18

When a Variant is masked with VT_ARRAY, the variant contains a pointer to a Safe Array descriptor (i.e. a Safe Array handle). You can also have a situation in which you have a mask containing both VT_ARRAY and VT_BYREF. In this case, the variant contains a pointer to a Safe Array handle.