Practice safe free()'ing by setting alloc to NULL to

Practice safe free()'ing by setting alloc to NULL to
prevent double free.

Spotted by jsg@, simpler fix by myself and miko@.

ok jsg@