1 /*
2  * Copyright 2005-2006 Jacek Caban for CodeWeavers
3  * Copyright 2009-2011 Detlef Riekenberg
4  * Copyright 2011 Thomas Mullaly for CodeWeavers
5  *
6  * This library is free software; you can redistribute it and/or
7  * modify it under the terms of the GNU Lesser General Public
8  * License as published by the Free Software Foundation; either
9  * version 2.1 of the License, or (at your option) any later version.
10  *
11  * This library is distributed in the hope that it will be useful,
12  * but WITHOUT ANY WARRANTY; without even the implied warranty of
13  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
14  * Lesser General Public License for more details.
15  *
16  * You should have received a copy of the GNU Lesser General Public
17  * License along with this library; if not, write to the Free Software
18  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
19  */
20 
21 #define COBJMACROS
22 #define CONST_VTABLE
23 
24 /* needed for IInternetZoneManagerEx2 */
25 #ifdef __REACTOS__
26 #undef _WIN32_IE
27 #endif
28 #define _WIN32_IE 0x0700
29 
30 #include <wine/test.h>
31 #include <stdarg.h>
32 #include <stddef.h>
33 #include <stdio.h>
34 
35 #include "windef.h"
36 #include "winbase.h"
37 #include "ole2.h"
38 #include "urlmon.h"
39 
40 #include "initguid.h"
41 #include <wine/heap.h>
42 
43 #define URLZONE_CUSTOM  URLZONE_USER_MIN+1
44 #define URLZONE_CUSTOM2 URLZONE_CUSTOM+1
45 
46 #define DEFINE_EXPECT(func) \
47     static BOOL expect_ ## func = FALSE, called_ ## func = FALSE
48 
49 #define SET_EXPECT(func) \
50     expect_ ## func = TRUE
51 
52 #define CHECK_EXPECT(func) \
53     do { \
54         ok(expect_ ##func, "unexpected call " #func "\n"); \
55         expect_ ## func = FALSE; \
56         called_ ## func = TRUE; \
57     }while(0)
58 
59 #define CHECK_EXPECT2(func) \
60     do { \
61         ok(expect_ ##func, "unexpected call " #func "\n"); \
62         called_ ## func = TRUE; \
63     }while(0)
64 
65 #define CHECK_CALLED(func) \
66     do { \
67         ok(called_ ## func, "expected " #func "\n"); \
68         expect_ ## func = called_ ## func = FALSE; \
69     }while(0)
70 
71 #define SET_CALLED(func) \
72     do { \
73         expect_ ## func = called_ ## func = FALSE; \
74     }while(0)
75 
76 DEFINE_EXPECT(ParseUrl_SECURITY_URL_input);
77 DEFINE_EXPECT(ParseUrl_SECURITY_URL_input2);
78 DEFINE_EXPECT(ParseUrl_SECURITY_URL_expected);
79 DEFINE_EXPECT(ParseUrl_SECURITY_URL_http);
80 DEFINE_EXPECT(ParseUrl_SECURITY_DOMAIN_expected);
81 DEFINE_EXPECT(ProcessUrlAction);
82 
83 static HRESULT (WINAPI *pCoInternetCreateSecurityManager)(IServiceProvider *, IInternetSecurityManager**, DWORD);
84 static HRESULT (WINAPI *pCoInternetCreateZoneManager)(IServiceProvider *, IInternetZoneManager**, DWORD);
85 static HRESULT (WINAPI *pCoInternetGetSecurityUrl)(LPCWSTR, LPWSTR*, PSUACTION, DWORD);
86 static HRESULT (WINAPI *pCoInternetGetSecurityUrlEx)(IUri*, IUri**, PSUACTION, DWORD_PTR);
87 static HRESULT (WINAPI *pCreateUri)(LPCWSTR, DWORD, DWORD_PTR, IUri**);
88 static HRESULT (WINAPI *pCoInternetGetSession)(DWORD, IInternetSession**, DWORD);
89 static HRESULT (WINAPI *pCoInternetIsFeatureEnabled)(INTERNETFEATURELIST, DWORD);
90 static HRESULT (WINAPI *pCoInternetIsFeatureEnabledForUrl)(INTERNETFEATURELIST, DWORD, LPCWSTR, IInternetSecurityManager*);
91 static HRESULT (WINAPI *pCoInternetIsFeatureZoneElevationEnabled)(LPCWSTR, LPCWSTR, IInternetSecurityManager*, DWORD);
92 
93 static const WCHAR url1[] = {'r','e','s',':','/','/','m','s','h','t','m','l','.','d','l','l',
94         '/','b','l','a','n','k','.','h','t','m',0};
95 static const WCHAR url2[] = {'i','n','d','e','x','.','h','t','m',0};
96 static const WCHAR url3[] = {'f','i','l','e',':','/','/','c',':','\\','I','n','d','e','x','.','h','t','m',0};
97 static const WCHAR url4[] = {'f','i','l','e',':','s','o','m','e','%','2','0','f','i','l','e',
98         '%','2','e','j','p','g',0};
99 static const WCHAR url5[] = {'h','t','t','p',':','/','/','w','w','w','.','z','o','n','e','3',
100         '.','w','i','n','e','t','e','s','t',0};
101 static const WCHAR url6[] = {'a','b','o','u','t',':','b','l','a','n','k',0};
102 static const WCHAR url7[] = {'f','t','p',':','/','/','z','o','n','e','3',
103         '.','w','i','n','e','t','e','s','t','/','f','i','l','e','.','t','e','s','t',0};
104 static const WCHAR url8[] = {'t','e','s','t',':','1','2','3','a','b','c',0};
105 static const WCHAR url9[] = {'h','t','t','p',':','/','/','w','w','w','.','z','o','n','e','3',
106         '.','w','i','n','e','t','e','s','t', '/','s','i','t','e','/','a','b','o','u','t',0};
107 static const WCHAR url10[] = {'f','i','l','e',':','/','/','s','o','m','e','%','2','0','f','i','l','e',
108         '.','j','p','g',0};
109 static const WCHAR url11[] = {'f','i','l','e',':','/','/','c',':','/','I','n','d','e','x','.','h','t','m',0};
110 static const WCHAR url12[] = {'f','i','l','e',':','/','/','/','c',':','/','I','n','d','e','x','.','h','t','m',0};
111 static const WCHAR url13[] = {'h','t','t','p',':','g','o','o','g','l','e','.','c','o','m',0};
112 static const WCHAR url14[] = {'z','i','p',':','t','e','s','t','i','n','g','.','c','o','m','/','t','e','s','t','i','n','g',0};
113 static const WCHAR url15[] = {'h','t','t','p',':','/','/','g','o','o','g','l','e','.','c','o','m','.','u','k',0};
114 static const WCHAR url16[] = {'f','i','l','e',':','/','/','/','c',':',0};
115 static const WCHAR url17[] = {'f','i','l','e',':','/','/','/','c',':','c','\\',0};
116 static const WCHAR url18[] = {'c',':','\\','t','e','s','t','.','h','t','m',0};
117 
118 static const WCHAR winetestW[] = {'w','i','n','e','t','e','s','t',0};
119 static const WCHAR security_urlW[] = {'w','i','n','e','t','e','s','t',':','t','e','s','t','i','n','g',0};
120 static const WCHAR security_url2W[] = {'w','i','n','e','t','e','s','t',':','t','e','s','t','i','n','g','2',0};
121 static const WCHAR security_expectedW[] = {'w','i','n','e','t','e','s','t',':','z','i','p',0};
122 static const WCHAR winetest_to_httpW[] = {'w','i','n','e','t','e','s','t',':','h',0};
123 
124 static const char *szZoneMapDomainsKey = "Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\Domains";
125 static const char *szInternetSettingsKey = "Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings";
126 
127 static const BYTE secid1[] = {'f','i','l','e',':',0,0,0,0};
128 static const BYTE secid2[] = {'*',':','i','n','d','e','x','.','h','t','m',3,0,0,0};
129 static const BYTE secid5[] = {'h','t','t','p',':','w','w','w','.','z','o','n','e','3',
130         '.','w','i','n','e','t','e','s','t',3,0,0,0};
131 static const BYTE secid6[] = {'a','b','o','u','t',':','b','l','a','n','k',3,0,0,0};
132 static const BYTE secid7[] = {'f','t','p',':','z','o','n','e','3',
133         '.','w','i','n','e','t','e','s','t',3,0,0,0};
134 static const BYTE secid10[] =
135     {'f','i','l','e',':','s','o','m','e','%','2','0','f','i','l','e','.','j','p','g',3,0,0,0};
136 static const BYTE secid14[] =
137     {'z','i','p',':','t','e','s','t','i','n','g','.','c','o','m','/','t','e','s','t','i','n','g',3,0,0,0};
138 static const BYTE secid10_2[] =
139     {'f','i','l','e',':','s','o','m','e',' ','f','i','l','e','.','j','p','g',3,0,0,0};
140 static const BYTE secid13[] = {'h','t','t','p',':','c','o','m','.','u','k',3,0,0,0};
141 static const BYTE secid13_2[] = {'h','t','t','p',':','g','o','o','g','l','e','.','c','o','m','.','u','k',3,0,0,0};
142 
143 static const GUID CLSID_TestActiveX =
144     {0x178fc163,0xf585,0x4e24,{0x9c,0x13,0x4b,0xb7,0xfa,0xf8,0x06,0x46}};
145 
146 /* Defined as extern in urlmon.idl, but not exported by uuid.lib */
147 const GUID GUID_CUSTOM_CONFIRMOBJECTSAFETY =
148     {0x10200490,0xfa38,0x11d0,{0xac,0x0e,0x00,0xa0,0xc9,0xf,0xff,0xc0}};
149 
150 static int called_securl_http;
151 static DWORD ProcessUrlAction_policy;
152 
153 static struct secmgr_test {
154     LPCWSTR url;
155     DWORD zone;
156     HRESULT zone_hres;
157     DWORD secid_size;
158     const BYTE *secid;
159     HRESULT secid_hres;
160 } secmgr_tests[] = {
161     {url1, 0,   S_OK, sizeof(secid1), secid1, S_OK},
162     {url2, 100, 0x80041001, 0, NULL, E_INVALIDARG},
163     {url3, 0,   S_OK, sizeof(secid1), secid1, S_OK},
164     {url5, 3,   S_OK, sizeof(secid5), secid5, S_OK},
165     {url6, 3,   S_OK, sizeof(secid6), secid6, S_OK},
166     {url7, 3,   S_OK, sizeof(secid7), secid7, S_OK},
167     {url11,0,   S_OK, sizeof(secid1), secid1, S_OK},
168     {url12,0,   S_OK, sizeof(secid1), secid1, S_OK},
169     {url16,0,   S_OK, sizeof(secid1), secid1, S_OK},
170     {url17,0,   S_OK, sizeof(secid1), secid1, S_OK},
171     {url18,0,   S_OK, sizeof(secid1), secid1, S_OK}
172 };
173 
174 static int strcmp_w(const WCHAR *str1, const WCHAR *str2)
175 {
176     DWORD len1 = lstrlenW(str1);
177     DWORD len2 = lstrlenW(str2);
178 
179     if(len1!=len2) return 1;
180     return memcmp(str1, str2, len1*sizeof(WCHAR));
181 }
182 
183 static inline LPWSTR a2w(LPCSTR str)
184 {
185     LPWSTR ret = NULL;
186 
187     if(str) {
188         DWORD len = MultiByteToWideChar(CP_ACP, 0, str, -1, NULL, 0);
189         ret = HeapAlloc(GetProcessHeap(), 0, len*sizeof(WCHAR));
190         MultiByteToWideChar(CP_ACP, 0, str, -1, ret, len);
191     }
192 
193     return ret;
194 }
195 
196 static inline DWORD strcmp_aw(LPCSTR strA, LPCWSTR strB) {
197     LPWSTR strAW = a2w(strA);
198     DWORD ret = lstrcmpW(strAW, strB);
199     heap_free(strAW);
200     return ret;
201 }
202 
203 
204 /* Based on RegDeleteTreeW from dlls/advapi32/registry.c */
205 static LONG myRegDeleteTreeA(HKEY hKey, LPCSTR lpszSubKey)
206 {
207     LONG ret;
208     DWORD dwMaxSubkeyLen, dwMaxValueLen;
209     DWORD dwMaxLen, dwSize;
210     CHAR szNameBuf[MAX_PATH], *lpszName = szNameBuf;
211     HKEY hSubKey = hKey;
212 
213     if(lpszSubKey)
214     {
215         ret = RegOpenKeyExA(hKey, lpszSubKey, 0, KEY_READ, &hSubKey);
216         if (ret) return ret;
217     }
218 
219     /* Get highest length for keys, values */
220     ret = RegQueryInfoKeyA(hSubKey, NULL, NULL, NULL, NULL,
221             &dwMaxSubkeyLen, NULL, NULL, &dwMaxValueLen, NULL, NULL, NULL);
222     if (ret) goto cleanup;
223 
224     dwMaxSubkeyLen++;
225     dwMaxValueLen++;
226     dwMaxLen = max(dwMaxSubkeyLen, dwMaxValueLen);
227     if (dwMaxLen > sizeof(szNameBuf)/sizeof(CHAR))
228     {
229         /* Name too big: alloc a buffer for it */
230         if (!(lpszName = HeapAlloc( GetProcessHeap(), 0, dwMaxLen*sizeof(CHAR))))
231         {
232             ret = ERROR_NOT_ENOUGH_MEMORY;
233             goto cleanup;
234         }
235     }
236 
237     /* Recursively delete all the subkeys */
238     while (TRUE)
239     {
240         dwSize = dwMaxLen;
241         if (RegEnumKeyExA(hSubKey, 0, lpszName, &dwSize, NULL,
