ipset.c argument handling strengthened with checks and memory free fall throughs