rpcrt4: Use RpcMsg->Buffer instead of BufferStart since the latter isn't always set.