[Bug 31482] VariantChangeTypeEx crashes when trying to convert VT_BSTR to VT_UI1|VT_ARRAY