Segfault (null deref) in parse_xobject

Seen in 24f9538d539dda90642637933482eac373255bd19cf884ec2545774c6b93ea79

HParsedToken sequence returned by resolve_item has a TT_USER token with a null pointer