Peter Pentchev found two problems. One realloc problem that could allocate

too little data, and one case of not zero-terminating the returned string.

I chose a slightly different patch than the one Peter provided.