716     VARIANT     rv,lv;
2717     DWORD       xmask;
2718     HRESULT     rc;
2719 
2720     TRACE("(%p->(%s%s),%p->(%s%s),0x%08x,0x%08x)\n", left, debugstr_VT(left),
2721           debugstr_VF(left), right, debugstr_VT(right), debugstr_VF(right), lcid, flags);
2722 
2723     lvt = V_VT(left) & VT_TYPEMASK;
2724     rvt = V_VT(right) & VT_TYPEMASK;
2725     xmask = (1 << lvt) | (1 << rvt);
2726 
2727     /* If we have any flag set except VT_RESERVED bail out.
2728        Same for the left input variant type > VT_INT and for the
2729        right input variant type > VT_I8. Yes, VT_INT is only supported
2730        as left variant. Go figure */
2731     if (((V_VT(left) | V_VT(right)) & ~VT_TYPEMASK & ~VT_RESERVED) ||
2732             lvt > VT_INT || rvt > VT_I8) {
2733         return DISP_E_BADVARTYPE;
2734     }
2735 
2736     /* Don't ask me why but native VarCmp cannot handle: VT_I1, VT_UI2, VT_UI4,
2737        VT_UINT and VT_UI8. Tested with DCOM98, Win2k, WinXP */
2738     if (rvt == VT_INT || xmask & (VTBIT_I1 | VTBIT_UI2 | VTBIT_UI4 | VTBIT_UI8 |
2739                 VTBIT_DISPATCH | VTBIT_VARIANT | VTBIT_UNKNOWN | VTBIT_15))
2740         return DISP_E_TYPEMISMATCH;
2741 
2742     /* If both variants are VT_ERROR return VARCMP_EQ */
2743     if (xmask == VTBIT_ERROR)
2744         return VARCMP_EQ;
2745     else if (xmask & VTBIT_ERROR)
2746         return DISP_E_TYPEMISMATCH;
2747 
2748     if (xmask & VTBIT_NULL)
2749         return VARCMP_NULL;
2750 
2751     VariantInit(&lv);
2752     VariantInit(&rv);
2753 
2754     /* Two BSTRs, ignore VT_RESERVED */
2755     if (xmask == VTBIT_BSTR)
2756         return VarBstrCmp(V_BSTR(left), V_BSTR(right), lcid, flags);
2757 
2758     /* A BSTR and an other variant; we have to take care of VT_RESERVED */
2759     if (xmask & VTBIT_BSTR) {
2760         VARIANT *bstrv, *nonbv;
2761         VARTYPE nonbvt;
2762         int swap = 0;
2763 
2764         /* Swap the variants so the BSTR is always on the left */
2765         if (lvt == VT_BSTR) {
2766             bstrv = left;
2767             nonbv = right;
2768             nonbvt = rvt;
2769         } else {
2770             swap = 1;
2771             bstrv = right;
2772             nonbv = left;
2773             nonbvt = lvt;
2774         }
2775 
2776         /* BSTR and EMPTY: ignore VT_RESERVED */
2777         if (nonbvt == VT_EMPTY)
2778             rc = (!V_BSTR(bstrv) || !*V_BSTR(bstrv)) ? VARCMP_EQ : VARCMP_GT;
2779         else {
2780             VARTYPE breserv = V_VT(bstrv) & ~VT_TYPEMASK;
2781             VARTYPE nreserv = V_VT(nonbv) & ~VT_TYPEMASK;
2782 
2783             if (!breserv && !nreserv) 
2784                 /* No VT_RESERVED set ==> BSTR always greater */
2785                 rc = VARCMP_GT;
2786             else if (breserv && !nreserv) {
2787                 /* BSTR has VT_RESERVED set. Do a string comparison */
2788                 rc = VariantChangeTypeEx(&rv,nonbv,lcid,0,VT_BSTR);
2789                 if (FAILED(rc))
2790                     return rc;
2791                 rc = VarBstrCmp(V_BSTR(bstrv), V_BSTR(&rv), lcid, flags);
2792             } else if (V_BSTR(bstrv) && *V_BSTR(bstrv)) {
2793             /* Non NULL nor empty BSTR */
2794                 /* If the BSTR is not a number the BSTR is greater */
2795                 rc = _VarChangeTypeExWrap(&lv,bstrv,lcid,0,VT_R8);
2796                 if (FAILED(rc))
2797                     rc = VARCMP_GT;
2798                 else if (breserv && nreserv)
2799                     /* FIXME: This is strange: with both VT_RESERVED set it
2800                        looks like the result depends only on the sign of
2801                        the BSTR number */
2802                     rc = (V_R8(&lv) >= 0) ? VARCMP_GT : VARCMP_LT;
2803                 else
2804                     /* Numeric comparison, will be handled below.
