diff --git a/src/main/process.c b/src/main/process.c
index 559af861b797..9e23ec25ee6b 100644
--- a/src/main/process.c
+++ b/src/main/process.c
@@ -1824,6 +1824,10 @@ static REQUEST *request_setup(rad_listen_t *listener, RADIUS_PACKET *packet,
 	 *	Create and initialize the new request.
 	 */
 	request = request_alloc(NULL);
+	if (!request) {
+		ERROR("No memory");
+		return NULL;
+	}
 	request->reply = rad_alloc(request, false);
 	if (!request->reply) {
 		ERROR("No memory");
@@ -3243,6 +3247,7 @@ static void ping_home_server(void *ctx)
 
 
 	request = request_alloc(NULL);
+	if (!request) return;
 	request->number = request_num_counter++;
 	NO_CHILD_THREAD;
 
diff --git a/src/main/tls.c b/src/main/tls.c
index 1ae0f8fb2fdf..fe83c054c3f3 100644
--- a/src/main/tls.c
+++ b/src/main/tls.c
@@ -310,7 +310,10 @@ tls_session_t *tls_new_session(TALLOC_CTX *ctx, fr_tls_server_conf_t *conf, REQU
 	/* We use the SSL's "app_data" to indicate a call-back */
 	SSL_set_app_data(new_tls, NULL);
 
-	state = talloc_zero(ctx, tls_session_t);
+	if ((state = talloc_zero(ctx, tls_session_t)) == NULL) {
+		ERROR("SSL: Error allocating memory for SSL state");
+		return NULL;
+	}
 	session_init(state);
 	talloc_set_destructor(state, _tls_session_free);
 
diff --git a/src/main/util.c b/src/main/util.c
index 7409a6d6b311..2358a2927b93 100644
--- a/src/main/util.c
+++ b/src/main/util.c
@@ -487,6 +487,7 @@ REQUEST *request_alloc(TALLOC_CTX *ctx)
 	REQUEST *request;
 
 	request = talloc_zero(ctx, REQUEST);
+	if (!request) return NULL;
 	talloc_set_destructor(request, _request_free);
 #ifndef NDEBUG
 	request->magic = REQUEST_MAGIC;
@@ -523,6 +524,7 @@ REQUEST *request_alloc_fake(REQUEST *request)
 	REQUEST *fake;
 
 	fake = request_alloc(request);
+	if (!fake) return NULL;
 
 	fake->number = request->number;
 #ifdef HAVE_PTHREAD_H
diff --git a/src/modules/rlm_eap/mem.c b/src/modules/rlm_eap/mem.c
index 226c2ee5f77a..8f1bd382e736 100644
--- a/src/modules/rlm_eap/mem.c
+++ b/src/modules/rlm_eap/mem.c
@@ -115,7 +115,10 @@ eap_handler_t *eap_handler_alloc(rlm_eap_t *inst)
 	eap_handler_t	*handler;
 
 	PTHREAD_MUTEX_LOCK(&(inst->handler_mutex));
-	handler = talloc_zero(NULL, eap_handler_t);
+	if ((handler = talloc_zero(NULL, eap_handler_t)) == NULL) {
+		ERROR("Failed allocating handler");
+		return NULL;
+	}
 	if (inst->handler_tree) {
 		if (!rbtree_insert(inst->handler_tree, handler)) {
 			ERROR("Failed inserting EAP handler into handler tree");