vbo: add a null pointer check to handle OOM instead of crashing