2805                        VARCMP_NULL used only to break out. */
2806                     rc = VARCMP_NULL;
2807             VariantClear(&lv);
2808             VariantClear(&rv);
2809             } else
2810                 /* Empty or NULL BSTR */
2811                 rc = VARCMP_GT;
2812         }
2813         /* Fixup the return code if we swapped left and right */
2814         if (swap) {
2815             if (rc == VARCMP_GT)
2816                 rc = VARCMP_LT;
2817             else if (rc == VARCMP_LT)
2818                 rc = VARCMP_GT;
2819         }
2820         if (rc != VARCMP_NULL)
2821             return rc;
2822     }
2823 
2824     if (xmask & VTBIT_DECIMAL)
2825         vt = VT_DECIMAL;
2826     else if (xmask & VTBIT_BSTR)
2827         vt = VT_R8;
2828     else if (xmask & VTBIT_R4)
2829         vt = VT_R4;
2830     else if (xmask & (VTBIT_R8 | VTBIT_DATE))
2831         vt = VT_R8;
2832     else if (xmask & VTBIT_CY)
2833         vt = VT_CY;
2834     else
2835         /* default to I8 */
2836         vt = VT_I8;
2837 
2838     /* Coerce the variants */
2839     rc = _VarChangeTypeExWrap(&lv,left,lcid,0,vt);
2840     if (rc == DISP_E_OVERFLOW && vt != VT_R8) {
2841         /* Overflow, change to R8 */
2842         vt = VT_R8;
2843         rc = _VarChangeTypeExWrap(&lv,left,lcid,0,vt);
2844     }
2845     if (FAILED(rc))
2846         return rc;
2847     rc = _VarChangeTypeExWrap(&rv,right,lcid,0,vt);
2848     if (rc == DISP_E_OVERFLOW && vt != VT_R8) {
2849         /* Overflow, change to R8 */
2850         vt = VT_R8;
2851         rc = _VarChangeTypeExWrap(&lv,left,lcid,0,vt);
2852         if (FAILED(rc))
2853             return rc;
2854         rc = _VarChangeTypeExWrap(&rv,right,lcid,0,vt);
2855     }
2856     if (FAILED(rc))
2857         return rc;
2858 
2859 #define _VARCMP(a,b) \
2860     (((a) == (b)) ? VARCMP_EQ : (((a) < (b)) ? VARCMP_LT : VARCMP_GT))
2861 
2862     switch (vt) {
2863         case VT_CY:
2864             return VarCyCmp(V_CY(&lv), V_CY(&rv));
2865         case VT_DECIMAL:
2866             return VarDecCmp(&V_DECIMAL(&lv), &V_DECIMAL(&rv));
2867         case VT_I8:
2868             return _VARCMP(V_I8(&lv), V_I8(&rv));
2869         case VT_R4:
2870             return _VARCMP(V_R4(&lv), V_R4(&rv));
2871         case VT_R8:
2872             return _VARCMP(V_R8(&lv), V_R8(&rv));
2873         default:
2874             /* We should never get here */
2875             return E_FAIL;
2876     }
2877 #undef _VARCMP
2878 }
2879 
2880 static HRESULT VARIANT_FetchDispatchValue(LPVARIANT pvDispatch, LPVARIANT pValue)
2881 {
2882     HRESULT hres;
2883     static DISPPARAMS emptyParams = { NULL, NULL, 0, 0 };
2884 
2885     if ((V_VT(pvDispatch) & VT_TYPEMASK) == VT_DISPATCH) {
2886         if (NULL == V_DISPATCH(pvDispatch)) return DISP_E_TYPEMISMATCH;
2887         hres = IDispatch_Invoke(V_DISPATCH(pvDispatch), DISPID_VALUE, &IID_NULL,
2888             LOCALE_USER_DEFAULT, DISPATCH_PROPERTYGET, &emptyParams, pValue,
2889             NULL, NULL);
2890     } else {
2891         hres = DISP_E_TYPEMISMATCH;
2892     }
2893     return hres;
2894 }
2895 
2896 /**********************************************************************
2897  *              VarAnd [OLEAUT32.142]
2898  *
2899  * Computes the logical AND of two variants.
