acl: use setjmp/longjmp to handle alloc failures at build phase