evm: checking if removexattr is not a NULL