Ah, yes, that does bring up a critical point for the debug console. Just because I've updated the UI and overhauled the parsing routines does not mean the console is 100% safe. When writing new DCF's, the programmer must take in consideration of the values the user will be modifying, and whether or not the subsequent action will through the game into an unknown state.
There's no way for the console to check whether or not a DCF will do such a behavior, it is therefore the responsibility of the DCF's programmer to make sure this doesn't happen, or in the very least make sure to document it in the short or long help strings of the DCF so the user doesn't get caught off gaurd.
Now, with that out of the way, can AddressSanitizer or Coverity help catch some of these problems of the existing DCF's? I think for Coverty to work the debug_console/branch would have to be merged into trunk first.