tool_urlglob: fix memory-leak on glob range overflow

[bagder]

Follow-up to 5f273fd

Pointed out by Codex Security

[Copilot]

Pull request overview

Fixes a memory leak in the URL globbing parser when a {...} set grows beyond the allowed size (“range overflow”), ensuring allocated set elements are freed on error.

Changes:

• Replace a direct early return on set-size overflow in glob_set() with setting an error code and jumping to the shared cleanup path (goto error).

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review. Take the survey.

[vszakats]

Reminds me of gcc analyzer finding a leak here in #20921:

src/tool_urlglob.c:48:17: warning: leak of 'malloc(8)' [CWE-401] [-Wanalyzer-malloc-leak]

will be interesting to retest after merging, and perhaps unsilence if fixed.

[vszakats]

Reminds me of gcc analyzer finding a leak here in #20921:

src/tool_urlglob.c:48:17: warning: leak of 'malloc(8)' [CWE-401] [-Wanalyzer-malloc-leak]

will be interesting to retest after merging, and perhaps unsilence if fixed.

It's a different leak (if real.)