the set-up code says

/* your solution should write the result into dst and return it */

so you should simply not use malloc because that reassigns dst to a different address