242                           NULL, NULL, NULL)) break;
243 
244         ret = myRegDeleteTreeA(hSubKey, lpszName);
245         if (ret) goto cleanup;
246     }
247 
248     if (lpszSubKey)
249         ret = RegDeleteKeyA(hKey, lpszSubKey);
250     else
251         while (TRUE)
252         {
253             dwSize = dwMaxLen;
254             if (RegEnumValueA(hKey, 0, lpszName, &dwSize,
255                   NULL, NULL, NULL, NULL)) break;
256 
257             ret = RegDeleteValueA(hKey, lpszName);
258             if (ret) goto cleanup;
259         }
260 
261 cleanup:
262     /* Free buffer if allocated */
263     if (lpszName != szNameBuf)
264         heap_free(lpszName);
265     if(lpszSubKey)
266         RegCloseKey(hSubKey);
267     return ret;
268 }
269 
270 static HRESULT WINAPI SecurityManager_QueryInterface(IInternetSecurityManager* This,
271         REFIID riid, void **ppvObject)
272 {
273     ok(0, "unexpected call\n");
274     return E_NOTIMPL;
275 }
276 
277 static ULONG WINAPI SecurityManager_AddRef(IInternetSecurityManager* This)
278 {
279     return 2;
280 }
281 
282 static ULONG WINAPI SecurityManager_Release(IInternetSecurityManager* This)
283 {
284     return 1;
285 }
286 
287 static HRESULT WINAPI SecurityManager_SetSecuritySite(IInternetSecurityManager* This,
288         IInternetSecurityMgrSite *pSite)
289 {
290     ok(0, "unexpected call\n");
291     return E_NOTIMPL;
292 }
293 
294 static HRESULT WINAPI SecurityManager_GetSecuritySite(IInternetSecurityManager* This,
295         IInternetSecurityMgrSite **ppSite)
296 {
297     ok(0, "unexpected call\n");
298     return E_NOTIMPL;
299 }
300 
301 static HRESULT WINAPI SecurityManager_MapUrlToZone(IInternetSecurityManager* This,
302         LPCWSTR pwszUrl, DWORD *pdwZone, DWORD dwFlags)
303 {
304     ok(0, "unexpected call\n");
305     return E_NOTIMPL;
306 }
307 
308 static HRESULT WINAPI SecurityManager_GetSecurityId(IInternetSecurityManager* This,
309         LPCWSTR pwszUrl, BYTE *pbSecurityId, DWORD *pcbSecurityId, DWORD_PTR dwReserved)
310 {
311     ok(0, "unexpected call\n");
312     return E_NOTIMPL;
313 }
314 
315 static HRESULT WINAPI SecurityManager_ProcessUrlAction(IInternetSecurityManager* This,
316         LPCWSTR pwszUrl, DWORD dwAction, BYTE *pPolicy, DWORD cbPolicy,
317         BYTE *pContext, DWORD cbContext, DWORD dwFlags, DWORD dwReserved)
318 {
319     CHECK_EXPECT(ProcessUrlAction);
320     ok(dwAction == URLACTION_FEATURE_ZONE_ELEVATION, "dwAction = %x\n", dwAction);
321     ok(cbPolicy == sizeof(DWORD), "cbPolicy = %d\n", cbPolicy);
322     ok(!pContext, "pContext != NULL\n");
323     ok(dwFlags == PUAF_NOUI, "dwFlags = %x\n", dwFlags);
324     ok(dwReserved == 0, "dwReserved = %x\n", dwReserved);
325 
326     *pPolicy = ProcessUrlAction_policy;
327     return ProcessUrlAction_policy==URLPOLICY_ALLOW ? S_OK : S_FALSE;
328 }
329 
330 static HRESULT WINAPI SecurityManager_QueryCustomPolicy(IInternetSecurityManager* This,
331         LPCWSTR pwszUrl, REFGUID guidKey, BYTE **ppPolicy, DWORD *pcbPolicy,
332         BYTE *pContext, DWORD cbContext, DWORD dwReserved)
333 {
334     ok(0, "unexpected call\n");
335     return E_NOTIMPL;
336 }
337 
338 static HRESULT WINAPI SecurityManager_SetZoneMapping(IInternetSecurityManager* This,
339         DWORD dwZone, LPCWSTR lpszPattern, DWORD dwFlags)
340 {
341     ok(0, "unexpected call\n");
342     return E_NOTIMPL;
343 }
344 
345 static HRESULT WINAPI SecurityManager_GetZoneMappings(IInternetSecurityManager* This,
346         DWORD dwZone, IEnumString **ppenumString, DWORD dwFlags)
347 {
348     ok(0, "unexpected call\n");
349     return E_NOTIMPL;
350 }
351 
352 static const IInternetSecurityManagerVtbl SecurityManagerVtbl = {
353     SecurityManager_QueryInterface,
354     SecurityManager_AddRef,
355     SecurityManager_Release,
356     SecurityManager_SetSecuritySite,
357     SecurityManager_GetSecuritySite,
358     SecurityManager_MapUrlToZone,
359     SecurityManager_GetSecurityId,
360     SecurityManager_ProcessUrlAction,
361     SecurityManager_QueryCustomPolicy,
362     SecurityManager_SetZoneMapping,
363     SecurityManager_GetZoneMappings
364 };
365 
366 static IInternetSecurityManager security_manager = { &SecurityManagerVtbl };
367 
368 static void test_SecurityManager(void)
369 {
370     int i;
371     IInternetSecurityManager *secmgr = NULL;
372     BYTE buf[512];
373     DWORD zone, size, policy;
374     HRESULT hres;
375 
376     if(!pCoInternetCreateSecurityManager) {
377         return;
378     }
379 
380     trace("Testing security manager...\n");
381 
382     hres = pCoInternetCreateSecurityManager(NULL, &secmgr, 0);
383     ok(hres == S_OK, "CoInternetCreateSecurityManager failed: %08x\n", hres);
384     if(FAILED(hres))
385         return;
386 
387     for(i=0; i < sizeof(secmgr_tests)/sizeof(secmgr_tests[0]); i++) {
388         zone = 100;
389         hres = IInternetSecurityManager_MapUrlToZone(secmgr, secmgr_tests[i].url,
390                                                      &zone, 0);
391         ok(hres == secmgr_tests[i].zone_hres /* IE <=6 */
392            || (FAILED(secmgr_tests[i].zone_hres) && hres == E_INVALIDARG), /* IE7 */
393            "[%d] MapUrlToZone failed: %08x, expected %08x\n",
394                 i, hres, secmgr_tests[i].zone_hres);
395         if(SUCCEEDED(hres))
396             ok(zone == secmgr_tests[i].zone, "[%d] zone=%d, expected %d\n", i, zone,
397                secmgr_tests[i].zone);
398         else
399             ok(zone == secmgr_tests[i].zone || zone == -1, "[%d] zone=%d\n", i, zone);
400 
401         size = sizeof(buf);
402         memset(buf, 0xf0, sizeof(buf));
403         hres = IInternetSecurityManager_GetSecurityId(secmgr, secmgr_tests[i].url,
404                 buf, &size, 0);
405         ok(hres == secmgr_tests[i].secid_hres,
406            "[%d] GetSecurityId failed: %08x, expected %08x\n",
407            i, hres, secmgr_tests[i].secid_hres);
408         if(secmgr_tests[i].secid) {
409             ok(size == secmgr_tests[i].secid_size, "[%d] size=%d, expected %d\n",
410                     i, size, secmgr_tests[i].secid_size);
411             ok(!memcmp(buf, secmgr_tests[i].secid, size), "[%d] wrong secid\n", i);
412         }
413     }
414 
415     zone = 100;
416     hres = IInternetSecurityManager_MapUrlToZone(secmgr, url10, &zone, 0);
417     ok(hres == S_OK, "MapUrlToZone failed: %08x, expected S_OK\n", hres);
418     ok(zone == 3, "zone=%d, expected 3\n", zone);
419 
420     /* win2k3 translates %20 into a space */
421     size = sizeof(buf);
422     memset(buf, 0xf0, sizeof(buf));
423     hres = IInternetSecurityManager_GetSecurityId(secmgr, url10, buf, &size, 0);
424     ok(hres == S_OK, "GetSecurityId failed: %08x, expected S_OK\n", hres);
425     ok(size == sizeof(secid10) ||
426        size == sizeof(secid10_2), /* win2k3 */
427        "size=%d\n", size);
428     ok(!memcmp(buf, secid10, sizeof(secid10)) ||
429        !memcmp(buf, secid10_2, sizeof(secid10_2)), /* win2k3 */
430        "wrong secid\n");
431 
432     zone = 100;
433     hres = IInternetSecurityManager_MapUrlToZone(secmgr, url13, &zone, 0);
434     ok(hres == S_OK, "MapUrlToZone failed: %08x\n", hres);
435     ok(zone == URLZONE_INVALID || broken(zone == URLZONE_INTERNET), "zone=%d\n", zone);
436 
437     size = sizeof(buf);
438     memset(buf, 0xf0, sizeof(buf));
439     hres = IInternetSecurityManager_GetSecurityId(secmgr, url13, buf, &size, 0);
440     ok(hres == E_INVALIDARG || broken(hres == S_OK), "GetSecurityId failed: %08x\n", hres);
441 
442     zone = 100;
443     hres = IInternetSecurityManager_MapUrlToZone(secmgr, url14, &zone, 0);
444     ok(hres == S_OK, "MapUrlToZone failed: %08x, expected S_OK\n", hres);
445     ok(zone == URLZONE_INTERNET, "zone=%d\n", zone);
446 
447     size = sizeof(buf);
448     memset(buf, 0xf0, sizeof(buf));
449     hres = IInternetSecurityManager_GetSecurityId(secmgr, url14, buf, &size, 0);
450     ok(hres == S_OK, "GetSecurityId failed: %08x, expected S_OK\n", hres);
451     ok(size == sizeof(secid14), "size=%d\n", size);
452     ok(!memcmp(buf, secid14, size), "wrong secid\n");
453 
454     zone = 100;
455     hres = IInternetSecurityManager_MapUrlToZone(secmgr, NULL, &zone, 0);
456     ok(hres == E_INVALIDARG, "MapUrlToZone failed: %08x, expected E_INVALIDARG\n", hres);
457     ok(zone == 100 || zone == -1, "zone=%d\n", zone);
458 
459     size = sizeof(buf);
460     hres = IInternetSecurityManager_GetSecurityId(secmgr, NULL, buf, &size, 0);
461     ok(hres == E_INVALIDARG,
462        "GetSecurityId failed: %08x, expected E_INVALIDARG\n", hres);
463     hres = IInternetSecurityManager_GetSecurityId(secmgr, secmgr_tests[1].url,
464                                                   NULL, &size, 0);
465     ok(hres == E_INVALIDARG,
466        "GetSecurityId failed: %08x, expected E_INVALIDARG\n", hres);
467     hres = IInternetSecurityManager_GetSecurityId(secmgr, secmgr_tests[1].url,
468                                                   buf, NULL, 0);
469     ok(hres == E_INVALIDARG,
470        "GetSecurityId failed: %08x, expected E_INVALIDARG\n", hres);
471 
472     hres = IInternetSecurityManager_ProcessUrlAction(secmgr, NULL, URLACTION_SCRIPT_RUN, (BYTE*)&policy,
473             sizeof(WCHAR), NULL, 0, 0, 0);
474     ok(hres == E_INVALIDARG, "ProcessUrlAction failed: %08x, expected E_INVALIDARG\n", hres);
475 
476     IInternetSecurityManager_Release(secmgr);
477 }
478 
479 /* Check if Internet Explorer is configured to run in "Enhanced Security Configuration" (aka hardened mode) */
480 /* Note: this code is duplicated in dlls/mshtml/tests/mshtml_test.h and dlls/urlmon/tests/sec_mgr.c */
481 static BOOL is_ie_hardened(void)
482 {
483     HKEY zone_map;
484     DWORD ie_harden, type, size;
485 
486     ie_harden = 0;
487     if(RegOpenKeyExA(HKEY_CURRENT_USER, "Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap",
488                     0, KEY_QUERY_VALUE, &zone_map) == ERROR_SUCCESS) {
489         size = sizeof(DWORD);
490         if (RegQueryValueExA(zone_map, "IEHarden", NULL, &type, (LPBYTE) &ie_harden, &size) != ERROR_SUCCESS ||
491             type != REG_DWORD) {
492             ie_harden = 0;
493         }
494         RegCloseKey(zone_map);
495     }
496 
497     return ie_harden != 0;
498 }
499 
500 static void test_url_action(IInternetSecurityManager *secmgr, IInternetZoneManager *zonemgr, DWORD action)
501 {
502     DWORD res, size, policy, reg_policy;
503     char buf[10];
504     HKEY hkey;
505     HRESULT hres;
506 
507     /* FIXME: HKEY_CURRENT_USER is most of the time the default but this can be changed on a system.
508      * The test should be changed to cope with that, if need be.
