be really, really sure we never deref NULL