firewall: fix some more null-pointer accesses