client: protect against possible NULL deref path