There is a codepath where it can be used without being filled. Found by coverity.
Attach a file by drag & drop or click to upload