Fix some missing frees, null dereferences and missing initialisation picked up by clang-analyzer

[nvx]

Just client side for now, have to muck with the armsrc Makefile to run it against the client code too

[github-actions[bot]]

You are welcome to add an entry to the CHANGELOG.md as well