Null pointer dereference in mrb_str_modify

The function mrb_str_modify doesn't check if s->as.heap.ptr is NULL before operating in it.

676	      RSTR_PTR(s)[s->as.heap.len] = '\0';