Code:
STRING* fullpath;

The string is declared but not initialized. You need the 'str_create' function for that...
Code:
STRING* fullpath = str_create("");