Commit
d4448bc8 brought support for parsing port ranges, but invalid
characters are not properly handled and can result in a crash while
parsing the configuration if an invalid character is present in the
port, because the return value is set to NULL then dereferenced.
porth = atoi(port1 + 1);
porta = porth;
}
- else if (*port1) /* other any unexpected char */
+ else if (*port1) { /* other any unexpected char */
ret = NULL;
+ goto out;
+ }
set_host_port(ret, porta);