Law firm not liable to non-client third party