Instead of the 4 bytes array wire size returned by get_type_size, which will truncate the pointer on 64-bit.
Wine-Bug: https://bugs.winehq.org/show_bug.cgi?id=54562
-- v2: oleaut32: Allocate a full pointer when unmarshalling byref arrays. oleaut32/tests: Test VARIANT_UserUnmarshal allocation sizes.