sizeof(src) doesn't do what you think it does, it's returning the size of the pointer type. You want strlen(src) instead.

Also, malloc isn't required to return initialized memory. It might have junk data in it, if there is junk data then strcat will do strange things and possibly segfault. You should use calloc instead, which returns 0-initialized memory.