2900  *
2901  * PARAMS
2902  *  left    [I] First variant
2903  *  right   [I] Second variant
2904  *  result  [O] Result variant
2905  *
2906  * RETURNS
2907  *  Success: S_OK.
2908  *  Failure: An HRESULT error code indicating the error.
2909  */
2910 HRESULT WINAPI VarAnd(LPVARIANT left, LPVARIANT right, LPVARIANT result)
2911 {
2912     HRESULT hres = S_OK;
2913     VARTYPE resvt = VT_EMPTY;
2914     VARTYPE leftvt,rightvt;
2915     VARTYPE rightExtraFlags,leftExtraFlags,ExtraFlags;
2916     VARIANT varLeft, varRight;
2917     VARIANT tempLeft, tempRight;
2918 
2919     VariantInit(&varLeft);
2920     VariantInit(&varRight);
2921     VariantInit(&tempLeft);
2922     VariantInit(&tempRight);
2923 
2924     TRACE("(%p->(%s%s),%p->(%s%s),%p)\n", left, debugstr_VT(left),
2925           debugstr_VF(left), right, debugstr_VT(right), debugstr_VF(right), result);
2926 
2927     /* Handle VT_DISPATCH by storing and taking address of returned value */
2928     if ((V_VT(left) & VT_TYPEMASK) == VT_DISPATCH)
2929     {
2930         hres = VARIANT_FetchDispatchValue(left, &tempLeft);
2931         if (FAILED(hres)) goto VarAnd_Exit;
2932         left = &tempLeft;
2933     }
2934     if ((V_VT(right) & VT_TYPEMASK) == VT_DISPATCH)
2935     {
2936         hres = VARIANT_FetchDispatchValue(right, &tempRight);
2937         if (FAILED(hres)) goto VarAnd_Exit;
2938         right = &tempRight;
2939     }
2940 
2941     leftvt = V_VT(left)&VT_TYPEMASK;
2942     rightvt = V_VT(right)&VT_TYPEMASK;
2943     leftExtraFlags = V_VT(left)&(~VT_TYPEMASK);
2944     rightExtraFlags = V_VT(right)&(~VT_TYPEMASK);
2945 
2946     if (leftExtraFlags != rightExtraFlags)
2947     {
2948         hres = DISP_E_BADVARTYPE;
2949         goto VarAnd_Exit;
2950     }
2951     ExtraFlags = leftExtraFlags;
2952 
2953     /* Native VarAnd always returns an error when using extra
2954      * flags or if the variant combination is I8 and INT.
2955      */
2956     if ((leftvt == VT_I8 && rightvt == VT_INT) ||
2957         (leftvt == VT_INT && rightvt == VT_I8) ||
2958         ExtraFlags != 0)
2959     {
2960         hres = DISP_E_BADVARTYPE;
2961         goto VarAnd_Exit;
2962     }
2963 
2964     /* Determine return type */
2965     else if (leftvt == VT_I8 || rightvt == VT_I8)
2966         resvt = VT_I8;
2967     else if (leftvt == VT_I4 || rightvt == VT_I4 ||
2968         leftvt == VT_UINT || rightvt == VT_UINT ||
2969         leftvt == VT_INT || rightvt == VT_INT ||
2970         leftvt == VT_UINT || rightvt == VT_UINT ||
2971         leftvt == VT_R4 || rightvt == VT_R4 ||
2972         leftvt == VT_R8 || rightvt == VT_R8 ||
2973         leftvt == VT_CY || rightvt == VT_CY ||
2974         leftvt == VT_DATE || rightvt == VT_DATE ||
2975         leftvt == VT_I1 || rightvt == VT_I1 ||
2976         leftvt == VT_UI2 || rightvt == VT_UI2 ||
2977         leftvt == VT_UI4 || rightvt == VT_UI4 ||
2978         leftvt == VT_UI8 || rightvt == VT_UI8 ||
2979         leftvt == VT_DECIMAL || rightvt == VT_DECIMAL)
2980         resvt = VT_I4;
2981     else if (leftvt == VT_UI1 || rightvt == VT_UI1 ||
2982         leftvt == VT_I2 || rightvt == VT_I2 ||
2983         leftvt == VT_EMPTY || rightvt == VT_EMPTY)