509      */
510     res = RegOpenKeyA(HKEY_CURRENT_USER,
511             "Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3", &hkey);
512     ok(res == ERROR_SUCCESS, "Could not open zone key\n");
513     if(res != ERROR_SUCCESS)
514         return;
515 
516     wsprintfA(buf, "%X", action);
517     size = sizeof(DWORD);
518     res = RegQueryValueExA(hkey, buf, NULL, NULL, (BYTE*)&reg_policy, &size);
519     RegCloseKey(hkey);
520 
521     /* Try settings from HKEY_LOCAL_MACHINE. */
522     if(res != ERROR_SUCCESS || size != sizeof(DWORD)) {
523         res = RegOpenKeyA(HKEY_LOCAL_MACHINE,
524                 "Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3", &hkey);
525         ok(res == ERROR_SUCCESS, "Could not open zone key\n");
526 
527         size = sizeof(DWORD);
528         res = RegQueryValueExA(hkey, buf, NULL, NULL, (BYTE*)&reg_policy, &size);
529         RegCloseKey(hkey);
530     }
531 
532     if(res != ERROR_SUCCESS || size != sizeof(DWORD)) {
533         policy = 0xdeadbeef;
534         hres = IInternetSecurityManager_ProcessUrlAction(secmgr, url9, action, (BYTE*)&policy,
535                 sizeof(WCHAR), NULL, 0, 0, 0);
536         ok(hres == E_FAIL || broken(hres == HRESULT_FROM_WIN32(ERROR_NOT_FOUND)),
537             "(0x%x) got 0x%x (expected E_FAIL)\n", action, hres);
538         ok(policy == 0xdeadbeef, "(%x) policy=%x\n", action, policy);
539 
540         policy = 0xdeadbeef;
541         hres = IInternetZoneManager_GetZoneActionPolicy(zonemgr, 3, action, (BYTE*)&policy,
542                 sizeof(DWORD), URLZONEREG_DEFAULT);
543         ok(hres == E_FAIL || broken(hres == HRESULT_FROM_WIN32(ERROR_NOT_FOUND)),
544             "(0x%x) got 0x%x (expected E_FAIL)\n", action, hres);
545         ok(policy == 0xdeadbeef, "(%x) policy=%x\n", action, policy);
546         return;
547     }
548 
549     policy = 0xdeadbeef;
550     hres = IInternetZoneManager_GetZoneActionPolicy(zonemgr, 3, action, (BYTE*)&policy,
551             sizeof(DWORD), URLZONEREG_DEFAULT);
552     ok(hres == S_OK, "GetZoneActionPolicy failed: %08x\n", hres);
553     ok(policy == reg_policy, "(%x) policy=%x, expected %x\n", action, policy, reg_policy);
554 
555     if(policy != URLPOLICY_QUERY) {
556         if(winetest_interactive || ! is_ie_hardened()) {
557             BOOL expect_parse_call = !called_securl_http;
558 
559             policy = 0xdeadbeef;
560             hres = IInternetSecurityManager_ProcessUrlAction(secmgr, url9, action, (BYTE*)&policy,
561                     sizeof(WCHAR), NULL, 0, 0, 0);
562             if(reg_policy == URLPOLICY_DISALLOW)
563                 ok(hres == S_FALSE, "ProcessUrlAction(%x) failed: %08x, expected S_FALSE\n", action, hres);
564             else
565                 ok(hres == S_OK, "ProcessUrlAction(%x) failed: %08x\n", action, hres);
566             ok(policy == 0xdeadbeef, "(%x) policy=%x\n", action, policy);
567 
568             policy = 0xdeadbeef;
569             hres = IInternetSecurityManager_ProcessUrlAction(secmgr, url9, action, (BYTE*)&policy,
570                     2, NULL, 0, 0, 0);
571             if(reg_policy == URLPOLICY_DISALLOW)
572                 ok(hres == S_FALSE, "ProcessUrlAction(%x) failed: %08x, expected S_FALSE\n", action, hres);
573             else
574                 ok(hres == S_OK, "ProcessUrlAction(%x) failed: %08x\n", action, hres);
575             ok(policy == 0xdeadbeef, "(%x) policy=%x\n", action, policy);
576 
577             policy = 0xdeadbeef;
578             hres = IInternetSecurityManager_ProcessUrlAction(secmgr, url9, action, (BYTE*)&policy,
579                     sizeof(DWORD), NULL, 0, 0, 0);
580             if(reg_policy == URLPOLICY_DISALLOW)
581                 ok(hres == S_FALSE, "ProcessUrlAction(%x) failed: %08x, expected S_FALSE\n", action, hres);
582             else
583                 ok(hres == S_OK, "ProcessUrlAction(%x) failed: %08x\n", action, hres);
584             ok(policy == reg_policy, "(%x) policy=%x\n", action, policy);
585 
586             policy = 0xdeadbeef;
587             hres = IInternetSecurityManager_ProcessUrlAction(secmgr, url9, action, (BYTE*)&policy,
588                     sizeof(WCHAR), (BYTE*)0xdeadbeef, 16, 0, 0);
589             if(reg_policy == URLPOLICY_DISALLOW)
590                 ok(hres == S_FALSE, "ProcessUrlAction(%x) failed: %08x, expected S_FALSE\n", action, hres);
591             else
592                 ok(hres == S_OK, "ProcessUrlAction(%x) failed: %08x\n", action, hres);
593             ok(policy == 0xdeadbeef, "(%x) policy=%x\n", action, policy);
594 
595             policy = 0xdeadbeef;
596             if(expect_parse_call)
597                 SET_EXPECT(ParseUrl_SECURITY_URL_http);
598             hres = IInternetSecurityManager_ProcessUrlAction(secmgr, winetest_to_httpW, action, (BYTE*)&policy,
599                     sizeof(DWORD), NULL, 0, 0, 0);
600             if(expect_parse_call)
601                 CHECK_CALLED(ParseUrl_SECURITY_URL_http);
602             if(reg_policy == URLPOLICY_DISALLOW)
603                 ok(hres == S_FALSE, "ProcessUrlAction(%x) failed: %08x, expected S_FALSE\n", action, hres);
604             else
605                 ok(hres == S_OK, "ProcessUrlAction(%x) failed: %08x\n", action, hres);
606             ok(policy == reg_policy, "(%x) policy=%x\n", action, policy);
607         }else {
608             skip("IE running in Enhanced Security Configuration\n");
609         }
610     }
611 }
612 
613 static void test_special_url_action(IInternetSecurityManager *secmgr, IInternetZoneManager *zonemgr, DWORD action)
614 {
615     DWORD policy;
616     HRESULT hres;
617 
618     policy = 0xdeadbeef;
619     hres = IInternetZoneManager_GetZoneActionPolicy(zonemgr, 3, action, (BYTE*)&policy,
620             sizeof(DWORD), URLZONEREG_DEFAULT);
621     ok(hres == S_OK, "GetZoneActionPolicy failed: %08x\n", hres);
622     ok(policy == URLPOLICY_DISALLOW, "(%x) policy=%x, expected URLPOLICY_DISALLOW\n", action, policy);
623 
624     policy = 0xdeadbeef;
625     hres = IInternetSecurityManager_ProcessUrlAction(secmgr, url1, action, (BYTE*)&policy,
626             sizeof(WCHAR), NULL, 0, 0, 0);
627     ok(hres == S_FALSE, "ProcessUrlAction(%x) failed: %08x, expected S_FALSE\n", action, hres);
628 
629     policy = 0xdeadbeef;
630     hres = IInternetSecurityManager_ProcessUrlAction(secmgr, url1, action, (BYTE*)&policy,
631             sizeof(DWORD), NULL, 0, 0, 0);
632     ok(hres == S_FALSE, "ProcessUrlAction(%x) failed: %08x, expected S_FALSE\n", action, hres);
633     ok(policy == URLPOLICY_DISALLOW, "policy = %x\n", policy);
634 }
635 
636 static void test_activex(IInternetSecurityManager *secmgr)
637 {
638     DWORD policy, policy_size;
639     struct CONFIRMSAFETY cs;
640     BYTE *ppolicy;
641     HRESULT hres;
642 
643     policy = 0xdeadbeef;
644     hres = IInternetSecurityManager_ProcessUrlAction(secmgr, url1, URLACTION_ACTIVEX_RUN, (BYTE*)&policy,
645             sizeof(DWORD), (BYTE*)&CLSID_TestActiveX, sizeof(CLSID), 0, 0);
646     ok(hres == S_OK, "ProcessUrlAction(URLACTION_ACTIVEX_RUN) failed: %08x\n", hres);
647     ok(policy == URLPOLICY_ALLOW || policy == URLPOLICY_DISALLOW, "policy = %x\n", policy);
648 
649     cs.clsid = CLSID_TestActiveX;
650     cs.pUnk = (IUnknown*)0xdeadbeef;
651     cs.dwFlags = 0;
652     hres = IInternetSecurityManager_QueryCustomPolicy(secmgr, url1, &GUID_CUSTOM_CONFIRMOBJECTSAFETY,
653             &ppolicy, &policy_size, (BYTE*)&cs, sizeof(cs), 0);
654     ok(hres == HRESULT_FROM_WIN32(ERROR_NOT_FOUND), "QueryCusromPolicy failed: %08x\n", hres);
655 }
656 
657 static void test_polices(void)
658 {
659     IInternetZoneManager *zonemgr = NULL;
660     IInternetSecurityManager *secmgr = NULL;
661     HRESULT hres;
662 
663     trace("testing polices...\n");
664 
665     hres = pCoInternetCreateSecurityManager(NULL, &secmgr, 0);
666     ok(hres == S_OK, "CoInternetCreateSecurityManager failed: %08x\n", hres);
667     hres = pCoInternetCreateZoneManager(NULL, &zonemgr, 0);
668     ok(hres == S_OK, "CoInternetCreateZoneManager failed: %08x\n", hres);
669 
670     test_url_action(secmgr, zonemgr, URLACTION_SCRIPT_RUN);
671     test_url_action(secmgr, zonemgr, URLACTION_ACTIVEX_RUN);
672     test_url_action(secmgr, zonemgr, URLACTION_ACTIVEX_OVERRIDE_OBJECT_SAFETY);
673     test_url_action(secmgr, zonemgr, URLACTION_CHANNEL_SOFTDIST_PERMISSIONS);
674     test_url_action(secmgr, zonemgr, 0xdeadbeef);
675 
676     test_special_url_action(secmgr, zonemgr, URLACTION_SCRIPT_OVERRIDE_SAFETY);
677     test_special_url_action(secmgr, zonemgr, URLACTION_ACTIVEX_OVERRIDE_SCRIPT_SAFETY);
678 
679     test_activex(secmgr);
680 
681     IInternetSecurityManager_Release(secmgr);
682     IInternetZoneManager_Release(zonemgr);
683 }
684 
685 /* IE (or at least newer versions of it) seem to cache the keys in ZoneMap
686  * when urlmon.dll is loaded and it doesn't seem to update its cache, unless
687  * SetZoneMapping is used.
688  */
689 static void test_zone_domain_cache(void)
690 {
691     HRESULT hres;
692     DWORD res, zone;
693     IInternetSecurityManager *secmgr = NULL;
694     HKEY domains, domain;
695 
696     static const WCHAR testing_domain_urlW[] = {'h','t','t','p',':','/','/','t','e','s','t','i','n','g','.',
697             'd','o','m','a','i','n','/',0};
698 
699     res = RegOpenKeyA(HKEY_CURRENT_USER, szZoneMapDomainsKey, &domains);
700     ok(res == ERROR_SUCCESS, "RegOpenKey failed: %d\n", res);
701     if(res != ERROR_SUCCESS)
702         return;
703 
704     res = RegCreateKeyA(domains, "testing.domain", &domain);
705     ok(res == ERROR_SUCCESS, "RegCreateKey failed: %d\n", res);
706     if(res != ERROR_SUCCESS) {
707         RegCloseKey(domains);
708         return;
709     }
710 
711     zone = URLZONE_CUSTOM;
712     res = RegSetValueExA(domain, "http", 0, REG_DWORD, (BYTE*)&zone, sizeof(DWORD));
713     ok(res == ERROR_SUCCESS, "RegSetValueEx failed: %d\n", res);
714 
715     RegCloseKey(domain);
716 
717     hres = pCoInternetCreateSecurityManager(NULL, &secmgr, 0);
718     ok(hres == S_OK, "CoInternetCreateSecurityManager failed: %08x\n", hres);
719 
720     zone = URLZONE_INVALID;
721     hres = IInternetSecurityManager_MapUrlToZone(secmgr, testing_domain_urlW, &zone, 0);
722     ok(hres == S_OK, "MapUrlToZone failed: %08x\n", hres);
723     todo_wine ok(zone == URLZONE_INTERNET, "Got %d, expected URLZONE_INTERNET\n", zone);
724 
725     /* FIXME: Play nice with ZoneMaps that existed before the test is run. */
726     res = RegDeleteKeyA(domains, "testing.domain");
727     ok(res == ERROR_SUCCESS, "RegDeleteKey failed: %d\n", res);
728 
729     RegCloseKey(domains);
730     IInternetSecurityManager_Release(secmgr);
731 }
732 
733 typedef struct {
734     const char  *domain;
735     const char  *subdomain;
736     const char  *scheme;
737     DWORD       zone;
738 } zone_domain_mapping;
739 
740 /* FIXME: Move these into SetZoneMapping tests when the day comes... */
741 static const zone_domain_mapping zone_domain_mappings[] = {
742     /* Implicitly means "*.yabadaba.do". */
743     {"yabadaba.do",NULL,"http",URLZONE_CUSTOM},
744     /* The '*' doesn't count as a wildcard, since it's not the first component of the subdomain. */
745     {"super.cool","testing.*","ftp",URLZONE_CUSTOM2},
746     /* The '*' counts since it's the first component of the subdomain. */
747     {"super.cool","*.testing","ftp",URLZONE_CUSTOM2},
748     /* All known scheme types apply to wildcard schemes. */
749     {"tests.test",NULL,"*",URLZONE_CUSTOM},
750     /* Due to a defect with how windows checks the mappings, unknown scheme types
751      * never seem to get mapped properly. */
752     {"tests.test",NULL,"zip",URLZONE_CUSTOM},
753     {"www.testing.com",NULL,"http",URLZONE_CUSTOM},
754     {"www.testing.com","testing","http",URLZONE_CUSTOM2},
755     {"org",NULL,"http",URLZONE_CUSTOM},
756     {"org","testing","http",URLZONE_CUSTOM2},
757     {"wine.testing",NULL,"*",URLZONE_CUSTOM2}
758 };
759 
760 static BOOL register_zone_domains(void)
761 {
762     HKEY domains;
763     DWORD res, i;
764 
765     /* Some Windows versions don't seem to have a "Domains" key in their HKLM. */
766     res = RegOpenKeyA(HKEY_LOCAL_MACHINE, szZoneMapDomainsKey, &domains);
767     ok(res == ERROR_SUCCESS || broken(res == ERROR_FILE_NOT_FOUND), "RegOpenKey failed: %d\n", res);
768     if(res == ERROR_SUCCESS) {
769         HKEY domain;
770         DWORD zone = URLZONE_CUSTOM;
771 
772         res = RegCreateKeyA(domains, "local.machine", &domain);
773         if (res == ERROR_ACCESS_DENIED)
774         {
775             skip("need admin rights\n");
776             RegCloseKey(domains);
777             return FALSE;
778         }
779         ok(res == ERROR_SUCCESS, "RegCreateKey failed: %d\n", res);
780 
781         res = RegSetValueExA(domain, "http", 0, REG_DWORD, (BYTE*)&zone, sizeof(DWORD));
782         ok(res == ERROR_SUCCESS, "RegSetValueEx failed: %d\n", res);
783 
784         RegCloseKey(domain);
785         RegCloseKey(domains);
786     }
787 
788     res = RegOpenKeyA(HKEY_CURRENT_USER, szZoneMapDomainsKey, &domains);
789     ok(res == ERROR_SUCCESS, "RegOpenKey failed: %d\n", res);
790 
791     for(i = 0; i < sizeof(zone_domain_mappings)/sizeof(zone_domain_mappings[0]); ++i) {
792         const zone_domain_mapping *test = zone_domain_mappings+i;
793         HKEY domain;
794 
795         res = RegCreateKeyA(domains, test->domain, &domain);
796         ok(res == ERROR_SUCCESS, "RegCreateKey failed with %d on test %d\n", res, i);
797 
798         /* Only set the value if there's no subdomain. */
799         if(!test->subdomain) {
800             res = RegSetValueExA(domain, test->scheme, 0, REG_DWORD, (BYTE*)&test->zone, sizeof(DWORD));
801             ok(res == ERROR_SUCCESS, "RegSetValueEx failed with %d on test %d\n", res, i);
802         } else {
803             HKEY subdomain;
804 
805             res = RegCreateKeyA(domain, test->subdomain, &subdomain);
806             ok(res == ERROR_SUCCESS, "RegCreateKey failed with %d on test %d\n", res, i);
807 
808             res = RegSetValueExA(subdomain, test->scheme, 0, REG_DWORD, (BYTE*)&test->zone, sizeof(DWORD));
809             ok(res == ERROR_SUCCESS, "RegSetValueEx failed with %d on test %d\n", res, i);
810 
811             RegCloseKey(subdomain);
812         }
813 
814         RegCloseKey(domain);
815     }
816 
817     RegCloseKey(domains);
818     return TRUE;
819 }
820 
821 static void unregister_zone_domains(void)
822 {
823     HKEY domains;
824     DWORD res, i;
825 
826     res = RegOpenKeyA(HKEY_LOCAL_MACHINE, szZoneMapDomainsKey, &domains);
827     ok(res == ERROR_SUCCESS || broken(res == ERROR_FILE_NOT_FOUND), "RegOpenKey failed: %d\n", res);
828     if(res == ERROR_SUCCESS) {
829         RegDeleteKeyA(domains, "local.machine");
830         RegCloseKey(domains);
831     }
832 
833     res = RegOpenKeyA(HKEY_CURRENT_USER, szZoneMapDomainsKey, &domains);
834     ok(res == ERROR_SUCCESS, "RegOpenKey failed: %d\n", res);
835 
836     for(i = 0; i < sizeof(zone_domain_mappings)/sizeof(zone_domain_mappings[0]); ++i) {
837         const zone_domain_mapping *test = zone_domain_mappings+i;
838 
839         /* FIXME: Uses the "cludge" approach to remove the test data from the registry!
