The function
returns a copy of the security descriptor for a kernel object,
along with pointers to specific portions you request.
More than once, a customer has been confused by the
guidelines for how to manage the memory returned by the function.
Let's look at what the function says:
ppsidOwner [out, optional]
A pointer to a variable ...