xref: /vim-8.2.3635/src/userfunc.c (revision b53da791)
1 /* vi:set ts=8 sts=4 sw=4 noet:
2  *
3  * VIM - Vi IMproved	by Bram Moolenaar
4  *
5  * Do ":help uganda"  in Vim to read copying and usage conditions.
6  * Do ":help credits" in Vim to see a list of people who contributed.
7  * See README.txt for an overview of the Vim source code.
8  */
9 
10 /*
11  * userfunc.c: User defined function support
12  */
13 
14 #include "vim.h"
15 
16 #if defined(FEAT_EVAL) || defined(PROTO)
17 /*
18  * All user-defined functions are found in this hashtable.
19  */
20 static hashtab_T	func_hashtab;
21 
22 // Used by get_func_tv()
23 static garray_T funcargs = GA_EMPTY;
24 
25 // pointer to funccal for currently active function
26 static funccall_T *current_funccal = NULL;
27 
28 // Pointer to list of previously used funccal, still around because some
29 // item in it is still being used.
30 static funccall_T *previous_funccal = NULL;
31 
32 static char *e_funcexts = N_("E122: Function %s already exists, add ! to replace it");
33 static char *e_funcdict = N_("E717: Dictionary entry already exists");
34 static char *e_funcref = N_("E718: Funcref required");
35 static char *e_nofunc = N_("E130: Unknown function: %s");
36 
37 static void funccal_unref(funccall_T *fc, ufunc_T *fp, int force);
38 
39     void
40 func_init()
41 {
42     hash_init(&func_hashtab);
43 }
44 
45 /*
46  * Return the function hash table
47  */
48     hashtab_T *
49 func_tbl_get(void)
50 {
51     return &func_hashtab;
52 }
53 
54 /*
55  * Get one function argument.
56  * If "argtypes" is not NULL also get the type: "arg: type".
57  * Return a pointer to after the type.
58  * When something is wrong return "arg".
59  */
60     static char_u *
61 one_function_arg(char_u *arg, garray_T *newargs, garray_T *argtypes, int skip)
62 {
63     char_u	*p = arg;
64     char_u	*arg_copy = NULL;
65 
66     while (ASCII_ISALNUM(*p) || *p == '_')
67 	++p;
68     if (arg == p || isdigit(*arg)
69 	    || (p - arg == 9 && STRNCMP(arg, "firstline", 9) == 0)
70 	    || (p - arg == 8 && STRNCMP(arg, "lastline", 8) == 0))
71     {
72 	if (!skip)
73 	    semsg(_("E125: Illegal argument: %s"), arg);
74 	return arg;
75     }
76     if (newargs != NULL && ga_grow(newargs, 1) == FAIL)
77 	return arg;
78     if (newargs != NULL)
79     {
80 	int	c;
81 	int	i;
82 
83 	c = *p;
84 	*p = NUL;
85 	arg_copy = vim_strsave(arg);
86 	if (arg_copy == NULL)
87 	{
88 	    *p = c;
89 	    return arg;
90 	}
91 
92 	// Check for duplicate argument name.
93 	for (i = 0; i < newargs->ga_len; ++i)
94 	    if (STRCMP(((char_u **)(newargs->ga_data))[i], arg_copy) == 0)
95 	    {
96 		semsg(_("E853: Duplicate argument name: %s"), arg_copy);
97 		vim_free(arg_copy);
98 		return arg;
99 	    }
100 	((char_u **)(newargs->ga_data))[newargs->ga_len] = arg_copy;
101 	newargs->ga_len++;
102 
103 	*p = c;
104     }
105 
106     // get any type from "arg: type"
107     if (argtypes != NULL && ga_grow(argtypes, 1) == OK)
108     {
109 	char_u *type = NULL;
110 
111 	if (VIM_ISWHITE(*p) && *skipwhite(p) == ':')
112 	{
113 	    semsg(_("E1059: No white space allowed before colon: %s"),
114 					    arg_copy == NULL ? arg : arg_copy);
115 	    p = skipwhite(p);
116 	}
117 	if (*p == ':')
118 	{
119 	    ++p;
120 	    if (!VIM_ISWHITE(*p))
121 	    {
122 		semsg(_(e_white_after), ":");
123 		return arg;
124 	    }
125 	    type = skipwhite(p);
126 	    p = skip_type(type, TRUE);
127 	    type = vim_strnsave(type, p - type);
128 	}
129 	else if (*skipwhite(p) != '=')
130 	{
131 	    semsg(_("E1077: Missing argument type for %s"),
132 					    arg_copy == NULL ? arg : arg_copy);
133 	    return arg;
134 	}
135 	((char_u **)argtypes->ga_data)[argtypes->ga_len++] = type;
136     }
137 
138     return p;
139 }
140 
141 /*
142  * Get function arguments.
143  */
144     int
145 get_function_args(
146     char_u	**argp,
147     char_u	endchar,
148     garray_T	*newargs,
149     garray_T	*argtypes,	// NULL unless using :def
150     int		*varargs,
151     garray_T	*default_args,
152     int		skip,
153     exarg_T	*eap,
154     char_u	**line_to_free)
155 {
156     int		mustend = FALSE;
157     char_u	*arg = *argp;
158     char_u	*p = arg;
159     int		c;
160     int		any_default = FALSE;
161     char_u	*expr;
162     char_u	*whitep = arg;
163 
164     if (newargs != NULL)
165 	ga_init2(newargs, (int)sizeof(char_u *), 3);
166     if (argtypes != NULL)
167 	ga_init2(argtypes, (int)sizeof(char_u *), 3);
168     if (default_args != NULL)
169 	ga_init2(default_args, (int)sizeof(char_u *), 3);
170 
171     if (varargs != NULL)
172 	*varargs = FALSE;
173 
174     /*
175      * Isolate the arguments: "arg1, arg2, ...)"
176      */
177     while (*p != endchar)
178     {
179 	while (eap != NULL && eap->getline != NULL
180 			 && (*p == NUL || (VIM_ISWHITE(*whitep) && *p == '#')))
181 	{
182 	    char_u *theline;
183 
184 	    // End of the line, get the next one.
185 	    theline = eap->getline(':', eap->cookie, 0, TRUE);
186 	    if (theline == NULL)
187 		break;
188 	    vim_free(*line_to_free);
189 	    *line_to_free = theline;
190 	    whitep = (char_u *)" ";
191 	    p = skipwhite(theline);
192 	}
193 
194 	if (mustend && *p != endchar)
195 	{
196 	    if (!skip)
197 		semsg(_(e_invarg2), *argp);
198 	    break;
199 	}
200 	if (*p == endchar)
201 	    break;
202 
203 	if (p[0] == '.' && p[1] == '.' && p[2] == '.')
204 	{
205 	    if (varargs != NULL)
206 		*varargs = TRUE;
207 	    p += 3;
208 	    mustend = TRUE;
209 
210 	    if (argtypes != NULL)
211 	    {
212 		// ...name: list<type>
213 		if (!ASCII_ISALPHA(*p))
214 		{
215 		    emsg(_("E1055: Missing name after ..."));
216 		    break;
217 		}
218 
219 		arg = p;
220 		p = one_function_arg(p, newargs, argtypes, skip);
221 		if (p == arg)
222 		    break;
223 	    }
224 	}
225 	else
226 	{
227 	    arg = p;
228 	    p = one_function_arg(p, newargs, argtypes, skip);
229 	    if (p == arg)
230 		break;
231 
232 	    if (*skipwhite(p) == '=' && default_args != NULL)
233 	    {
234 		typval_T	rettv;
235 
236 		// find the end of the expression (doesn't evaluate it)
237 		any_default = TRUE;
238 		p = skipwhite(p) + 1;
239 		whitep = p;
240 		p = skipwhite(p);
241 		expr = p;
242 		if (eval1(&p, &rettv, NULL) != FAIL)
243 		{
244 		    if (ga_grow(default_args, 1) == FAIL)
245 			goto err_ret;
246 
247 		    // trim trailing whitespace
248 		    while (p > expr && VIM_ISWHITE(p[-1]))
249 			p--;
250 		    c = *p;
251 		    *p = NUL;
252 		    expr = vim_strsave(expr);
253 		    if (expr == NULL)
254 		    {
255 			*p = c;
256 			goto err_ret;
257 		    }
258 		    ((char_u **)(default_args->ga_data))
259 						 [default_args->ga_len] = expr;
260 		    default_args->ga_len++;
261 		    *p = c;
262 		}
263 		else
264 		    mustend = TRUE;
265 	    }
266 	    else if (any_default)
267 	    {
268 		emsg(_("E989: Non-default argument follows default argument"));
269 		goto err_ret;
270 	    }
271 	    if (*p == ',')
272 	    {
273 		++p;
274 		// Don't give this error when skipping, it makes the "->" not
275 		// found in "{k,v -> x}" and give a confusing error.
276 		if (!skip && in_vim9script()
277 				      && !IS_WHITE_OR_NUL(*p) && *p != endchar)
278 		{
279 		    semsg(_(e_white_after), ",");
280 		    goto err_ret;
281 		}
282 	    }
283 	    else
284 		mustend = TRUE;
285 	}
286 	whitep = p;
287 	p = skipwhite(p);
288     }
289 
290     if (*p != endchar)
291 	goto err_ret;
292     ++p;	// skip "endchar"
293 
294     *argp = p;
295     return OK;
296 
297 err_ret:
298     if (newargs != NULL)
299 	ga_clear_strings(newargs);
300     if (default_args != NULL)
301 	ga_clear_strings(default_args);
302     return FAIL;
303 }
304 
305 /*
306  * Register function "fp" as using "current_funccal" as its scope.
307  */
308     static int
309 register_closure(ufunc_T *fp)
310 {
311     if (fp->uf_scoped == current_funccal)
312 	// no change
313 	return OK;
314     funccal_unref(fp->uf_scoped, fp, FALSE);
315     fp->uf_scoped = current_funccal;
316     current_funccal->fc_refcount++;
317 
318     if (ga_grow(&current_funccal->fc_funcs, 1) == FAIL)
319 	return FAIL;
320     ((ufunc_T **)current_funccal->fc_funcs.ga_data)
321 	[current_funccal->fc_funcs.ga_len++] = fp;
322     return OK;
323 }
324 
325     static void
326 set_ufunc_name(ufunc_T *fp, char_u *name)
327 {
328     STRCPY(fp->uf_name, name);
329 
330     if (name[0] == K_SPECIAL)
331     {
332 	fp->uf_name_exp = alloc(STRLEN(name) + 3);
333 	if (fp->uf_name_exp != NULL)
334 	{
335 	    STRCPY(fp->uf_name_exp, "<SNR>");
336 	    STRCAT(fp->uf_name_exp, fp->uf_name + 3);
337 	}
338     }
339 }
340 
341 /*
342  * Get a name for a lambda.  Returned in static memory.
343  */
344     char_u *
345 get_lambda_name(void)
346 {
347     static char_u   name[30];
348     static int	    lambda_no = 0;
349 
350     sprintf((char*)name, "<lambda>%d", ++lambda_no);
351     return name;
352 }
353 
354 #if defined(FEAT_LUA) || defined(PROTO)
355 /*
356  * Registers a native C callback which can be called from Vim script.
357  * Returns the name of the Vim script function.
358  */
359     char_u *
360 register_cfunc(cfunc_T cb, cfunc_free_T cb_free, void *state)
361 {
362     char_u	*name = get_lambda_name();
363     ufunc_T	*fp;
364 
365     fp = alloc_clear(offsetof(ufunc_T, uf_name) + STRLEN(name) + 1);
366     if (fp == NULL)
367 	return NULL;
368 
369     fp->uf_def_status = UF_NOT_COMPILED;
370     fp->uf_refcount = 1;
371     fp->uf_varargs = TRUE;
372     fp->uf_flags = FC_CFUNC;
373     fp->uf_calls = 0;
374     fp->uf_script_ctx = current_sctx;
375     fp->uf_cb = cb;
376     fp->uf_cb_free = cb_free;
377     fp->uf_cb_state = state;
378 
379     set_ufunc_name(fp, name);
380     hash_add(&func_hashtab, UF2HIKEY(fp));
381 
382     return name;
383 }
384 #endif
385 
386 /*
387  * Parse a lambda expression and get a Funcref from "*arg".
388  * Return OK or FAIL.  Returns NOTDONE for dict or {expr}.
389  */
390     int
391 get_lambda_tv(char_u **arg, typval_T *rettv, evalarg_T *evalarg)
392 {
393     int		evaluate = evalarg != NULL
394 				      && (evalarg->eval_flags & EVAL_EVALUATE);
395     garray_T	newargs;
396     garray_T	newlines;
397     garray_T	*pnewargs;
398     ufunc_T	*fp = NULL;
399     partial_T   *pt = NULL;
400     int		varargs;
401     int		ret;
402     char_u	*s;
403     char_u	*start, *end;
404     int		*old_eval_lavars = eval_lavars_used;
405     int		eval_lavars = FALSE;
406     char_u	*tofree = NULL;
407 
408     ga_init(&newargs);
409     ga_init(&newlines);
410 
411     // First, check if this is a lambda expression. "->" must exist.
412     s = skipwhite(*arg + 1);
413     ret = get_function_args(&s, '-', NULL, NULL, NULL, NULL, TRUE,
414 								   NULL, NULL);
415     if (ret == FAIL || *s != '>')
416 	return NOTDONE;
417 
418     // Parse the arguments again.
419     if (evaluate)
420 	pnewargs = &newargs;
421     else
422 	pnewargs = NULL;
423     *arg = skipwhite(*arg + 1);
424     // TODO: argument types
425     ret = get_function_args(arg, '-', pnewargs, NULL, &varargs, NULL, FALSE,
426 								   NULL, NULL);
427     if (ret == FAIL || **arg != '>')
428 	goto errret;
429 
430     // Set up a flag for checking local variables and arguments.
431     if (evaluate)
432 	eval_lavars_used = &eval_lavars;
433 
434     // Get the start and the end of the expression.
435     *arg = skipwhite_and_linebreak(*arg + 1, evalarg);
436     start = *arg;
437     ret = skip_expr_concatenate(arg, &start, &end, evalarg);
438     if (ret == FAIL)
439 	goto errret;
440     if (evalarg != NULL)
441     {
442 	// avoid that the expression gets freed when another line break follows
443 	tofree = evalarg->eval_tofree;
444 	evalarg->eval_tofree = NULL;
445     }
446 
447     *arg = skipwhite_and_linebreak(*arg, evalarg);
448     if (**arg != '}')
449     {
450 	semsg(_("E451: Expected }: %s"), *arg);
451 	goto errret;
452     }
453     ++*arg;
454 
455     if (evaluate)
456     {
457 	int	    len;
458 	int	    flags = 0;
459 	char_u	    *p;
460 	char_u	    *name = get_lambda_name();
461 
462 	fp = alloc_clear(offsetof(ufunc_T, uf_name) + STRLEN(name) + 1);
463 	if (fp == NULL)
464 	    goto errret;
465 	fp->uf_def_status = UF_NOT_COMPILED;
466 	pt = ALLOC_CLEAR_ONE(partial_T);
467 	if (pt == NULL)
468 	    goto errret;
469 
470 	ga_init2(&newlines, (int)sizeof(char_u *), 1);
471 	if (ga_grow(&newlines, 1) == FAIL)
472 	    goto errret;
473 
474 	// Add "return " before the expression.
475 	len = 7 + (int)(end - start) + 1;
476 	p = alloc(len);
477 	if (p == NULL)
478 	    goto errret;
479 	((char_u **)(newlines.ga_data))[newlines.ga_len++] = p;
480 	STRCPY(p, "return ");
481 	vim_strncpy(p + 7, start, end - start);
482 	if (strstr((char *)p + 7, "a:") == NULL)
483 	    // No a: variables are used for sure.
484 	    flags |= FC_NOARGS;
485 
486 	fp->uf_refcount = 1;
487 	set_ufunc_name(fp, name);
488 	hash_add(&func_hashtab, UF2HIKEY(fp));
489 	fp->uf_args = newargs;
490 	ga_init(&fp->uf_def_args);
491 	fp->uf_lines = newlines;
492 	if (current_funccal != NULL && eval_lavars)
493 	{
494 	    flags |= FC_CLOSURE;
495 	    if (register_closure(fp) == FAIL)
496 		goto errret;
497 	}
498 	else
499 	    fp->uf_scoped = NULL;
500 
501 #ifdef FEAT_PROFILE
502 	if (prof_def_func())
503 	    func_do_profile(fp);
504 #endif
505 	if (sandbox)
506 	    flags |= FC_SANDBOX;
507 	// can be called with more args than uf_args.ga_len
508 	fp->uf_varargs = TRUE;
509 	fp->uf_flags = flags;
510 	fp->uf_calls = 0;
511 	fp->uf_script_ctx = current_sctx;
512 	fp->uf_script_ctx.sc_lnum += SOURCING_LNUM - newlines.ga_len;
513 
514 	pt->pt_func = fp;
515 	pt->pt_refcount = 1;
516 	rettv->vval.v_partial = pt;
517 	rettv->v_type = VAR_PARTIAL;
518     }
519 
520     eval_lavars_used = old_eval_lavars;
521     if (evalarg != NULL && evalarg->eval_tofree == NULL)
522 	evalarg->eval_tofree = tofree;
523     else
524 	vim_free(tofree);
525     return OK;
526 
527 errret:
528     ga_clear_strings(&newargs);
529     ga_clear_strings(&newlines);
530     vim_free(fp);
531     vim_free(pt);
532     if (evalarg != NULL && evalarg->eval_tofree == NULL)
533 	evalarg->eval_tofree = tofree;
534     else
535 	vim_free(tofree);
536     eval_lavars_used = old_eval_lavars;
537     return FAIL;
538 }
539 
540 /*
541  * Check if "name" is a variable of type VAR_FUNC.  If so, return the function
542  * name it contains, otherwise return "name".
543  * If "partialp" is not NULL, and "name" is of type VAR_PARTIAL also set
544  * "partialp".
545  */
546     char_u *
547 deref_func_name(char_u *name, int *lenp, partial_T **partialp, int no_autoload)
548 {
549     dictitem_T	*v;
550     int		cc;
551     char_u	*s;
552 
553     if (partialp != NULL)
554 	*partialp = NULL;
555 
556     cc = name[*lenp];
557     name[*lenp] = NUL;
558     v = find_var(name, NULL, no_autoload);
559     name[*lenp] = cc;
560     if (v != NULL && v->di_tv.v_type == VAR_FUNC)
561     {
562 	if (v->di_tv.vval.v_string == NULL)
563 	{
564 	    *lenp = 0;
565 	    return (char_u *)"";	// just in case
566 	}
567 	s = v->di_tv.vval.v_string;
568 	*lenp = (int)STRLEN(s);
569 	return s;
570     }
571 
572     if (v != NULL && v->di_tv.v_type == VAR_PARTIAL)
573     {
574 	partial_T *pt = v->di_tv.vval.v_partial;
575 
576 	if (pt == NULL)
577 	{
578 	    *lenp = 0;
579 	    return (char_u *)"";	// just in case
580 	}
581 	if (partialp != NULL)
582 	    *partialp = pt;
583 	s = partial_name(pt);
584 	*lenp = (int)STRLEN(s);
585 	return s;
586     }
587 
588     return name;
589 }
590 
591 /*
592  * Give an error message with a function name.  Handle <SNR> things.
593  * "ermsg" is to be passed without translation, use N_() instead of _().
594  */
595     void
596 emsg_funcname(char *ermsg, char_u *name)
597 {
598     char_u	*p;
599 
600     if (*name == K_SPECIAL)
601 	p = concat_str((char_u *)"<SNR>", name + 3);
602     else
603 	p = name;
604     semsg(_(ermsg), p);
605     if (p != name)
606 	vim_free(p);
607 }
608 
609 /*
610  * Allocate a variable for the result of a function.
611  * Return OK or FAIL.
612  */
613     int
614 get_func_tv(
615     char_u	*name,		// name of the function
616     int		len,		// length of "name" or -1 to use strlen()
617     typval_T	*rettv,
618     char_u	**arg,		// argument, pointing to the '('
619     evalarg_T	*evalarg,	// for line continuation
620     funcexe_T	*funcexe)	// various values
621 {
622     char_u	*argp;
623     int		ret = OK;
624     typval_T	argvars[MAX_FUNC_ARGS + 1];	// vars for arguments
625     int		argcount = 0;		// number of arguments found
626 
627     /*
628      * Get the arguments.
629      */
630     argp = *arg;
631     while (argcount < MAX_FUNC_ARGS - (funcexe->partial == NULL ? 0
632 						  : funcexe->partial->pt_argc))
633     {
634 	// skip the '(' or ',' and possibly line breaks
635 	argp = skipwhite_and_linebreak(argp + 1, evalarg);
636 
637 	if (*argp == ')' || *argp == ',' || *argp == NUL)
638 	    break;
639 	if (eval1(&argp, &argvars[argcount], evalarg) == FAIL)
640 	{
641 	    ret = FAIL;
642 	    break;
643 	}
644 	++argcount;
645 	// The comma should come right after the argument, but this wasn't
646 	// checked previously, thus only enforce it in Vim9 script.
647 	if (!in_vim9script())
648 	    argp = skipwhite(argp);
649 	if (*argp != ',')
650 	    break;
651     }
652     argp = skipwhite_and_linebreak(argp, evalarg);
653     if (*argp == ')')
654 	++argp;
655     else
656 	ret = FAIL;
657 
658     if (ret == OK)
659     {
660 	int		i = 0;
661 
662 	if (get_vim_var_nr(VV_TESTING))
663 	{
664 	    // Prepare for calling test_garbagecollect_now(), need to know
665 	    // what variables are used on the call stack.
