Check for out of memory in buffer constructor

Fixes bug #235
Ensure all bound ImageParams have non-NULL host/dev pointers

This adds a layer of paranoia to catch failed allocations of Buffers.