We should only have to test a pointer once to see if it's NULL, after that
it can be safely derefrenced and its pointed-to value can be passed around by
reference.

It was due to an insufficient number of parameters being passed to the ERROR
logging macro.

This will allow us to do more compile-time bounds checking.