2984         if ((leftvt == VT_NULL && rightvt == VT_UI1) ||
2985             (leftvt == VT_UI1 && rightvt == VT_NULL) ||
2986             (leftvt == VT_UI1 && rightvt == VT_UI1))
2987             resvt = VT_UI1;
2988         else
2989             resvt = VT_I2;
2990     else if (leftvt == VT_BOOL || rightvt == VT_BOOL ||
2991         (leftvt == VT_BSTR && rightvt == VT_BSTR))
2992         resvt = VT_BOOL;
2993     else if (leftvt == VT_NULL || rightvt == VT_NULL ||
2994         leftvt == VT_BSTR || rightvt == VT_BSTR)
2995         resvt = VT_NULL;
2996     else
2997     {
2998         hres = DISP_E_BADVARTYPE;
2999         goto VarAnd_Exit;
3000     }
3001 
3002     if (leftvt == VT_NULL || rightvt == VT_NULL)
3003     {
3004         /*
3005          * Special cases for when left variant is VT_NULL
3006          * (NULL & 0 = NULL, NULL & value = value)
3007          */
3008         if (leftvt == VT_NULL)
3009         {
3010             VARIANT_BOOL b;
3011             switch(rightvt)
3012             {
3013             case VT_I1:   if (V_I1(right)) resvt = VT_NULL; break;
3014             case VT_UI1:  if (V_UI1(right)) resvt = VT_NULL; break;
3015             case VT_I2:   if (V_I2(right)) resvt = VT_NULL; break;
3016             case VT_UI2:  if (V_UI2(right)) resvt = VT_NULL; break;
3017             case VT_I4:   if (V_I4(right)) resvt = VT_NULL; break;
3018             case VT_UI4:  if (V_UI4(right)) resvt = VT_NULL; break;
3019             case VT_I8:   if (V_I8(right)) resvt = VT_NULL; break;
3020             case VT_UI8:  if (V_UI8(right)) resvt = VT_NULL; break;
3021             case VT_INT:  if (V_INT(right)) resvt = VT_NULL; break;
3022             case VT_UINT: if (V_UINT(right)) resvt = VT_NULL; break;
3023             case VT_BOOL: if (V_BOOL(right)) resvt = VT_NULL; break;
3024             case VT_R4:   if (V_R4(right)) resvt = VT_NULL; break;
3025             case VT_R8:   if (V_R8(right)) resvt = VT_NULL; break;
3026             case VT_CY:
3027                 if(V_CY(right).int64)
3028                     resvt = VT_NULL;
3029                 break;
3030             case VT_DECIMAL:
3031                 if (DEC_HI32(&V_DECIMAL(right)) ||
3032                     DEC_LO64(&V_DECIMAL(right)))
3033                     resvt = VT_NULL;
3034                 break;
3035             case VT_BSTR:
3036                 hres = VarBoolFromStr(V_BSTR(right),
3037                 LOCALE_USER_DEFAULT, VAR_LOCALBOOL, &b);
3038                 if (FAILED(hres))
3039                     return hres;
3040                 else if (b)
3041                     V_VT(result) = VT_NULL;
3042                 else
3043                 {
3044                     V_VT(result) = VT_BOOL;
3045                     V_BOOL(result) = b;
3046                 }
3047                 goto VarAnd_Exit;
3048             }
3049         }
3050         V_VT(result) = resvt;
3051         goto VarAnd_Exit;
3052     }
3053 
3054     hres = VariantCopy(&varLeft, left);
3055     if (FAILED(hres)) goto VarAnd_Exit;
3056 
3057     hres = VariantCopy(&varRight, right);
3058     if (FAILED(hres)) goto VarAnd_Exit;
3059 
3060     if (resvt == VT_I4 && V_VT(&varLeft) == VT_UI4)
