audit: return on memory error to avoid null pointer dereference