Is ROS this is most frequently seen when calling StartService with no arguments. RStartServiceW will receive an argv pointer that points to the end of the message buffer. Because the
if (Pointer >= pStubMsg->BufferStart && Pointer < pStubMsg->BufferEnd)
check will fail (since Pointer == pStubMsg->BufferEnd), rpcrt4 will attempt to free this memory, which is incorrect.