http://bugs.winehq.org/show_bug.cgi?id=26043
--- Comment #2 from Nikolay Sivov bunglehead@gmail.com --- All current leaks are fixable, expect the one that has this comment in a test file:
--- /* If we don't ask for the security descriptor, Windows will still give us the other stuff, leaving us no way to free it. */ ret = pGetSecurityInfo(obj, SE_FILE_OBJECT, OWNER_SECURITY_INFORMATION | GROUP_SECURITY_INFORMATION | DACL_SECURITY_INFORMATION, &owner, &group, &pDacl, NULL, NULL); ---
it's a purpose of a test to show that call still works, and API doesn't prevent a leak.