666 	    if (funcargs.ga_itemsize == 0)
667 		ga_init2(&funcargs, (int)sizeof(typval_T *), 50);
668 	    for (i = 0; i < argcount; ++i)
669 		if (ga_grow(&funcargs, 1) == OK)
670 		    ((typval_T **)funcargs.ga_data)[funcargs.ga_len++] =
671 								  &argvars[i];
672 	}
673 
674 	ret = call_func(name, len, rettv, argcount, argvars, funcexe);
675 
676 	funcargs.ga_len -= i;
677     }
678     else if (!aborting())
679     {
680 	if (argcount == MAX_FUNC_ARGS)
681 	    emsg_funcname(N_("E740: Too many arguments for function %s"), name);
682 	else
683 	    emsg_funcname(N_("E116: Invalid arguments for function %s"), name);
684     }
685 
686     while (--argcount >= 0)
687 	clear_tv(&argvars[argcount]);
688 
689     *arg = skipwhite(argp);
690     return ret;
691 }
692 
693 /*
694  * Return TRUE if "p" starts with "<SID>" or "s:".
695  * Only works if eval_fname_script() returned non-zero for "p"!
696  */
697     static int
698 eval_fname_sid(char_u *p)
699 {
700     return (*p == 's' || TOUPPER_ASC(p[2]) == 'I');
701 }
702 
703 /*
704  * In a script change <SID>name() and s:name() to K_SNR 123_name().
705  * Change <SNR>123_name() to K_SNR 123_name().
706  * Use "fname_buf[FLEN_FIXED + 1]" when it fits, otherwise allocate memory
707  * (slow).
708  */
709     char_u *
710 fname_trans_sid(char_u *name, char_u *fname_buf, char_u **tofree, int *error)
711 {
712     int		llen;
713     char_u	*fname;
714     int		i;
715 
716     llen = eval_fname_script(name);
717     if (llen > 0)
718     {
719 	fname_buf[0] = K_SPECIAL;
720 	fname_buf[1] = KS_EXTRA;
721 	fname_buf[2] = (int)KE_SNR;
722 	i = 3;
723 	if (eval_fname_sid(name))	// "<SID>" or "s:"
724 	{
725 	    if (current_sctx.sc_sid <= 0)
726 		*error = FCERR_SCRIPT;
727 	    else
728 	    {
729 		sprintf((char *)fname_buf + 3, "%ld_",
730 						    (long)current_sctx.sc_sid);
731 		i = (int)STRLEN(fname_buf);
732 	    }
733 	}
734 	if (i + STRLEN(name + llen) < FLEN_FIXED)
735 	{
736 	    STRCPY(fname_buf + i, name + llen);
737 	    fname = fname_buf;
738 	}
739 	else
740 	{
741 	    fname = alloc(i + STRLEN(name + llen) + 1);
742 	    if (fname == NULL)
743 		*error = FCERR_OTHER;
744 	    else
745 	    {
746 		*tofree = fname;
747 		mch_memmove(fname, fname_buf, (size_t)i);
748 		STRCPY(fname + i, name + llen);
749 	    }
750 	}
751     }
752     else
753 	fname = name;
754     return fname;
755 }
756 
757 /*
758  * Find a function "name" in script "sid".
759  */
760     static ufunc_T *
761 find_func_with_sid(char_u *name, int sid)
762 {
763     hashitem_T	*hi;
764     char_u	buffer[200];
765 
766     buffer[0] = K_SPECIAL;
767     buffer[1] = KS_EXTRA;
768     buffer[2] = (int)KE_SNR;
769     vim_snprintf((char *)buffer + 3, sizeof(buffer) - 3, "%ld_%s",
770 							      (long)sid, name);
771     hi = hash_find(&func_hashtab, buffer);
772     if (!HASHITEM_EMPTY(hi))
773 	return HI2UF(hi);
774 
775     return NULL;
776 }
777 
778 /*
779  * Find a function by name, return pointer to it in ufuncs.
780  * When "is_global" is true don't find script-local or imported functions.
781  * Return NULL for unknown function.
782  */
783     ufunc_T *
784 find_func_even_dead(char_u *name, int is_global, cctx_T *cctx)
785 {
786     hashitem_T	*hi;
787     ufunc_T	*func;
788     imported_T	*imported;
789 
790     if (!is_global)
791     {
792 	char_u *after_script = NULL;
793 
794 	if (in_vim9script())
795 	{
796 	    // Find script-local function before global one.
797 	    func = find_func_with_sid(name, current_sctx.sc_sid);
798 	    if (func != NULL)
799 		return func;
800 	}
801 
802 	if (!in_vim9script()
803 		&& name[0] == K_SPECIAL
804 		&& name[1] == KS_EXTRA
805 		&& name[2] == KE_SNR)
806 	{
807 	    long sid;
808 
809 	    // Caller changes s: to <SNR>99_name.
810 
811 	    after_script = name + 3;
812 	    sid = getdigits(&after_script);
813 	    if (sid == current_sctx.sc_sid && *after_script == '_')
814 		++after_script;
815 	    else
816 		after_script = NULL;
817 	}
818 	if (in_vim9script() || after_script != NULL)
819 	{
820 	    // Find imported function before global one.
821 	    imported = find_imported(
822 			  after_script == NULL ? name : after_script, 0, cctx);
823 	    if (imported != NULL && imported->imp_funcname != NULL)
824 	    {
825 		hi = hash_find(&func_hashtab, imported->imp_funcname);
826 		if (!HASHITEM_EMPTY(hi))
827 		    return HI2UF(hi);
828 	    }
829 	}
830     }
831 
832     hi = hash_find(&func_hashtab,
833 				STRNCMP(name, "g:", 2) == 0 ? name + 2 : name);
834     if (!HASHITEM_EMPTY(hi))
835 	return HI2UF(hi);
836 
837     return NULL;
838 }
839 
840 /*
841  * Find a function by name, return pointer to it in ufuncs.
842  * "cctx" is passed in a :def function to find imported functions.
843  * Return NULL for unknown or dead function.
844  */
845     ufunc_T *
846 find_func(char_u *name, int is_global, cctx_T *cctx)
847 {
848     ufunc_T	*fp = find_func_even_dead(name, is_global, cctx);
849 
850     if (fp != NULL && (fp->uf_flags & FC_DEAD) == 0)
851 	return fp;
852     return NULL;
853 }
854 
855 /*
856  * Copy the function name of "fp" to buffer "buf".
857  * "buf" must be able to hold the function name plus three bytes.
858  * Takes care of script-local function names.
859  */
860     static void
861 cat_func_name(char_u *buf, ufunc_T *fp)
862 {
863     if (fp->uf_name[0] == K_SPECIAL)
864     {
865 	STRCPY(buf, "<SNR>");
866 	STRCAT(buf, fp->uf_name + 3);
867     }
868     else
869 	STRCPY(buf, fp->uf_name);
870 }
871 
872 /*
873  * Add a number variable "name" to dict "dp" with value "nr".
874  */
875     static void
876 add_nr_var(
877     dict_T	*dp,
878     dictitem_T	*v,
879     char	*name,
880     varnumber_T nr)
881 {
882     STRCPY(v->di_key, name);
883     v->di_flags = DI_FLAGS_RO | DI_FLAGS_FIX;
884     hash_add(&dp->dv_hashtab, DI2HIKEY(v));
885     v->di_tv.v_type = VAR_NUMBER;
886     v->di_tv.v_lock = VAR_FIXED;
887     v->di_tv.vval.v_number = nr;
888 }
889 
890 /*
891  * Free "fc".
892  */
893     static void
894 free_funccal(funccall_T *fc)
895 {
896     int	i;
897 
898     for (i = 0; i < fc->fc_funcs.ga_len; ++i)
899     {
900 	ufunc_T *fp = ((ufunc_T **)(fc->fc_funcs.ga_data))[i];
901 
902 	// When garbage collecting a funccall_T may be freed before the
903 	// function that references it, clear its uf_scoped field.
904 	// The function may have been redefined and point to another
905 	// funccall_T, don't clear it then.
906 	if (fp != NULL && fp->uf_scoped == fc)
907 	    fp->uf_scoped = NULL;
908     }
909     ga_clear(&fc->fc_funcs);
910 
911     func_ptr_unref(fc->func);
912     vim_free(fc);
913 }
914 
915 /*
916  * Free "fc" and what it contains.
917  * Can be called only when "fc" is kept beyond the period of it called,
918  * i.e. after cleanup_function_call(fc).
919  */
920    static void
921 free_funccal_contents(funccall_T *fc)
922 {
923     listitem_T	*li;
924 
925     // Free all l: variables.
926     vars_clear(&fc->l_vars.dv_hashtab);
927 
928     // Free all a: variables.
929     vars_clear(&fc->l_avars.dv_hashtab);
930 
931     // Free the a:000 variables.
932     FOR_ALL_LIST_ITEMS(&fc->l_varlist, li)
933 	clear_tv(&li->li_tv);
934 
935     free_funccal(fc);
936 }
937 
938 /*
939  * Handle the last part of returning from a function: free the local hashtable.
940  * Unless it is still in use by a closure.
941  */
942     static void
943 cleanup_function_call(funccall_T *fc)
944 {
945     int	may_free_fc = fc->fc_refcount <= 0;
946     int	free_fc = TRUE;
947 
948     current_funccal = fc->caller;
949 
950     // Free all l: variables if not referred.
951     if (may_free_fc && fc->l_vars.dv_refcount == DO_NOT_FREE_CNT)
952 	vars_clear(&fc->l_vars.dv_hashtab);
953     else
954 	free_fc = FALSE;
955 
956     // If the a:000 list and the l: and a: dicts are not referenced and
957     // there is no closure using it, we can free the funccall_T and what's
958     // in it.
959     if (may_free_fc && fc->l_avars.dv_refcount == DO_NOT_FREE_CNT)
960 	vars_clear_ext(&fc->l_avars.dv_hashtab, FALSE);
961     else
962     {
963 	int	    todo;
964 	hashitem_T  *hi;
965 	dictitem_T  *di;
966 
967 	free_fc = FALSE;
968 
969 	// Make a copy of the a: variables, since we didn't do that above.
970 	todo = (int)fc->l_avars.dv_hashtab.ht_used;
971 	for (hi = fc->l_avars.dv_hashtab.ht_array; todo > 0; ++hi)
972 	{
973 	    if (!HASHITEM_EMPTY(hi))
974 	    {
975 		--todo;
976 		di = HI2DI(hi);
977 		copy_tv(&di->di_tv, &di->di_tv);
978 	    }
979 	}
980     }
981 
982     if (may_free_fc && fc->l_varlist.lv_refcount == DO_NOT_FREE_CNT)
983 	fc->l_varlist.lv_first = NULL;
984     else
985     {
986 	listitem_T *li;
987 
988 	free_fc = FALSE;
989 
990 	// Make a copy of the a:000 items, since we didn't do that above.
991 	FOR_ALL_LIST_ITEMS(&fc->l_varlist, li)
992 	    copy_tv(&li->li_tv, &li->li_tv);
993     }
994 
995     if (free_fc)
996 	free_funccal(fc);
997     else
998     {
999 	static int made_copy = 0;
1000 
1001 	// "fc" is still in use.  This can happen when returning "a:000",
1002 	// assigning "l:" to a global variable or defining a closure.
1003 	// Link "fc" in the list for garbage collection later.
1004 	fc->caller = previous_funccal;
1005 	previous_funccal = fc;
1006 
1007 	if (want_garbage_collect)
1008 	    // If garbage collector is ready, clear count.
1009 	    made_copy = 0;
1010 	else if (++made_copy >= (int)((4096 * 1024) / sizeof(*fc)))
1011 	{
1012 	    // We have made a lot of copies, worth 4 Mbyte.  This can happen
1013 	    // when repetitively calling a function that creates a reference to
1014 	    // itself somehow.  Call the garbage collector soon to avoid using
1015 	    // too much memory.
1016 	    made_copy = 0;
1017 	    want_garbage_collect = TRUE;
1018 	}
1019     }
1020 }
1021 /*
1022  * Unreference "fc": decrement the reference count and free it when it
1023  * becomes zero.  "fp" is detached from "fc".
1024  * When "force" is TRUE we are exiting.
1025  */
1026     static void
1027 funccal_unref(funccall_T *fc, ufunc_T *fp, int force)
1028 {
1029     funccall_T	**pfc;
1030     int		i;
1031 
1032     if (fc == NULL)
1033 	return;
1034 
1035     if (--fc->fc_refcount <= 0 && (force || (
1036 		fc->l_varlist.lv_refcount == DO_NOT_FREE_CNT
1037 		&& fc->l_vars.dv_refcount == DO_NOT_FREE_CNT
1038 		&& fc->l_avars.dv_refcount == DO_NOT_FREE_CNT)))
1039 	for (pfc = &previous_funccal; *pfc != NULL; pfc = &(*pfc)->caller)
1040 	{
1041 	    if (fc == *pfc)
1042 	    {
1043 		*pfc = fc->caller;
1044 		free_funccal_contents(fc);
1045 		return;
1046 	    }
1047 	}
1048     for (i = 0; i < fc->fc_funcs.ga_len; ++i)
1049 	if (((ufunc_T **)(fc->fc_funcs.ga_data))[i] == fp)
1050 	    ((ufunc_T **)(fc->fc_funcs.ga_data))[i] = NULL;
1051 }
1052 
1053 /*
1054  * Remove the function from the function hashtable.  If the function was
1055  * deleted while it still has references this was already done.
1056  * Return TRUE if the entry was deleted, FALSE if it wasn't found.
1057  */
1058     static int
1059 func_remove(ufunc_T *fp)
1060 {
1061     hashitem_T	*hi;
1062 
1063     // Return if it was already virtually deleted.
1064     if (fp->uf_flags & FC_DEAD)
1065 	return FALSE;
1066 
1067     hi = hash_find(&func_hashtab, UF2HIKEY(fp));
1068     if (!HASHITEM_EMPTY(hi))
1069     {
1070 	// When there is a def-function index do not actually remove the
1071 	// function, so we can find the index when defining the function again.
1072 	// Do remove it when it's a copy.
1073 	if (fp->uf_def_status == UF_COMPILED && (fp->uf_flags & FC_COPY) == 0)
1074 	    fp->uf_flags |= FC_DEAD;
1075 	else
1076 	    hash_remove(&func_hashtab, hi);
1077 	return TRUE;
1078     }
1079     return FALSE;
1080 }
1081 
1082     static void
1083 func_clear_items(ufunc_T *fp)
1084 {
1085     ga_clear_strings(&(fp->uf_args));
1086     ga_clear_strings(&(fp->uf_def_args));
1087     ga_clear_strings(&(fp->uf_lines));
1088     VIM_CLEAR(fp->uf_name_exp);
1089     VIM_CLEAR(fp->uf_arg_types);
1090     VIM_CLEAR(fp->uf_def_arg_idx);
1091     VIM_CLEAR(fp->uf_va_name);
1092     clear_type_list(&fp->uf_type_list);
1093 
1094 #ifdef FEAT_LUA
1095     if (fp->uf_cb_free != NULL)
1096     {
1097 	fp->uf_cb_free(fp->uf_cb_state);
1098 	fp->uf_cb_free = NULL;
1099     }
1100 
1101     fp->uf_cb_state = NULL;
1102     fp->uf_cb = NULL;
1103 #endif
1104 #ifdef FEAT_PROFILE
1105     VIM_CLEAR(fp->uf_tml_count);
1106     VIM_CLEAR(fp->uf_tml_total);
1107     VIM_CLEAR(fp->uf_tml_self);
1108 #endif
1109 }
1110 
1111 /*
1112  * Free all things that a function contains.  Does not free the function
1113  * itself, use func_free() for that.
1114  * When "force" is TRUE we are exiting.
1115  */
1116     static void
1117 func_clear(ufunc_T *fp, int force)
1118 {
1119     if (fp->uf_cleared)
1120 	return;
1121     fp->uf_cleared = TRUE;
1122 
1123     // clear this function
1124     func_clear_items(fp);
1125     funccal_unref(fp->uf_scoped, fp, force);
1126     if ((fp->uf_flags & FC_COPY) == 0)
1127 	clear_def_function(fp);
1128 }
1129 
1130 /*
1131  * Free a function and remove it from the list of functions.  Does not free
1132  * what a function contains, call func_clear() first.
1133  * When "force" is TRUE we are exiting.
1134  */
1135     static void
1136 func_free(ufunc_T *fp, int force)
1137 {
1138     // Only remove it when not done already, otherwise we would remove a newer
1139     // version of the function with the same name.
1140     if ((fp->uf_flags & (FC_DELETED | FC_REMOVED)) == 0)
1141 	func_remove(fp);
1142 
1143     if ((fp->uf_flags & FC_DEAD) == 0 || force)
1144 	vim_free(fp);
1145 }
1146 
1147 /*
1148  * Free all things that a function contains and free the function itself.
1149  * When "force" is TRUE we are exiting.
1150  */
1151     static void
1152 func_clear_free(ufunc_T *fp, int force)
1153 {
1154     func_clear(fp, force);
1155     if (force || fp->uf_dfunc_idx == 0 || (fp->uf_flags & FC_COPY))
1156 	func_free(fp, force);
1157     else
1158 	fp->uf_flags |= FC_DEAD;
1159 }
1160 
1161 /*
1162  * Copy already defined function "lambda" to a new function with name "global".
1163  * This is for when a compiled function defines a global function.
1164  */
1165     void
1166 copy_func(char_u *lambda, char_u *global)
1167 {
1168     ufunc_T *ufunc = find_func_even_dead(lambda, TRUE, NULL);
1169     ufunc_T *fp;
1170 
1171     if (ufunc == NULL)
1172 	semsg(_("E1102: lambda function not found: %s"), lambda);
1173     else
1174     {
1175 	// TODO: handle ! to overwrite
1176 	fp = find_func(global, TRUE, NULL);
1177 	if (fp != NULL)
1178 	{
1179 	    semsg(_(e_funcexts), global);
1180 	    return;
1181 	}
1182 
1183 	fp = alloc_clear(offsetof(ufunc_T, uf_name) + STRLEN(global) + 1);
1184 	if (fp == NULL)
1185 	    return;
1186 
1187 	fp->uf_varargs = ufunc->uf_varargs;
1188 	fp->uf_flags = (ufunc->uf_flags & ~FC_VIM9) | FC_COPY;
1189 	fp->uf_def_status = ufunc->uf_def_status;
1190 	fp->uf_dfunc_idx = ufunc->uf_dfunc_idx;
1191 	if (ga_copy_strings(&ufunc->uf_args, &fp->uf_args) == FAIL
1192 		|| ga_copy_strings(&ufunc->uf_def_args, &fp->uf_def_args)
1193 									== FAIL
1194 		|| ga_copy_strings(&ufunc->uf_lines, &fp->uf_lines) == FAIL)
1195 	    goto failed;
1196 
1197 	fp->uf_name_exp = ufunc->uf_name_exp == NULL ? NULL
1198 					     : vim_strsave(ufunc->uf_name_exp);
1199 	if (ufunc->uf_arg_types != NULL)
1200 	{
1201 	    fp->uf_arg_types = ALLOC_MULT(type_T *, fp->uf_args.ga_len);
1202 	    if (fp->uf_arg_types == NULL)
1203 		goto failed;
1204 	    mch_memmove(fp->uf_arg_types, ufunc->uf_arg_types,
1205 					sizeof(type_T *) * fp->uf_args.ga_len);
1206 	}
1207 	if (ufunc->uf_def_arg_idx != NULL)
1208 	{
1209 	    fp->uf_def_arg_idx = ALLOC_MULT(int, fp->uf_def_args.ga_len + 1);
1210 	    if (fp->uf_def_arg_idx == NULL)
1211 		goto failed;
1212 	    mch_memmove(fp->uf_def_arg_idx, ufunc->uf_def_arg_idx,
1213 				     sizeof(int) * fp->uf_def_args.ga_len + 1);
1214 	}
1215 	if (ufunc->uf_va_name != NULL)
1216 	{
1217 	    fp->uf_va_name = vim_strsave(ufunc->uf_va_name);
1218 	    if (fp->uf_va_name == NULL)
1219 		goto failed;
1220 	}
1221 
1222 	fp->uf_refcount = 1;
1223 	STRCPY(fp->uf_name, global);
1224 	hash_add(&func_hashtab, UF2HIKEY(fp));
1225     }
1226     return;
1227 
1228 failed:
1229     func_clear_free(fp, TRUE);
1230 }
1231 
1232 
1233 /*
1234  * Call a user function.
1235  */
1236     static void
1237 call_user_func(
1238     ufunc_T	*fp,		// pointer to function
1239     int		argcount,	// nr of args
1240     typval_T	*argvars,	// arguments
1241     typval_T	*rettv,		// return value
1242     funcexe_T	*funcexe,	// context
1243     dict_T	*selfdict)	// Dictionary for "self"
1244 {
1245     sctx_T	save_current_sctx;
1246     int		using_sandbox = FALSE;
1247     funccall_T	*fc;
1248     int		save_did_emsg;
1249     int		default_arg_err = FALSE;
1250     static int	depth = 0;
1251     dictitem_T	*v;
1252     int		fixvar_idx = 0;	// index in fixvar[]
1253     int		i;
1254     int		ai;
1255     int		islambda = FALSE;
1256     char_u	numbuf[NUMBUFLEN];
1257     char_u	*name;
1258 #ifdef FEAT_PROFILE
1259     proftime_T	wait_start;
1260     proftime_T	call_start;
1261     int		started_profiling = FALSE;
1262 #endif
1263     ESTACK_CHECK_DECLARATION
1264 
1265     // If depth of calling is getting too high, don't execute the function
1266     if (depth >= p_mfd)
1267     {
1268 	emsg(_("E132: Function call depth is higher than 'maxfuncdepth'"));
1269 	rettv->v_type = VAR_NUMBER;
1270 	rettv->vval.v_number = -1;
1271 	return;
1272     }
1273     ++depth;
1274 
1275     line_breakcheck();		// check for CTRL-C hit
1276 
1277     fc = ALLOC_CLEAR_ONE(funccall_T);
1278     if (fc == NULL)
1279 	return;
1280     fc->caller = current_funccal;
1281     current_funccal = fc;
1282     fc->func = fp;
1283     fc->rettv = rettv;
1284     fc->level = ex_nesting_level;
1285     // Check if this function has a breakpoint.
