xmi2alloy: better error handling