I did this by accident on a StbTrueTypeFont plugin instance:
font->openSingleData("/usr/share/fonts/DejaVuSans.ttf", 18.0f);
Yes, the filename does not even exist (there's the TTF/ subdirectory missing), but in any case this was a filename passed in as "TTF file data" and it crashed deep in stb_truetype. Things to do: