runtime: don't assume that _ = *s will panic if s is nil