Not sure. At the low level that sends out the length, there is no difference between the string and buffer. Even if the number of bytes field was wrong, I would think it would still send the length field. Is this something publicly accessible? I'm happy to dig further.