GVariant: fix two small/theoretical leaks

Fix some leaks that turned up while valgrinding the GVariant testcase.

These leaks are small and only occur when there is already an error in
the program: they are leaks of temp strings used when formatting a
critical message.

These show up as leaks again the testcase under the new "expect
messages" approach.  Previously, we fork()ed and these caused the
subprocess to abort, which is why this was not noticed before.

glib/gvariant.c

@@ -4006,6 +4006,8 @@ valid_format_string (const gchar *format_string,
                   fragment, typestr, g_variant_get_type_string (value));
 
       g_variant_type_free (type);
+      g_free (fragment);
+      g_free (typestr);
 
       return FALSE;
     }