Interestingly, when I jam that same input into a leak-instrumented build of sqlite3.exe v3.32.1 (using MSVC and its CRT leak detection aid), then exit, I see a single leak of a 24 byte block. I will look into this a bit further and report more when I know more.