Fix a null-pointer dereference that follows a malloc() failure introduced in (3954). (CVS 3956)

FossilOrigin-Name: 251ba1981e32fb80818965ffe1ef455069e88abd
diff --git a/src/expr.c b/src/expr.c
index 9808af9..42a942b 100644
--- a/src/expr.c
+++ b/src/expr.c
@@ -12,7 +12,7 @@
 ** This file contains routines used for analyzing expressions and
 ** for generating VDBE code that evaluates expressions in SQLite.
 **
-** $Id: expr.c,v 1.286 2007/05/08 17:54:44 danielk1977 Exp $
+** $Id: expr.c,v 1.287 2007/05/08 18:04:46 danielk1977 Exp $
 */
 #include "sqliteInt.h"
 #include <ctype.h>
@@ -663,7 +663,7 @@
   int iLimit,
   const char *zObject
 ){
-  if( pEList->nExpr>iLimit ){
+  if( pEList && pEList->nExpr>iLimit ){
     sqlite3ErrorMsg(pParse, "too many columns in %s", zObject);
   }
 }