Double safety for a potential null pointer