Fix all bugs caught with GCC `-fanalyzer`

[mochaaP]

There should be a few false positives, adding asserts will solve them.
Otherwise, it's mostly error handling and API design problems.

stc_build.log

results from gcc (GCC) 15.0.1 20250329 (Red Hat 15.0.1-0)