1286     fc->breakpoint = dbg_find_breakpoint(FALSE, fp->uf_name, (linenr_T)0);
1287     fc->dbg_tick = debug_tick;
1288     // Set up fields for closure.
1289     ga_init2(&fc->fc_funcs, sizeof(ufunc_T *), 1);
1290     func_ptr_ref(fp);
1291 
1292     if (fp->uf_def_status != UF_NOT_COMPILED)
1293     {
1294 	estack_push_ufunc(fp, 1);
1295 	save_current_sctx = current_sctx;
1296 	current_sctx = fp->uf_script_ctx;
1297 
1298 	// Execute the function, possibly compiling it first.
1299 	call_def_function(fp, argcount, argvars, funcexe->partial, rettv);
1300 	--depth;
1301 	current_funccal = fc->caller;
1302 
1303 	estack_pop();
1304 	current_sctx = save_current_sctx;
1305 	free_funccal(fc);
1306 	return;
1307     }
1308 
1309     if (STRNCMP(fp->uf_name, "<lambda>", 8) == 0)
1310 	islambda = TRUE;
1311 
1312     /*
1313      * Note about using fc->fixvar[]: This is an array of FIXVAR_CNT variables
1314      * with names up to VAR_SHORT_LEN long.  This avoids having to alloc/free
1315      * each argument variable and saves a lot of time.
1316      */
1317     /*
1318      * Init l: variables.
1319      */
1320     init_var_dict(&fc->l_vars, &fc->l_vars_var, VAR_DEF_SCOPE);
1321     if (selfdict != NULL)
1322     {
1323 	// Set l:self to "selfdict".  Use "name" to avoid a warning from
1324 	// some compiler that checks the destination size.
1325 	v = &fc->fixvar[fixvar_idx++].var;
1326 	name = v->di_key;
1327 	STRCPY(name, "self");
1328 	v->di_flags = DI_FLAGS_RO | DI_FLAGS_FIX;
1329 	hash_add(&fc->l_vars.dv_hashtab, DI2HIKEY(v));
1330 	v->di_tv.v_type = VAR_DICT;
1331 	v->di_tv.v_lock = 0;
1332 	v->di_tv.vval.v_dict = selfdict;
1333 	++selfdict->dv_refcount;
1334     }
1335 
1336     /*
1337      * Init a: variables, unless none found (in lambda).
1338      * Set a:0 to "argcount" less number of named arguments, if >= 0.
1339      * Set a:000 to a list with room for the "..." arguments.
1340      */
1341     init_var_dict(&fc->l_avars, &fc->l_avars_var, VAR_SCOPE);
1342     if ((fp->uf_flags & FC_NOARGS) == 0)
1343 	add_nr_var(&fc->l_avars, &fc->fixvar[fixvar_idx++].var, "0",
1344 				(varnumber_T)(argcount >= fp->uf_args.ga_len
1345 				    ? argcount - fp->uf_args.ga_len : 0));
1346     fc->l_avars.dv_lock = VAR_FIXED;
1347     if ((fp->uf_flags & FC_NOARGS) == 0)
1348     {
1349 	// Use "name" to avoid a warning from some compiler that checks the
1350 	// destination size.
1351 	v = &fc->fixvar[fixvar_idx++].var;
1352 	name = v->di_key;
1353 	STRCPY(name, "000");
1354 	v->di_flags = DI_FLAGS_RO | DI_FLAGS_FIX;
1355 	hash_add(&fc->l_avars.dv_hashtab, DI2HIKEY(v));
1356 	v->di_tv.v_type = VAR_LIST;
1357 	v->di_tv.v_lock = VAR_FIXED;
1358 	v->di_tv.vval.v_list = &fc->l_varlist;
1359     }
1360     CLEAR_FIELD(fc->l_varlist);
1361     fc->l_varlist.lv_refcount = DO_NOT_FREE_CNT;
1362     fc->l_varlist.lv_lock = VAR_FIXED;
1363 
1364     /*
1365      * Set a:firstline to "firstline" and a:lastline to "lastline".
1366      * Set a:name to named arguments.
1367      * Set a:N to the "..." arguments.
1368      * Skipped when no a: variables used (in lambda).
1369      */
1370     if ((fp->uf_flags & FC_NOARGS) == 0)
1371     {
1372 	add_nr_var(&fc->l_avars, &fc->fixvar[fixvar_idx++].var, "firstline",
1373 					      (varnumber_T)funcexe->firstline);
1374 	add_nr_var(&fc->l_avars, &fc->fixvar[fixvar_idx++].var, "lastline",
1375 					       (varnumber_T)funcexe->lastline);
1376     }
1377     for (i = 0; i < argcount || i < fp->uf_args.ga_len; ++i)
1378     {
1379 	int	    addlocal = FALSE;
1380 	typval_T    def_rettv;
1381 	int	    isdefault = FALSE;
1382 
1383 	ai = i - fp->uf_args.ga_len;
1384 	if (ai < 0)
1385 	{
1386 	    // named argument a:name
1387 	    name = FUNCARG(fp, i);
1388 	    if (islambda)
1389 		addlocal = TRUE;
1390 
1391 	    // evaluate named argument default expression
1392 	    isdefault = ai + fp->uf_def_args.ga_len >= 0
1393 		       && (i >= argcount || (argvars[i].v_type == VAR_SPECIAL
1394 				   && argvars[i].vval.v_number == VVAL_NONE));
1395 	    if (isdefault)
1396 	    {
1397 		char_u	    *default_expr = NULL;
1398 		def_rettv.v_type = VAR_NUMBER;
1399 		def_rettv.vval.v_number = -1;
1400 
1401 		default_expr = ((char_u **)(fp->uf_def_args.ga_data))
1402 						 [ai + fp->uf_def_args.ga_len];
1403 		if (eval1(&default_expr, &def_rettv, &EVALARG_EVALUATE) == FAIL)
1404 		{
1405 		    default_arg_err = 1;
1406 		    break;
1407 		}
1408 	    }
1409 	}
1410 	else
1411 	{
1412 	    if ((fp->uf_flags & FC_NOARGS) != 0)
1413 		// Bail out if no a: arguments used (in lambda).
1414 		break;
1415 
1416 	    // "..." argument a:1, a:2, etc.
1417 	    sprintf((char *)numbuf, "%d", ai + 1);
1418 	    name = numbuf;
1419 	}
1420 	if (fixvar_idx < FIXVAR_CNT && STRLEN(name) <= VAR_SHORT_LEN)
1421 	{
1422 	    v = &fc->fixvar[fixvar_idx++].var;
1423 	    v->di_flags = DI_FLAGS_RO | DI_FLAGS_FIX;
1424 	    STRCPY(v->di_key, name);
1425 	}
1426 	else
1427 	{
1428 	    v = dictitem_alloc(name);
1429 	    if (v == NULL)
1430 		break;
1431 	    v->di_flags |= DI_FLAGS_RO | DI_FLAGS_FIX;
1432 	}
1433 
1434 	// Note: the values are copied directly to avoid alloc/free.
1435 	// "argvars" must have VAR_FIXED for v_lock.
1436 	v->di_tv = isdefault ? def_rettv : argvars[i];
1437 	v->di_tv.v_lock = VAR_FIXED;
1438 
1439 	if (addlocal)
1440 	{
1441 	    // Named arguments should be accessed without the "a:" prefix in
1442 	    // lambda expressions.  Add to the l: dict.
1443 	    copy_tv(&v->di_tv, &v->di_tv);
1444 	    hash_add(&fc->l_vars.dv_hashtab, DI2HIKEY(v));
1445 	}
1446 	else
1447 	    hash_add(&fc->l_avars.dv_hashtab, DI2HIKEY(v));
1448 
1449 	if (ai >= 0 && ai < MAX_FUNC_ARGS)
1450 	{
1451 	    listitem_T *li = &fc->l_listitems[ai];
1452 
1453 	    li->li_tv = argvars[i];
1454 	    li->li_tv.v_lock = VAR_FIXED;
1455 	    list_append(&fc->l_varlist, li);
1456 	}
1457     }
1458 
1459     // Don't redraw while executing the function.
1460     ++RedrawingDisabled;
1461 
1462     if (fp->uf_flags & FC_SANDBOX)
1463     {
1464 	using_sandbox = TRUE;
1465 	++sandbox;
1466     }
1467 
1468     estack_push_ufunc(fp, 1);
1469     ESTACK_CHECK_SETUP
1470     if (p_verbose >= 12)
1471     {
1472 	++no_wait_return;
1473 	verbose_enter_scroll();
1474 
1475 	smsg(_("calling %s"), SOURCING_NAME);
1476 	if (p_verbose >= 14)
1477 	{
1478 	    char_u	buf[MSG_BUF_LEN];
1479 	    char_u	numbuf2[NUMBUFLEN];
1480 	    char_u	*tofree;
1481 	    char_u	*s;
1482 
1483 	    msg_puts("(");
1484 	    for (i = 0; i < argcount; ++i)
1485 	    {
1486 		if (i > 0)
1487 		    msg_puts(", ");
1488 		if (argvars[i].v_type == VAR_NUMBER)
1489 		    msg_outnum((long)argvars[i].vval.v_number);
1490 		else
1491 		{
1492 		    // Do not want errors such as E724 here.
1493 		    ++emsg_off;
1494 		    s = tv2string(&argvars[i], &tofree, numbuf2, 0);
1495 		    --emsg_off;
1496 		    if (s != NULL)
1497 		    {
1498 			if (vim_strsize(s) > MSG_BUF_CLEN)
1499 			{
1500 			    trunc_string(s, buf, MSG_BUF_CLEN, MSG_BUF_LEN);
1501 			    s = buf;
1502 			}
1503 			msg_puts((char *)s);
1504 			vim_free(tofree);
1505 		    }
1506 		}
1507 	    }
1508 	    msg_puts(")");
1509 	}
1510 	msg_puts("\n");   // don't overwrite this either
1511 
1512 	verbose_leave_scroll();
1513 	--no_wait_return;
1514     }
1515 #ifdef FEAT_PROFILE
1516     if (do_profiling == PROF_YES)
1517     {
1518 	if (!fp->uf_profiling && has_profiling(FALSE, fp->uf_name, NULL))
1519 	{
1520 	    started_profiling = TRUE;
1521 	    func_do_profile(fp);
1522 	}
1523 	if (fp->uf_profiling
1524 		    || (fc->caller != NULL && fc->caller->func->uf_profiling))
1525 	{
1526 	    ++fp->uf_tm_count;
1527 	    profile_start(&call_start);
1528 	    profile_zero(&fp->uf_tm_children);
1529 	}
1530 	script_prof_save(&wait_start);
1531     }
1532 #endif
1533 
1534     save_current_sctx = current_sctx;
1535     current_sctx = fp->uf_script_ctx;
1536     save_did_emsg = did_emsg;
1537     did_emsg = FALSE;
1538 
1539     if (default_arg_err && (fp->uf_flags & FC_ABORT))
1540 	did_emsg = TRUE;
1541     else if (islambda)
1542     {
1543 	char_u *p = *(char_u **)fp->uf_lines.ga_data + 7;
1544 
1545 	// A Lambda always has the command "return {expr}".  It is much faster
1546 	// to evaluate {expr} directly.
1547 	++ex_nesting_level;
1548 	(void)eval1(&p, rettv, &EVALARG_EVALUATE);
1549 	--ex_nesting_level;
1550     }
1551     else
1552 	// call do_cmdline() to execute the lines
1553 	do_cmdline(NULL, get_func_line, (void *)fc,
1554 				     DOCMD_NOWAIT|DOCMD_VERBOSE|DOCMD_REPEAT);
1555 
1556     --RedrawingDisabled;
1557 
1558     // when the function was aborted because of an error, return -1
1559     if ((did_emsg && (fp->uf_flags & FC_ABORT)) || rettv->v_type == VAR_UNKNOWN)
1560     {
1561 	clear_tv(rettv);
1562 	rettv->v_type = VAR_NUMBER;
1563 	rettv->vval.v_number = -1;
1564     }
1565 
1566 #ifdef FEAT_PROFILE
1567     if (do_profiling == PROF_YES && (fp->uf_profiling
1568 		    || (fc->caller != NULL && fc->caller->func->uf_profiling)))
1569     {
1570 	profile_end(&call_start);
1571 	profile_sub_wait(&wait_start, &call_start);
1572 	profile_add(&fp->uf_tm_total, &call_start);
1573 	profile_self(&fp->uf_tm_self, &call_start, &fp->uf_tm_children);
1574 	if (fc->caller != NULL && fc->caller->func->uf_profiling)
1575 	{
1576 	    profile_add(&fc->caller->func->uf_tm_children, &call_start);
1577 	    profile_add(&fc->caller->func->uf_tml_children, &call_start);
1578 	}
1579 	if (started_profiling)
1580 	    // make a ":profdel func" stop profiling the function
1581 	    fp->uf_profiling = FALSE;
1582     }
1583 #endif
1584 
1585     // when being verbose, mention the return value
1586     if (p_verbose >= 12)
1587     {
1588 	++no_wait_return;
1589 	verbose_enter_scroll();
1590 
1591 	if (aborting())
1592 	    smsg(_("%s aborted"), SOURCING_NAME);
1593 	else if (fc->rettv->v_type == VAR_NUMBER)
1594 	    smsg(_("%s returning #%ld"), SOURCING_NAME,
1595 					       (long)fc->rettv->vval.v_number);
1596 	else
1597 	{
1598 	    char_u	buf[MSG_BUF_LEN];
1599 	    char_u	numbuf2[NUMBUFLEN];
1600 	    char_u	*tofree;
1601 	    char_u	*s;
1602 
1603 	    // The value may be very long.  Skip the middle part, so that we
1604 	    // have some idea how it starts and ends. smsg() would always
1605 	    // truncate it at the end. Don't want errors such as E724 here.
1606 	    ++emsg_off;
1607 	    s = tv2string(fc->rettv, &tofree, numbuf2, 0);
1608 	    --emsg_off;
1609 	    if (s != NULL)
1610 	    {
1611 		if (vim_strsize(s) > MSG_BUF_CLEN)
1612 		{
1613 		    trunc_string(s, buf, MSG_BUF_CLEN, MSG_BUF_LEN);
1614 		    s = buf;
1615 		}
1616 		smsg(_("%s returning %s"), SOURCING_NAME, s);
1617 		vim_free(tofree);
1618 	    }
1619 	}
1620 	msg_puts("\n");   // don't overwrite this either
1621 
1622 	verbose_leave_scroll();
1623 	--no_wait_return;
1624     }
1625 
1626     ESTACK_CHECK_NOW
1627     estack_pop();
1628     current_sctx = save_current_sctx;
1629 #ifdef FEAT_PROFILE
1630     if (do_profiling == PROF_YES)
1631 	script_prof_restore(&wait_start);
1632 #endif
1633     if (using_sandbox)
1634 	--sandbox;
1635 
1636     if (p_verbose >= 12 && SOURCING_NAME != NULL)
1637     {
1638 	++no_wait_return;
1639 	verbose_enter_scroll();
1640 
1641 	smsg(_("continuing in %s"), SOURCING_NAME);
1642 	msg_puts("\n");   // don't overwrite this either
1643 
1644 	verbose_leave_scroll();
1645 	--no_wait_return;
1646     }
1647 
1648     did_emsg |= save_did_emsg;
1649     --depth;
1650 
1651     cleanup_function_call(fc);
1652 }
1653 
1654 /*
1655  * Call a user function after checking the arguments.
1656  */
1657     int
1658 call_user_func_check(
1659 	ufunc_T	    *fp,
1660 	int	    argcount,
1661 	typval_T    *argvars,
1662 	typval_T    *rettv,
1663 	funcexe_T   *funcexe,
1664 	dict_T	    *selfdict)
1665 {
1666     int error;
1667     int regular_args = fp->uf_args.ga_len;
1668 
1669     if (fp->uf_flags & FC_RANGE && funcexe->doesrange != NULL)
1670 	*funcexe->doesrange = TRUE;
1671     if (argcount < regular_args - fp->uf_def_args.ga_len)
1672 	error = FCERR_TOOFEW;
1673     else if (!has_varargs(fp) && argcount > regular_args)
1674 	error = FCERR_TOOMANY;
1675     else if ((fp->uf_flags & FC_DICT) && selfdict == NULL)
1676 	error = FCERR_DICT;
1677     else
1678     {
1679 	int		did_save_redo = FALSE;
1680 	save_redo_T	save_redo;
1681 
1682 	/*
1683 	 * Call the user function.
1684 	 * Save and restore search patterns, script variables and
1685 	 * redo buffer.
1686 	 */
1687 	save_search_patterns();
1688 	if (!ins_compl_active())
1689 	{
1690 	    saveRedobuff(&save_redo);
1691 	    did_save_redo = TRUE;
1692 	}
1693 	++fp->uf_calls;
1694 	call_user_func(fp, argcount, argvars, rettv, funcexe,
1695 				   (fp->uf_flags & FC_DICT) ? selfdict : NULL);
1696 	if (--fp->uf_calls <= 0 && fp->uf_refcount <= 0)
1697 	    // Function was unreferenced while being used, free it now.
1698 	    func_clear_free(fp, FALSE);
1699 	if (did_save_redo)
1700 	    restoreRedobuff(&save_redo);
1701 	restore_search_patterns();
1702 	error = FCERR_NONE;
1703     }
1704     return error;
1705 }
1706 
1707 /*
1708  * There are two kinds of function names:
1709  * 1. ordinary names, function defined with :function
1710  * 2. numbered functions and lambdas
1711  * For the first we only count the name stored in func_hashtab as a reference,
1712  * using function() does not count as a reference, because the function is
1713  * looked up by name.
1714  */
1715     static int
1716 func_name_refcount(char_u *name)
1717 {
1718     return isdigit(*name) || *name == '<';
1719 }
1720 
1721 static funccal_entry_T *funccal_stack = NULL;
1722 
1723 /*
1724  * Save the current function call pointer, and set it to NULL.
1725  * Used when executing autocommands and for ":source".
1726  */
1727     void
1728 save_funccal(funccal_entry_T *entry)
1729 {
1730     entry->top_funccal = current_funccal;
1731     entry->next = funccal_stack;
1732     funccal_stack = entry;
1733     current_funccal = NULL;
1734 }
1735 
1736     void
1737 restore_funccal(void)
1738 {
1739     if (funccal_stack == NULL)
1740 	iemsg("INTERNAL: restore_funccal()");
1741     else
1742     {
1743 	current_funccal = funccal_stack->top_funccal;
1744 	funccal_stack = funccal_stack->next;
1745     }
1746 }
1747 
1748     funccall_T *
1749 get_current_funccal(void)
1750 {
1751     return current_funccal;
1752 }
1753 
1754 /*
1755  * Mark all functions of script "sid" as deleted.
1756  */
1757     void
1758 delete_script_functions(int sid)
1759 {
1760     hashitem_T	*hi;
1761     ufunc_T	*fp;
1762     long_u	todo = 1;
1763     char_u	buf[30];
1764     size_t	len;
1765 
1766     buf[0] = K_SPECIAL;
1767     buf[1] = KS_EXTRA;
1768     buf[2] = (int)KE_SNR;
1769     sprintf((char *)buf + 3, "%d_", sid);
1770     len = STRLEN(buf);
1771 
1772     while (todo > 0)
1773     {
1774 	todo = func_hashtab.ht_used;
1775 	for (hi = func_hashtab.ht_array; todo > 0; ++hi)
1776 	    if (!HASHITEM_EMPTY(hi))
1777 	    {
1778 		fp = HI2UF(hi);
1779 		if (STRNCMP(fp->uf_name, buf, len) == 0)
1780 		{
1781 		    int changed = func_hashtab.ht_changed;
1782 
1783 		    fp->uf_flags |= FC_DEAD;
1784 		    func_clear(fp, TRUE);
1785 		    // When clearing a function another function can be cleared
1786 		    // as a side effect.  When that happens start over.
1787 		    if (changed != func_hashtab.ht_changed)
1788 			break;
1789 		}
1790 		--todo;
1791 	    }
1792     }
1793 }
1794 
1795 #if defined(EXITFREE) || defined(PROTO)
1796     void
1797 free_all_functions(void)
1798 {
1799     hashitem_T	*hi;
1800     ufunc_T	*fp;
1801     long_u	skipped = 0;
1802     long_u	todo = 1;
1803     int		changed;
1804 
1805     // Clean up the current_funccal chain and the funccal stack.
1806     while (current_funccal != NULL)
1807     {
1808 	clear_tv(current_funccal->rettv);
1809 	cleanup_function_call(current_funccal);
1810 	if (current_funccal == NULL && funccal_stack != NULL)
1811 	    restore_funccal();
1812     }
1813 
1814     // First clear what the functions contain.  Since this may lower the
1815     // reference count of a function, it may also free a function and change
1816     // the hash table. Restart if that happens.
