It turns out ERR_error_string can return nullptr. We're using it in our code with d14a456 . We need to add a bunch of checks around it.