Function cJSON_AddItemToObject() keeps a reference to the added item and is freed in cJSON_Delete().