1817     while (todo > 0)
1818     {
1819 	todo = func_hashtab.ht_used;
1820 	for (hi = func_hashtab.ht_array; todo > 0; ++hi)
1821 	    if (!HASHITEM_EMPTY(hi))
1822 	    {
1823 		// clear the def function index now
1824 		fp = HI2UF(hi);
1825 		fp->uf_flags &= ~FC_DEAD;
1826 		fp->uf_def_status = UF_NOT_COMPILED;
1827 
1828 		// Only free functions that are not refcounted, those are
1829 		// supposed to be freed when no longer referenced.
1830 		if (func_name_refcount(fp->uf_name))
1831 		    ++skipped;
1832 		else
1833 		{
1834 		    changed = func_hashtab.ht_changed;
1835 		    func_clear(fp, TRUE);
1836 		    if (changed != func_hashtab.ht_changed)
1837 		    {
1838 			skipped = 0;
1839 			break;
1840 		    }
1841 		}
1842 		--todo;
1843 	    }
1844     }
1845 
1846     // Now actually free the functions.  Need to start all over every time,
1847     // because func_free() may change the hash table.
1848     skipped = 0;
1849     while (func_hashtab.ht_used > skipped)
1850     {
1851 	todo = func_hashtab.ht_used;
1852 	for (hi = func_hashtab.ht_array; todo > 0; ++hi)
1853 	    if (!HASHITEM_EMPTY(hi))
1854 	    {
1855 		--todo;
1856 		// Only free functions that are not refcounted, those are
1857 		// supposed to be freed when no longer referenced.
1858 		fp = HI2UF(hi);
1859 		if (func_name_refcount(fp->uf_name))
1860 		    ++skipped;
1861 		else
1862 		{
1863 		    func_free(fp, FALSE);
1864 		    skipped = 0;
1865 		    break;
1866 		}
1867 	    }
1868     }
1869     if (skipped == 0)
1870 	hash_clear(&func_hashtab);
1871 
1872     free_def_functions();
1873 }
1874 #endif
1875 
1876 /*
1877  * Return TRUE if "name" looks like a builtin function name: starts with a
1878  * lower case letter and doesn't contain AUTOLOAD_CHAR or ':'.
1879  * "len" is the length of "name", or -1 for NUL terminated.
1880  */
1881     int
1882 builtin_function(char_u *name, int len)
1883 {
1884     char_u *p;
1885 
1886     if (!ASCII_ISLOWER(name[0]) || name[1] == ':')
1887 	return FALSE;
1888     p = vim_strchr(name, AUTOLOAD_CHAR);
1889     return p == NULL || (len > 0 && p > name + len);
1890 }
1891 
1892     int
1893 func_call(
1894     char_u	*name,
1895     typval_T	*args,
1896     partial_T	*partial,
1897     dict_T	*selfdict,
1898     typval_T	*rettv)
1899 {
1900     list_T	*l = args->vval.v_list;
1901     listitem_T	*item;
1902     typval_T	argv[MAX_FUNC_ARGS + 1];
1903     int		argc = 0;
1904     int		r = 0;
1905 
1906     CHECK_LIST_MATERIALIZE(l);
1907     FOR_ALL_LIST_ITEMS(l, item)
1908     {
1909 	if (argc == MAX_FUNC_ARGS - (partial == NULL ? 0 : partial->pt_argc))
1910 	{
1911 	    emsg(_("E699: Too many arguments"));
1912 	    break;
1913 	}
1914 	// Make a copy of each argument.  This is needed to be able to set
1915 	// v_lock to VAR_FIXED in the copy without changing the original list.
1916 	copy_tv(&item->li_tv, &argv[argc++]);
1917     }
1918 
1919     if (item == NULL)
1920     {
1921 	funcexe_T funcexe;
1922 
1923 	CLEAR_FIELD(funcexe);
1924 	funcexe.firstline = curwin->w_cursor.lnum;
1925 	funcexe.lastline = curwin->w_cursor.lnum;
1926 	funcexe.evaluate = TRUE;
1927 	funcexe.partial = partial;
1928 	funcexe.selfdict = selfdict;
1929 	r = call_func(name, -1, rettv, argc, argv, &funcexe);
1930     }
1931 
1932     // Free the arguments.
1933     while (argc > 0)
1934 	clear_tv(&argv[--argc]);
1935 
1936     return r;
1937 }
1938 
1939 static int callback_depth = 0;
1940 
1941     int
1942 get_callback_depth(void)
1943 {
1944     return callback_depth;
1945 }
1946 
1947 /*
1948  * Invoke call_func() with a callback.
1949  */
1950     int
1951 call_callback(
1952     callback_T	*callback,
1953     int		len,		// length of "name" or -1 to use strlen()
1954     typval_T	*rettv,		// return value goes here
1955     int		argcount,	// number of "argvars"
1956     typval_T	*argvars)	// vars for arguments, must have "argcount"
1957 				// PLUS ONE elements!
1958 {
1959     funcexe_T	funcexe;
1960     int		ret;
1961 
1962     CLEAR_FIELD(funcexe);
1963     funcexe.evaluate = TRUE;
1964     funcexe.partial = callback->cb_partial;
1965     ++callback_depth;
1966     ret = call_func(callback->cb_name, len, rettv, argcount, argvars, &funcexe);
1967     --callback_depth;
1968     return ret;
1969 }
1970 
1971 /*
1972  * Give an error message for the result of a function.
1973  * Nothing if "error" is FCERR_NONE.
1974  */
1975     void
1976 user_func_error(int error, char_u *name)
1977 {
1978     switch (error)
1979     {
1980 	case FCERR_UNKNOWN:
1981 		emsg_funcname(e_unknownfunc, name);
1982 		break;
1983 	case FCERR_NOTMETHOD:
1984 		emsg_funcname(
1985 			N_("E276: Cannot use function as a method: %s"), name);
1986 		break;
1987 	case FCERR_DELETED:
1988 		emsg_funcname(N_(e_func_deleted), name);
1989 		break;
1990 	case FCERR_TOOMANY:
1991 		emsg_funcname((char *)e_toomanyarg, name);
1992 		break;
1993 	case FCERR_TOOFEW:
1994 		emsg_funcname((char *)e_toofewarg, name);
1995 		break;
1996 	case FCERR_SCRIPT:
1997 		emsg_funcname(
1998 		    N_("E120: Using <SID> not in a script context: %s"), name);
1999 		break;
2000 	case FCERR_DICT:
2001 		emsg_funcname(
2002 		      N_("E725: Calling dict function without Dictionary: %s"),
2003 			name);
2004 		break;
2005     }
2006 }
2007 
2008 /*
2009  * Call a function with its resolved parameters
2010  *
2011  * Return FAIL when the function can't be called,  OK otherwise.
2012  * Also returns OK when an error was encountered while executing the function.
2013  */
2014     int
2015 call_func(
2016     char_u	*funcname,	// name of the function
2017     int		len,		// length of "name" or -1 to use strlen()
2018     typval_T	*rettv,		// return value goes here
2019     int		argcount_in,	// number of "argvars"
2020     typval_T	*argvars_in,	// vars for arguments, must have "argcount"
2021 				// PLUS ONE elements!
2022     funcexe_T	*funcexe)	// more arguments
2023 {
2024     int		ret = FAIL;
2025     int		error = FCERR_NONE;
2026     int		i;
2027     ufunc_T	*fp = NULL;
2028     char_u	fname_buf[FLEN_FIXED + 1];
2029     char_u	*tofree = NULL;
2030     char_u	*fname = NULL;
2031     char_u	*name = NULL;
2032     int		argcount = argcount_in;
2033     typval_T	*argvars = argvars_in;
2034     dict_T	*selfdict = funcexe->selfdict;
2035     typval_T	argv[MAX_FUNC_ARGS + 1]; // used when "partial" or
2036 					 // "funcexe->basetv" is not NULL
2037     int		argv_clear = 0;
2038     int		argv_base = 0;
2039     partial_T	*partial = funcexe->partial;
2040 
2041     // Initialize rettv so that it is safe for caller to invoke clear_tv(rettv)
2042     // even when call_func() returns FAIL.
2043     rettv->v_type = VAR_UNKNOWN;
2044 
2045     if (partial != NULL)
2046 	fp = partial->pt_func;
2047     if (fp == NULL)
2048     {
2049 	// Make a copy of the name, if it comes from a funcref variable it
2050 	// could be changed or deleted in the called function.
2051 	name = len > 0 ? vim_strnsave(funcname, len) : vim_strsave(funcname);
2052 	if (name == NULL)
2053 	    return ret;
2054 
2055 	fname = fname_trans_sid(name, fname_buf, &tofree, &error);
2056     }
2057 
2058     if (funcexe->doesrange != NULL)
2059 	*funcexe->doesrange = FALSE;
2060 
2061     if (partial != NULL)
2062     {
2063 	// When the function has a partial with a dict and there is a dict
2064 	// argument, use the dict argument.  That is backwards compatible.
2065 	// When the dict was bound explicitly use the one from the partial.
2066 	if (partial->pt_dict != NULL && (selfdict == NULL || !partial->pt_auto))
2067 	    selfdict = partial->pt_dict;
2068 	if (error == FCERR_NONE && partial->pt_argc > 0)
2069 	{
2070 	    for (argv_clear = 0; argv_clear < partial->pt_argc; ++argv_clear)
2071 	    {
2072 		if (argv_clear + argcount_in >= MAX_FUNC_ARGS)
2073 		{
2074 		    error = FCERR_TOOMANY;
2075 		    goto theend;
2076 		}
2077 		copy_tv(&partial->pt_argv[argv_clear], &argv[argv_clear]);
2078 	    }
2079 	    for (i = 0; i < argcount_in; ++i)
2080 		argv[i + argv_clear] = argvars_in[i];
2081 	    argvars = argv;
2082 	    argcount = partial->pt_argc + argcount_in;
2083 	}
2084     }
2085 
2086     if (error == FCERR_NONE && funcexe->evaluate)
2087     {
2088 	char_u *rfname = fname;
2089 
2090 	// Ignore "g:" before a function name.
2091 	if (fp == NULL && fname[0] == 'g' && fname[1] == ':')
2092 	    rfname = fname + 2;
2093 
2094 	rettv->v_type = VAR_NUMBER;	// default rettv is number zero
2095 	rettv->vval.v_number = 0;
2096 	error = FCERR_UNKNOWN;
2097 
2098 	if (fp != NULL || !builtin_function(rfname, -1))
2099 	{
2100 	    /*
2101 	     * User defined function.
2102 	     */
2103 	    if (fp == NULL)
2104 		fp = find_func(rfname, FALSE, NULL);
2105 
2106 	    // Trigger FuncUndefined event, may load the function.
2107 	    if (fp == NULL
2108 		    && apply_autocmds(EVENT_FUNCUNDEFINED,
2109 						    rfname, rfname, TRUE, NULL)
2110 		    && !aborting())
2111 	    {
2112 		// executed an autocommand, search for the function again
2113 		fp = find_func(rfname, FALSE, NULL);
2114 	    }
2115 	    // Try loading a package.
2116 	    if (fp == NULL && script_autoload(rfname, TRUE) && !aborting())
2117 	    {
2118 		// loaded a package, search for the function again
2119 		fp = find_func(rfname, FALSE, NULL);
2120 	    }
2121 	    if (fp == NULL)
2122 	    {
2123 		char_u *p = untrans_function_name(rfname);
2124 
2125 		// If using Vim9 script try not local to the script.
2126 		// TODO: should not do this if the name started with "s:".
2127 		if (p != NULL)
2128 		    fp = find_func(p, FALSE, NULL);
2129 	    }
2130 
2131 	    if (fp != NULL && (fp->uf_flags & FC_DELETED))
2132 		error = FCERR_DELETED;
2133 #ifdef FEAT_LUA
2134 	    else if (fp != NULL && (fp->uf_flags & FC_CFUNC))
2135 	    {
2136 		cfunc_T cb = fp->uf_cb;
2137 
2138 		error = (*cb)(argcount, argvars, rettv, fp->uf_cb_state);
2139 	    }
2140 #endif
2141 	    else if (fp != NULL)
2142 	    {
2143 		if (funcexe->argv_func != NULL)
2144 		    // postponed filling in the arguments, do it now
2145 		    argcount = funcexe->argv_func(argcount, argvars, argv_clear,
2146 							   fp->uf_args.ga_len);
2147 
2148 		if (funcexe->basetv != NULL)
2149 		{
2150 		    // Method call: base->Method()
2151 		    mch_memmove(&argv[1], argvars, sizeof(typval_T) * argcount);
2152 		    argv[0] = *funcexe->basetv;
2153 		    argcount++;
2154 		    argvars = argv;
2155 		    argv_base = 1;
2156 		}
2157 
2158 		error = call_user_func_check(fp, argcount, argvars, rettv,
2159 							    funcexe, selfdict);
2160 	    }
2161 	}
2162 	else if (funcexe->basetv != NULL)
2163 	{
2164 	    /*
2165 	     * expr->method(): Find the method name in the table, call its
2166 	     * implementation with the base as one of the arguments.
2167 	     */
2168 	    error = call_internal_method(fname, argcount, argvars, rettv,
2169 							      funcexe->basetv);
2170 	}
2171 	else
2172 	{
2173 	    /*
2174 	     * Find the function name in the table, call its implementation.
2175 	     */
2176 	    error = call_internal_func(fname, argcount, argvars, rettv);
2177 	}
2178 	/*
2179 	 * The function call (or "FuncUndefined" autocommand sequence) might
2180 	 * have been aborted by an error, an interrupt, or an explicitly thrown
2181 	 * exception that has not been caught so far.  This situation can be
2182 	 * tested for by calling aborting().  For an error in an internal
2183 	 * function or for the "E132" error in call_user_func(), however, the
2184 	 * throw point at which the "force_abort" flag (temporarily reset by
2185 	 * emsg()) is normally updated has not been reached yet. We need to
2186 	 * update that flag first to make aborting() reliable.
2187 	 */
2188 	update_force_abort();
2189     }
2190     if (error == FCERR_NONE)
2191 	ret = OK;
2192 
2193 theend:
2194     /*
2195      * Report an error unless the argument evaluation or function call has been
2196      * cancelled due to an aborting error, an interrupt, or an exception.
2197      */
2198     if (!aborting())
2199     {
2200 	user_func_error(error, (name != NULL) ? name : funcname);
2201     }
2202 
2203     // clear the copies made from the partial
2204     while (argv_clear > 0)
2205 	clear_tv(&argv[--argv_clear + argv_base]);
2206 
2207     vim_free(tofree);
2208     vim_free(name);
2209 
2210     return ret;
2211 }
2212 
2213     char_u *
2214 printable_func_name(ufunc_T *fp)
2215 {
2216     return fp->uf_name_exp != NULL ? fp->uf_name_exp : fp->uf_name;
2217 }
2218 
2219 /*
2220  * List the head of the function: "function name(arg1, arg2)".
2221  */
2222     static void
2223 list_func_head(ufunc_T *fp, int indent)
2224 {
2225     int		j;
2226 
2227     msg_start();
2228     if (indent)
2229 	msg_puts("   ");
2230     if (fp->uf_def_status != UF_NOT_COMPILED)
2231 	msg_puts("def ");
2232     else
2233 	msg_puts("function ");
2234     msg_puts((char *)printable_func_name(fp));
2235     msg_putchar('(');
2236     for (j = 0; j < fp->uf_args.ga_len; ++j)
2237     {
2238 	if (j)
2239 	    msg_puts(", ");
2240 	msg_puts((char *)FUNCARG(fp, j));
2241 	if (fp->uf_arg_types != NULL)
2242 	{
2243 	    char *tofree;
2244 
2245 	    msg_puts(": ");
2246 	    msg_puts(type_name(fp->uf_arg_types[j], &tofree));
2247 	    vim_free(tofree);
2248 	}
2249 	if (j >= fp->uf_args.ga_len - fp->uf_def_args.ga_len)
2250 	{
2251 	    msg_puts(" = ");
2252 	    msg_puts(((char **)(fp->uf_def_args.ga_data))
2253 		       [j - fp->uf_args.ga_len + fp->uf_def_args.ga_len]);
2254 	}
2255     }
2256     if (fp->uf_varargs)
2257     {
2258 	if (j)
2259 	    msg_puts(", ");
2260 	msg_puts("...");
2261     }
2262     if (fp->uf_va_name != NULL)
2263     {
2264 	if (j)
2265 	    msg_puts(", ");
2266 	msg_puts("...");
2267 	msg_puts((char *)fp->uf_va_name);
2268 	if (fp->uf_va_type)
2269 	{
2270 	    char *tofree;
2271 
2272 	    msg_puts(": ");
2273 	    msg_puts(type_name(fp->uf_va_type, &tofree));
2274 	    vim_free(tofree);
2275 	}
2276     }
2277     msg_putchar(')');
2278 
2279     if (fp->uf_def_status != UF_NOT_COMPILED)
2280     {
2281 	if (fp->uf_ret_type != &t_void)
2282 	{
2283 	    char *tofree;
2284 
2285 	    msg_puts(": ");
2286 	    msg_puts(type_name(fp->uf_ret_type, &tofree));
2287 	    vim_free(tofree);
2288 	}
2289     }
2290     else if (fp->uf_flags & FC_ABORT)
2291 	msg_puts(" abort");
2292     if (fp->uf_flags & FC_RANGE)
2293 	msg_puts(" range");
2294     if (fp->uf_flags & FC_DICT)
2295 	msg_puts(" dict");
2296     if (fp->uf_flags & FC_CLOSURE)
2297 	msg_puts(" closure");
2298     msg_clr_eos();
2299     if (p_verbose > 0)
2300 	last_set_msg(fp->uf_script_ctx);
2301 }
2302 
2303 /*
2304  * Get a function name, translating "<SID>" and "<SNR>".
2305  * Also handles a Funcref in a List or Dictionary.
2306  * Returns the function name in allocated memory, or NULL for failure.
2307  * Set "*is_global" to TRUE when the function must be global, unless
2308  * "is_global" is NULL.
2309  * flags:
2310  * TFN_INT:	    internal function name OK
2311  * TFN_QUIET:	    be quiet
2312  * TFN_NO_AUTOLOAD: do not use script autoloading
2313  * TFN_NO_DEREF:    do not dereference a Funcref
2314  * Advances "pp" to just after the function name (if no error).
2315  */
2316     char_u *
2317 trans_function_name(
2318     char_u	**pp,
2319     int		*is_global,
2320     int		skip,		// only find the end, don't evaluate
2321     int		flags,
2322     funcdict_T	*fdp,		// return: info about dictionary used
2323     partial_T	**partial)	// return: partial of a FuncRef
2324 {
2325     char_u	*name = NULL;
2326     char_u	*start;
2327     char_u	*end;
2328     int		lead;
2329     char_u	sid_buf[20];
2330     int		len;
2331     int		extra = 0;
2332     lval_T	lv;
2333     int		vim9script;
2334 
2335     if (fdp != NULL)
2336 	CLEAR_POINTER(fdp);
2337     start = *pp;
2338 
2339     // Check for hard coded <SNR>: already translated function ID (from a user
2340     // command).
2341     if ((*pp)[0] == K_SPECIAL && (*pp)[1] == KS_EXTRA
2342 						   && (*pp)[2] == (int)KE_SNR)
2343     {
2344 	*pp += 3;
2345 	len = get_id_len(pp) + 3;
2346 	return vim_strnsave(start, len);
2347     }
2348 
2349     // A name starting with "<SID>" or "<SNR>" is local to a script.  But
2350     // don't skip over "s:", get_lval() needs it for "s:dict.func".
2351     lead = eval_fname_script(start);
2352     if (lead > 2)
2353 	start += lead;
2354 
2355     // Note that TFN_ flags use the same values as GLV_ flags.
2356     end = get_lval(start, NULL, &lv, FALSE, skip, flags | GLV_READ_ONLY,
2357 					      lead > 2 ? 0 : FNE_CHECK_START);
2358     if (end == start)
2359     {
2360 	if (!skip)
2361 	    emsg(_("E129: Function name required"));
2362 	goto theend;
2363     }
2364     if (end == NULL || (lv.ll_tv != NULL && (lead > 2 || lv.ll_range)))
2365     {
2366 	/*
2367 	 * Report an invalid expression in braces, unless the expression
2368 	 * evaluation has been cancelled due to an aborting error, an
2369 	 * interrupt, or an exception.
2370 	 */
2371 	if (!aborting())
2372 	{
2373 	    if (end != NULL)
2374 		semsg(_(e_invarg2), start);
2375 	}
2376 	else
2377 	    *pp = find_name_end(start, NULL, NULL, FNE_INCL_BR);
2378 	goto theend;
2379     }
2380 
2381     if (lv.ll_tv != NULL)
2382     {
2383 	if (fdp != NULL)
2384 	{
2385 	    fdp->fd_dict = lv.ll_dict;
2386 	    fdp->fd_newkey = lv.ll_newkey;
2387 	    lv.ll_newkey = NULL;
2388 	    fdp->fd_di = lv.ll_di;
2389 	}
2390 	if (lv.ll_tv->v_type == VAR_FUNC && lv.ll_tv->vval.v_string != NULL)
2391 	{
2392 	    name = vim_strsave(lv.ll_tv->vval.v_string);
2393 	    *pp = end;
2394 	}
2395 	else if (lv.ll_tv->v_type == VAR_PARTIAL
2396 					  && lv.ll_tv->vval.v_partial != NULL)
2397 	{
2398 	    name = vim_strsave(partial_name(lv.ll_tv->vval.v_partial));
2399 	    *pp = end;
2400 	    if (partial != NULL)
2401 		*partial = lv.ll_tv->vval.v_partial;
2402 	}
2403 	else
2404 	{
2405 	    if (!skip && !(flags & TFN_QUIET) && (fdp == NULL
2406 			     || lv.ll_dict == NULL || fdp->fd_newkey == NULL))
2407 		emsg(_(e_funcref));
2408 	    else
2409 		*pp = end;
2410 	    name = NULL;
2411 	}
2412 	goto theend;
2413     }
2414 
2415     if (lv.ll_name == NULL)
2416     {
2417 	// Error found, but continue after the function name.
