Jacek Caban (@jacek) commented about dlls/vbscript/global.c:
V_BSTR(&var) = str; hres = VariantCopyInd(data+i, &var);
SysFreeString(str);
This is fine for the leak, but it would be even better to avoid extra string copy. We don't really need `VariantCopyInd` in this case, we could just set data[i] variant directly and get rid of var variable.