Link
Looks like I've found some weird, undocumented internal behaviour for DirectSound, where if you pass in a certain GUID as the buffer pointer, and a null buffer desc, it magically creates an interface in proxy or something.
*sigh*
I'm going to bed.