msxml3: Handle get_element returning NULL (Coverity).
diff --git a/dlls/msxml3/element.c b/dlls/msxml3/element.c
index f479395..4f0bce9 100644
--- a/dlls/msxml3/element.c
+++ b/dlls/msxml3/element.c
@@ -644,6 +644,7 @@
 {
     domelem *This = impl_from_IXMLDOMElement( iface );
     LPWSTR szPattern;
+    xmlNodePtr element;
     HRESULT hr;
 
     TRACE("(%p)->(%s,%p)\n", This, debugstr_w(bstrName), resultList);
@@ -654,7 +655,11 @@
     lstrcpyW(szPattern+3, bstrName);
     TRACE("%s\n", debugstr_w(szPattern));
 
-    hr = queryresult_create(get_element(This), szPattern, resultList);
+    element = get_element(This);
+    if (!element)
+        hr = E_FAIL;
+    else
+        hr = queryresult_create(element, szPattern, resultList);
     HeapFree(GetProcessHeap(), 0, szPattern);
 
     return hr;