Is this a mem leak?

Yep. I remember adding MemFree()'s to all my mods because ToCString() wasn't freeing up its memory.
So you end up with 3 lines of code per ToCString - as per the example code snippet by Azathoth above. :-)