From ce62406f2c023e8971c1a391cba540310ce155f6 Mon Sep 17 00:00:00 2001
From: Rongsong Shen <rshen@shenrs.eu>
Date: Wed, 13 May 2026 16:00:09 +0000
Subject: [PATCH] fix: validate --conf-keep-n >= 1 and --conf-stale-timeout >=
 0 in argument parsing

---
 src/controller/main.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/controller/main.c b/src/controller/main.c
index 88a21fc..770b975 100644
--- a/src/controller/main.c
+++ b/src/controller/main.c
@@ -70,9 +70,13 @@ static error_t parse_opt(int key, char* arg, struct argp_state* state)
         break;
     case OPT_CONF_KEEP_N:
         arguments->conf_keep_n = atoi(arg);
+        if (arguments->conf_keep_n < 1)
+            argp_error(state, "--conf-keep-n must be >= 1 (got: %s)", arg);
         break;
     case OPT_CONF_STALE_TIMEOUT:
         arguments->conf_stale_timeout = atol(arg);
+        if (arguments->conf_stale_timeout < 0)
+            argp_error(state, "--conf-stale-timeout must be >= 0 (got: %s)", arg);
         break;
     default:
         return ARGP_ERR_UNKNOWN;