840          *        Although, if domain names are... unique, this shouldn't cause any harm
841          *        to keys (if any) that existed before the tests.
842          */
843         if(test->subdomain) {
844             HKEY domain;
845 
846             res = RegOpenKeyA(domains, test->domain, &domain);
847             if(res == ERROR_SUCCESS) {
848                 RegDeleteKeyA(domain, test->subdomain);
849                 RegCloseKey(domain);
850             }
851         }
852         RegDeleteKeyA(domains, test->domain);
853     }
854 
855     RegCloseKey(domains);
856 }
857 
858 static void run_child_process(void)
859 {
860     char cmdline[MAX_PATH];
861     char path[MAX_PATH];
862     char **argv;
863     PROCESS_INFORMATION pi;
864     STARTUPINFOA si = { 0 };
865     BOOL ret;
866 
867     GetModuleFileNameA(NULL, path, MAX_PATH);
868 
869     si.cb = sizeof(si);
870     winetest_get_mainargs(&argv);
871     sprintf(cmdline, "\"%s\" %s domain_tests", argv[0], argv[1]);
872     ret = CreateProcessA(argv[0], cmdline, NULL, NULL, FALSE, 0, NULL, NULL, &si, &pi);
873     ok(ret, "Failed to spawn child process: %u\n", GetLastError());
874     winetest_wait_child_process(pi.hProcess);
875     CloseHandle(pi.hThread);
876     CloseHandle(pi.hProcess);
877 }
878 
879 typedef struct {
880     const char  *url;
881     DWORD       zone;
882     BOOL        todo;
883     DWORD       broken_zone;
884 } zone_mapping_test;
885 
886 static const zone_mapping_test zone_mapping_tests[] = {
887     /* Tests for "yabadaba.do" zone mappings. */
888     {"http://yabadaba.do/",URLZONE_CUSTOM},
889     {"http://google.yabadaba.do/",URLZONE_CUSTOM},
890     {"zip://yabadaba.do/",URLZONE_INTERNET},
891     /* Tests for "super.cool" zone mappings. */
892     {"ftp://testing.google.super.cool/",URLZONE_INTERNET},
893     {"ftp://testing.*.super.cool/",URLZONE_CUSTOM2},
894     {"ftp://google.testing.super.cool/",URLZONE_CUSTOM2},
895     /* Tests for "tests.test" zone mappings. */
896     {"http://tests.test/",URLZONE_CUSTOM},
897     {"http://www.tests.test/",URLZONE_CUSTOM},
898     {"ftp://tests.test/",URLZONE_CUSTOM},
899     {"ftp://www.tests.test/",URLZONE_CUSTOM},
900     {"test://www.tests.test/",URLZONE_INTERNET},
901     {"test://tests.test/",URLZONE_INTERNET},
902     {"zip://www.tests.test/",URLZONE_INTERNET},
903     {"zip://tests.test/",URLZONE_INTERNET},
904     /* Tests for "www.testing.com" zone mappings. */
905     {"http://google.www.testing.com/",URLZONE_INTERNET},
906     {"http://www.testing.com/",URLZONE_CUSTOM,FALSE,URLZONE_INTERNET},
907     {"http://testing.www.testing.com/",URLZONE_CUSTOM2,FALSE,URLZONE_INTERNET},
908     /* Tests for "org" zone mappings. */
909     {"http://google.org/",URLZONE_INTERNET,FALSE,URLZONE_CUSTOM},
910     {"http://org/",URLZONE_CUSTOM},
911     {"http://testing.org/",URLZONE_CUSTOM2},
912     /* Tests for "wine.testing" mapping */
913     {"*:wine.testing/test",URLZONE_CUSTOM2},
914     {"http://wine.testing/testing",URLZONE_CUSTOM2}
915 };
916 
917 static void test_zone_domain_mappings(void)
918 {
919     HRESULT hres;
920     DWORD i, res;
921     IInternetSecurityManager *secmgr = NULL;
922     HKEY domains;
923     DWORD zone = URLZONE_INVALID;
924 
925     trace("testing zone domain mappings...\n");
926 
927     hres = pCoInternetCreateSecurityManager(NULL, &secmgr, 0);
928     ok(hres == S_OK, "CoInternetCreateSecurityManager failed: %08x\n", hres);
929 
930     res = RegOpenKeyA(HKEY_LOCAL_MACHINE, szZoneMapDomainsKey, &domains);
931     if(res == ERROR_SUCCESS) {
932         static const WCHAR local_machineW[] = {'h','t','t','p',':','/','/','t','e','s','t','.','l','o','c','a','l',
933                 '.','m','a','c','h','i','n','e','/',0};
934 
935         hres = IInternetSecurityManager_MapUrlToZone(secmgr, local_machineW, &zone, 0);
936         ok(hres == S_OK, "MapUrlToZone failed: %08x\n", hres);
937         ok(zone == URLZONE_CUSTOM, "Expected URLZONE_CUSTOM, but got %d\n", zone);
938 
939         RegCloseKey(domains);
940     }
941 
942     for(i = 0; i < sizeof(zone_mapping_tests)/sizeof(zone_mapping_tests[0]); ++i) {
943         const zone_mapping_test *test = zone_mapping_tests+i;
944         LPWSTR urlW = a2w(test->url);
945         zone = URLZONE_INVALID;
946 
947         hres = IInternetSecurityManager_MapUrlToZone(secmgr, urlW, &zone, 0);
948         ok(hres == S_OK, "MapUrlToZone failed: %08x\n", hres);
949         todo_wine_if (test->todo)
950             ok(zone == test->zone || broken(test->broken_zone == zone),
951                 "Expected %d, but got %d on test %d\n", test->zone, zone, i);
952 
953         heap_free(urlW);
954     }
955 
956     IInternetSecurityManager_Release(secmgr);
957 }
958 
959 static void test_zone_domains(void)
960 {
961     if(is_ie_hardened()) {
962         skip("IE running in Enhanced Security Configuration\n");
963         return;
964     } else if(!pCreateUri) {
965         win_skip("Skipping zone domain tests, IE too old\n");
966         return;
967     }
968 
969     trace("testing zone domains...\n");
970 
971     test_zone_domain_cache();
972 
973     if (!register_zone_domains()) return;
974     run_child_process();
975     unregister_zone_domains();
976 }
977 
978 static void test_CoInternetCreateZoneManager(void)
979 {
980     IInternetZoneManager *zonemgr = NULL;
981     IUnknown *punk = NULL;
982     HRESULT hr;
983 
984     trace("simple zone manager tests...\n");
985 
986     hr = pCoInternetCreateZoneManager(NULL, &zonemgr, 0);
987     ok(hr == S_OK, "CoInternetCreateZoneManager result: 0x%x\n", hr);
988     if (FAILED(hr))
989         return;
990 
991     hr = IInternetZoneManager_QueryInterface(zonemgr, &IID_IUnknown, (void **) &punk);
992     ok(SUCCEEDED(hr), "got 0x%x with %p (expected Success)\n", hr, punk);
993     if (punk)
994         IUnknown_Release(punk);
995 
996     hr = IInternetZoneManager_QueryInterface(zonemgr, &IID_IInternetZoneManager, (void **) &punk);
997     ok(SUCCEEDED(hr), "got 0x%x with %p (expected Success)\n", hr, punk);
998     if (punk)
999         IUnknown_Release(punk);
1000 
1001 
1002     hr = IInternetZoneManager_QueryInterface(zonemgr, &IID_IInternetZoneManagerEx, (void **) &punk);
1003     if (SUCCEEDED(hr)) {
1004         IUnknown_Release(punk);
1005 
1006         hr = IInternetZoneManager_QueryInterface(zonemgr, &IID_IInternetZoneManagerEx2, (void **) &punk);
1007         ok(hr == S_OK || broken(hr == E_NOINTERFACE /* some W2K3 */),
1008            "got 0x%x (expected S_OK)\n", hr);
1009         if (punk)
1010             IUnknown_Release(punk);
1011         else
1012             win_skip("InternetZoneManagerEx2 not supported\n");
1013 
1014     }
1015     else
1016         win_skip("InternetZoneManagerEx not supported\n");
1017 
1018     hr = IInternetZoneManager_Release(zonemgr);
1019     ok(hr == S_OK, "got 0x%x (expected S_OK)\n", hr);
1020 
1021 }
1022 
1023 static void test_CreateZoneEnumerator(void)
1024 {
1025     IInternetZoneManager *zonemgr = NULL;
1026     HRESULT hr;
1027     DWORD dwEnum;
1028     DWORD dwEnum2;
1029     DWORD dwCount;
1030     DWORD dwCount2;
1031 
1032     trace("testing zone enumerator...\n");
1033 
1034     hr = pCoInternetCreateZoneManager(NULL, &zonemgr, 0);
1035     ok(hr == S_OK, "CoInternetCreateZoneManager result: 0x%x\n", hr);
1036     if (FAILED(hr))
1037         return;
1038 
1039     dwEnum=0xdeadbeef;
1040     hr = IInternetZoneManager_CreateZoneEnumerator(zonemgr, &dwEnum, NULL, 0);
1041     ok((hr == E_INVALIDARG) && (dwEnum == 0xdeadbeef),
1042         "got 0x%x with 0x%x (expected E_INVALIDARG with 0xdeadbeef)\n", hr, dwEnum);
1043 
1044     dwCount=0xdeadbeef;
1045     hr = IInternetZoneManager_CreateZoneEnumerator(zonemgr, NULL, &dwCount, 0);
1046     ok((hr == E_INVALIDARG) && (dwCount == 0xdeadbeef),
1047         "got 0x%x and 0x%x (expected E_INVALIDARG and 0xdeadbeef)\n", hr, dwCount);
1048 
1049     dwEnum=0xdeadbeef;
1050     dwCount=0xdeadbeef;
1051     hr = IInternetZoneManager_CreateZoneEnumerator(zonemgr, &dwEnum, &dwCount, 0xffffffff);
1052     ok((hr == E_INVALIDARG) && (dwEnum == 0xdeadbeef) && (dwCount == 0xdeadbeef),
1053         "got 0x%x with 0x%x and 0x%x (expected E_INVALIDARG with 0xdeadbeef and 0xdeadbeef)\n",
1054         hr, dwEnum, dwCount);
1055 
1056     dwEnum=0xdeadbeef;
1057     dwCount=0xdeadbeef;
1058     hr = IInternetZoneManager_CreateZoneEnumerator(zonemgr, &dwEnum, &dwCount, 1);
1059     ok((hr == E_INVALIDARG) && (dwEnum == 0xdeadbeef) && (dwCount == 0xdeadbeef),
1060         "got 0x%x with 0x%x and 0x%x (expected E_INVALIDARG with 0xdeadbeef and 0xdeadbeef)\n",
1061         hr, dwEnum, dwCount);
1062 
1063     dwEnum=0xdeadbeef;
1064     dwCount=0xdeadbeef;
1065     /* Normal use */
1066     hr = IInternetZoneManager_CreateZoneEnumerator(zonemgr, &dwEnum, &dwCount, 0);
1067     ok(hr == S_OK, "got 0x%x (expected S_OK)\n", hr);
1068 
1069     if (SUCCEEDED(hr)) {
1070         dwEnum2=0xdeadbeef;
1071         dwCount2=0xdeadbeef;
1072         hr = IInternetZoneManager_CreateZoneEnumerator(zonemgr, &dwEnum2, &dwCount2, 0);
1073         ok(hr == S_OK, "got 0x%x (expected S_OK)\n", hr);
1074         if (SUCCEEDED(hr)) {
1075             /* native urlmon has an incrementing counter for dwEnum */
1076             hr = IInternetZoneManager_DestroyZoneEnumerator(zonemgr, dwEnum2);
1077             ok(hr == S_OK, "got 0x%x (expected S_OK)\n", hr);
1078         }
1079 
1080         hr = IInternetZoneManager_DestroyZoneEnumerator(zonemgr, dwEnum);
