[Bug 20884] Write buffer overrun in LsaLookupNames2?