add more direct (easily analyzed) asserts in nfai_default_allocf
catch allocf returning NULL
add missing argument assert on nfai_exec_init_internal
in nfa_*_free, always memset to zero, even if allocf is already NULL