next batch of fuzzing fixes

Seems to fix all quickly discovered crashes and leaks, fuzzer is already running for 5 minutes with 2 jobs.