s3-charcnv: remove remaining malloc references in convert_string_talloc().