2418 	*pp = end;
2419 	goto theend;
2420     }
2421 
2422     // Check if the name is a Funcref.  If so, use the value.
2423     if (lv.ll_exp_name != NULL)
2424     {
2425 	len = (int)STRLEN(lv.ll_exp_name);
2426 	name = deref_func_name(lv.ll_exp_name, &len, partial,
2427 						     flags & TFN_NO_AUTOLOAD);
2428 	if (name == lv.ll_exp_name)
2429 	    name = NULL;
2430     }
2431     else if (!(flags & TFN_NO_DEREF))
2432     {
2433 	len = (int)(end - *pp);
2434 	name = deref_func_name(*pp, &len, partial, flags & TFN_NO_AUTOLOAD);
2435 	if (name == *pp)
2436 	    name = NULL;
2437     }
2438     if (name != NULL)
2439     {
2440 	name = vim_strsave(name);
2441 	*pp = end;
2442 	if (STRNCMP(name, "<SNR>", 5) == 0)
2443 	{
2444 	    // Change "<SNR>" to the byte sequence.
2445 	    name[0] = K_SPECIAL;
2446 	    name[1] = KS_EXTRA;
2447 	    name[2] = (int)KE_SNR;
2448 	    mch_memmove(name + 3, name + 5, STRLEN(name + 5) + 1);
2449 	}
2450 	goto theend;
2451     }
2452 
2453     if (lv.ll_exp_name != NULL)
2454     {
2455 	len = (int)STRLEN(lv.ll_exp_name);
2456 	if (lead <= 2 && lv.ll_name == lv.ll_exp_name
2457 					 && STRNCMP(lv.ll_name, "s:", 2) == 0)
2458 	{
2459 	    // When there was "s:" already or the name expanded to get a
2460 	    // leading "s:" then remove it.
2461 	    lv.ll_name += 2;
2462 	    len -= 2;
2463 	    lead = 2;
2464 	}
2465     }
2466     else
2467     {
2468 	// skip over "s:" and "g:"
2469 	if (lead == 2 || (lv.ll_name[0] == 'g' && lv.ll_name[1] == ':'))
2470 	{
2471 	    if (is_global != NULL && lv.ll_name[0] == 'g')
2472 		*is_global = TRUE;
2473 	    lv.ll_name += 2;
2474 	}
2475 	len = (int)(end - lv.ll_name);
2476     }
2477 
2478     // In Vim9 script a user function is script-local by default.
2479     vim9script = ASCII_ISUPPER(*start) && in_vim9script();
2480 
2481     /*
2482      * Copy the function name to allocated memory.
2483      * Accept <SID>name() inside a script, translate into <SNR>123_name().
2484      * Accept <SNR>123_name() outside a script.
2485      */
2486     if (skip)
2487 	lead = 0;	// do nothing
2488     else if (lead > 0 || vim9script)
2489     {
2490 	if (!vim9script)
2491 	    lead = 3;
2492 	if (vim9script || (lv.ll_exp_name != NULL
2493 					     && eval_fname_sid(lv.ll_exp_name))
2494 						       || eval_fname_sid(*pp))
2495 	{
2496 	    // It's script-local, "s:" or "<SID>"
2497 	    if (current_sctx.sc_sid <= 0)
2498 	    {
2499 		emsg(_(e_usingsid));
2500 		goto theend;
2501 	    }
2502 	    sprintf((char *)sid_buf, "%ld_", (long)current_sctx.sc_sid);
2503 	    if (vim9script)
2504 		extra = 3 + (int)STRLEN(sid_buf);
2505 	    else
2506 		lead += (int)STRLEN(sid_buf);
2507 	}
2508     }
2509     else if (!(flags & TFN_INT) && builtin_function(lv.ll_name, len))
2510     {
2511 	semsg(_("E128: Function name must start with a capital or \"s:\": %s"),
2512 								       start);
2513 	goto theend;
2514     }
2515     if (!skip && !(flags & TFN_QUIET) && !(flags & TFN_NO_DEREF))
2516     {
2517 	char_u *cp = vim_strchr(lv.ll_name, ':');
2518 
2519 	if (cp != NULL && cp < end)
2520 	{
2521 	    semsg(_("E884: Function name cannot contain a colon: %s"), start);
2522 	    goto theend;
2523 	}
2524     }
2525 
2526     name = alloc(len + lead + extra + 1);
2527     if (name != NULL)
2528     {
2529 	if (!skip && (lead > 0 || vim9script))
2530 	{
2531 	    name[0] = K_SPECIAL;
2532 	    name[1] = KS_EXTRA;
2533 	    name[2] = (int)KE_SNR;
2534 	    if (vim9script || lead > 3)	// If it's "<SID>"
2535 		STRCPY(name + 3, sid_buf);
2536 	}
2537 	mch_memmove(name + lead + extra, lv.ll_name, (size_t)len);
2538 	name[lead + extra + len] = NUL;
2539     }
2540     *pp = end;
2541 
2542 theend:
2543     clear_lval(&lv);
2544     return name;
2545 }
2546 
2547 /*
2548  * Assuming "name" is the result of trans_function_name() and it was prefixed
2549  * to use the script-local name, return the unmodified name (points into
2550  * "name").  Otherwise return NULL.
2551  * This can be used to first search for a script-local function and fall back
2552  * to the global function if not found.
2553  */
2554     char_u *
2555 untrans_function_name(char_u *name)
2556 {
2557     char_u *p;
2558 
2559     if (*name == K_SPECIAL && in_vim9script())
2560     {
2561 	p = vim_strchr(name, '_');
2562 	if (p != NULL)
2563 	    return p + 1;
2564     }
2565     return NULL;
2566 }
2567 
2568 /*
2569  * List functions.  When "regmatch" is NULL all of then.
2570  * Otherwise functions matching "regmatch".
2571  */
2572     static void
2573 list_functions(regmatch_T *regmatch)
2574 {
2575     int		changed = func_hashtab.ht_changed;
2576     long_u	todo = func_hashtab.ht_used;
2577     hashitem_T	*hi;
2578 
2579     for (hi = func_hashtab.ht_array; todo > 0 && !got_int; ++hi)
2580     {
2581 	if (!HASHITEM_EMPTY(hi))
2582 	{
2583 	    ufunc_T	*fp = HI2UF(hi);
2584 
2585 	    --todo;
2586 	    if ((fp->uf_flags & FC_DEAD) == 0
2587 		    && (regmatch == NULL
2588 			? !message_filtered(fp->uf_name)
2589 			    && !func_name_refcount(fp->uf_name)
2590 			: !isdigit(*fp->uf_name)
2591 			    && vim_regexec(regmatch, fp->uf_name, 0)))
2592 	    {
2593 		list_func_head(fp, FALSE);
2594 		if (changed != func_hashtab.ht_changed)
2595 		{
2596 		    emsg(_("E454: function list was modified"));
2597 		    return;
2598 		}
2599 	    }
2600 	}
2601     }
2602 }
2603 
2604 /*
2605  * ":function" also supporting nested ":def".
2606  * When "name_arg" is not NULL this is a nested function, using "name_arg" for
2607  * the function name.
2608  * Returns a pointer to the function or NULL if no function defined.
2609  */
2610     ufunc_T *
2611 def_function(exarg_T *eap, char_u *name_arg)
2612 {
2613     char_u	*theline;
2614     char_u	*line_to_free = NULL;
2615     int		j;
2616     int		c;
2617     int		saved_did_emsg;
2618     int		saved_wait_return = need_wait_return;
2619     char_u	*name = name_arg;
2620     int		is_global = FALSE;
2621     char_u	*p;
2622     char_u	*arg;
2623     char_u	*line_arg = NULL;
2624     garray_T	newargs;
2625     garray_T	argtypes;
2626     garray_T	default_args;
2627     garray_T	newlines;
2628     int		varargs = FALSE;
2629     int		flags = 0;
2630     char_u	*ret_type = NULL;
2631     ufunc_T	*fp = NULL;
2632     int		overwrite = FALSE;
2633     int		indent;
2634     int		nesting;
2635 #define MAX_FUNC_NESTING 50
2636     char	nesting_def[MAX_FUNC_NESTING];
2637     dictitem_T	*v;
2638     funcdict_T	fudi;
2639     static int	func_nr = 0;	    // number for nameless function
2640     int		paren;
2641     hashitem_T	*hi;
2642     int		do_concat = TRUE;
2643     linenr_T	sourcing_lnum_off;
2644     linenr_T	sourcing_lnum_top;
2645     int		is_heredoc = FALSE;
2646     char_u	*skip_until = NULL;
2647     char_u	*heredoc_trimmed = NULL;
2648     int		vim9script = in_vim9script();
2649 
2650     /*
2651      * ":function" without argument: list functions.
2652      */
2653     if (ends_excmd2(eap->cmd, eap->arg))
2654     {
2655 	if (!eap->skip)
2656 	    list_functions(NULL);
2657 	eap->nextcmd = check_nextcmd(eap->arg);
2658 	return NULL;
2659     }
2660 
2661     /*
2662      * ":function /pat": list functions matching pattern.
2663      */
2664     if (*eap->arg == '/')
2665     {
2666 	p = skip_regexp(eap->arg + 1, '/', TRUE);
2667 	if (!eap->skip)
2668 	{
2669 	    regmatch_T	regmatch;
2670 
2671 	    c = *p;
2672 	    *p = NUL;
2673 	    regmatch.regprog = vim_regcomp(eap->arg + 1, RE_MAGIC);
2674 	    *p = c;
2675 	    if (regmatch.regprog != NULL)
2676 	    {
2677 		regmatch.rm_ic = p_ic;
2678 		list_functions(&regmatch);
2679 		vim_regfree(regmatch.regprog);
2680 	    }
2681 	}
2682 	if (*p == '/')
2683 	    ++p;
2684 	eap->nextcmd = check_nextcmd(p);
2685 	return NULL;
2686     }
2687 
2688     ga_init(&newargs);
2689     ga_init(&argtypes);
2690     ga_init(&default_args);
2691 
2692     /*
2693      * Get the function name.  There are these situations:
2694      * func	    normal function name
2695      *		    "name" == func, "fudi.fd_dict" == NULL
2696      * dict.func    new dictionary entry
2697      *		    "name" == NULL, "fudi.fd_dict" set,
2698      *		    "fudi.fd_di" == NULL, "fudi.fd_newkey" == func
2699      * dict.func    existing dict entry with a Funcref
2700      *		    "name" == func, "fudi.fd_dict" set,
2701      *		    "fudi.fd_di" set, "fudi.fd_newkey" == NULL
2702      * dict.func    existing dict entry that's not a Funcref
2703      *		    "name" == NULL, "fudi.fd_dict" set,
2704      *		    "fudi.fd_di" set, "fudi.fd_newkey" == NULL
2705      * s:func	    script-local function name
2706      * g:func	    global function name, same as "func"
2707      */
2708     p = eap->arg;
2709     if (name_arg != NULL)
2710     {
2711 	// nested function, argument is (args).
2712 	paren = TRUE;
2713 	CLEAR_FIELD(fudi);
2714     }
2715     else
2716     {
2717 	name = trans_function_name(&p, &is_global, eap->skip,
2718 						 TFN_NO_AUTOLOAD, &fudi, NULL);
2719 	paren = (vim_strchr(p, '(') != NULL);
2720 	if (name == NULL && (fudi.fd_dict == NULL || !paren) && !eap->skip)
2721 	{
2722 	    /*
2723 	     * Return on an invalid expression in braces, unless the expression
2724 	     * evaluation has been cancelled due to an aborting error, an
2725 	     * interrupt, or an exception.
2726 	     */
2727 	    if (!aborting())
2728 	    {
2729 		if (!eap->skip && fudi.fd_newkey != NULL)
2730 		    semsg(_(e_dictkey), fudi.fd_newkey);
2731 		vim_free(fudi.fd_newkey);
2732 		return NULL;
2733 	    }
2734 	    else
2735 		eap->skip = TRUE;
2736 	}
2737     }
2738 
2739     // An error in a function call during evaluation of an expression in magic
2740     // braces should not cause the function not to be defined.
2741     saved_did_emsg = did_emsg;
2742     did_emsg = FALSE;
2743 
2744     /*
2745      * ":function func" with only function name: list function.
2746      */
2747     if (!paren)
2748     {
2749 	if (!ends_excmd(*skipwhite(p)))
2750 	{
2751 	    semsg(_(e_trailing_arg), p);
2752 	    goto ret_free;
2753 	}
2754 	eap->nextcmd = check_nextcmd(p);
2755 	if (eap->nextcmd != NULL)
2756 	    *p = NUL;
2757 	if (!eap->skip && !got_int)
2758 	{
2759 	    fp = find_func(name, is_global, NULL);
2760 	    if (fp == NULL && ASCII_ISUPPER(*eap->arg))
2761 	    {
2762 		char_u *up = untrans_function_name(name);
2763 
2764 		// With Vim9 script the name was made script-local, if not
2765 		// found try again with the original name.
2766 		if (up != NULL)
2767 		    fp = find_func(up, FALSE, NULL);
2768 	    }
2769 
2770 	    if (fp != NULL)
2771 	    {
2772 		list_func_head(fp, TRUE);
2773 		for (j = 0; j < fp->uf_lines.ga_len && !got_int; ++j)
2774 		{
2775 		    if (FUNCLINE(fp, j) == NULL)
2776 			continue;
2777 		    msg_putchar('\n');
2778 		    msg_outnum((long)(j + 1));
2779 		    if (j < 9)
2780 			msg_putchar(' ');
2781 		    if (j < 99)
2782 			msg_putchar(' ');
2783 		    msg_prt_line(FUNCLINE(fp, j), FALSE);
2784 		    out_flush();	// show a line at a time
2785 		    ui_breakcheck();
2786 		}
2787 		if (!got_int)
2788 		{
2789 		    msg_putchar('\n');
2790 		    if (fp->uf_def_status != UF_NOT_COMPILED)
2791 			msg_puts("   enddef");
2792 		    else
2793 			msg_puts("   endfunction");
2794 		}
2795 	    }
2796 	    else
2797 		emsg_funcname(N_("E123: Undefined function: %s"), eap->arg);
2798 	}
2799 	goto ret_free;
2800     }
2801 
2802     /*
2803      * ":function name(arg1, arg2)" Define function.
2804      */
2805     p = skipwhite(p);
2806     if (*p != '(')
2807     {
2808 	if (!eap->skip)
2809 	{
2810 	    semsg(_("E124: Missing '(': %s"), eap->arg);
2811 	    goto ret_free;
2812 	}
2813 	// attempt to continue by skipping some text
2814 	if (vim_strchr(p, '(') != NULL)
2815 	    p = vim_strchr(p, '(');
2816     }
2817     p = skipwhite(p + 1);
2818 
2819     // In Vim9 script only global functions can be redefined.
2820     if (vim9script && eap->forceit && !is_global)
2821     {
2822 	emsg(_(e_nobang));
2823 	goto ret_free;
2824     }
2825 
2826     ga_init2(&newlines, (int)sizeof(char_u *), 3);
2827 
2828     if (!eap->skip && name_arg == NULL)
2829     {
2830 	// Check the name of the function.  Unless it's a dictionary function
2831 	// (that we are overwriting).
2832 	if (name != NULL)
2833 	    arg = name;
2834 	else
2835 	    arg = fudi.fd_newkey;
2836 	if (arg != NULL && (fudi.fd_di == NULL
2837 				     || (fudi.fd_di->di_tv.v_type != VAR_FUNC
2838 				 && fudi.fd_di->di_tv.v_type != VAR_PARTIAL)))
2839 	{
2840 	    if (*arg == K_SPECIAL)
2841 		j = 3;
2842 	    else
2843 		j = 0;
2844 	    while (arg[j] != NUL && (j == 0 ? eval_isnamec1(arg[j])
2845 						      : eval_isnamec(arg[j])))
2846 		++j;
2847 	    if (arg[j] != NUL)
2848 		emsg_funcname((char *)e_invarg2, arg);
2849 	}
2850 	// Disallow using the g: dict.
2851 	if (fudi.fd_dict != NULL && fudi.fd_dict->dv_scope == VAR_DEF_SCOPE)
2852 	    emsg(_("E862: Cannot use g: here"));
2853     }
2854 
2855     // This may get more lines and make the pointers into the first line
2856     // invalid.
2857     if (get_function_args(&p, ')', &newargs,
2858 			eap->cmdidx == CMD_def ? &argtypes : NULL,
2859 			 &varargs, &default_args, eap->skip,
2860 			 eap, &line_to_free) == FAIL)
2861 	goto errret_2;
2862 
2863     if (eap->cmdidx == CMD_def)
2864     {
2865 	// find the return type: :def Func(): type
2866 	if (*p == ':')
2867 	{
2868 	    ret_type = skipwhite(p + 1);
2869 	    p = skip_type(ret_type, FALSE);
2870 	    if (p > ret_type)
2871 	    {
2872 		ret_type = vim_strnsave(ret_type, p - ret_type);
2873 		p = skipwhite(p);
2874 	    }
2875 	    else
2876 	    {
2877 		semsg(_("E1056: expected a type: %s"), ret_type);
2878 		ret_type = NULL;
2879 	    }
2880 	}
2881 	p = skipwhite(p);
2882     }
2883     else
2884 	// find extra arguments "range", "dict", "abort" and "closure"
2885 	for (;;)
2886 	{
2887 	    p = skipwhite(p);
2888 	    if (STRNCMP(p, "range", 5) == 0)
2889 	    {
2890 		flags |= FC_RANGE;
2891 		p += 5;
2892 	    }
2893 	    else if (STRNCMP(p, "dict", 4) == 0)
2894 	    {
2895 		flags |= FC_DICT;
2896 		p += 4;
2897 	    }
2898 	    else if (STRNCMP(p, "abort", 5) == 0)
2899 	    {
2900 		flags |= FC_ABORT;
2901 		p += 5;
2902 	    }
2903 	    else if (STRNCMP(p, "closure", 7) == 0)
2904 	    {
2905 		flags |= FC_CLOSURE;
2906 		p += 7;
2907 		if (current_funccal == NULL)
2908 		{
2909 		    emsg_funcname(N_("E932: Closure function should not be at top level: %s"),
2910 			    name == NULL ? (char_u *)"" : name);
2911 		    goto erret;
2912 		}
2913 	    }
2914 	    else
2915 		break;
2916 	}
2917 
2918     // When there is a line break use what follows for the function body.
2919     // Makes 'exe "func Test()\n...\nendfunc"' work.
2920     if (*p == '\n')
2921 	line_arg = p + 1;
2922     else if (*p != NUL
2923 	    && !(*p == '"' && (!vim9script || eap->cmdidx == CMD_function)
2924 						     && eap->cmdidx != CMD_def)
2925 	    && !(*p == '#' && (vim9script || eap->cmdidx == CMD_def))
2926 	    && !eap->skip
2927 	    && !did_emsg)
2928 	semsg(_(e_trailing_arg), p);
2929 
2930     /*
2931      * Read the body of the function, until "}", ":endfunction" or ":enddef" is
2932      * found.
2933      */
2934     if (KeyTyped)
2935     {
2936 	// Check if the function already exists, don't let the user type the
2937 	// whole function before telling him it doesn't work!  For a script we
2938 	// need to skip the body to be able to find what follows.
2939 	if (!eap->skip && !eap->forceit)
2940 	{
2941 	    if (fudi.fd_dict != NULL && fudi.fd_newkey == NULL)
2942 		emsg(_(e_funcdict));
2943 	    else if (name != NULL && find_func(name, is_global, NULL) != NULL)
2944 		emsg_funcname(e_funcexts, name);
2945 	}
2946 
2947 	if (!eap->skip && did_emsg)
2948 	    goto erret;
2949 
2950 	msg_putchar('\n');	    // don't overwrite the function name
2951 	cmdline_row = msg_row;
2952     }
2953 
2954     // Save the starting line number.
2955     sourcing_lnum_top = SOURCING_LNUM;
2956 
2957     indent = 2;
2958     nesting = 0;
2959     nesting_def[nesting] = (eap->cmdidx == CMD_def);
2960     for (;;)
2961     {
2962 	if (KeyTyped)
2963 	{
2964 	    msg_scroll = TRUE;
2965 	    saved_wait_return = FALSE;
2966 	}
2967 	need_wait_return = FALSE;
2968 
2969 	if (line_arg != NULL)
2970 	{
2971 	    // Use eap->arg, split up in parts by line breaks.
