https://bugs.winehq.org/show_bug.cgi?id=52819
--- Comment #2 from Zeb Figura z.figura12@gmail.com --- (In reply to Zeb Figura from comment #1)
[2] The RPC happens within a single process, which is odd. It's possible that we shouldn't be marshalling anything.
Yeah, so it's marshalling from the implicit MTA to an STA (i.e. the STA is the caller). That means we really don't need to be using named pipes, but whatever.
Best I can imagine is that maybe rpcrt4 doesn't marshal [in] pointers in-process. I don't think that's ever been tested, though, and I'm not particularly hopeful. In all likelihood this works on Windows just by chance.