1081         ok(hr == S_OK, "got 0x%x (expected S_OK)\n", hr);
1082 
1083         /* Destroy the Enumerator twice is detected and handled in native urlmon */
1084         hr = IInternetZoneManager_DestroyZoneEnumerator(zonemgr, dwEnum);
1085         ok((hr == E_INVALIDARG), "got 0x%x (expected E_INVALIDARG)\n", hr);
1086     }
1087 
1088     /* ::Release succeed also, when a ::DestroyZoneEnumerator is missing */
1089     hr = IInternetZoneManager_Release(zonemgr);
1090     ok(hr == S_OK, "got 0x%x (expected S_OK)\n", hr);
1091 }
1092 
1093 static void test_GetZoneActionPolicy(void)
1094 {
1095     IInternetZoneManager *zonemgr = NULL;
1096     BYTE buf[32];
1097     HRESULT hres;
1098     DWORD action = URLACTION_CREDENTIALS_USE; /* Implemented on all IE versions */
1099 
1100     trace("testing GetZoneActionPolixy...\n");
1101 
1102     hres = pCoInternetCreateZoneManager(NULL, &zonemgr, 0);
1103     ok(hres == S_OK, "CoInternetCreateZoneManager failed: %08x\n", hres);
1104     if(FAILED(hres))
1105         return;
1106 
1107     hres = IInternetZoneManager_GetZoneActionPolicy(zonemgr, 3, action, buf,
1108             sizeof(DWORD), URLZONEREG_DEFAULT);
1109     ok(hres == S_OK, "GetZoneActionPolicy failed: %08x\n", hres);
1110     ok(*(DWORD*)buf == URLPOLICY_CREDENTIALS_SILENT_LOGON_OK ||
1111             *(DWORD*)buf == URLPOLICY_CREDENTIALS_MUST_PROMPT_USER ||
1112             *(DWORD*)buf == URLPOLICY_CREDENTIALS_CONDITIONAL_PROMPT ||
1113             *(DWORD*)buf == URLPOLICY_CREDENTIALS_ANONYMOUS_ONLY,
1114             "unexpected policy=%d\n", *(DWORD*)buf);
1115 
1116     hres = IInternetZoneManager_GetZoneActionPolicy(zonemgr, 3, action, NULL,
1117             sizeof(DWORD), URLZONEREG_DEFAULT);
1118     ok(hres == E_INVALIDARG, "GetZoneActionPolicy failed: %08x, expected E_INVALIDARG\n", hres);
1119 
1120     hres = IInternetZoneManager_GetZoneActionPolicy(zonemgr, 3, action, buf,
1121             2, URLZONEREG_DEFAULT);
1122     ok(hres == E_INVALIDARG, "GetZoneActionPolicy failed: %08x, expected E_INVALIDARG\n", hres);
1123 
1124     hres = IInternetZoneManager_GetZoneActionPolicy(zonemgr, 3, 0x1fff, buf,
1125             sizeof(DWORD), URLZONEREG_DEFAULT);
1126     ok(hres == E_FAIL || broken(hres == HRESULT_FROM_WIN32(ERROR_NOT_FOUND)),
1127             "(0x%x) got 0x%x (expected E_FAIL)\n", action, hres);
1128 
1129     hres = IInternetZoneManager_GetZoneActionPolicy(zonemgr, 13, action, buf,
1130             sizeof(DWORD), URLZONEREG_DEFAULT);
1131     ok(hres == E_INVALIDARG, "GetZoneActionPolicy failed: %08x, expected E_INVALIDARG\n", hres);
1132 
1133     IInternetZoneManager_Release(zonemgr);
1134 }
1135 
1136 static void test_GetZoneAt(void)
1137 {
1138     IInternetZoneManager *zonemgr = NULL;
1139     HRESULT hr;
1140     DWORD dwEnum;
1141     DWORD dwCount;
1142     DWORD dwZone;
1143     DWORD i;
1144 
1145     trace("testing GetZoneAt...\n");
1146 
1147     hr = pCoInternetCreateZoneManager(NULL, &zonemgr, 0);
1148     ok(hr == S_OK, "CoInternetCreateZoneManager result: 0x%x\n", hr);
1149     if (FAILED(hr))
1150         return;
1151 
1152     hr = IInternetZoneManager_CreateZoneEnumerator(zonemgr, &dwEnum, &dwCount, 0);
1153     if (FAILED(hr))
1154         goto cleanup;
1155 
1156     if (0) {
1157         /* this crashes with native urlmon */
1158         IInternetZoneManager_GetZoneAt(zonemgr, dwEnum, 0, NULL);
1159     }
1160 
1161     dwZone = 0xdeadbeef;
1162     hr = IInternetZoneManager_GetZoneAt(zonemgr, 0xdeadbeef, 0, &dwZone);
1163     ok(hr == E_INVALIDARG,
1164         "got 0x%x with 0x%x (expected E_INVALIDARG)\n", hr, dwZone);
1165 
1166     for (i = 0; i < dwCount; i++)
1167     {
1168         dwZone = 0xdeadbeef;
1169         hr = IInternetZoneManager_GetZoneAt(zonemgr, dwEnum, i, &dwZone);
1170         ok(hr == S_OK, "#%d: got x%x with %d (expected S_OK)\n", i, hr, dwZone);
1171     }
1172 
1173     dwZone = 0xdeadbeef;
1174     /* MSDN (index .. must be .. less than or equal to) is wrong */
1175     hr = IInternetZoneManager_GetZoneAt(zonemgr, dwEnum, dwCount, &dwZone);
1176     ok(hr == E_INVALIDARG,
1177         "got 0x%x with 0x%x (expected E_INVALIDARG)\n", hr, dwZone);
1178 
1179     hr = IInternetZoneManager_DestroyZoneEnumerator(zonemgr, dwEnum);
1180     ok(hr == S_OK, "got 0x%x (expected S_OK)\n", hr);
1181 
1182 cleanup:
1183     hr = IInternetZoneManager_Release(zonemgr);
1184     ok(hr == S_OK, "got 0x%x (expected S_OK)\n", hr);
1185 }
1186 
1187 static void test_GetZoneAttributes(void)
1188 {
1189     IInternetZoneManager *zonemgr = NULL;
1190     CHAR buffer [sizeof(ZONEATTRIBUTES) + 32];
1191     ZONEATTRIBUTES* pZA = (ZONEATTRIBUTES*) buffer;
1192     HRESULT hr;
1193     DWORD i;
1194 
1195     trace("testing GetZoneAttributes...\n");
1196 
1197     hr = pCoInternetCreateZoneManager(NULL, &zonemgr, 0);
1198     ok(hr == S_OK, "CoInternetCreateZoneManager result: 0x%x\n", hr);
1199     if (FAILED(hr))
1200         return;
1201 
1202     /* native urlmon has Zone "0" up to Zone "4" since IE4 */
1203     for (i = 0; i < 5; i++) {
1204         memset(buffer, -1, sizeof(buffer));
1205         hr = IInternetZoneManager_GetZoneAttributes(zonemgr, i, pZA);
1206         ok(hr == S_OK, "#%d: got 0x%x (expected S_OK)\n", i, hr);
1207     }
1208 
1209     /* IE8 no longer set cbSize */
1210     memset(buffer, -1, sizeof(buffer));
1211     pZA->cbSize = 0;
1212     hr = IInternetZoneManager_GetZoneAttributes(zonemgr, 0, pZA);
1213     ok(hr == S_OK, "got 0x%x (expected S_OK)\n", hr);
1214     ok((pZA->cbSize == 0) || (pZA->cbSize == sizeof(ZONEATTRIBUTES)),
1215         "got cbSize = %d (expected 0)\n", pZA->cbSize);
1216 
1217     memset(buffer, -1, sizeof(buffer));
1218     pZA->cbSize = 64;
1219     hr = IInternetZoneManager_GetZoneAttributes(zonemgr, 0, pZA);
1220     ok(hr == S_OK, "got 0x%x (expected S_OK)\n", hr);
1221     ok((pZA->cbSize == 64) || (pZA->cbSize == sizeof(ZONEATTRIBUTES)),
1222         "got cbSize = %d (expected 64)\n", pZA->cbSize);
1223 
1224     memset(buffer, -1, sizeof(buffer));
1225     hr = IInternetZoneManager_GetZoneAttributes(zonemgr, 0, pZA);
1226     ok(hr == S_OK, "got 0x%x (expected S_OK)\n", hr);
1227     ok((pZA->cbSize == 0xffffffff) || (pZA->cbSize == sizeof(ZONEATTRIBUTES)),
1228         "got cbSize = 0x%x (expected 0xffffffff)\n", pZA->cbSize);
1229 
1230     /* IE8 up to IE10 don't fail on invalid zones */
1231     memset(buffer, -1, sizeof(buffer));
1232     hr = IInternetZoneManager_GetZoneAttributes(zonemgr, 0xdeadbeef, pZA);
1233     ok(hr == S_OK || hr == E_FAIL || hr == E_POINTER,
1234         "got 0x%x (expected S_OK or E_FAIL)\n", hr);
1235 
1236     hr = IInternetZoneManager_GetZoneAttributes(zonemgr, 0, NULL);
1237     ok(hr == E_INVALIDARG, "got 0x%x (expected E_INVALIDARG)\n", hr);
1238 
1239     hr = IInternetZoneManager_Release(zonemgr);
1240     ok(hr == S_OK, "got 0x%x (expected S_OK)\n", hr);
1241 }
1242 
1243 static void test_SetZoneAttributes(void)
1244 {
1245     IInternetZoneManager *zonemgr = NULL;
1246     CHAR buffer [sizeof(ZONEATTRIBUTES) + 16];
1247     ZONEATTRIBUTES* pZA = (ZONEATTRIBUTES*) buffer;
1248     CHAR regpath[MAX_PATH];
1249     HKEY hkey;
1250     HRESULT hr;
1251     DWORD res;
1252 
1253     trace("testing SetZoneAttributes...\n");
1254     hr = pCoInternetCreateZoneManager(NULL, &zonemgr, 0);
1255     ok(hr == S_OK, "CoInternetCreateZoneManager result: 0x%x\n", hr);
1256     if (FAILED(hr))
1257         return;
1258 
1259     memset(buffer, -1, sizeof(buffer));
1260     hr = IInternetZoneManager_GetZoneAttributes(zonemgr, URLZONE_LOCAL_MACHINE, pZA);
1261     ok(hr == S_OK, "got 0x%x (expected S_OK)\n", hr);
1262 
1263     sprintf(regpath, "%s\\Zones\\%d", szInternetSettingsKey, URLZONE_CUSTOM);
1264     res = RegCreateKeyA(HKEY_CURRENT_USER, regpath, &hkey);
1265     RegCloseKey(hkey);
1266 
1267     ok(res == ERROR_SUCCESS, "got %d (expected ERROR_SUCCESS)\n", res);
1268     if (res != ERROR_SUCCESS)
1269         goto cleanup;
1270 
1271     pZA->cbSize = sizeof(ZONEATTRIBUTES);
1272     hr = IInternetZoneManager_SetZoneAttributes(zonemgr, URLZONE_CUSTOM, NULL);
1273     ok(hr == E_INVALIDARG, "got 0x%x (expected E_INVALIDARG)\n", hr);
1274 
1275     /* normal use */
1276     hr = IInternetZoneManager_SetZoneAttributes(zonemgr, URLZONE_CUSTOM, pZA);
1277     if (hr == E_FAIL) {
1278         win_skip("SetZoneAttributes not supported: IE too old\n");
1279         goto cleanup;
1280     }
1281     ok(hr == S_OK, "got 0x%x (expected S_OK)\n", hr);
1282 
1283     /* native urlmon ignores cbSize */
1284     pZA->cbSize = sizeof(ZONEATTRIBUTES) + sizeof(DWORD);
1285     hr = IInternetZoneManager_SetZoneAttributes(zonemgr, URLZONE_CUSTOM, pZA);
1286     ok(hr == S_OK, "got 0x%x for sizeof(ZONEATTRIBUTES) + sizeof(DWORD) (expected S_OK)\n", hr);
1287 
1288     pZA->cbSize = sizeof(ZONEATTRIBUTES) - sizeof(DWORD);
1289     hr = IInternetZoneManager_SetZoneAttributes(zonemgr, URLZONE_CUSTOM, pZA);
1290     ok(hr == S_OK, "got 0x%x for sizeof(ZONEATTRIBUTES) - sizeof(DWORD) (expected S_OK)\n", hr);
1291 
1292     pZA->cbSize = 0;
1293     hr = IInternetZoneManager_SetZoneAttributes(zonemgr, URLZONE_CUSTOM, pZA);
1294     ok(hr == S_OK, "got 0x%x for size 0 (expected S_OK)\n", hr);
1295 
1296     /* The key for the zone must be present, when calling SetZoneAttributes */
1297     myRegDeleteTreeA(HKEY_CURRENT_USER, regpath);
1298     /* E_FAIL is returned from IE6 here, which is reasonable.
