If you call it with a NULL HWND, it will return E_INVALIDARG but leak six GDI handles (seen under Windows 7 SP1).

Yes, you can blame the caller, but 'tis just something to note.