Do the precondition checks (e.g. for the error out variable) before
any operation that allocates are resource (here: file descriptors),
so they are not leaked in the case the precondition guard returns.
Uncovered by coverity (CID 328208, 328209).