1299        All newer IE return S_OK without saving the zone attributes to the registry.
1300        This is a Windows bug, but we have to accept that as standard */
1301     hr = IInternetZoneManager_SetZoneAttributes(zonemgr, URLZONE_CUSTOM, pZA);
1302     ok((hr == S_OK) || broken(hr == E_FAIL), "got 0x%x (expected S_OK)\n", hr);
1303 
1304     /* SetZoneAttributes did not create the directory */
1305     res = RegOpenKeyA(HKEY_CURRENT_USER, regpath, &hkey);
1306     ok((res == ERROR_FILE_NOT_FOUND) && (hkey == NULL),
1307         "got %u with %p (expected ERROR_FILE_NOT_FOUND with NULL)\n", res, hkey);
1308 
1309     if (hkey) RegCloseKey(hkey);
1310 
1311 cleanup:
1312     /* delete zone settings in the registry */
1313     myRegDeleteTreeA(HKEY_CURRENT_USER, regpath);
1314 
1315     hr = IInternetZoneManager_Release(zonemgr);
1316     ok(hr == S_OK, "got 0x%x (expected S_OK)\n", hr);
1317 }
1318 
1319 
1320 static void test_InternetSecurityMarshalling(void)
1321 {
1322     IInternetSecurityManager *secmgr = NULL;
1323     IUnknown *unk;
1324     IStream *stream;
1325     HRESULT hres;
1326 
1327     trace("testing marshalling...\n");
1328 
1329     hres = pCoInternetCreateSecurityManager(NULL, &secmgr, 0);
1330     ok(hres == S_OK, "CoInternetCreateSecurityManager failed: %08x\n", hres);
1331     if(FAILED(hres))
1332         return;
1333 
1334     hres = IInternetSecurityManager_QueryInterface(secmgr, &IID_IUnknown, (void**)&unk);
1335     ok(hres == S_OK, "QueryInterface returned: %08x\n", hres);
1336 
1337     hres = CreateStreamOnHGlobal(NULL, TRUE, &stream);
1338     ok(hres == S_OK, "CreateStreamOnHGlobal returned: %08x\n", hres);
1339 
1340     hres = CoMarshalInterface(stream, &IID_IInternetSecurityManager, unk, MSHCTX_INPROC, NULL, MSHLFLAGS_NORMAL);
1341     /* Not supported in W98 */
1342     ok(hres == S_OK || broken(hres == REGDB_E_IIDNOTREG),
1343         "CoMarshalInterface returned: %08x\n", hres);
1344 
1345     IStream_Release(stream);
1346     IUnknown_Release(unk);
1347     IInternetSecurityManager_Release(secmgr);
1348 }
1349 
1350 static void test_InternetGetSecurityUrl(void)
1351 {
1352     const WCHAR url5_out[] = {'h','t','t','p',':','w','w','w','.','z','o','n','e','3',
1353                               '.','w','i','n','e','t','e','s','t',0};
1354     const WCHAR url7_out[] = {'f','t','p',':','z','o','n','e','3','.','w','i','n','e','t','e','s','t',0};
1355 
1356     const WCHAR *in[] = {url2, url3, url4, url5, url7, url8, url9, url10};
1357     const WCHAR *out_default[] = {url2, url3, url4, url5_out, url7_out, url8, url5_out, url10};
1358     const WCHAR *out_securl[] = {url2, url3, url4, url5, url7, url8, url9, url10};
1359 
1360     WCHAR *sec;
1361     DWORD i;
1362     HRESULT hres;
1363 
1364     trace("testing CoInternetGetSecurityUrl...\n");
1365 
1366     for(i=0; i<sizeof(in)/sizeof(WCHAR*); i++) {
1367         hres = pCoInternetGetSecurityUrl(in[i], &sec, PSU_DEFAULT, 0);
1368         ok(hres == S_OK, "(%d) CoInternetGetSecurityUrl returned: %08x\n", i, hres);
1369         if(hres == S_OK) {
1370             ok(!strcmp_w(sec, out_default[i]), "(%d) Got %s, expected %s\n",
1371                     i, wine_dbgstr_w(sec), wine_dbgstr_w(out_default[i]));
1372             CoTaskMemFree(sec);
1373         }
1374 
1375         hres = pCoInternetGetSecurityUrl(in[i], &sec, PSU_SECURITY_URL_ONLY, 0);
1376         ok(hres == S_OK, "(%d) CoInternetGetSecurityUrl returned: %08x\n", i, hres);
1377         if(hres == S_OK) {
1378             ok(!strcmp_w(sec, out_securl[i]), "(%d) Got %s, expected %s\n",
1379                     i, wine_dbgstr_w(sec), wine_dbgstr_w(out_securl[i]));
1380             CoTaskMemFree(sec);
1381         }
1382     }
1383 
1384     SET_EXPECT(ParseUrl_SECURITY_URL_input2);
1385     SET_EXPECT(ParseUrl_SECURITY_URL_expected);
1386     SET_EXPECT(ParseUrl_SECURITY_DOMAIN_expected);
1387 
1388     hres = pCoInternetGetSecurityUrl(security_url2W, &sec, PSU_DEFAULT, 0);
1389     ok(hres == S_OK, "CoInternetGetSecurityUrl returned 0x%08x, expected S_OK\n", hres);
1390 
1391     CHECK_CALLED(ParseUrl_SECURITY_URL_input2);
1392     CHECK_CALLED(ParseUrl_SECURITY_URL_expected);
1393     CHECK_CALLED(ParseUrl_SECURITY_DOMAIN_expected);
1394 
1395     ok(!lstrcmpW(security_expectedW, sec), "Expected %s but got %s\n",
1396        wine_dbgstr_w(security_expectedW), wine_dbgstr_w(sec));
1397     CoTaskMemFree(sec);
1398 }
1399 
1400 static HRESULT WINAPI InternetProtocolInfo_QueryInterface(IInternetProtocolInfo *iface,
1401                                                           REFIID riid, void **ppv)
1402 {
1403     ok(0, "unexpected call\n");
1404     return E_NOINTERFACE;
1405 }
1406 
1407 static ULONG WINAPI InternetProtocolInfo_AddRef(IInternetProtocolInfo *iface)
1408 {
1409     return 2;
1410 }
1411 
1412 static ULONG WINAPI InternetProtocolInfo_Release(IInternetProtocolInfo *iface)
1413 {
1414     return 1;
1415 }
1416 
1417 static HRESULT WINAPI InternetProtocolInfo_ParseUrl(IInternetProtocolInfo *iface, LPCWSTR pwzUrl,
1418         PARSEACTION ParseAction, DWORD dwParseFlags, LPWSTR pwzResult, DWORD cchResult,
1419         DWORD *pcchResult, DWORD dwReserved)
1420 {
1421     const WCHAR *ret = NULL;
1422 
1423     ok(pwzResult != NULL, "pwzResult == NULL\n");
1424     ok(pcchResult != NULL, "pcchResult == NULL\n");
1425     ok(!dwParseFlags, "Expected 0, but got 0x%08x\n", dwParseFlags);
1426 
1427     switch(ParseAction) {
1428     case PARSE_SECURITY_URL:
1429         if(!strcmp_w(pwzUrl, security_urlW)) {
1430             CHECK_EXPECT(ParseUrl_SECURITY_URL_input);
1431             ok(cchResult == lstrlenW(pwzUrl)+1, "Got %d\n", cchResult);
1432             ret = security_expectedW;
1433         } else if(!strcmp_w(pwzUrl, security_url2W)) {
1434             CHECK_EXPECT(ParseUrl_SECURITY_URL_input2);
1435             ok(cchResult == lstrlenW(pwzUrl)+1, "Got %d\n", cchResult);
1436             ret = security_expectedW;
1437         } else if(!strcmp_w(pwzUrl, security_expectedW)) {
1438             CHECK_EXPECT(ParseUrl_SECURITY_URL_expected);
1439             ok(cchResult == lstrlenW(pwzUrl)+1, "Got %d\n", cchResult);
1440             ret = security_expectedW;
1441         } else if(!strcmp_w(pwzUrl, winetest_to_httpW)) {
1442             switch(++called_securl_http) {
1443             case 1:
1444                 ok(cchResult == lstrlenW(pwzUrl)+1, "Got %d\n", cchResult);
1445                 break;
1446             case 2:
1447                 CHECK_EXPECT(ParseUrl_SECURITY_URL_http);
1448                 ok(cchResult == lstrlenW(url9)+1, "Got %d\n", cchResult);
1449                 break;
1450             default:
1451                 todo_wine CHECK_EXPECT(ParseUrl_SECURITY_URL_http);
1452             }
1453             ret = url9;
1454         } else
1455             ok(0, "Unexpected call, pwzUrl=%s\n", wine_dbgstr_w(pwzUrl));
1456 
1457         break;
1458     case PARSE_SECURITY_DOMAIN:
1459 
1460         CHECK_EXPECT(ParseUrl_SECURITY_DOMAIN_expected);
1461 
1462         ok(!strcmp_w(pwzUrl, security_expectedW), "Expected %s but got %s\n",
1463             wine_dbgstr_w(security_expectedW), wine_dbgstr_w(pwzUrl));
1464         ok(cchResult == lstrlenW(pwzUrl)+1, "Got %d\n", cchResult);
1465         ret = security_expectedW;
1466         break;
1467     default:
1468         ok(0, "Unexpected call, ParseAction=%d pwzUrl=%s\n", ParseAction,
1469             wine_dbgstr_w(pwzUrl));
1470     }
1471 
1472     if(!ret)
1473         return E_FAIL;
1474 
1475     *pcchResult = lstrlenW(ret)+1;
1476     if(*pcchResult > cchResult)
1477         return S_FALSE;
1478     memcpy(pwzResult, ret, (*pcchResult)*sizeof(WCHAR));
1479     return S_OK;
1480 }
1481 
1482 static HRESULT WINAPI InternetProtocolInfo_CombineUrl(IInternetProtocolInfo *iface,
1483         LPCWSTR pwzBaseUrl, LPCWSTR pwzRelativeUrl, DWORD dwCombineFlags,
1484         LPWSTR pwzResult, DWORD cchResult, DWORD *pcchResult, DWORD dwReserved)
1485 {
1486     ok(0, "unexpected call\n");
1487     return E_NOTIMPL;
1488 }
1489 
1490 static HRESULT WINAPI InternetProtocolInfo_CompareUrl(IInternetProtocolInfo *iface,
1491         LPCWSTR pwzUrl1, LPCWSTR pwzUrl2, DWORD dwCompareFlags)
1492 {
1493     ok(0, "unexpected call\n");
1494     return E_NOTIMPL;
1495 }
1496 
1497 static HRESULT WINAPI InternetProtocolInfo_QueryInfo(IInternetProtocolInfo *iface,
1498         LPCWSTR pwzUrl, QUERYOPTION OueryOption, DWORD dwQueryFlags, LPVOID pBuffer,
1499         DWORD cbBuffer, DWORD *pcbBuf, DWORD dwReserved)
1500 {
1501     ok(0, "unexpected call\n");
1502     return E_NOTIMPL;
1503 }
1504 
1505 static const IInternetProtocolInfoVtbl InternetProtocolInfoVtbl = {
1506     InternetProtocolInfo_QueryInterface,
1507     InternetProtocolInfo_AddRef,
1508     InternetProtocolInfo_Release,
1509     InternetProtocolInfo_ParseUrl,
1510     InternetProtocolInfo_CombineUrl,
1511     InternetProtocolInfo_CompareUrl,
1512     InternetProtocolInfo_QueryInfo
1513 };
1514 
1515 static IInternetProtocolInfo protocol_info = { &InternetProtocolInfoVtbl };
1516 
1517 static HRESULT WINAPI ClassFactory_QueryInterface(IClassFactory *iface, REFIID riid, void **ppv)
1518 {
1519     if(IsEqualGUID(&IID_IInternetProtocolInfo, riid)) {
1520         *ppv = &protocol_info;
1521         return S_OK;
1522     }
1523 
1524     ok(0, "unexpected call\n");
1525     return E_NOINTERFACE;
1526 }
1527 
1528 static ULONG WINAPI ClassFactory_AddRef(IClassFactory *iface)
1529 {
1530     return 2;
1531 }
1532 
1533 static ULONG WINAPI ClassFactory_Release(IClassFactory *iface)
1534 {
1535     return 1;
1536 }
1537 
1538 static HRESULT WINAPI ClassFactory_CreateInstance(IClassFactory *iface, IUnknown *pOuter,
1539                                         REFIID riid, void **ppv)
1540 {
1541     ok(0, "unexpected call\n");
1542     return E_NOTIMPL;
1543 }
1544 
1545 static HRESULT WINAPI ClassFactory_LockServer(IClassFactory *iface, BOOL dolock)
1546 {
1547     ok(0, "unexpected call\n");
1548     return S_OK;
1549 }
1550 
1551 static const IClassFactoryVtbl ClassFactoryVtbl = {
1552     ClassFactory_QueryInterface,
1553     ClassFactory_AddRef,
1554     ClassFactory_Release,
1555     ClassFactory_CreateInstance,
1556     ClassFactory_LockServer
1557 };
1558 
1559 static IClassFactory protocol_cf = { &ClassFactoryVtbl };
1560 
1561 static void register_protocols(void)
1562 {
1563     IInternetSession *session;
1564     HRESULT hres;
1565 
1566     hres = pCoInternetGetSession(0, &session, 0);
1567     ok(hres == S_OK, "CoInternetGetSession failed: %08x\n", hres);
1568     if(FAILED(hres))
1569         return;
1570 
1571     hres = IInternetSession_RegisterNameSpace(session, &protocol_cf, &IID_NULL,
1572             winetestW, 0, NULL, 0);
1573     ok(hres == S_OK, "RegisterNameSpace failed: %08x\n", hres);