2972 	    theline = line_arg;
2973 	    p = vim_strchr(theline, '\n');
2974 	    if (p == NULL)
2975 		line_arg += STRLEN(line_arg);
2976 	    else
2977 	    {
2978 		*p = NUL;
2979 		line_arg = p + 1;
2980 	    }
2981 	}
2982 	else
2983 	{
2984 	    vim_free(line_to_free);
2985 	    if (eap->getline == NULL)
2986 		theline = getcmdline(':', 0L, indent, do_concat);
2987 	    else
2988 		theline = eap->getline(':', eap->cookie, indent, do_concat);
2989 	    line_to_free = theline;
2990 	}
2991 	if (KeyTyped)
2992 	    lines_left = Rows - 1;
2993 	if (theline == NULL)
2994 	{
2995 	    if (eap->cmdidx == CMD_def)
2996 		emsg(_("E1057: Missing :enddef"));
2997 	    else
2998 		emsg(_("E126: Missing :endfunction"));
2999 	    goto erret;
3000 	}
3001 
3002 	// Detect line continuation: SOURCING_LNUM increased more than one.
3003 	sourcing_lnum_off = get_sourced_lnum(eap->getline, eap->cookie);
3004 	if (SOURCING_LNUM < sourcing_lnum_off)
3005 	    sourcing_lnum_off -= SOURCING_LNUM;
3006 	else
3007 	    sourcing_lnum_off = 0;
3008 
3009 	if (skip_until != NULL)
3010 	{
3011 	    // Don't check for ":endfunc"/":enddef" between
3012 	    // * ":append" and "."
3013 	    // * ":python <<EOF" and "EOF"
3014 	    // * ":let {var-name} =<< [trim] {marker}" and "{marker}"
3015 	    if (heredoc_trimmed == NULL
3016 		    || (is_heredoc && skipwhite(theline) == theline)
3017 		    || STRNCMP(theline, heredoc_trimmed,
3018 						 STRLEN(heredoc_trimmed)) == 0)
3019 	    {
3020 		if (heredoc_trimmed == NULL)
3021 		    p = theline;
3022 		else if (is_heredoc)
3023 		    p = skipwhite(theline) == theline
3024 				 ? theline : theline + STRLEN(heredoc_trimmed);
3025 		else
3026 		    p = theline + STRLEN(heredoc_trimmed);
3027 		if (STRCMP(p, skip_until) == 0)
3028 		{
3029 		    VIM_CLEAR(skip_until);
3030 		    VIM_CLEAR(heredoc_trimmed);
3031 		    do_concat = TRUE;
3032 		    is_heredoc = FALSE;
3033 		}
3034 	    }
3035 	}
3036 	else
3037 	{
3038 	    // skip ':' and blanks
3039 	    for (p = theline; VIM_ISWHITE(*p) || *p == ':'; ++p)
3040 		;
3041 
3042 	    // Check for "endfunction" or "enddef".
3043 	    if (checkforcmd(&p, nesting_def[nesting]
3044 			     ? "enddef" : "endfunction", 4) && nesting-- == 0)
3045 	    {
3046 		char_u *nextcmd = NULL;
3047 
3048 		if (*p == '|')
3049 		    nextcmd = p + 1;
3050 		else if (line_arg != NULL && *skipwhite(line_arg) != NUL)
3051 		    nextcmd = line_arg;
3052 		else if (*p != NUL && *p != '"' && p_verbose > 0)
3053 		    give_warning2(eap->cmdidx == CMD_def
3054 			? (char_u *)_("W1001: Text found after :enddef: %s")
3055 			: (char_u *)_("W22: Text found after :endfunction: %s"),
3056 			 p, TRUE);
3057 		if (nextcmd != NULL)
3058 		{
3059 		    // Another command follows. If the line came from "eap" we
3060 		    // can simply point into it, otherwise we need to change
3061 		    // "eap->cmdlinep".
3062 		    eap->nextcmd = nextcmd;
3063 		    if (line_to_free != NULL)
3064 		    {
3065 			vim_free(*eap->cmdlinep);
3066 			*eap->cmdlinep = line_to_free;
3067 			line_to_free = NULL;
3068 		    }
3069 		}
3070 		break;
3071 	    }
3072 
3073 	    // Increase indent inside "if", "while", "for" and "try", decrease
3074 	    // at "end".
3075 	    if (indent > 2 && (*p == '}' || STRNCMP(p, "end", 3) == 0))
3076 		indent -= 2;
3077 	    else if (STRNCMP(p, "if", 2) == 0
3078 		    || STRNCMP(p, "wh", 2) == 0
3079 		    || STRNCMP(p, "for", 3) == 0
3080 		    || STRNCMP(p, "try", 3) == 0)
3081 		indent += 2;
3082 
3083 	    // Check for defining a function inside this function.
3084 	    // Only recognize "def" inside "def", not inside "function",
3085 	    // For backwards compatibility, see Test_function_python().
3086 	    c = *p;
3087 	    if (checkforcmd(&p, "function", 2)
3088 		    || (eap->cmdidx == CMD_def && checkforcmd(&p, "def", 3)))
3089 	    {
3090 		if (*p == '!')
3091 		    p = skipwhite(p + 1);
3092 		p += eval_fname_script(p);
3093 		vim_free(trans_function_name(&p, NULL, TRUE, 0, NULL, NULL));
3094 		if (*skipwhite(p) == '(')
3095 		{
3096 		    if (nesting == MAX_FUNC_NESTING - 1)
3097 			emsg(_("E1058: function nesting too deep"));
3098 		    else
3099 		    {
3100 			++nesting;
3101 			nesting_def[nesting] = (c == 'd');
3102 			indent += 2;
3103 		    }
3104 		}
3105 	    }
3106 
3107 	    // Check for ":append", ":change", ":insert".  Not for :def.
3108 	    p = skip_range(p, NULL);
3109 	    if (eap->cmdidx != CMD_def
3110 		&& ((p[0] == 'a' && (!ASCII_ISALPHA(p[1]) || p[1] == 'p'))
3111 		    || (p[0] == 'c'
3112 			&& (!ASCII_ISALPHA(p[1]) || (p[1] == 'h'
3113 				&& (!ASCII_ISALPHA(p[2]) || (p[2] == 'a'
3114 					&& (STRNCMP(&p[3], "nge", 3) != 0
3115 					    || !ASCII_ISALPHA(p[6])))))))
3116 		    || (p[0] == 'i'
3117 			&& (!ASCII_ISALPHA(p[1]) || (p[1] == 'n'
3118 				&& (!ASCII_ISALPHA(p[2])
3119 				    || (p[2] == 's'
3120 					&& (!ASCII_ISALPHA(p[3])
3121 						|| p[3] == 'e'))))))))
3122 		skip_until = vim_strsave((char_u *)".");
3123 
3124 	    // Check for ":python <<EOF", ":tcl <<EOF", etc.
3125 	    arg = skipwhite(skiptowhite(p));
3126 	    if (arg[0] == '<' && arg[1] =='<'
3127 		    && ((p[0] == 'p' && p[1] == 'y'
3128 				    && (!ASCII_ISALNUM(p[2]) || p[2] == 't'
3129 					|| ((p[2] == '3' || p[2] == 'x')
3130 						   && !ASCII_ISALPHA(p[3]))))
3131 			|| (p[0] == 'p' && p[1] == 'e'
3132 				    && (!ASCII_ISALPHA(p[2]) || p[2] == 'r'))
3133 			|| (p[0] == 't' && p[1] == 'c'
3134 				    && (!ASCII_ISALPHA(p[2]) || p[2] == 'l'))
3135 			|| (p[0] == 'l' && p[1] == 'u' && p[2] == 'a'
3136 				    && !ASCII_ISALPHA(p[3]))
3137 			|| (p[0] == 'r' && p[1] == 'u' && p[2] == 'b'
3138 				    && (!ASCII_ISALPHA(p[3]) || p[3] == 'y'))
3139 			|| (p[0] == 'm' && p[1] == 'z'
3140 				    && (!ASCII_ISALPHA(p[2]) || p[2] == 's'))
3141 			))
3142 	    {
3143 		// ":python <<" continues until a dot, like ":append"
3144 		p = skipwhite(arg + 2);
3145 		if (STRNCMP(p, "trim", 4) == 0)
3146 		{
3147 		    // Ignore leading white space.
3148 		    p = skipwhite(p + 4);
3149 		    heredoc_trimmed = vim_strnsave(theline,
3150 						 skipwhite(theline) - theline);
3151 		}
3152 		if (*p == NUL)
3153 		    skip_until = vim_strsave((char_u *)".");
3154 		else
3155 		    skip_until = vim_strnsave(p, skiptowhite(p) - p);
3156 		do_concat = FALSE;
3157 		is_heredoc = TRUE;
3158 	    }
3159 
3160 	    // Check for ":let v =<< [trim] EOF"
3161 	    //       and ":let [a, b] =<< [trim] EOF"
3162 	    arg = skipwhite(skiptowhite(p));
3163 	    if (*arg == '[')
3164 		arg = vim_strchr(arg, ']');
3165 	    if (arg != NULL)
3166 	    {
3167 		arg = skipwhite(skiptowhite(arg));
3168 		if ( arg[0] == '=' && arg[1] == '<' && arg[2] =='<'
3169 			&& ((p[0] == 'l'
3170 				&& p[1] == 'e'
3171 				&& (!ASCII_ISALNUM(p[2])
3172 				    || (p[2] == 't' && !ASCII_ISALNUM(p[3]))))))
3173 		{
3174 		    p = skipwhite(arg + 3);
3175 		    if (STRNCMP(p, "trim", 4) == 0)
3176 		    {
3177 			// Ignore leading white space.
3178 			p = skipwhite(p + 4);
3179 			heredoc_trimmed = vim_strnsave(theline,
3180 						 skipwhite(theline) - theline);
3181 		    }
3182 		    skip_until = vim_strnsave(p, skiptowhite(p) - p);
3183 		    do_concat = FALSE;
3184 		    is_heredoc = TRUE;
3185 		}
3186 	    }
3187 	}
3188 
3189 	// Add the line to the function.
3190 	if (ga_grow(&newlines, 1 + sourcing_lnum_off) == FAIL)
3191 	    goto erret;
3192 
3193 	// Copy the line to newly allocated memory.  get_one_sourceline()
3194 	// allocates 250 bytes per line, this saves 80% on average.  The cost
3195 	// is an extra alloc/free.
3196 	p = vim_strsave(theline);
3197 	if (p == NULL)
3198 	    goto erret;
3199 	((char_u **)(newlines.ga_data))[newlines.ga_len++] = p;
3200 
3201 	// Add NULL lines for continuation lines, so that the line count is
3202 	// equal to the index in the growarray.
3203 	while (sourcing_lnum_off-- > 0)
3204 	    ((char_u **)(newlines.ga_data))[newlines.ga_len++] = NULL;
3205 
3206 	// Check for end of eap->arg.
3207 	if (line_arg != NULL && *line_arg == NUL)
3208 	    line_arg = NULL;
3209     }
3210 
3211     // Don't define the function when skipping commands or when an error was
3212     // detected.
3213     if (eap->skip || did_emsg)
3214 	goto erret;
3215 
3216     /*
3217      * If there are no errors, add the function
3218      */
3219     if (fudi.fd_dict == NULL)
3220     {
3221 	hashtab_T	*ht;
3222 
3223 	v = find_var(name, &ht, FALSE);
3224 	if (v != NULL && v->di_tv.v_type == VAR_FUNC)
3225 	{
3226 	    emsg_funcname(N_("E707: Function name conflicts with variable: %s"),
3227 									name);
3228 	    goto erret;
3229 	}
3230 
3231 	fp = find_func_even_dead(name, is_global, NULL);
3232 	if (fp != NULL)
3233 	{
3234 	    int dead = fp->uf_flags & FC_DEAD;
3235 
3236 	    // Function can be replaced with "function!" and when sourcing the
3237 	    // same script again, but only once.
3238 	    if (!dead && !eap->forceit
3239 			&& (fp->uf_script_ctx.sc_sid != current_sctx.sc_sid
3240 			    || fp->uf_script_ctx.sc_seq == current_sctx.sc_seq))
3241 	    {
3242 		emsg_funcname(e_funcexts, name);
3243 		goto erret;
3244 	    }
3245 	    if (fp->uf_calls > 0)
3246 	    {
3247 		emsg_funcname(
3248 			N_("E127: Cannot redefine function %s: It is in use"),
3249 									name);
3250 		goto erret;
3251 	    }
3252 	    if (fp->uf_refcount > 1)
3253 	    {
3254 		// This function is referenced somewhere, don't redefine it but
3255 		// create a new one.
3256 		--fp->uf_refcount;
3257 		fp->uf_flags |= FC_REMOVED;
3258 		fp = NULL;
3259 		overwrite = TRUE;
3260 	    }
3261 	    else
3262 	    {
3263 		char_u *exp_name = fp->uf_name_exp;
3264 
3265 		// redefine existing function, keep the expanded name
3266 		VIM_CLEAR(name);
3267 		fp->uf_name_exp = NULL;
3268 		func_clear_items(fp);
3269 		fp->uf_name_exp = exp_name;
3270 		fp->uf_flags &= ~FC_DEAD;
3271 #ifdef FEAT_PROFILE
3272 		fp->uf_profiling = FALSE;
3273 		fp->uf_prof_initialized = FALSE;
3274 #endif
3275 		clear_def_function(fp);
3276 	    }
3277 	}
3278     }
3279     else
3280     {
3281 	char	numbuf[20];
3282 
3283 	fp = NULL;
3284 	if (fudi.fd_newkey == NULL && !eap->forceit)
3285 	{
3286 	    emsg(_(e_funcdict));
3287 	    goto erret;
3288 	}
3289 	if (fudi.fd_di == NULL)
3290 	{
3291 	    // Can't add a function to a locked dictionary
3292 	    if (var_check_lock(fudi.fd_dict->dv_lock, eap->arg, FALSE))
3293 		goto erret;
3294 	}
3295 	    // Can't change an existing function if it is locked
3296 	else if (var_check_lock(fudi.fd_di->di_tv.v_lock, eap->arg, FALSE))
3297 	    goto erret;
3298 
3299 	// Give the function a sequential number.  Can only be used with a
3300 	// Funcref!
3301 	vim_free(name);
3302 	sprintf(numbuf, "%d", ++func_nr);
3303 	name = vim_strsave((char_u *)numbuf);
3304 	if (name == NULL)
3305 	    goto erret;
3306     }
3307 
3308     if (fp == NULL)
3309     {
3310 	if (fudi.fd_dict == NULL && vim_strchr(name, AUTOLOAD_CHAR) != NULL)
3311 	{
3312 	    int	    slen, plen;
3313 	    char_u  *scriptname;
3314 
3315 	    // Check that the autoload name matches the script name.
3316 	    j = FAIL;
3317 	    if (SOURCING_NAME != NULL)
3318 	    {
3319 		scriptname = autoload_name(name);
3320 		if (scriptname != NULL)
3321 		{
3322 		    p = vim_strchr(scriptname, '/');
3323 		    plen = (int)STRLEN(p);
3324 		    slen = (int)STRLEN(SOURCING_NAME);
3325 		    if (slen > plen && fnamecmp(p,
3326 					    SOURCING_NAME + slen - plen) == 0)
3327 			j = OK;
3328 		    vim_free(scriptname);
3329 		}
3330 	    }
3331 	    if (j == FAIL)
3332 	    {
3333 		semsg(_("E746: Function name does not match script file name: %s"), name);
3334 		goto erret;
3335 	    }
3336 	}
3337 
3338 	fp = alloc_clear(offsetof(ufunc_T, uf_name) + STRLEN(name) + 1);
3339 	if (fp == NULL)
3340 	    goto erret;
3341 	fp->uf_def_status = eap->cmdidx == CMD_def ? UF_TO_BE_COMPILED
3342 							     : UF_NOT_COMPILED;
3343 
3344 	if (fudi.fd_dict != NULL)
3345 	{
3346 	    if (fudi.fd_di == NULL)
3347 	    {
3348 		// add new dict entry
3349 		fudi.fd_di = dictitem_alloc(fudi.fd_newkey);
3350 		if (fudi.fd_di == NULL)
3351 		{
3352 		    vim_free(fp);
3353 		    fp = NULL;
3354 		    goto erret;
3355 		}
3356 		if (dict_add(fudi.fd_dict, fudi.fd_di) == FAIL)
3357 		{
3358 		    vim_free(fudi.fd_di);
3359 		    vim_free(fp);
3360 		    fp = NULL;
3361 		    goto erret;
3362 		}
3363 	    }
3364 	    else
3365 		// overwrite existing dict entry
3366 		clear_tv(&fudi.fd_di->di_tv);
3367 	    fudi.fd_di->di_tv.v_type = VAR_FUNC;
3368 	    fudi.fd_di->di_tv.vval.v_string = vim_strsave(name);
3369 
3370 	    // behave like "dict" was used
3371 	    flags |= FC_DICT;
3372 	}
3373 
3374 	// insert the new function in the function list
3375 	set_ufunc_name(fp, name);
3376 	if (overwrite)
3377 	{
3378 	    hi = hash_find(&func_hashtab, name);
3379 	    hi->hi_key = UF2HIKEY(fp);
3380 	}
3381 	else if (hash_add(&func_hashtab, UF2HIKEY(fp)) == FAIL)
3382 	{
3383 	    vim_free(fp);
3384 	    fp = NULL;
3385 	    goto erret;
3386 	}
3387 	fp->uf_refcount = 1;
3388     }
3389     fp->uf_args = newargs;
3390     fp->uf_def_args = default_args;
3391     fp->uf_ret_type = &t_any;
3392     fp->uf_func_type = &t_func_any;
3393 
3394     if (eap->cmdidx == CMD_def)
3395     {
3396 	int	lnum_save = SOURCING_LNUM;
3397 
3398 	fp->uf_def_status = UF_TO_BE_COMPILED;
3399 
3400 	// error messages are for the first function line
3401 	SOURCING_LNUM = sourcing_lnum_top;
3402 
3403 	// parse the argument types
3404 	ga_init2(&fp->uf_type_list, sizeof(type_T *), 10);
3405 
3406 	if (argtypes.ga_len > 0)
3407 	{
3408 	    // When "varargs" is set the last name/type goes into uf_va_name
3409 	    // and uf_va_type.
3410 	    int len = argtypes.ga_len - (varargs ? 1 : 0);
3411 
3412 	    if (len > 0)
3413 		fp->uf_arg_types = ALLOC_CLEAR_MULT(type_T *, len);
3414 	    if (fp->uf_arg_types != NULL)
3415 	    {
3416 		int	i;
3417 		type_T	*type;
3418 
3419 		for (i = 0; i < len; ++ i)
3420 		{
3421 		    p = ((char_u **)argtypes.ga_data)[i];
3422 		    if (p == NULL)
3423 			// will get the type from the default value
3424 			type = &t_unknown;
3425 		    else
3426 			type = parse_type(&p, &fp->uf_type_list);
3427 		    if (type == NULL)
3428 		    {
3429 			SOURCING_LNUM = lnum_save;
3430 			goto errret_2;
3431 		    }
3432 		    fp->uf_arg_types[i] = type;
3433 		}
3434 	    }
3435 	    if (varargs)
3436 	    {
3437 		// Move the last argument "...name: type" to uf_va_name and
3438 		// uf_va_type.
3439 		fp->uf_va_name = ((char_u **)fp->uf_args.ga_data)
3440 						      [fp->uf_args.ga_len - 1];
3441 		--fp->uf_args.ga_len;
3442 		p = ((char_u **)argtypes.ga_data)[len];
3443 		if (p == NULL)
3444 		    // todo: get type from default value
3445 		    fp->uf_va_type = &t_any;
3446 		else
3447 		    fp->uf_va_type = parse_type(&p, &fp->uf_type_list);
3448 		if (fp->uf_va_type == NULL)
3449 		{
3450 		    SOURCING_LNUM = lnum_save;
3451 		    goto errret_2;
3452 		}
3453 	    }
3454 	    varargs = FALSE;
3455 	}
3456 
3457 	// parse the return type, if any
3458 	if (ret_type == NULL)
3459 	    fp->uf_ret_type = &t_void;
3460 	else
3461 	{
3462 	    p = ret_type;
3463 	    fp->uf_ret_type = parse_type(&p, &fp->uf_type_list);
3464 	}
3465 	SOURCING_LNUM = lnum_save;
3466     }
3467     else
3468 	fp->uf_def_status = UF_NOT_COMPILED;
3469 
3470     fp->uf_lines = newlines;
3471     if ((flags & FC_CLOSURE) != 0)
3472     {
3473 	if (register_closure(fp) == FAIL)
3474 	    goto erret;
3475     }
3476     else
3477 	fp->uf_scoped = NULL;
3478 
3479 #ifdef FEAT_PROFILE
3480     if (prof_def_func())
3481 	func_do_profile(fp);
3482 #endif
3483     fp->uf_varargs = varargs;
3484     if (sandbox)
3485 	flags |= FC_SANDBOX;
3486     if (vim9script && !ASCII_ISUPPER(*fp->uf_name))
3487 	flags |= FC_VIM9;
3488     fp->uf_flags = flags;
3489     fp->uf_calls = 0;
3490     fp->uf_cleared = FALSE;
3491     fp->uf_script_ctx = current_sctx;
3492     fp->uf_script_ctx.sc_lnum += sourcing_lnum_top;
3493     if (is_export)
3494     {
3495 	fp->uf_flags |= FC_EXPORT;
3496 	// let ex_export() know the export worked.