3061         V_VT(&varLeft) = VT_I4; /* Don't overflow */
3062     else
3063     {
3064         double d;
3065 
3066         if (V_VT(&varLeft) == VT_BSTR &&
3067             FAILED(VarR8FromStr(V_BSTR(&varLeft),
3068             LOCALE_USER_DEFAULT, 0, &d)))
3069             hres = VariantChangeType(&varLeft,&varLeft,
3070             VARIANT_LOCALBOOL, VT_BOOL);
3071             if (SUCCEEDED(hres) && V_VT(&varLeft) != resvt)
3072                 hres = VariantChangeType(&varLeft,&varLeft,0,resvt);
3073             if (FAILED(hres)) goto VarAnd_Exit;
3074     }
3075 
3076     if (resvt == VT_I4 && V_VT(&varRight) == VT_UI4)
3077         V_VT(&varRight) = VT_I4; /* Don't overflow */
3078     else
3079     {
3080         double d;
3081 
3082         if (V_VT(&varRight) == VT_BSTR &&
3083             FAILED(VarR8FromStr(V_BSTR(&varRight),
3084             LOCALE_USER_DEFAULT, 0, &d)))
3085             hres = VariantChangeType(&varRight, &varRight,
3086                 VARIANT_LOCALBOOL, VT_BOOL);
3087         if (SUCCEEDED(hres) && V_VT(&varRight) != resvt)
3088             hres = VariantChangeType(&varRight, &varRight, 0, resvt);
3089         if (FAILED(hres)) goto VarAnd_Exit;
3090     }
3091 
3092     V_VT(result) = resvt;
3093     switch(resvt)
3094     {
3095     case VT_I8:
3096         V_I8(result) = V_I8(&varLeft) & V_I8(&varRight);
3097         break;
3098     case VT_I4:
3099         V_I4(result) = V_I4(&varLeft) & V_I4(&varRight);
3100         break;
3101     case VT_I2:
3102         V_I2(result) = V_I2(&varLeft) & V_I2(&varRight);
3103         break;
3104     case VT_UI1:
3105         V_UI1(result) = V_UI1(&varLeft) & V_UI1(&varRight);
3106         break;
3107     case VT_BOOL:
3108         V_BOOL(result) = V_BOOL(&varLeft) & V_BOOL(&varRight);
3109         break;
3110     default:
3111         FIXME("Couldn't bitwise AND variant types %d,%d\n",
3112             leftvt,rightvt);
3113     }
3114 
3115 VarAnd_Exit:
3116     VariantClear(&varLeft);
3117     VariantClear(&varRight);
3118     VariantClear(&tempLeft);
3119     VariantClear(&tempRight);
3120 
3121     return hres;
3122 }
3123 
3124 /**********************************************************************
3125  *              VarAdd [OLEAUT32.141]
3126  *
3127  * Add two variants.
3128  *
3129  * PARAMS
3130  *  left    [I] First variant
3131  *  right   [I] Second variant
3132  *  result  [O] Result variant
3133  *
3134  * RETURNS
3135  *  Success: S_OK.
3136  *  Failure: An HRESULT error code indicating the error.
3137  *
3138  * NOTES
3139  *  Native VarAdd up to and including WinXP doesn't like I1, UI2, UI4,
3140  *  UI8, INT and UINT as input variants.
3141  *
3142  *  Native VarAdd doesn't check for NULL in/out pointers and crashes. We do the
3143  *  same here.
3144  *
3145  * FIXME
3146  *  Overflow checking for R8 (double) overflow. Return DISP_E_OVERFLOW in that
3147  *  case.
3148  */
3149 HRESULT WINAPI VarAdd(LPVARIANT left, LPVARIANT right, LPVARIANT result)
3150 {
3151     HRESULT hres;
3152     VARTYPE lvt, rvt, resvt, tvt;
3153     VARIANT lv, rv, tv;
3154     VARIANT tempLeft, tempRight;
3155     double r8res;
3156 
3157     /* Variant priority for coercion. Sorted from lowest to highest.
