diff --git a/shim.c b/shim.c
index cf8e97441..27a8c112f 100644
--- a/shim.c
+++ b/shim.c
@@ -1488,6 +1488,11 @@ load_certs(EFI_HANDLE image_handle)
 		if (efi_status == EFI_BUFFER_TOO_SMALL) {
 			if (buffersize != old) {
 				buffer = ReallocatePool(buffer, old, buffersize);
+				if (buffer == NULL) {
+					perror(L"Failed to read directory %s - %r\n",
+					       PathName, EFI_OUT_OF_RESOURCES);
+					goto done;
+				}
 				continue;
 			}
 			perror(L"Failed to read directory %s - buggy firmware\n",