ini: Null check file parameter before passing it to open()
The test suite does this. It's harmless in practice but open() is declared as nonnull. Thanks to clang's ubsan.