3158        VT_ERROR shows an invalid input variant type. */
3159     enum coerceprio { vt_EMPTY, vt_UI1, vt_I2, vt_I4, vt_I8, vt_BSTR,vt_R4,
3160                       vt_R8, vt_CY, vt_DATE, vt_DECIMAL, vt_DISPATCH, vt_NULL,
3161                       vt_ERROR };
3162     /* Mapping from priority to variant type. Keep in sync with coerceprio! */
3163     static const VARTYPE prio2vt[] = { VT_EMPTY, VT_UI1, VT_I2, VT_I4, VT_I8, VT_BSTR, VT_R4,
3164                           VT_R8, VT_CY, VT_DATE, VT_DECIMAL, VT_DISPATCH,
3165                           VT_NULL, VT_ERROR };
3166 
3167     /* Mapping for coercion from input variant to priority of result variant. */
3168     static const VARTYPE coerce[] = {
3169         /* VT_EMPTY, VT_NULL, VT_I2, VT_I4, VT_R4 */
3170         vt_EMPTY, vt_NULL, vt_I2, vt_I4, vt_R4,
3171         /* VT_R8, VT_CY, VT_DATE, VT_BSTR, VT_DISPATCH */
3172         vt_R8, vt_CY, vt_DATE, vt_BSTR, vt_DISPATCH,
3173         /* VT_ERROR, VT_BOOL, VT_VARIANT, VT_UNKNOWN, VT_DECIMAL */
3174         vt_ERROR, vt_I2, vt_ERROR, vt_ERROR, vt_DECIMAL,
3175         /* 15, VT_I1, VT_UI1, VT_UI2, VT_UI4 VT_I8 */
3176         vt_ERROR, vt_ERROR, vt_UI1, vt_ERROR, vt_ERROR, vt_I8
3177     };
3178 
3179     TRACE("(%p->(%s%s),%p->(%s%s),%p)\n", left, debugstr_VT(left),
3180           debugstr_VF(left), right, debugstr_VT(right), debugstr_VF(right),
3181           result);
3182 
3183     VariantInit(&lv);
3184     VariantInit(&rv);
3185     VariantInit(&tv);
3186     VariantInit(&tempLeft);
3187     VariantInit(&tempRight);
3188 
3189     /* Handle VT_DISPATCH by storing and taking address of returned value */
3190     if ((V_VT(left) & VT_TYPEMASK) != VT_NULL && (V_VT(right) & VT_TYPEMASK) != VT_NULL)
3191     {
3192         if ((V_VT(left) & VT_TYPEMASK) == VT_DISPATCH)
3193         {
3194             hres = VARIANT_FetchDispatchValue(left, &tempLeft);
3195             if (FAILED(hres)) goto end;
3196             left = &tempLeft;
3197         }
3198         if ((V_VT(right) & VT_TYPEMASK) == VT_DISPATCH)
3199         {
3200             hres = VARIANT_FetchDispatchValue(right, &tempRight);
3201             if (FAILED(hres)) goto end;
3202             right = &tempRight;
3203         }
3204     }
3205 
3206     lvt = V_VT(left)&VT_TYPEMASK;
3207     rvt = V_VT(right)&VT_TYPEMASK;
3208 
3209     /* If we have any flag set (VT_ARRAY, VT_VECTOR, etc.) bail out.
3210        Same for any input variant type > VT_I8 */
3211     if (V_VT(left) & ~VT_TYPEMASK || V_VT(right) & ~VT_TYPEMASK ||
3212         lvt > VT_I8 || rvt > VT_I8) {
3213         hres = DISP_E_BADVARTYPE;
3214         goto end;
3215     }
3216 
3217     /* Determine the variant type to coerce to. */
3218     if (coerce[lvt] > coerce[rvt]) {
3219         resvt = prio2vt[coerce[lvt]];
3220         tvt = prio2vt[coerce[rvt]];
3221     } else {
3222         resvt = prio2vt[coerce[rvt]];
3223         tvt = prio2vt[coerce[lvt]];
3224     }
3225 
3226     /* Special cases where the result variant type is defined by both
3227        input variants and not only that with the highest priority */
3228     if (resvt == VT_BSTR) {
3229         if (tvt == VT_EMPTY || tvt == VT_BSTR)
3230             resvt = VT_BSTR;
3231         else
3232             resvt = VT_R8;
3233     }
3234     if (resvt == VT_R4 && (tvt == VT_BSTR || tvt == VT_I8 || tvt == VT_I4))
3235         resvt = VT_R8;
3236 
3237     /* For overflow detection use the biggest compatible type for the
3238        addition */
3239     switch (resvt) {
3240         case VT_ERROR:
3241             hres = DISP_E_BADVARTYPE;
3242             goto end;
3243         case VT_NULL:
3244             hres = S_OK;
3245             V_VT(result) = VT_NULL;
3246             goto end;
3247         case VT_DISPATCH:
3248             FIXME("cannot handle variant type VT_DISPATCH\n");
