Include terminating '\0' for reallocBytes

Since `len` is length of formatted string without terminating '\0',
there is no guarantee that the result string by reallocBytes contains '\0'.