A temporary buffer is returned from val_str, which gets deallocated
before json_array gets it.
Solution: use the buffer provided to the val_str function instead.

Change-Id: I1b112d2ca7973c1dd8fb0cf768f26697e26067db