If you include, above, error-checking against string == NULL or split == NULL (which seem like reasonable things to check), or can assert these conditions anyway (e.g. because argument parsing guarantees it already, making it pointless to check), then you can assert newlist != NULL here quite safely.