The aforementioned CERT guideline:

https://www.securecoding.cert.org/confluence/display/seccode...

Skeptics should note that the real-world example on that page is from the Linux kernel, where this style of goto is used heavily for error handling.