Missing null checks and panic handlers in extern functions

The FFI bindings in this library are missing null checks and panic handlers that would avoid undefined behavior.
The documentation does warn users about conditions that will trigger undefined behavior, but the library could provide a safer interface by avoiding those sources of undefined behavior.

In particular, the bindings could:

1. Use is_null to check that pointers are not null before accessing them
2. Use catch_unwind to stop panics from unwinding across the FFI

Start by locating the FFI bindings and their exported extern functions, then review pointer accesses and panic boundaries. Done means the bindings check pointers with is_null and prevent panics from unwinding across the FFI with catch_unwind, without relying only on the existing documentation warnings.