System.AccessViolationException when calling LsaOpenPolicy with a remote machine name

Describe the bug When calling the overload of AdvApi32.LsaOpenPolicy take takes a computer name parameter, and access violation is thrown. Passing null as the computer name, or using the overload without the computer name parameter does not throw an exception.

What code is involved

AdvApi32.LSA_OBJECT_ATTRIBUTES lsaObjectAttributes = new AdvApi32.LSA_OBJECT_ATTRIBUTES();
var result = AdvApi32.LsaOpenPolicy(server, lsaObjectAttributes, AdvApi32.LsaPolicyRights.POLICY_VIEW_LOCAL_INFORMATION, out AdvApi32.SafeLSA_HANDLE pPolicyHandle);
result.ThrowIfFailed("LsaOpenPolicy failed");

Expected behavior The API call should succeed.

Screenshots If applicable, add screenshots to help explain your problem.

[dahall]

I think I found the problem. Under X64, the LSA_UNICODE_STRING struct aligns in memory differently. In my custom marshaler, I assume the X86 layout. I’ve corrected and am testing now.

[dahall]

Thank you. It’s for comments like yours that I keep doing it.