Error handling are weak. In FFI, first do like POSIX, return unmeaningful value (-1, NULL, etc...) on error rather than panic and document it on the rustdoc

[Naoaki Iwakiri]

For all unwraps and ? in C FFI should be checked.