3497 	is_export = FALSE;
3498     }
3499 
3500     if (eap->cmdidx == CMD_def)
3501 	set_function_type(fp);
3502     else if (fp->uf_script_ctx.sc_version == SCRIPT_VERSION_VIM9)
3503 	// :func does not use Vim9 script syntax, even in a Vim9 script file
3504 	fp->uf_script_ctx.sc_version = SCRIPT_VERSION_MAX;
3505 
3506     goto ret_free;
3507 
3508 erret:
3509     ga_clear_strings(&newargs);
3510     ga_clear_strings(&default_args);
3511 errret_2:
3512     ga_clear_strings(&newlines);
3513 ret_free:
3514     ga_clear_strings(&argtypes);
3515     vim_free(skip_until);
3516     vim_free(line_to_free);
3517     vim_free(fudi.fd_newkey);
3518     if (name != name_arg)
3519 	vim_free(name);
3520     vim_free(ret_type);
3521     did_emsg |= saved_did_emsg;
3522     need_wait_return |= saved_wait_return;
3523 
3524     return fp;
3525 }
3526 
3527 /*
3528  * ":function"
3529  */
3530     void
3531 ex_function(exarg_T *eap)
3532 {
3533     (void)def_function(eap, NULL);
3534 }
3535 
3536 /*
3537  * :defcompile - compile all :def functions in the current script.
3538  */
3539     void
3540 ex_defcompile(exarg_T *eap UNUSED)
3541 {
3542     long	todo = (long)func_hashtab.ht_used;
3543     int		changed = func_hashtab.ht_changed;
3544     hashitem_T	*hi;
3545     ufunc_T	*ufunc;
3546 
3547     for (hi = func_hashtab.ht_array; todo > 0 && !got_int; ++hi)
3548     {
3549 	if (!HASHITEM_EMPTY(hi))
3550 	{
3551 	    --todo;
3552 	    ufunc = HI2UF(hi);
3553 	    if (ufunc->uf_script_ctx.sc_sid == current_sctx.sc_sid
3554 		    && ufunc->uf_def_status == UF_TO_BE_COMPILED)
3555 	    {
3556 		compile_def_function(ufunc, FALSE, NULL);
3557 
3558 		if (func_hashtab.ht_changed != changed)
3559 		{
3560 		    // a function has been added or removed, need to start over
3561 		    todo = (long)func_hashtab.ht_used;
3562 		    changed = func_hashtab.ht_changed;
3563 		    hi = func_hashtab.ht_array;
3564 		    --hi;
3565 		}
3566 	    }
3567 	}
3568     }
3569 }
3570 
3571 /*
3572  * Return 5 if "p" starts with "<SID>" or "<SNR>" (ignoring case).
3573  * Return 2 if "p" starts with "s:".
3574  * Return 0 otherwise.
3575  */
3576     int
3577 eval_fname_script(char_u *p)
3578 {
3579     // Use MB_STRICMP() because in Turkish comparing the "I" may not work with
3580     // the standard library function.
3581     if (p[0] == '<' && (MB_STRNICMP(p + 1, "SID>", 4) == 0
3582 				       || MB_STRNICMP(p + 1, "SNR>", 4) == 0))
3583 	return 5;
3584     if (p[0] == 's' && p[1] == ':')
3585 	return 2;
3586     return 0;
3587 }
3588 
3589     int
3590 translated_function_exists(char_u *name, int is_global)
3591 {
3592     if (builtin_function(name, -1))
3593 	return has_internal_func(name);
3594     return find_func(name, is_global, NULL) != NULL;
3595 }
3596 
3597 /*
3598  * Return TRUE when "ufunc" has old-style "..." varargs
3599  * or named varargs "...name: type".
3600  */
3601     int
3602 has_varargs(ufunc_T *ufunc)
3603 {
3604     return ufunc->uf_varargs || ufunc->uf_va_name != NULL;
3605 }
3606 
3607 /*
3608  * Return TRUE if a function "name" exists.
3609  * If "no_defef" is TRUE, do not dereference a Funcref.
3610  */
3611     int
3612 function_exists(char_u *name, int no_deref)
3613 {
3614     char_u  *nm = name;
3615     char_u  *p;
3616     int	    n = FALSE;
3617     int	    flag;
3618     int	    is_global = FALSE;
3619 
3620     flag = TFN_INT | TFN_QUIET | TFN_NO_AUTOLOAD;
3621     if (no_deref)
3622 	flag |= TFN_NO_DEREF;
3623     p = trans_function_name(&nm, &is_global, FALSE, flag, NULL, NULL);
3624     nm = skipwhite(nm);
3625 
3626     // Only accept "funcname", "funcname ", "funcname (..." and
3627     // "funcname(...", not "funcname!...".
3628     if (p != NULL && (*nm == NUL || *nm == '('))
3629 	n = translated_function_exists(p, is_global);
3630     vim_free(p);
3631     return n;
3632 }
3633 
3634 #if defined(FEAT_PYTHON) || defined(FEAT_PYTHON3) || defined(PROTO)
3635     char_u *
3636 get_expanded_name(char_u *name, int check)
3637 {
3638     char_u	*nm = name;
3639     char_u	*p;
3640     int		is_global = FALSE;
3641 
3642     p = trans_function_name(&nm, &is_global, FALSE,
3643 						TFN_INT|TFN_QUIET, NULL, NULL);
3644 
3645     if (p != NULL && *nm == NUL
3646 		       && (!check || translated_function_exists(p, is_global)))
3647 	return p;
3648 
3649     vim_free(p);
3650     return NULL;
3651 }
3652 #endif
3653 
3654 /*
3655  * Function given to ExpandGeneric() to obtain the list of user defined
3656  * function names.
3657  */
3658     char_u *
3659 get_user_func_name(expand_T *xp, int idx)
3660 {
3661     static long_u	done;
3662     static int		changed;
3663     static hashitem_T	*hi;
3664     ufunc_T		*fp;
3665 
3666     if (idx == 0)
3667     {
3668 	done = 0;
3669 	hi = func_hashtab.ht_array;
3670 	changed = func_hashtab.ht_changed;
3671     }
3672     if (changed == func_hashtab.ht_changed && done < func_hashtab.ht_used)
3673     {
3674 	if (done++ > 0)
3675 	    ++hi;
3676 	while (HASHITEM_EMPTY(hi))
3677 	    ++hi;
3678 	fp = HI2UF(hi);
3679 
3680 	// don't show dead, dict and lambda functions
3681 	if ((fp->uf_flags & FC_DEAD) || (fp->uf_flags & FC_DICT)
3682 				|| STRNCMP(fp->uf_name, "<lambda>", 8) == 0)
3683 	    return (char_u *)"";
3684 
3685 	if (STRLEN(fp->uf_name) + 4 >= IOSIZE)
3686 	    return fp->uf_name;	// prevents overflow
3687 
3688 	cat_func_name(IObuff, fp);
3689 	if (xp->xp_context != EXPAND_USER_FUNC)
3690 	{
3691 	    STRCAT(IObuff, "(");
3692 	    if (!has_varargs(fp) && fp->uf_args.ga_len == 0)
3693 		STRCAT(IObuff, ")");
3694 	}
3695 	return IObuff;
3696     }
3697     return NULL;
3698 }
3699 
3700 /*
3701  * ":delfunction {name}"
3702  */
3703     void
3704 ex_delfunction(exarg_T *eap)
3705 {
3706     ufunc_T	*fp = NULL;
3707     char_u	*p;
3708     char_u	*name;
3709     funcdict_T	fudi;
3710     int		is_global = FALSE;
3711 
3712     p = eap->arg;
3713     name = trans_function_name(&p, &is_global, eap->skip, 0, &fudi, NULL);
3714     vim_free(fudi.fd_newkey);
3715     if (name == NULL)
3716     {
3717 	if (fudi.fd_dict != NULL && !eap->skip)
3718 	    emsg(_(e_funcref));
3719 	return;
3720     }
3721     if (!ends_excmd(*skipwhite(p)))
3722     {
3723 	vim_free(name);
3724 	semsg(_(e_trailing_arg), p);
3725 	return;
3726     }
3727     eap->nextcmd = check_nextcmd(p);
3728     if (eap->nextcmd != NULL)
3729 	*p = NUL;
3730 
3731     if (!eap->skip)
3732 	fp = find_func(name, is_global, NULL);
3733     vim_free(name);
3734 
3735     if (!eap->skip)
3736     {
3737 	if (fp == NULL)
3738 	{
3739 	    if (!eap->forceit)
3740 		semsg(_(e_nofunc), eap->arg);
3741 	    return;
3742 	}
3743 	if (fp->uf_calls > 0)
3744 	{
3745 	    semsg(_("E131: Cannot delete function %s: It is in use"), eap->arg);
3746 	    return;
3747 	}
3748 	if (fp->uf_flags & FC_VIM9)
3749 	{
3750 	    semsg(_("E1084: Cannot delete Vim9 script function %s"), eap->arg);
3751 	    return;
3752 	}
3753 
3754 	if (fudi.fd_dict != NULL)
3755 	{
3756 	    // Delete the dict item that refers to the function, it will
3757 	    // invoke func_unref() and possibly delete the function.
3758 	    dictitem_remove(fudi.fd_dict, fudi.fd_di);
3759 	}
3760 	else
3761 	{
3762 	    // A normal function (not a numbered function or lambda) has a
3763 	    // refcount of 1 for the entry in the hashtable.  When deleting
3764 	    // it and the refcount is more than one, it should be kept.
3765 	    // A numbered function and lambda should be kept if the refcount is
3766 	    // one or more.
3767 	    if (fp->uf_refcount > (func_name_refcount(fp->uf_name) ? 0 : 1))
3768 	    {
3769 		// Function is still referenced somewhere.  Don't free it but
3770 		// do remove it from the hashtable.
3771 		if (func_remove(fp))
3772 		    fp->uf_refcount--;
3773 		fp->uf_flags |= FC_DELETED;
3774 	    }
3775 	    else
3776 		func_clear_free(fp, FALSE);
3777 	}
3778     }
3779 }
3780 
3781 /*
3782  * Unreference a Function: decrement the reference count and free it when it
3783  * becomes zero.
3784  */
3785     void
3786 func_unref(char_u *name)
3787 {
3788     ufunc_T *fp = NULL;
3789 
3790     if (name == NULL || !func_name_refcount(name))
3791 	return;
3792     fp = find_func(name, FALSE, NULL);
3793     if (fp == NULL && isdigit(*name))
3794     {
3795 #ifdef EXITFREE
3796 	if (!entered_free_all_mem)
3797 #endif
3798 	    internal_error("func_unref()");
3799     }
3800     if (fp != NULL && --fp->uf_refcount <= 0)
3801     {
3802 	// Only delete it when it's not being used.  Otherwise it's done
3803 	// when "uf_calls" becomes zero.
3804 	if (fp->uf_calls == 0)
3805 	    func_clear_free(fp, FALSE);
3806     }
3807 }
3808 
3809 /*
3810  * Unreference a Function: decrement the reference count and free it when it
3811  * becomes zero.
3812  */
3813     void
3814 func_ptr_unref(ufunc_T *fp)
3815 {
3816     if (fp != NULL && --fp->uf_refcount <= 0)
3817     {
3818 	// Only delete it when it's not being used.  Otherwise it's done
3819 	// when "uf_calls" becomes zero.
3820 	if (fp->uf_calls == 0)
3821 	    func_clear_free(fp, FALSE);
3822     }
3823 }
3824 
3825 /*
3826  * Count a reference to a Function.
3827  */
3828     void
3829 func_ref(char_u *name)
3830 {
3831     ufunc_T *fp;
3832 
3833     if (name == NULL || !func_name_refcount(name))
3834 	return;
3835     fp = find_func(name, FALSE, NULL);
3836     if (fp != NULL)
3837 	++fp->uf_refcount;
3838     else if (isdigit(*name))
3839 	// Only give an error for a numbered function.
3840 	// Fail silently, when named or lambda function isn't found.
3841 	internal_error("func_ref()");
3842 }
3843 
3844 /*
3845  * Count a reference to a Function.
3846  */
3847     void
3848 func_ptr_ref(ufunc_T *fp)
3849 {
3850     if (fp != NULL)
3851 	++fp->uf_refcount;
3852 }
3853 
3854 /*
3855  * Return TRUE if items in "fc" do not have "copyID".  That means they are not
3856  * referenced from anywhere that is in use.
3857  */
3858     static int
3859 can_free_funccal(funccall_T *fc, int copyID)
3860 {
3861     return (fc->l_varlist.lv_copyID != copyID
3862 	    && fc->l_vars.dv_copyID != copyID
3863 	    && fc->l_avars.dv_copyID != copyID
3864 	    && fc->fc_copyID != copyID);
3865 }
3866 
3867 /*
3868  * ":return [expr]"
3869  */
3870     void
3871 ex_return(exarg_T *eap)
3872 {
3873     char_u	*arg = eap->arg;
3874     typval_T	rettv;
3875     int		returning = FALSE;
3876     evalarg_T	evalarg;
3877 
3878     if (current_funccal == NULL)
3879     {
3880 	emsg(_("E133: :return not inside a function"));
3881 	return;
3882     }
3883 
3884     CLEAR_FIELD(evalarg);
3885     evalarg.eval_flags = eap->skip ? 0 : EVAL_EVALUATE;
3886 
3887     if (eap->skip)
3888 	++emsg_skip;
3889 
3890     eap->nextcmd = NULL;
3891     if ((*arg != NUL && *arg != '|' && *arg != '\n')
3892 				  && eval0(arg, &rettv, eap, &evalarg) != FAIL)
3893     {
3894 	if (!eap->skip)
3895 	    returning = do_return(eap, FALSE, TRUE, &rettv);
3896 	else
3897 	    clear_tv(&rettv);
3898     }
3899     // It's safer to return also on error.
3900     else if (!eap->skip)
3901     {
3902 	// In return statement, cause_abort should be force_abort.
3903 	update_force_abort();
3904 
3905 	/*
3906 	 * Return unless the expression evaluation has been cancelled due to an
3907 	 * aborting error, an interrupt, or an exception.
3908 	 */
3909 	if (!aborting())
3910 	    returning = do_return(eap, FALSE, TRUE, NULL);
3911     }
3912 
3913     // When skipping or the return gets pending, advance to the next command
3914     // in this line (!returning).  Otherwise, ignore the rest of the line.
3915     // Following lines will be ignored by get_func_line().
3916     if (returning)
3917 	eap->nextcmd = NULL;
3918     else if (eap->nextcmd == NULL)	    // no argument
3919 	eap->nextcmd = check_nextcmd(arg);
3920 
3921     if (eap->skip)
3922 	--emsg_skip;
3923     clear_evalarg(&evalarg, eap);
3924 }
3925 
3926 /*
3927  * ":1,25call func(arg1, arg2)"	function call.
3928  */
3929     void
3930 ex_call(exarg_T *eap)
3931 {
3932     char_u	*arg = eap->arg;
3933     char_u	*startarg;
3934     char_u	*name;
3935     char_u	*tofree;
3936     int		len;
3937     typval_T	rettv;
3938     linenr_T	lnum;
3939     int		doesrange;
3940     int		failed = FALSE;
3941     funcdict_T	fudi;
3942     partial_T	*partial = NULL;
3943     evalarg_T	evalarg;
3944 
3945     fill_evalarg_from_eap(&evalarg, eap, eap->skip);
3946     if (eap->skip)
3947     {
3948 	// trans_function_name() doesn't work well when skipping, use eval0()
3949 	// instead to skip to any following command, e.g. for:
3950 	//   :if 0 | call dict.foo().bar() | endif
3951 	++emsg_skip;
3952 	if (eval0(eap->arg, &rettv, eap, &evalarg) != FAIL)
3953 	    clear_tv(&rettv);
3954 	--emsg_skip;
3955 	clear_evalarg(&evalarg, eap);
3956 	return;
3957     }
3958 
3959     tofree = trans_function_name(&arg, NULL, eap->skip,
3960 						     TFN_INT, &fudi, &partial);
3961     if (fudi.fd_newkey != NULL)
3962     {
3963 	// Still need to give an error message for missing key.
3964 	semsg(_(e_dictkey), fudi.fd_newkey);
3965 	vim_free(fudi.fd_newkey);
3966     }
3967     if (tofree == NULL)
3968 	return;
3969 
3970     // Increase refcount on dictionary, it could get deleted when evaluating
3971     // the arguments.
3972     if (fudi.fd_dict != NULL)
3973 	++fudi.fd_dict->dv_refcount;
3974 
3975     // If it is the name of a variable of type VAR_FUNC or VAR_PARTIAL use its
3976     // contents.  For VAR_PARTIAL get its partial, unless we already have one
3977     // from trans_function_name().
3978     len = (int)STRLEN(tofree);
3979     name = deref_func_name(tofree, &len,
3980 				    partial != NULL ? NULL : &partial, FALSE);
3981 
3982     // Skip white space to allow ":call func ()".  Not good, but required for
3983     // backward compatibility.
3984     startarg = skipwhite(arg);
3985     rettv.v_type = VAR_UNKNOWN;	// clear_tv() uses this
3986 
3987     if (*startarg != '(')
3988     {
3989 	semsg(_(e_missing_paren), eap->arg);
3990 	goto end;
3991     }
3992 
3993     /*
3994      * When skipping, evaluate the function once, to find the end of the
3995      * arguments.
3996      * When the function takes a range, this is discovered after the first
3997      * call, and the loop is broken.
3998      */
3999     if (eap->skip)
4000     {
4001 	++emsg_skip;
4002 	lnum = eap->line2;	// do it once, also with an invalid range
4003     }
4004     else
4005 	lnum = eap->line1;
4006     for ( ; lnum <= eap->line2; ++lnum)
4007     {
4008 	funcexe_T funcexe;
4009 
4010 	if (!eap->skip && eap->addr_count > 0)
4011 	{
4012 	    if (lnum > curbuf->b_ml.ml_line_count)
4013 	    {
4014 		// If the function deleted lines or switched to another buffer
4015 		// the line number may become invalid.
4016 		emsg(_(e_invrange));
4017 		break;
4018 	    }
4019 	    curwin->w_cursor.lnum = lnum;
4020 	    curwin->w_cursor.col = 0;
4021 	    curwin->w_cursor.coladd = 0;
4022 	}
4023 	arg = startarg;
4024 
4025 	CLEAR_FIELD(funcexe);
4026 	funcexe.firstline = eap->line1;
4027 	funcexe.lastline = eap->line2;
4028 	funcexe.doesrange = &doesrange;
4029 	funcexe.evaluate = !eap->skip;
4030 	funcexe.partial = partial;
4031 	funcexe.selfdict = fudi.fd_dict;
4032 	if (get_func_tv(name, -1, &rettv, &arg, &evalarg, &funcexe) == FAIL)
4033 	{
4034 	    failed = TRUE;
4035 	    break;
4036 	}
4037 	if (has_watchexpr())
4038 	    dbg_check_breakpoint(eap);
4039 
4040 	// Handle a function returning a Funcref, Dictionary or List.
4041 	if (handle_subscript(&arg, &rettv,
4042 			   eap->skip ? NULL : &EVALARG_EVALUATE, TRUE) == FAIL)
4043 	{
4044 	    failed = TRUE;
4045 	    break;
4046 	}
4047 
4048 	clear_tv(&rettv);
4049 	if (doesrange || eap->skip)
4050 	    break;
4051 
4052 	// Stop when immediately aborting on error, or when an interrupt
4053 	// occurred or an exception was thrown but not caught.
4054 	// get_func_tv() returned OK, so that the check for trailing
4055 	// characters below is executed.
4056 	if (aborting())
4057 	    break;
4058     }
4059     if (eap->skip)
4060 	--emsg_skip;
4061     clear_evalarg(&evalarg, eap);
4062 
4063     // When inside :try we need to check for following "| catch".
4064     if (!failed || eap->cstack->cs_trylevel > 0)
4065     {
4066 	// Check for trailing illegal characters and a following command.
4067 	if (!ends_excmd2(eap->arg, arg))
4068 	{
4069 	    if (!failed)
4070 	    {
4071 		emsg_severe = TRUE;
4072 		semsg(_(e_trailing_arg), arg);
4073 	    }
4074 	}
4075 	else
4076 	    eap->nextcmd = check_nextcmd(arg);
4077     }
4078 
4079 end:
4080     dict_unref(fudi.fd_dict);
4081     vim_free(tofree);
4082 }
4083 
4084 /*
4085  * Return from a function.  Possibly makes the return pending.  Also called
4086  * for a pending return at the ":endtry" or after returning from an extra
4087  * do_cmdline().  "reanimate" is used in the latter case.  "is_cmd" is set
4088  * when called due to a ":return" command.  "rettv" may point to a typval_T
4089  * with the return rettv.  Returns TRUE when the return can be carried out,
4090  * FALSE when the return gets pending.
4091  */
4092     int
4093 do_return(
4094     exarg_T	*eap,
4095     int		reanimate,
4096     int		is_cmd,
4097     void	*rettv)
4098 {
4099     int		idx;
4100     cstack_T	*cstack = eap->cstack;
4101 
4102     if (reanimate)
4103 	// Undo the return.
4104 	current_funccal->returned = FALSE;
4105 
4106     /*
4107      * Cleanup (and inactivate) conditionals, but stop when a try conditional
4108      * not in its finally clause (which then is to be executed next) is found.
4109      * In this case, make the ":return" pending for execution at the ":endtry".
4110      * Otherwise, return normally.
4111      */
4112     idx = cleanup_conditionals(eap->cstack, 0, TRUE);
4113     if (idx >= 0)
4114     {
4115 	cstack->cs_pending[idx] = CSTP_RETURN;
4116 
4117 	if (!is_cmd && !reanimate)
4118 	    // A pending return again gets pending.  "rettv" points to an
4119 	    // allocated variable with the rettv of the original ":return"'s
4120 	    // argument if present or is NULL else.
4121 	    cstack->cs_rettv[idx] = rettv;
4122 	else
4123 	{
4124 	    // When undoing a return in order to make it pending, get the stored
4125 	    // return rettv.
