You don't seem to allocate the output buffer. Note that if you intend to have the string 0 terminated you need to allocate one extra char and pass that larger size to ConvertTagList, too.
The code is clear missing some other parts, too, so it's hard to tell what is going wrong.