1574 
1575     IInternetSession_Release(session);
1576 }
1577 
1578 static void unregister_protocols(void) {
1579     IInternetSession *session;
1580     HRESULT hr;
1581 
1582     hr = pCoInternetGetSession(0, &session, 0);
1583     ok(hr == S_OK, "CoInternetGetSession failed: 0x%08x\n", hr);
1584     if(FAILED(hr))
1585         return;
1586 
1587     hr = IInternetSession_UnregisterNameSpace(session, &protocol_cf, winetestW);
1588     ok(hr == S_OK, "UnregisterNameSpace failed: 0x%08x\n", hr);
1589 
1590     IInternetSession_Release(session);
1591 }
1592 
1593 static const struct {
1594     const char  *uri;
1595     DWORD       create_flags;
1596     const char  *security_uri;
1597     HRESULT     security_hres;
1598     const char  *default_uri;
1599     HRESULT     default_hres;
1600     BOOL        todo;
1601 } sec_url_ex_tests[] = {
1602     {"index.htm",Uri_CREATE_ALLOW_RELATIVE,"*:index.html",S_OK,"*:index.htm",S_OK},
1603     {"file://c:\\Index.htm",Uri_CREATE_FILE_USE_DOS_PATH,"file:///c:/Index.htm",S_OK,"file:///c:/Index.htm",S_OK},
1604     {"file:some%20file%2ejpg",0,NULL,E_INVALIDARG,NULL,E_INVALIDARG},
1605     {"file:some file.jpg",0,NULL,E_INVALIDARG,NULL,E_INVALIDARG},
1606     {"http://www.zone3.winetest/",0,"http://www.zone3.winetest/",S_OK,"http://www.zone3.winetest/",S_OK},
1607     {"about:blank",0,"about:blank",S_OK,"about:blank",S_OK},
1608     {"ftp://zone3.winetest/file.test",0,"ftp://zone3.winetest/file.test",S_OK,"ftp://zone3.winetest/file.test",S_OK},
1609     {"test:123abc",0,"test:123abc",S_OK,"test:123abc",S_OK},
1610     {"http:google.com/test.file",0,"http:google.com/test.file",S_OK,"http:google.com/test.file",S_OK},
1611     {"ftp://test@ftp.winehq.org/",0,"ftp://ftp.winehq.org/",S_OK,"ftp://ftp.winehq.org/",S_OK},
1612     {"test://google@ftp.winehq.org/",0,"test://google@ftp.winehq.org/",S_OK,"test://google@ftp.winehq.org/",S_OK}
1613 };
1614 
1615 static void test_InternetGetSecurityUrlEx(void)
1616 {
1617     HRESULT hr;
1618     DWORD i;
1619     IUri *uri = NULL, *result = NULL;
1620 
1621     trace("testing CoInternetGetSecurityUrlEx...\n");
1622 
1623     hr = pCoInternetGetSecurityUrlEx(NULL, NULL, PSU_DEFAULT, 0);
1624     ok(hr == E_INVALIDARG, "CoInternetGetSecurityUrlEx returned 0x%08x, expected E_INVALIDARG\n", hr);
1625 
1626     result = (void*) 0xdeadbeef;
1627     hr = pCoInternetGetSecurityUrlEx(NULL, &result, PSU_DEFAULT, 0);
1628     ok(hr == E_INVALIDARG, "CoInternetGetSecurityUrlEx returned 0x%08x, expected E_INVALIDARG\n", hr);
1629     ok(result == (void*) 0xdeadbeef, "'result' was %p\n", result);
1630 
1631     for(i = 0; i < sizeof(sec_url_ex_tests)/sizeof(sec_url_ex_tests[0]); ++i) {
1632         LPWSTR uriW = a2w(sec_url_ex_tests[i].uri);
1633         uri = NULL;
1634 
1635         hr = pCreateUri(uriW, sec_url_ex_tests[i].create_flags, 0, &uri);
1636         ok(hr == S_OK, "CreateUri returned 0x%08x on test %d\n", hr, i);
1637         if(hr == S_OK) {
1638             result = NULL;
1639 
1640             hr = pCoInternetGetSecurityUrlEx(uri, &result, PSU_DEFAULT, 0);
1641             todo_wine_if (sec_url_ex_tests[i].todo) {
1642                 ok(hr == sec_url_ex_tests[i].default_hres,
1643                     "CoInternetGetSecurityUrlEx returned 0x%08x, expected 0x%08x on test %d\n",
1644                     hr, sec_url_ex_tests[i].default_hres, i);
1645             }
1646             if(SUCCEEDED(hr)) {
1647                 BSTR received;
1648 
1649                 hr = IUri_GetDisplayUri(result, &received);
1650                 ok(hr == S_OK, "GetDisplayUri returned 0x%08x on test %d\n", hr, i);
1651                 if(hr == S_OK) {
1652                     todo_wine_if (sec_url_ex_tests[i].todo) {
1653                         ok(!strcmp_aw(sec_url_ex_tests[i].default_uri, received),
1654                             "Expected %s but got %s on test %d\n", sec_url_ex_tests[i].default_uri,
1655                             wine_dbgstr_w(received), i);
1656                     }
1657                 }
1658                 SysFreeString(received);
1659             }
1660             if(result) IUri_Release(result);
1661 
1662             result = NULL;
1663             hr = pCoInternetGetSecurityUrlEx(uri, &result, PSU_SECURITY_URL_ONLY, 0);
1664             todo_wine_if (sec_url_ex_tests[i].todo) {
1665                 ok(hr == sec_url_ex_tests[i].default_hres,
1666                     "CoInternetGetSecurityUrlEx returned 0x%08x, expected 0x%08x on test %d\n",
1667                     hr, sec_url_ex_tests[i].default_hres, i);
1668             }
1669             if(SUCCEEDED(hr)) {
1670                 BSTR received;
1671 
1672                 hr = IUri_GetDisplayUri(result, &received);
1673                 ok(hr == S_OK, "GetDisplayUri returned 0x%08x on test %d\n", hr, i);
1674                 if(hr == S_OK) {
1675                     todo_wine_if (sec_url_ex_tests[i].todo) {
1676                         ok(!strcmp_aw(sec_url_ex_tests[i].default_uri, received),
1677                             "Expected %s but got %s on test %d\n", sec_url_ex_tests[i].default_uri,
1678                             wine_dbgstr_w(received), i);
1679                     }
1680                 }
1681                 SysFreeString(received);
1682             }
1683             if(result) IUri_Release(result);
1684         }
1685 
1686         if(uri) IUri_Release(uri);
1687         heap_free(uriW);
1688     }
1689 }
1690 
1691 static void test_InternetGetSecurityUrlEx_Pluggable(void)
1692 {
1693     HRESULT hr;
1694     IUri *uri = NULL, *result;
1695 
1696     trace("testing CoInternetGetSecurityUrlEx for pluggable protocols...\n");
1697 
1698     hr = pCreateUri(security_urlW, 0, 0, &uri);
1699     ok(hr == S_OK, "CreateUri returned 0x%08x\n", hr);
1700     if(hr == S_OK) {
1701         SET_EXPECT(ParseUrl_SECURITY_URL_input);
1702         SET_EXPECT(ParseUrl_SECURITY_URL_expected);
1703         SET_EXPECT(ParseUrl_SECURITY_DOMAIN_expected);
1704 
1705         hr = pCoInternetGetSecurityUrlEx(uri, &result, PSU_DEFAULT, 0);
1706         ok(hr == S_OK, "CoInternetGetSecurityUrlEx returned 0x%08x, expected S_OK\n", hr);
1707 
1708         CHECK_CALLED(ParseUrl_SECURITY_URL_input);
1709         CHECK_CALLED(ParseUrl_SECURITY_URL_expected);
1710         CHECK_CALLED(ParseUrl_SECURITY_DOMAIN_expected);
1711 
1712         if(hr == S_OK) {
1713             BSTR received = NULL;
1714 
1715             hr = IUri_GetAbsoluteUri(result, &received);
1716             ok(hr == S_OK, "GetAbsoluteUri returned 0x%08x\n", hr);
1717             if(hr == S_OK) {
1718                 ok(!strcmp_w(security_expectedW, received), "Expected %s but got %s\n",
1719                     wine_dbgstr_w(security_expectedW), wine_dbgstr_w(received));
1720             }
1721             SysFreeString(received);
1722         }
1723         if(result) IUri_Release(result);
1724 
1725         result = NULL;
1726 
1727         SET_EXPECT(ParseUrl_SECURITY_URL_input);
1728         SET_EXPECT(ParseUrl_SECURITY_URL_expected);
1729 
1730         hr = pCoInternetGetSecurityUrlEx(uri, &result, PSU_SECURITY_URL_ONLY, 0);
1731         ok(hr == S_OK, "CoInternetGetSecurityUrlEx returned 0x%08x, expected S_OK\n", hr);
1732 
1733         CHECK_CALLED(ParseUrl_SECURITY_URL_input);
1734         CHECK_CALLED(ParseUrl_SECURITY_URL_expected);
1735 
1736         if(hr == S_OK) {
1737             BSTR received = NULL;
1738 
1739             hr = IUri_GetAbsoluteUri(result, &received);
1740             ok(hr == S_OK, "GetAbsoluteUri returned 0x%08x\n", hr);
1741             if(hr == S_OK) {
1742                 ok(!strcmp_w(security_expectedW, received), "Expected %s but got %s\n",
1743                     wine_dbgstr_w(security_expectedW), wine_dbgstr_w(received));
1744             }
1745             SysFreeString(received);
1746         }
1747         if(result) IUri_Release(result);
1748     }
1749     if(uri) IUri_Release(uri);
1750 }
1751 
1752 static const BYTE secidex2_1[] = {'z','i','p',':','/','/','t','e','s','t','i','n','g','.','c','o','m','/',3,0,0,0};
1753 static const BYTE secidex2_2[] = {'z','i','p',':','t','e','s','t','i','n','g','.','c','o','m',3,0,0,0};
1754 static const BYTE secidex2_3[] = {'*',':','t','e','s','t','i','n','g','.','c','o','m',3,0,0,0};
1755 
1756 static const struct {
1757     const char  *uri;
1758     DWORD       create_flags;
1759     HRESULT     map_hres;
1760     DWORD       zone;
1761     BOOL        map_todo;
1762     const BYTE  *secid;
1763     DWORD       secid_size;
1764     HRESULT     secid_hres;
1765     BOOL        secid_todo;
1766 } sec_mgr_ex2_tests[] = {
1767     {"res://mshtml.dll/blank.htm",0,S_OK,URLZONE_LOCAL_MACHINE,FALSE,secid1,sizeof(secid1),S_OK},
1768     {"index.htm",Uri_CREATE_ALLOW_RELATIVE,0,URLZONE_INTERNET,FALSE,secid2,sizeof(secid2),S_OK},
1769     {"file://c:\\Index.html",0,0,URLZONE_LOCAL_MACHINE,FALSE,secid1,sizeof(secid1),S_OK},
1770     {"http://www.zone3.winetest/",0,0,URLZONE_INTERNET,FALSE,secid5,sizeof(secid5),S_OK},
1771     {"about:blank",0,0,URLZONE_INTERNET,FALSE,secid6,sizeof(secid6),S_OK},
1772     {"ftp://zone3.winetest/file.test",0,0,URLZONE_INTERNET,FALSE,secid7,sizeof(secid7),S_OK},
1773     {"/file/testing/test.test",Uri_CREATE_ALLOW_RELATIVE,0,URLZONE_INTERNET,FALSE,NULL,0,E_INVALIDARG},
1774     {"zip://testing.com/",0,0,URLZONE_INTERNET,FALSE,secidex2_1,sizeof(secidex2_1),S_OK},
1775     {"zip:testing.com",0,0,URLZONE_INTERNET,FALSE,secidex2_2,sizeof(secidex2_2),S_OK},
1776     {"http:google.com",0,S_OK,URLZONE_INVALID,FALSE,NULL,0,E_INVALIDARG},
1777     {"http:/google.com",0,S_OK,URLZONE_INVALID,FALSE,NULL,0,E_INVALIDARG},
1778     {"*:/testing",0,S_OK,URLZONE_INTERNET,FALSE,NULL,0,E_INVALIDARG},
1779     {"*://testing.com",0,S_OK,URLZONE_INTERNET,FALSE,secidex2_3,sizeof(secidex2_3),S_OK}
1780 };
1781 
1782 static void test_SecurityManagerEx2(void)
1783 {
1784     HRESULT hres;
1785     DWORD i, zone;
1786     BYTE buf[512];
1787     DWORD buf_size = sizeof(buf);
1788     IInternetSecurityManager *sec_mgr;
1789     IInternetSecurityManagerEx2 *sec_mgr2;
1790     IUri *uri = NULL;
1791 
1792     static const WCHAR domainW[] = {'c','o','m','.','u','k',0};
1793 
1794     if(!pCreateUri) {
1795         win_skip("Skipping SecurityManagerEx2, IE is too old\n");
1796         return;
1797     }
1798 
1799     trace("Testing SecurityManagerEx2...\n");
1800 
1801     hres = pCoInternetCreateSecurityManager(NULL, &sec_mgr, 0);
1802     ok(hres == S_OK, "CoInternetCreateSecurityManager failed: %08x\n", hres);
1803 
1804     hres = IInternetSecurityManager_QueryInterface(sec_mgr, &IID_IInternetSecurityManagerEx2, (void**)&sec_mgr2);
1805     ok(hres == S_OK, "QueryInterface(IID_IInternetSecurityManagerEx2) failed: %08x\n", hres);
1806 
1807     zone = 0xdeadbeef;
1808 
