librpc/ndr: don't overwrite the content in ndr_push_relative_ptr2_end()