Also, it's strange that your sanitize function would have made a difference at all, unless there were NUL characters in your filenames.

It's indeed strange. But that transliterate line is likely to be the culprit in this particular instance, because uncommenting it with '#" triggers the "Can't use undefined value as A HASH reference..." error while commenting it out allows the code to run.