NSURL and its kin are notoriously leaky. I've found a couple of leaks myself.
The best you can do is write the most concise example in an officially-supported language and file a Feedback.
It took about a year and a half or sofor both of my NSURL (one was pretty severe) leaks to be fixed, but this was years ago. Good luck.