null: fix dereference before null check