diff --git a/dlls/rpcrt4/tests/ndr_marshall.c b/dlls/rpcrt4/tests/ndr_marshall.c
index f0028bde25b..d19d50f5302 100644
--- a/dlls/rpcrt4/tests/ndr_marshall.c
+++ b/dlls/rpcrt4/tests/ndr_marshall.c
@@ -1195,6 +1195,14 @@ todo_wine {
     NdrPointerFree( &StubMsg, mem, fmtstr_conf_str );
     ok(my_free_called == 1, "free called %d\n", my_free_called);
 
+    mem = my_alloc(10);
+    my_free_called = 0;
+    StubMsg.Buffer = StubMsg.BufferStart;
+    NdrPointerFree( &StubMsg, mem, fmtstr_conf_str );
+todo_wine {
+    ok(my_free_called == 1, "free called %d\n", my_free_called);
+}
+
     /* Server */
     my_alloc_called = 0;
     StubMsg.IsClient = 0;
@@ -1232,6 +1240,14 @@ todo_wine {
     ok(my_alloc_called == 0, "alloc called %d\n", my_alloc_called);
 }
 
+    mem = my_alloc(10);
+    my_free_called = 0;
+    StubMsg.Buffer = StubMsg.BufferStart;
+    NdrPointerFree( &StubMsg, mem, fmtstr_conf_str );
+todo_wine {
+    ok(my_free_called == 1, "free called %d\n", my_free_called);
+}
+
     HeapFree(GetProcessHeap(), 0, mem_orig);
     HeapFree(GetProcessHeap(), 0, StubMsg.RpcMsg->Buffer);
 }