Add defensive check to silence clang static analyzer