3249             hres = DISP_E_TYPEMISMATCH;
3250             goto end;
3251         case VT_EMPTY:
3252             resvt = VT_I2;
3253             /* Fall through */
3254         case VT_UI1:
3255         case VT_I2:
3256         case VT_I4:
3257         case VT_I8:
3258             tvt = VT_I8;
3259             break;
3260         case VT_DATE:
3261         case VT_R4:
3262             tvt = VT_R8;
3263             break;
3264         default:
3265             tvt = resvt;
3266     }
3267 
3268     /* Now coerce the variants */
3269     hres = VariantChangeType(&lv, left, 0, tvt);
3270     if (FAILED(hres))
3271         goto end;
3272     hres = VariantChangeType(&rv, right, 0, tvt);
3273     if (FAILED(hres))
3274         goto end;
3275 
3276     /* Do the math */
3277     hres = S_OK;
3278     V_VT(result) = resvt;
3279     switch (tvt) {
3280         case VT_DECIMAL:
3281             hres = VarDecAdd(&V_DECIMAL(&lv), &V_DECIMAL(&rv),
3282                              &V_DECIMAL(result));
3283             goto end;
3284         case VT_CY:
3285             hres = VarCyAdd(V_CY(&lv), V_CY(&rv), &V_CY(result));
3286             goto end;
3287         case VT_BSTR:
3288             /* We do not add those, we concatenate them. */
3289             hres = VarBstrCat(V_BSTR(&lv), V_BSTR(&rv), &V_BSTR(result));
3290             goto end;
3291         case VT_I8:
3292             /* Overflow detection */
3293             r8res = (double)V_I8(&lv) + (double)V_I8(&rv);
3294             if (r8res > (double)I8_MAX || r8res < (double)I8_MIN) {
3295                 V_VT(result) = VT_R8;
3296                 V_R8(result) = r8res;
3297                 goto end;
3298             } else {
3299                 V_VT(&tv) = tvt;
3300                 V_I8(&tv) = V_I8(&lv) + V_I8(&rv);
3301             }
3302             break;
3303         case VT_R8:
3304             V_VT(&tv) = tvt;
3305             /* FIXME: overflow detection */
3306             V_R8(&tv) = V_R8(&lv) + V_R8(&rv);
3307             break;
3308         default:
3309             ERR("We shouldn't get here! tvt = %d!\n", tvt);
3310             break;
3311     }
3312     if (resvt != tvt) {
3313         if ((hres = VariantChangeType(result, &tv, 0, resvt)) != S_OK) {
3314             /* Overflow! Change to the vartype with the next higher priority.
3315                With one exception: I4 ==> R8 even if it would fit in I8 */
3316             if (resvt == VT_I4)
3317                 resvt = VT_R8;
3318             else
3319                 resvt = prio2vt[coerce[resvt] + 1];
3320             hres = VariantChangeType(result, &tv, 0, resvt);
3321         }
3322     } else
3323         hres = VariantCopy(result, &tv);
3324 
3325 end:
3326     if (hres != S_OK) {
3327         V_VT(result) = VT_EMPTY;
3328         V_I4(result) = 0;       /* No V_EMPTY */
3329     }
3330     VariantClear(&lv);
3331     VariantClear(&rv);
3332     VariantClear(&tv);
3333     VariantClear(&tempLeft);
3334     VariantClear(&tempRight);
3335     TRACE("returning 0x%8x (variant type %s)\n", hres, debugstr_VT(result));
3336     return hres;
3337 }
3338 
3339 /**********************************************************************
3340  *              VarMul [OLEAUT32.156]
3341  *
3342  * Multiply two variants.
3343  *
3344  * PARAMS
3345  *  left    [I] First variant
3346  *  right   [I] Second variant
3347  *  result  [O] Result variant
3348  *
3349  * RETURNS
3350  *  Success: S_OK.
3351  *  Failure: An HRESULT error code indicating the error.
3352  *
3353  * NOTES
3354  *  Native VarMul up to and including WinXP doesn't like I1, UI2, UI4,
3355  *  UI8, INT and UINT as input variants. But it can multiply apples with oranges.
3356  *
3357  *  Native VarMul doesn't check for NULL in/out pointers and crashes. We do the
3358  *  same here.
