[Bug 18067] RtlAllocateHeap leaks memory in the small->large path