4126 	    if (reanimate)
4127 		rettv = current_funccal->rettv;
4128 
4129 	    if (rettv != NULL)
4130 	    {
4131 		// Store the value of the pending return.
4132 		if ((cstack->cs_rettv[idx] = alloc_tv()) != NULL)
4133 		    *(typval_T *)cstack->cs_rettv[idx] = *(typval_T *)rettv;
4134 		else
4135 		    emsg(_(e_outofmem));
4136 	    }
4137 	    else
4138 		cstack->cs_rettv[idx] = NULL;
4139 
4140 	    if (reanimate)
4141 	    {
4142 		// The pending return value could be overwritten by a ":return"
4143 		// without argument in a finally clause; reset the default
4144 		// return value.
4145 		current_funccal->rettv->v_type = VAR_NUMBER;
4146 		current_funccal->rettv->vval.v_number = 0;
4147 	    }
4148 	}
4149 	report_make_pending(CSTP_RETURN, rettv);
4150     }
4151     else
4152     {
4153 	current_funccal->returned = TRUE;
4154 
4155 	// If the return is carried out now, store the return value.  For
4156 	// a return immediately after reanimation, the value is already
4157 	// there.
4158 	if (!reanimate && rettv != NULL)
4159 	{
4160 	    clear_tv(current_funccal->rettv);
4161 	    *current_funccal->rettv = *(typval_T *)rettv;
4162 	    if (!is_cmd)
4163 		vim_free(rettv);
4164 	}
4165     }
4166 
4167     return idx < 0;
4168 }
4169 
4170 /*
4171  * Free the variable with a pending return value.
4172  */
4173     void
4174 discard_pending_return(void *rettv)
4175 {
4176     free_tv((typval_T *)rettv);
4177 }
4178 
4179 /*
4180  * Generate a return command for producing the value of "rettv".  The result
4181  * is an allocated string.  Used by report_pending() for verbose messages.
4182  */
4183     char_u *
4184 get_return_cmd(void *rettv)
4185 {
4186     char_u	*s = NULL;
4187     char_u	*tofree = NULL;
4188     char_u	numbuf[NUMBUFLEN];
4189 
4190     if (rettv != NULL)
4191 	s = echo_string((typval_T *)rettv, &tofree, numbuf, 0);
4192     if (s == NULL)
4193 	s = (char_u *)"";
4194 
4195     STRCPY(IObuff, ":return ");
4196     STRNCPY(IObuff + 8, s, IOSIZE - 8);
4197     if (STRLEN(s) + 8 >= IOSIZE)
4198 	STRCPY(IObuff + IOSIZE - 4, "...");
4199     vim_free(tofree);
4200     return vim_strsave(IObuff);
4201 }
4202 
4203 /*
4204  * Get next function line.
4205  * Called by do_cmdline() to get the next line.
4206  * Returns allocated string, or NULL for end of function.
4207  */
4208     char_u *
4209 get_func_line(
4210     int	    c UNUSED,
4211     void    *cookie,
4212     int	    indent UNUSED,
4213     int	    do_concat UNUSED)
4214 {
4215     funccall_T	*fcp = (funccall_T *)cookie;
4216     ufunc_T	*fp = fcp->func;
4217     char_u	*retval;
4218     garray_T	*gap;  // growarray with function lines
4219 
4220     // If breakpoints have been added/deleted need to check for it.
4221     if (fcp->dbg_tick != debug_tick)
4222     {
4223 	fcp->breakpoint = dbg_find_breakpoint(FALSE, fp->uf_name,
4224 							       SOURCING_LNUM);
4225 	fcp->dbg_tick = debug_tick;
4226     }
4227 #ifdef FEAT_PROFILE
4228     if (do_profiling == PROF_YES)
4229 	func_line_end(cookie);
4230 #endif
4231 
4232     gap = &fp->uf_lines;
4233     if (((fp->uf_flags & FC_ABORT) && did_emsg && !aborted_in_try())
4234 	    || fcp->returned)
4235 	retval = NULL;
4236     else
4237     {
4238 	// Skip NULL lines (continuation lines).
4239 	while (fcp->linenr < gap->ga_len
4240 			  && ((char_u **)(gap->ga_data))[fcp->linenr] == NULL)
4241 	    ++fcp->linenr;
4242 	if (fcp->linenr >= gap->ga_len)
4243 	    retval = NULL;
4244 	else
4245 	{
4246 	    retval = vim_strsave(((char_u **)(gap->ga_data))[fcp->linenr++]);
4247 	    SOURCING_LNUM = fcp->linenr;
4248 #ifdef FEAT_PROFILE
4249 	    if (do_profiling == PROF_YES)
4250 		func_line_start(cookie);
4251 #endif
4252 	}
4253     }
4254 
4255     // Did we encounter a breakpoint?
4256     if (fcp->breakpoint != 0 && fcp->breakpoint <= SOURCING_LNUM)
4257     {
4258 	dbg_breakpoint(fp->uf_name, SOURCING_LNUM);
4259 	// Find next breakpoint.
4260 	fcp->breakpoint = dbg_find_breakpoint(FALSE, fp->uf_name,
4261 							       SOURCING_LNUM);
4262 	fcp->dbg_tick = debug_tick;
4263     }
4264 
4265     return retval;
4266 }
4267 
4268 /*
4269  * Return TRUE if the currently active function should be ended, because a
4270  * return was encountered or an error occurred.  Used inside a ":while".
4271  */
4272     int
4273 func_has_ended(void *cookie)
4274 {
4275     funccall_T  *fcp = (funccall_T *)cookie;
4276 
4277     // Ignore the "abort" flag if the abortion behavior has been changed due to
4278     // an error inside a try conditional.
4279     return (((fcp->func->uf_flags & FC_ABORT) && did_emsg && !aborted_in_try())
4280 	    || fcp->returned);
4281 }
4282 
4283 /*
4284  * return TRUE if cookie indicates a function which "abort"s on errors.
4285  */
4286     int
4287 func_has_abort(
4288     void    *cookie)
4289 {
4290     return ((funccall_T *)cookie)->func->uf_flags & FC_ABORT;
4291 }
4292 
4293 
4294 /*
4295  * Turn "dict.Func" into a partial for "Func" bound to "dict".
4296  * Don't do this when "Func" is already a partial that was bound
4297  * explicitly (pt_auto is FALSE).
4298  * Changes "rettv" in-place.
4299  * Returns the updated "selfdict_in".
4300  */
4301     dict_T *
4302 make_partial(dict_T *selfdict_in, typval_T *rettv)
4303 {
4304     char_u	*fname;
4305     char_u	*tofree = NULL;
4306     ufunc_T	*fp;
4307     char_u	fname_buf[FLEN_FIXED + 1];
4308     int		error;
4309     dict_T	*selfdict = selfdict_in;
4310 
4311     if (rettv->v_type == VAR_PARTIAL && rettv->vval.v_partial->pt_func != NULL)
4312 	fp = rettv->vval.v_partial->pt_func;
4313     else
4314     {
4315 	fname = rettv->v_type == VAR_FUNC ? rettv->vval.v_string
4316 					      : rettv->vval.v_partial->pt_name;
4317 	// Translate "s:func" to the stored function name.
4318 	fname = fname_trans_sid(fname, fname_buf, &tofree, &error);
4319 	fp = find_func(fname, FALSE, NULL);
4320 	vim_free(tofree);
4321     }
4322 
4323     if (fp != NULL && (fp->uf_flags & FC_DICT))
4324     {
4325 	partial_T	*pt = ALLOC_CLEAR_ONE(partial_T);
4326 
4327 	if (pt != NULL)
4328 	{
4329 	    pt->pt_refcount = 1;
4330 	    pt->pt_dict = selfdict;
4331 	    pt->pt_auto = TRUE;
4332 	    selfdict = NULL;
4333 	    if (rettv->v_type == VAR_FUNC)
4334 	    {
4335 		// Just a function: Take over the function name and use
4336 		// selfdict.
4337 		pt->pt_name = rettv->vval.v_string;
4338 	    }
4339 	    else
4340 	    {
4341 		partial_T	*ret_pt = rettv->vval.v_partial;
4342 		int		i;
4343 
4344 		// Partial: copy the function name, use selfdict and copy
4345 		// args.  Can't take over name or args, the partial might
4346 		// be referenced elsewhere.
4347 		if (ret_pt->pt_name != NULL)
4348 		{
4349 		    pt->pt_name = vim_strsave(ret_pt->pt_name);
4350 		    func_ref(pt->pt_name);
4351 		}
4352 		else
4353 		{
4354 		    pt->pt_func = ret_pt->pt_func;
4355 		    func_ptr_ref(pt->pt_func);
4356 		}
4357 		if (ret_pt->pt_argc > 0)
4358 		{
4359 		    pt->pt_argv = ALLOC_MULT(typval_T, ret_pt->pt_argc);
4360 		    if (pt->pt_argv == NULL)
4361 			// out of memory: drop the arguments
4362 			pt->pt_argc = 0;
4363 		    else
4364 		    {
4365 			pt->pt_argc = ret_pt->pt_argc;
4366 			for (i = 0; i < pt->pt_argc; i++)
4367 			    copy_tv(&ret_pt->pt_argv[i], &pt->pt_argv[i]);
4368 		    }
4369 		}
4370 		partial_unref(ret_pt);
4371 	    }
4372 	    rettv->v_type = VAR_PARTIAL;
4373 	    rettv->vval.v_partial = pt;
4374 	}
4375     }
4376     return selfdict;
4377 }
4378 
4379 /*
4380  * Return the name of the executed function.
4381  */
4382     char_u *
4383 func_name(void *cookie)
4384 {
4385     return ((funccall_T *)cookie)->func->uf_name;
4386 }
4387 
4388 /*
4389  * Return the address holding the next breakpoint line for a funccall cookie.
4390  */
4391     linenr_T *
4392 func_breakpoint(void *cookie)
4393 {
4394     return &((funccall_T *)cookie)->breakpoint;
4395 }
4396 
4397 /*
4398  * Return the address holding the debug tick for a funccall cookie.
4399  */
4400     int *
4401 func_dbg_tick(void *cookie)
4402 {
4403     return &((funccall_T *)cookie)->dbg_tick;
4404 }
4405 
4406 /*
4407  * Return the nesting level for a funccall cookie.
4408  */
4409     int
4410 func_level(void *cookie)
4411 {
4412     return ((funccall_T *)cookie)->level;
4413 }
4414 
4415 /*
4416  * Return TRUE when a function was ended by a ":return" command.
4417  */
4418     int
4419 current_func_returned(void)
4420 {
4421     return current_funccal->returned;
4422 }
4423 
4424     int
4425 free_unref_funccal(int copyID, int testing)
4426 {
4427     int		did_free = FALSE;
4428     int		did_free_funccal = FALSE;
4429     funccall_T	*fc, **pfc;
4430 
4431     for (pfc = &previous_funccal; *pfc != NULL; )
4432     {
4433 	if (can_free_funccal(*pfc, copyID))
4434 	{
4435 	    fc = *pfc;
4436 	    *pfc = fc->caller;
4437 	    free_funccal_contents(fc);
4438 	    did_free = TRUE;
4439 	    did_free_funccal = TRUE;
4440 	}
4441 	else
4442 	    pfc = &(*pfc)->caller;
4443     }
4444     if (did_free_funccal)
4445 	// When a funccal was freed some more items might be garbage
4446 	// collected, so run again.
4447 	(void)garbage_collect(testing);
4448 
4449     return did_free;
4450 }
4451 
4452 /*
4453  * Get function call environment based on backtrace debug level
4454  */
4455     static funccall_T *
4456 get_funccal(void)
4457 {
4458     int		i;
4459     funccall_T	*funccal;
4460     funccall_T	*temp_funccal;
4461 
4462     funccal = current_funccal;
4463     if (debug_backtrace_level > 0)
4464     {
4465 	for (i = 0; i < debug_backtrace_level; i++)
4466 	{
4467 	    temp_funccal = funccal->caller;
4468 	    if (temp_funccal)
4469 		funccal = temp_funccal;
4470 	    else
4471 		// backtrace level overflow. reset to max
4472 		debug_backtrace_level = i;
4473 	}
4474     }
4475     return funccal;
4476 }
4477 
4478 /*
4479  * Return the hashtable used for local variables in the current funccal.
4480  * Return NULL if there is no current funccal.
4481  */
4482     hashtab_T *
4483 get_funccal_local_ht()
4484 {
4485     if (current_funccal == NULL || current_funccal->l_vars.dv_refcount == 0)
4486 	return NULL;
4487     return &get_funccal()->l_vars.dv_hashtab;
4488 }
4489 
4490 /*
4491  * Return the l: scope variable.
4492  * Return NULL if there is no current funccal.
4493  */
4494     dictitem_T *
4495 get_funccal_local_var()
4496 {
4497     if (current_funccal == NULL || current_funccal->l_vars.dv_refcount == 0)
4498 	return NULL;
4499     return &get_funccal()->l_vars_var;
4500 }
4501 
4502 /*
4503  * Return the hashtable used for argument in the current funccal.
4504  * Return NULL if there is no current funccal.
4505  */
4506     hashtab_T *
4507 get_funccal_args_ht()
4508 {
4509     if (current_funccal == NULL || current_funccal->l_vars.dv_refcount == 0)
4510 	return NULL;
4511     return &get_funccal()->l_avars.dv_hashtab;
4512 }
4513 
4514 /*
4515  * Return the a: scope variable.
4516  * Return NULL if there is no current funccal.
4517  */
4518     dictitem_T *
4519 get_funccal_args_var()
4520 {
4521     if (current_funccal == NULL || current_funccal->l_vars.dv_refcount == 0)
4522 	return NULL;
4523     return &get_funccal()->l_avars_var;
4524 }
4525 
4526 /*
4527  * List function variables, if there is a function.
4528  */
4529     void
4530 list_func_vars(int *first)
4531 {
4532     if (current_funccal != NULL && current_funccal->l_vars.dv_refcount > 0)
4533 	list_hashtable_vars(&current_funccal->l_vars.dv_hashtab,
4534 							   "l:", FALSE, first);
4535 }
4536 
4537 /*
4538  * If "ht" is the hashtable for local variables in the current funccal, return
4539  * the dict that contains it.
4540  * Otherwise return NULL.
4541  */
4542     dict_T *
4543 get_current_funccal_dict(hashtab_T *ht)
4544 {
4545     if (current_funccal != NULL
4546 	    && ht == &current_funccal->l_vars.dv_hashtab)
4547 	return &current_funccal->l_vars;
4548     return NULL;
4549 }
4550 
4551 /*
4552  * Search hashitem in parent scope.
4553  */
4554     hashitem_T *
4555 find_hi_in_scoped_ht(char_u *name, hashtab_T **pht)
4556 {
4557     funccall_T	*old_current_funccal = current_funccal;
4558     hashtab_T	*ht;
4559     hashitem_T	*hi = NULL;
4560     char_u	*varname;
4561 
4562     if (current_funccal == NULL || current_funccal->func->uf_scoped == NULL)
4563       return NULL;
4564 
4565     // Search in parent scope, which can be referenced from a lambda.
4566     current_funccal = current_funccal->func->uf_scoped;
4567     while (current_funccal != NULL)
4568     {
4569 	ht = find_var_ht(name, &varname);
4570 	if (ht != NULL && *varname != NUL)
4571 	{
4572 	    hi = hash_find(ht, varname);
4573 	    if (!HASHITEM_EMPTY(hi))
4574 	    {
4575 		*pht = ht;
4576 		break;
4577 	    }
4578 	}
4579 	if (current_funccal == current_funccal->func->uf_scoped)
4580 	    break;
4581 	current_funccal = current_funccal->func->uf_scoped;
4582     }
4583     current_funccal = old_current_funccal;
4584 
4585     return hi;
4586 }
4587 
4588 /*
4589  * Search variable in parent scope.
4590  */
4591     dictitem_T *
4592 find_var_in_scoped_ht(char_u *name, int no_autoload)
4593 {
4594     dictitem_T	*v = NULL;
4595     funccall_T	*old_current_funccal = current_funccal;
4596     hashtab_T	*ht;
4597     char_u	*varname;
4598 
4599     if (current_funccal == NULL || current_funccal->func->uf_scoped == NULL)
4600 	return NULL;
4601 
4602     // Search in parent scope which is possible to reference from lambda
4603     current_funccal = current_funccal->func->uf_scoped;
4604     while (current_funccal)
4605     {
4606 	ht = find_var_ht(name, &varname);
4607 	if (ht != NULL && *varname != NUL)
4608 	{
4609 	    v = find_var_in_ht(ht, *name, varname, no_autoload);
4610 	    if (v != NULL)
4611 		break;
4612 	}
4613 	if (current_funccal == current_funccal->func->uf_scoped)
4614 	    break;
4615 	current_funccal = current_funccal->func->uf_scoped;
4616     }
4617     current_funccal = old_current_funccal;
4618 
4619     return v;
4620 }
4621 
4622 /*
4623  * Set "copyID + 1" in previous_funccal and callers.
4624  */
4625     int
4626 set_ref_in_previous_funccal(int copyID)
4627 {
4628     int		abort = FALSE;
4629     funccall_T	*fc;
4630 
4631     for (fc = previous_funccal; !abort && fc != NULL; fc = fc->caller)
4632     {
4633 	fc->fc_copyID = copyID + 1;
4634 	abort = abort
4635 	    || set_ref_in_ht(&fc->l_vars.dv_hashtab, copyID + 1, NULL)
4636 	    || set_ref_in_ht(&fc->l_avars.dv_hashtab, copyID + 1, NULL)
4637 	    || set_ref_in_list_items(&fc->l_varlist, copyID + 1, NULL);
4638     }
4639     return abort;
4640 }
4641 
4642     static int
4643 set_ref_in_funccal(funccall_T *fc, int copyID)
4644 {
4645     int abort = FALSE;
4646 
4647     if (fc->fc_copyID != copyID)
4648     {
4649 	fc->fc_copyID = copyID;
4650 	abort = abort
4651 	    || set_ref_in_ht(&fc->l_vars.dv_hashtab, copyID, NULL)
4652 	    || set_ref_in_ht(&fc->l_avars.dv_hashtab, copyID, NULL)
4653 	    || set_ref_in_list_items(&fc->l_varlist, copyID, NULL)
4654 	    || set_ref_in_func(NULL, fc->func, copyID);
4655     }
4656     return abort;
4657 }
4658 
4659 /*
4660  * Set "copyID" in all local vars and arguments in the call stack.
4661  */
4662     int
4663 set_ref_in_call_stack(int copyID)
4664 {
4665     int			abort = FALSE;
4666     funccall_T		*fc;
4667     funccal_entry_T	*entry;
4668 
4669     for (fc = current_funccal; !abort && fc != NULL; fc = fc->caller)
4670 	abort = abort || set_ref_in_funccal(fc, copyID);
4671 
4672     // Also go through the funccal_stack.
4673     for (entry = funccal_stack; !abort && entry != NULL; entry = entry->next)
4674 	for (fc = entry->top_funccal; !abort && fc != NULL; fc = fc->caller)
4675 	    abort = abort || set_ref_in_funccal(fc, copyID);
4676 
4677     return abort;
4678 }
4679 
4680 /*
4681  * Set "copyID" in all functions available by name.
4682  */
4683     int
4684 set_ref_in_functions(int copyID)
4685 {
4686     int		todo;
4687     hashitem_T	*hi = NULL;
4688     int		abort = FALSE;
4689     ufunc_T	*fp;
4690 
4691     todo = (int)func_hashtab.ht_used;
4692     for (hi = func_hashtab.ht_array; todo > 0 && !got_int; ++hi)
4693     {
4694 	if (!HASHITEM_EMPTY(hi))
4695 	{
4696 	    --todo;
4697 	    fp = HI2UF(hi);
4698 	    if (!func_name_refcount(fp->uf_name))
4699 		abort = abort || set_ref_in_func(NULL, fp, copyID);
4700 	}
4701     }
4702     return abort;
4703 }
4704 
4705 /*
4706  * Set "copyID" in all function arguments.
4707  */
4708     int
4709 set_ref_in_func_args(int copyID)
4710 {
4711     int i;
4712     int abort = FALSE;
4713 
4714     for (i = 0; i < funcargs.ga_len; ++i)
4715 	abort = abort || set_ref_in_item(((typval_T **)funcargs.ga_data)[i],
4716 							  copyID, NULL, NULL);
4717     return abort;
4718 }
4719 
4720 /*
4721  * Mark all lists and dicts referenced through function "name" with "copyID".
4722  * Returns TRUE if setting references failed somehow.
4723  */
4724     int
4725 set_ref_in_func(char_u *name, ufunc_T *fp_in, int copyID)
4726 {
4727     ufunc_T	*fp = fp_in;
4728     funccall_T	*fc;
4729     int		error = FCERR_NONE;
4730     char_u	fname_buf[FLEN_FIXED + 1];
4731     char_u	*tofree = NULL;
4732     char_u	*fname;
4733     int		abort = FALSE;
4734 
4735     if (name == NULL && fp_in == NULL)
4736 	return FALSE;
4737 
4738     if (fp_in == NULL)
4739     {
4740 	fname = fname_trans_sid(name, fname_buf, &tofree, &error);
4741 	fp = find_func(fname, FALSE, NULL);
4742     }
4743     if (fp != NULL)
4744     {
4745 	for (fc = fp->uf_scoped; fc != NULL; fc = fc->func->uf_scoped)
4746 	    abort = abort || set_ref_in_funccal(fc, copyID);
4747     }
4748 
4749     vim_free(tofree);
4750     return abort;
4751 }
4752 
4753 #endif // FEAT_EVAL
4754