3359  *
3360  * FIXME
3361  *  Overflow checking for R8 (double) overflow. Return DISP_E_OVERFLOW in that
3362  *  case.
3363  */
3364 HRESULT WINAPI VarMul(LPVARIANT left, LPVARIANT right, LPVARIANT result)
3365 {
3366     HRESULT hres;
3367     VARTYPE lvt, rvt, resvt, tvt;
3368     VARIANT lv, rv, tv;
3369     VARIANT tempLeft, tempRight;
3370     double r8res;
3371 
3372     /* Variant priority for coercion. Sorted from lowest to highest.
3373        VT_ERROR shows an invalid input variant type. */
3374     enum coerceprio { vt_UI1 = 0, vt_I2, vt_I4, vt_I8, vt_CY, vt_R4, vt_R8,
3375                       vt_DECIMAL, vt_NULL, vt_ERROR };
3376     /* Mapping from priority to variant type. Keep in sync with coerceprio! */
3377     static const VARTYPE prio2vt[] = { VT_UI1, VT_I2, VT_I4, VT_I8, VT_CY, VT_R4, VT_R8,
3378                           VT_DECIMAL, VT_NULL, VT_ERROR };
3379 
3380     /* Mapping for coercion from input variant to priority of result variant. */
3381     static const VARTYPE coerce[] = {
3382         /* VT_EMPTY, VT_NULL, VT_I2, VT_I4, VT_R4 */
3383         vt_UI1, vt_NULL, vt_I2, vt_I4, vt_R4,
3384         /* VT_R8, VT_CY, VT_DATE, VT_BSTR, VT_DISPATCH */
3385         vt_R8, vt_CY, vt_R8, vt_R8, vt_ERROR,
3386         /* VT_ERROR, VT_BOOL, VT_VARIANT, VT_UNKNOWN, VT_DECIMAL */
3387         vt_ERROR, vt_I2, vt_ERROR, vt_ERROR, vt_DECIMAL,
3388         /* 15, VT_I1, VT_UI1, VT_UI2, VT_UI4 VT_I8 */
3389         vt_ERROR, vt_ERROR, vt_UI1, vt_ERROR, vt_ERROR, vt_I8
3390     };
3391 
3392     TRACE("(%p->(%s%s),%p->(%s%s),%p)\n", left, debugstr_VT(left),
3393           debugstr_VF(left), right, debugstr_VT(right), debugstr_VF(right),
3394           result);
3395 
3396     VariantInit(&lv);
3397     VariantInit(&rv);
3398     VariantInit(&tv);
3399     VariantInit(&tempLeft);
3400     VariantInit(&tempRight);
3401 
3402     /* Handle VT_DISPATCH by storing and taking address of returned value */
3403     if ((V_VT(left) & VT_TYPEMASK) == VT_DISPATCH)
3404     {
3405         hres = VARIANT_FetchDispatchValue(left, &tempLeft);
3406         if (FAILED(hres)) goto end;
3407         left = &tempLeft;
3408     }
3409     if ((V_VT(right) & VT_TYPEMASK) == VT_DISPATCH)
3410     {
3411         hres = VARIANT_FetchDispatchValue(right, &tempRight);
3412         if (FAILED(hres)) goto end;
3413         right = &tempRight;
3414     }
3415 
3416     lvt = V_VT(left)&VT_TYPEMASK;
3417     rvt = V_VT(right)&VT_TYPEMASK;
3418 
3419     /* If we have any flag set (VT_ARRAY, VT_VECTOR, etc.) bail out.
3420        Same for any input variant type > VT_I8 */
3421     if (V_VT(left) & ~VT_TYPEMASK || V_VT(right) & ~VT_TYPEMASK ||
3422         lvt > VT_I8 || rvt > VT_I8) {
3423         hres = DISP_E_BADVARTYPE;
3424         goto end;
3425     }
3426 
3427     /* Determine the variant type to coerce to. */
3428     if (coerce[lvt] > coerce[rvt]) {
3429         resvt = prio2vt[coerce[lvt]];
3430         tvt = prio2vt[coerce[rvt]];
3431     } else {
3432         resvt = prio2vt[coerce[rvt]];
3433         tvt = prio2vt[coerce[lvt]];
3434     }
3435 
3436     /* Special cases where the result variant type is defi