1809     hres = IInternetSecurityManagerEx2_MapUrlToZoneEx2(sec_mgr2, NULL, &zone, 0, NULL, NULL);
1810     ok(hres == E_INVALIDARG, "MapUrlToZoneEx2 returned %08x, expected E_INVALIDARG\n", hres);
1811     ok(zone == URLZONE_INVALID, "zone was %d\n", zone);
1812 
1813     hres = IInternetSecurityManagerEx2_GetSecurityIdEx2(sec_mgr2, NULL, buf, &buf_size, 0);
1814     ok(hres == E_INVALIDARG, "GetSecurityIdEx2 returned %08x, expected E_INVALIDARG\n", hres);
1815     ok(buf_size == sizeof(buf), "buf_size was %d\n", buf_size);
1816 
1817     hres = pCreateUri(url5, 0, 0, &uri);
1818     ok(hres == S_OK, "CreateUri failed: %08x\n", hres);
1819 
1820     hres = IInternetSecurityManagerEx2_MapUrlToZoneEx2(sec_mgr2, uri, NULL, 0, NULL, NULL);
1821     ok(hres == E_INVALIDARG, "MapToUrlZoneEx2 returned %08x, expected E_INVALIDARG\n", hres);
1822 
1823     buf_size = sizeof(buf);
1824     hres = IInternetSecurityManagerEx2_GetSecurityIdEx2(sec_mgr2, uri, NULL, &buf_size, 0);
1825     ok(hres == E_INVALIDARG || broken(hres == S_OK), "GetSecurityIdEx2 failed: %08x\n", hres);
1826     ok(buf_size == sizeof(buf), "bug_size was %d\n", buf_size);
1827 
1828     hres = IInternetSecurityManagerEx2_GetSecurityIdEx2(sec_mgr2, uri, buf, NULL, 0);
1829     ok(hres == E_INVALIDARG, "GetSecurityIdEx2 returned %08x, expected E_INVALIDARG\n", hres);
1830 
1831     IUri_Release(uri);
1832 
1833     for(i = 0; i < sizeof(sec_mgr_ex2_tests)/sizeof(sec_mgr_ex2_tests[0]); ++i) {
1834         LPWSTR uriW = a2w(sec_mgr_ex2_tests[i].uri);
1835 
1836         uri = NULL;
1837         zone = URLZONE_INVALID;
1838 
1839         hres = pCreateUri(uriW, sec_mgr_ex2_tests[i].create_flags, 0, &uri);
1840         ok(hres == S_OK, "CreateUri returned %08x for '%s'\n", hres, sec_mgr_ex2_tests[i].uri);
1841 
1842         hres = IInternetSecurityManagerEx2_MapUrlToZoneEx2(sec_mgr2, uri, &zone, 0, NULL, NULL);
1843         todo_wine_if (sec_mgr_ex2_tests[i].map_todo) {
1844             ok(hres == sec_mgr_ex2_tests[i].map_hres, "MapUrlToZoneEx2 returned %08x, expected %08x for '%s'\n",
1845                 hres, sec_mgr_ex2_tests[i].map_hres, sec_mgr_ex2_tests[i].uri);
1846             ok(zone == sec_mgr_ex2_tests[i].zone, "Expected zone %d, but got %d for '%s'\n", sec_mgr_ex2_tests[i].zone,
1847                 zone, sec_mgr_ex2_tests[i].uri);
1848         }
1849 
1850         buf_size = sizeof(buf);
1851         memset(buf, 0xf0, buf_size);
1852 
1853         hres = IInternetSecurityManagerEx2_GetSecurityIdEx2(sec_mgr2, uri, buf, &buf_size, 0);
1854         todo_wine_if (sec_mgr_ex2_tests[i].secid_todo) {
1855             ok(hres == sec_mgr_ex2_tests[i].secid_hres, "GetSecurityIdEx2 returned %08x, expected %08x on test '%s'\n",
1856                 hres, sec_mgr_ex2_tests[i].secid_hres, sec_mgr_ex2_tests[i].uri);
1857             if(sec_mgr_ex2_tests[i].secid) {
1858                 ok(buf_size == sec_mgr_ex2_tests[i].secid_size, "Got wrong security id size=%d, expected %d on test '%s'\n",
1859                     buf_size, sec_mgr_ex2_tests[i].secid_size, sec_mgr_ex2_tests[i].uri);
1860                 ok(!memcmp(buf, sec_mgr_ex2_tests[i].secid, sec_mgr_ex2_tests[i].secid_size), "Got wrong security id on test '%s'\n",
1861                     sec_mgr_ex2_tests[i].uri);
1862             }
1863         }
1864 
1865         heap_free(uriW);
1866         IUri_Release(uri);
1867     }
1868 
1869     hres = pCreateUri(url15, 0, 0, &uri);
1870     ok(hres == S_OK, "CreateUri failed: %08x\n", hres);
1871 
1872     buf_size = sizeof(buf);
1873     memset(buf, 0xf0, buf_size);
1874 
1875     hres = IInternetSecurityManagerEx2_GetSecurityIdEx2(sec_mgr2, uri, buf, &buf_size, (DWORD_PTR)domainW);
1876     ok(hres == S_OK, "GetSecurityIdEx2 failed: %08x\n", hres);
1877     todo_wine ok(buf_size == sizeof(secid13), "buf_size was %d\n", buf_size);
1878     todo_wine ok(!memcmp(buf, secid13, sizeof(secid13)), "Got wrong secid\n");
1879 
1880     buf_size = sizeof(buf);
1881     memset(buf, 0xf0, buf_size);
1882 
1883     hres = IInternetSecurityManagerEx2_GetSecurityIdEx2(sec_mgr2, uri, buf, &buf_size, 0);
1884     ok(hres == S_OK, "GetSecurityIdEx2 failed: %08x\n", hres);
1885     ok(buf_size == sizeof(secid13_2), "buf_size was %d\n", buf_size);
1886     ok(!memcmp(buf, secid13_2, sizeof(secid13_2)), "Got wrong secid\n");
1887 
1888     IUri_Release(uri);
1889 
1890     IInternetSecurityManagerEx2_Release(sec_mgr2);
1891     IInternetSecurityManager_Release(sec_mgr);
1892 }
1893 
1894 static void test_CoInternetIsFeatureZoneElevationEnabled(void)
1895 {
1896     struct {
1897         const char *url_from;
1898         const char *url_to;
1899         DWORD flags;
1900         HRESULT hres;
1901         DWORD policy_flags;
1902     } testcases[] = {
1903         /*  0 */ { "http://www.winehq.org", "http://www.winehq.org", 0, S_FALSE, URLPOLICY_ALLOW },
1904         /*  1 */ { "http://www.winehq.org", "http://www.winehq.org", 0, S_OK, URLPOLICY_DISALLOW },
1905         /*  2 */ { "http://www.winehq.org", "http://www.codeweavers.com", 0, S_FALSE, URLPOLICY_ALLOW },
1906         /*  3 */ { "http://www.winehq.org", "http://www.codeweavers.com", 0, S_OK, URLPOLICY_DISALLOW },
1907         /*  4 */ { "http://www.winehq.org", "http://www.winehq.org", GET_FEATURE_FROM_PROCESS, S_FALSE, -1 },
1908         /*  5 */ { "http://www.winehq.org", "http://www.winehq.org/dir", GET_FEATURE_FROM_PROCESS, S_FALSE, -1 },
1909         /*  6 */ { "http://www.winehq.org", "http://www.codeweavers.com", GET_FEATURE_FROM_PROCESS, S_FALSE, -1 },
1910         /*  7 */ { "http://www.winehq.org", "ftp://winehq.org", GET_FEATURE_FROM_PROCESS, S_FALSE, -1 },
1911         /*  8 */ { "http://www.winehq.org", "ftp://winehq.org", GET_FEATURE_FROM_PROCESS|0x100, S_FALSE, URLPOLICY_ALLOW },
1912         /*  9 */ { "http://www.winehq.org", "ftp://winehq.org", GET_FEATURE_FROM_REGISTRY, S_FALSE, URLPOLICY_ALLOW },
1913     };
1914 
1915     WCHAR *url_from, *url_to;
1916     int i;
1917     HRESULT hres;
1918 
1919     if(!pCoInternetIsFeatureZoneElevationEnabled || !pCoInternetIsFeatureEnabled
1920             || !pCoInternetIsFeatureEnabledForUrl) {
1921         win_skip("Skipping CoInternetIsFeatureZoneElevationEnabled tests\n");
1922         return;
1923     }
1924 
1925 
1926     hres = pCoInternetIsFeatureEnabled(FEATURE_ZONE_ELEVATION, GET_FEATURE_FROM_PROCESS);
1927     ok(SUCCEEDED(hres), "CoInternetIsFeatureEnabled returned %x\n", hres);
1928 
1929     trace("Testing CoInternetIsFeatureZoneElevationEnabled... (%x)\n", hres);
1930 
1931     for(i=0; i<sizeof(testcases)/sizeof(testcases[0]); i++) {
1932         if(hres==S_OK && testcases[i].flags == GET_FEATURE_FROM_PROCESS)
1933             testcases[i].policy_flags = URLPOLICY_ALLOW;
1934     }
1935 
1936     /* IE10 does not seem to use passed ISecurityManager */
1937     SET_EXPECT(ProcessUrlAction);
1938     pCoInternetIsFeatureZoneElevationEnabled(url1, url1, &security_manager, 0);
1939     i = called_ProcessUrlAction;
1940     SET_CALLED(ProcessUrlAction);
1941     if(!i) {
1942         skip("CoInternetIsFeatureZoneElevationEnabled does not use passed ISecurityManager\n");
1943         return;
1944     }
1945 
1946     for(i=0; i<sizeof(testcases)/sizeof(testcases[0]); i++) {
1947         url_from = a2w(testcases[i].url_from);
1948         url_to = a2w(testcases[i].url_to);
1949 
1950         if(testcases[i].policy_flags != -1) {
1951             ProcessUrlAction_policy = testcases[i].policy_flags;
1952             SET_EXPECT(ProcessUrlAction);
1953         }
1954         hres = pCoInternetIsFeatureZoneElevationEnabled(url_from, url_to,
1955                 &security_manager, testcases[i].flags);
1956         ok(hres == testcases[i].hres, "%d) CoInternetIsFeatureZoneElevationEnabled returned %x\n", i, hres);
1957         if(testcases[i].policy_flags != -1)
1958             CHECK_CALLED(ProcessUrlAction);
1959 
1960         if(testcases[i].policy_flags != -1)
1961             SET_EXPECT(ProcessUrlAction);
1962         hres = pCoInternetIsFeatureEnabledForUrl(FEATURE_ZONE_ELEVATION,
1963                 testcases[i].flags, url_to, &security_manager);
1964         ok(hres == testcases[i].hres, "%d) CoInternetIsFeatureEnabledForUrl returned %x\n", i, hres);
1965         if(testcases[i].policy_flags != -1)
1966             CHECK_CALLED(ProcessUrlAction);
1967 
1968         heap_free(url_from);
1969         heap_free(url_to);
1970     }
1971 }
1972 
1973 START_TEST(sec_mgr)
1974 {
1975     HMODULE hurlmon;
1976     int argc;
1977     char **argv;
1978 
1979     hurlmon = GetModuleHandleA("urlmon.dll");
1980     pCoInternetCreateSecurityManager = (void*) GetProcAddress(hurlmon, "CoInternetCreateSecurityManager");
1981     pCoInternetCreateZoneManager = (void*) GetProcAddress(hurlmon, "CoInternetCreateZoneManager");
1982     pCoInternetGetSecurityUrl = (void*) GetProcAddress(hurlmon, "CoInternetGetSecurityUrl");
1983     pCoInternetGetSecurityUrlEx = (void*) GetProcAddress(hurlmon, "CoInternetGetSecurityUrlEx");
1984     pCreateUri = (void*) GetProcAddress(hurlmon, "CreateUri");
1985     pCoInternetGetSession = (void*) GetProcAddress(hurlmon, "CoInternetGetSession");
1986     pCoInternetIsFeatureEnabled = (void*) GetProcAddress(hurlmon, "CoInternetIsFeatureEnabled");
1987     pCoInternetIsFeatureEnabledForUrl = (void*) GetProcAddress(hurlmon, "CoInternetIsFeatureEnabledForUrl");
1988     pCoInternetIsFeatureZoneElevationEnabled = (void*) GetProcAddress(hurlmon, "CoInternetIsFeatureZoneElevationEnabled");
1989 
1990     if (!pCoInternetCreateSecurityManager || !pCoInternetCreateZoneManager ||
1991         !pCoInternetGetSecurityUrl) {
1992         win_skip("Various CoInternet* functions not present in IE 4.0\n");
1993         return;
1994     }
1995 
1996     argc = winetest_get_mainargs(&argv);
1997     if(argc > 2 && !strcmp(argv[2], "domain_tests")) {
1998         test_zone_domain_mappings();
1999         return;
2000     }
2001 
2002     OleInitialize(NULL);
2003     register_protocols();
2004 
2005     test_InternetGetSecurityUrl();
2006 
2007     if(!pCoInternetGetSecurityUrlEx || !pCreateUri)
2008         win_skip("Skipping CoInternetGetSecurityUrlEx tests, IE too old\n");
2009     else {
2010         test_InternetGetSecurityUrlEx();
2011         test_InternetGetSecurityUrlEx_Pluggable();
2012     }
2013 
2014     test_SecurityManager();
2015     test_SecurityManagerEx2();
2016     test_polices();
2017     test_zone_domains();
2018     test_CoInternetCreateZoneManager();
2019     test_CreateZoneEnumerator();
2020     test_GetZoneActionPolicy();
2021     test_GetZoneAt();
2022     test_GetZoneAttributes();
2023     test_SetZoneAttributes();
2024     test_InternetSecurityMarshalling();
2025     test_CoInternetIsFeatureZoneElevationEnabled();
2026 
2027     unregister_protocols();
2028     OleUninitialize();
2029 }
2030